$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft File: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft (raw, json) Hash identifier: QZmng458vQpMl5diYCfL2TvqmHTVSsTHd3cSVqgWrMw= Subject key identifier: AD:B4:6F:BC:22:84:38:11:A7:1E:87:87:A7:CC:E2:5E:12:DE:BE:5F Authority key identifier: 0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0 Certificate issuer: /CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0 Certificate serial: 01A8068CE4CE2E20E9EAD5587CF5DB5F6EE7BCF7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 20:03:16 +0000 Manifest this update: Sun 01 Mar 2026 19:58:16 +0000 Manifest next update: Mon 02 Mar 2026 21:20:16 +0000 Files and hashes: 1: 3130332e3231322e34342e302f32322d3234203d3e203337393633.roa (hash: LZ5ZiHAjJ58unIuXAet8TkcoHvRxwDe8hTAorVHPgBo=) 2: 3131302e3137332e3139322e302f31392d3234203d3e203337393633.roa (hash: D0J+ywNira+Kl03ezdRJIK+PVflth3zvrHDo5domtUQ=) 3: 3131302e37352e36342e302f31382d3234203d3e203337393633.roa (hash: ybHh2urN2/zaCl1x/9nmbMr6wmHj3aI03LgNct/0feE=) 4: 323430363a313838303a3a2f33322d3438203d3e203337393633.roa (hash: hJsybIobgo+Zdtzi5pveEPQvo/wP2zxjwnIddOptEdE=) 5: 3131352e3132342e31362e302f32302d3234203d3e203337393633.roa (hash: vvfwFZ8SwgMfa65mBo2v4msDDyJZbOcUBOdsiqZAZJU=) 6: 3133392e352e3136302e302f32322d3234203d3e203337393633.roa (hash: A267Qqwq0aG5nDt5DxIjTlpU0ZWaCBcTmpXTBaHvJtQ=) 7: 0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl (hash: glRfyO49NRiDVkGEhHZZ99ZBBM6PMFXx91G0FdNStMo=) 8: 3131302e37352e302e302f31382d3234203d3e203337393633.roa (hash: hqcYOV5DzQRa8/wBnBYjQnjsbrLdtVYrbvETGifMOeE=) 9: 3131302e37352e302e302f31372d3137203d3e203337393633.roa (hash: NjV/4Tmugxcb7MxgKN/CQ0Zj9ubpxTO3VJ0+YKiY0Bc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 21:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a8:06:8c:e4:ce:2e:20:e9:ea:d5:58:7c:f5:db:5f:6e:e7:bc:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0 Validity Not Before: Mar 1 19:58:16 2026 GMT Not After : Mar 2 21:20:16 2026 GMT Subject: CN=ADB46FBC22843811A71E8787A7CCE25E12DEBE5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:60:a9:b7:04:9f:14:87:ac:4c:3d:32:14:79: bf:ad:ca:87:63:37:1a:7e:f4:35:04:91:2c:41:45: b7:14:cf:cb:a2:c5:4c:2c:c7:37:a4:a8:76:ef:f2: e4:06:b6:dd:7d:a3:fb:39:f4:7d:31:9b:09:25:1f: 79:86:0a:82:d5:59:64:5e:f9:a6:cf:08:c4:e2:b6: eb:e9:74:29:47:01:e2:76:85:0c:77:f5:a3:b0:1d: 61:24:db:fe:9a:fe:a4:7a:50:2b:7e:19:6a:dd:ac: a5:d9:b6:3d:04:72:14:8f:49:aa:c3:51:99:9d:d0: f2:0b:ad:ec:54:7c:7e:7e:bd:7c:39:48:cc:58:1f: 8f:9e:32:34:21:27:42:a8:e8:c3:3c:59:2f:8d:92: 2f:f0:7a:54:9c:9e:45:70:5d:b0:c1:a7:6b:4a:00: 2f:87:84:6b:9f:f1:15:a7:d4:c5:42:45:e3:1c:04: ee:15:e1:f7:2b:fc:b0:ea:d1:84:21:30:82:01:8b: cc:8a:20:68:de:84:b7:dc:58:f1:42:75:b3:d0:0e: 72:47:f0:ee:65:21:c6:15:9b:8f:c8:db:68:c3:9d: 42:9c:28:0e:69:d0:e7:9d:f8:d8:2b:df:58:f4:88: e2:8c:26:24:b8:8e:aa:28:e9:b2:6c:82:31:2e:e3: d7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B4:6F:BC:22:84:38:11:A7:1E:87:87:A7:CC:E2:5E:12:DE:BE:5F X509v3 Authority Key Identifier: keyid:0A:D3:4C:05:E8:8D:12:C3:0E:D7:FE:1D:D2:AB:EA:56:46:73:DA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/0/0AD34C05E88D12C30ED7FE1DD2ABEA564673DAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:3b:6f:7e:a0:3b:dd:24:de:ad:5e:8a:9a:4e:d1:ca:33:81: 56:aa:52:7c:5d:47:85:e2:c1:76:23:44:ac:7e:b0:e8:dd:8d: 69:d7:94:91:ce:be:86:2d:14:6a:c8:d9:f3:2e:48:20:c9:b6: a2:ab:86:25:10:ab:65:72:4f:ba:df:6a:e2:db:68:c5:96:51: 74:e4:4c:56:d7:e5:a2:71:17:d8:4d:f7:74:44:db:ca:6a:e9: 76:58:82:11:2f:3d:11:50:75:d8:5a:e9:e3:52:04:e4:14:6a: 8a:bc:e7:3f:be:14:32:21:a9:d2:92:91:6c:42:1b:a6:f7:5c: 29:67:42:c9:97:52:a0:2d:18:23:e9:f8:f2:7d:8a:e7:da:d2: f5:64:ce:78:38:ae:73:ae:ce:68:8b:85:f6:37:6f:01:d3:c9: d8:b4:f9:76:ad:fd:57:80:7a:fd:e2:27:18:b8:1a:ca:fb:f7: c8:42:95:da:a2:9e:ee:17:a5:a6:a6:b6:4f:d4:7f:10:24:71: 30:64:e6:88:fe:35:30:d4:d5:e0:28:ca:a2:7a:af:ba:04:91: b7:f3:0f:df:4e:9a:d4:98:9d:fd:86:1d:0e:53:ea:b9:3f:23: 2a:de:dd:c7:71:04:2e:bc:3f:1e:02:78:77:23:97:0b:14:a7: 21:38:e9:9d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAagGjOTOLiDp6tVYfPXbX27nvPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFEMzRDMDVFODhEMTJDMzBFRDdGRTFERDJBQkVBNTY0 NjczREFDMDAeFw0yNjAzMDExOTU4MTZaFw0yNjAzMDIyMTIwMTZaMDMxMTAvBgNV BAMTKEFEQjQ2RkJDMjI4NDM4MTFBNzFFODc4N0E3Q0NFMjVFMTJERUJFNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbYKm3BJ8Uh6xMPTIUeb+tyodj Nxp+9DUEkSxBRbcUz8uixUwsxzekqHbv8uQGtt19o/s59H0xmwklH3mGCoLVWWRe +abPCMTituvpdClHAeJ2hQx39aOwHWEk2/6a/qR6UCt+GWrdrKXZtj0EchSPSarD UZmd0PILrexUfH5+vXw5SMxYH4+eMjQhJ0Ko6MM8WS+Nki/welScnkVwXbDBp2tK AC+HhGuf8RWn1MVCReMcBO4V4fcr/LDq0YQhMIIBi8yKIGjehLfcWPFCdbPQDnJH 8O5lIcYVm4/I22jDnUKcKA5p0Oed+Ngr31j0iOKMJiS4jqoo6bJsgjEu49fNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrbRvvCKEOBGnHoeHp8ziXhLevl8wHwYDVR0j BBgwFoAUCtNMBeiNEsMO1/4d0qvqVkZz2sAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8wLzBBRDM0QzA1RTg4RDEyQzMwRUQ3RkUxREQyQUJF QTU2NDY3M0RBQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFEMzRDMDVFODhEMTJDMzBFRDdGRTFERDJBQkVBNTY0NjczREFDMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMC8wQUQzNEMwNUU4OEQx MkMzMEVEN0ZFMUREMkFCRUE1NjQ2NzNEQUMwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIztvfqA73STe rV6Kmk7RyjOBVqpSfF1HheLBdiNErH6w6N2NadeUkc6+hi0UasjZ8y5IIMm2oquG JRCrZXJPut9q4ttoxZZRdORMVtflonEX2E33dETbymrpdliCES89EVB12Frp41IE 5BRqirznP74UMiGp0pKRbEIbpvdcKWdCyZdSoC0YI+n48n2K59rS9WTOeDiuc67O aIuF9jdvAdPJ2LT5dq39V4B6/eInGLgayvv3yEKV2qKe7helpqa2T9R/ECRxMGTm iP41MNTV4CjKonqvugSRt/MP306a1Jid/YYdDlPquT8jKt7dx3EELrw/HgJ4dyOX CxSnITjpnQ== -----END CERTIFICATE-----Generated at Mon Mar 2 10:45:11 2026 by rpki-client