$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft File: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft (raw, json) Hash identifier: ayzY3w8xqjBHUfRi4BkxozY9hcrp8rXoVo2sk6T9mEM= Subject key identifier: D0:8E:70:73:78:08:F6:B8:15:E6:F0:DE:9E:C3:0E:02:E6:48:EE:2C Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Certificate serial: 3DA5CA2AD870668327F3E68B43E77E23465110C7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 05:18:16 +0000 Manifest this update: Mon 02 Mar 2026 05:13:16 +0000 Manifest next update: Tue 03 Mar 2026 08:55:16 +0000 Files and hashes: 1: 3138322e38302e302e302f31362d3136203d3e203233373731.roa (hash: CF+z33Rj2YhsOOEndNKmnOpnjbWukgLJhVN5L0N0Tvc=) 2: 35392e3135332e342e302f32342d3234203d3e203233373731.roa (hash: kUBqxH2ZZ4TmBOKzWUD0brYEgK2iHz2LdszFr0mSBx0=) 3: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl (hash: 827XZxQnFvgXTxOjGL68TqZSmc7y2VnMEw02X6XvIpY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a5:ca:2a:d8:70:66:83:27:f3:e6:8b:43:e7:7e:23:46:51:10:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Validity Not Before: Mar 2 05:13:16 2026 GMT Not After : Mar 3 08:55:16 2026 GMT Subject: CN=D08E70737808F6B815E6F0DE9EC30E02E648EE2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:6c:73:e9:63:fa:4e:e7:db:42:d6:eb:aa: 70:e4:b4:26:b1:be:e1:29:5c:de:ff:f8:3f:0e:ab: 68:f8:31:38:68:ca:db:e9:8a:5b:a6:0c:9e:38:62: 3a:94:9e:a5:93:d8:8f:19:9d:1a:4a:83:13:7b:13: 41:82:18:a0:81:ac:ad:78:ad:8d:b4:02:0f:fc:a6: fa:8f:27:b1:df:9b:8a:e0:e4:5f:16:00:0e:d1:6c: 00:83:ec:44:f9:3f:80:e9:3c:ef:b1:7e:1a:96:39: 2a:28:c0:32:34:61:0d:24:39:5c:f3:f6:e3:1e:00: 00:52:4e:e4:7e:b2:7f:ed:82:32:ae:fb:8d:38:e3: 8d:56:90:e8:13:75:18:d7:42:8d:15:64:2d:26:b6: 7a:37:52:69:1c:4c:a4:cd:e9:d5:83:dd:7c:7e:b2: bc:cb:f8:e4:cb:cb:ae:4f:a0:16:7f:b4:34:26:38: 52:61:0b:fe:32:e9:c1:0b:21:49:ed:97:87:b7:20: d1:8a:a8:ca:60:f7:65:fa:d6:11:6c:b0:5a:19:56: 24:ca:f9:d0:34:84:74:40:b9:e1:f6:6c:29:57:34: 3c:ad:18:bd:92:8f:90:a2:4c:48:72:6a:a3:df:06: 27:f9:2a:1a:b3:1b:d8:48:72:4a:9f:09:3d:f6:62: 8d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8E:70:73:78:08:F6:B8:15:E6:F0:DE:9E:C3:0E:02:E6:48:EE:2C X509v3 Authority Key Identifier: keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:2e:be:a6:2c:85:38:8a:43:ea:31:93:30:80:0c:bf:4c:ff: 3b:46:aa:6b:97:ea:f2:3a:0c:7c:62:8b:2e:5c:ce:b4:ba:02: 5c:de:2a:db:54:4a:77:28:8e:b5:e3:42:0c:82:58:f2:b8:79: 0c:96:d2:a1:f9:6a:8e:35:0d:d0:b0:2a:af:d9:1b:6b:50:44: 26:28:7f:2c:f6:37:40:c7:38:52:35:01:09:41:54:49:ce:cf: aa:56:87:1a:06:be:43:37:0d:68:29:73:1e:9c:8e:7c:f4:f0: bb:98:fc:08:92:44:77:47:76:31:32:f8:a6:cb:c1:88:c9:1a: a4:77:5f:ee:58:a7:a4:00:bd:54:23:f6:7d:e3:a1:bc:d3:1f: 31:e8:f5:37:80:ed:71:81:b4:ca:7e:37:09:db:10:02:35:15: 29:e2:8f:5d:d1:73:85:f7:c1:fa:8f:63:b9:8e:23:7d:98:e0: 11:79:5b:9d:42:1f:f0:2a:bd:49:70:b5:87:82:7b:88:e6:50: 97:6b:c8:54:dc:99:17:46:f6:ee:00:fe:cb:1b:1c:e0:b2:90: fb:53:49:b0:7f:a1:30:3d:ba:12:d3:d9:66:92:00:c5:a3:8f: 0c:c8:12:aa:8b:fb:61:98:77:00:92:4f:85:bc:ce:18:53:cd: f5:7b:d6:49 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPaXKKthwZoMn8+aLQ+d+I0ZREMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5 QjFGNUIyQzAeFw0yNjAzMDIwNTEzMTZaFw0yNjAzMDMwODU1MTZaMDMxMTAvBgNV BAMTKEQwOEU3MDczNzgwOEY2QjgxNUU2RjBERTlFQzMwRTAyRTY0OEVFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwD2xz6WP6TufbQtbrqnDktCax vuEpXN7/+D8Oq2j4MThoytvpilumDJ44YjqUnqWT2I8ZnRpKgxN7E0GCGKCBrK14 rY20Ag/8pvqPJ7Hfm4rg5F8WAA7RbACD7ET5P4DpPO+xfhqWOSoowDI0YQ0kOVzz 9uMeAABSTuR+sn/tgjKu+404441WkOgTdRjXQo0VZC0mtno3UmkcTKTN6dWD3Xx+ srzL+OTLy65PoBZ/tDQmOFJhC/4y6cELIUntl4e3INGKqMpg92X61hFssFoZViTK +dA0hHRAueH2bClXNDytGL2Sj5CiTEhyaqPfBif5KhqzG9hIckqfCT32Yo23AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0I5wc3gI9rgV5vDensMOAuZI7iwwHwYDVR0j BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4 QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMC9GQjdCNzk0RjEyMzcy NUZFODAwQTY0N0YzRjdFOEJFOTlCMUY1QjJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWS6+piyFOIpD 6jGTMIAMv0z/O0aqa5fq8joMfGKLLlzOtLoCXN4q21RKdyiOteNCDIJY8rh5DJbS oflqjjUN0LAqr9kba1BEJih/LPY3QMc4UjUBCUFUSc7PqlaHGga+QzcNaClzHpyO fPTwu5j8CJJEd0d2MTL4psvBiMkapHdf7linpAC9VCP2feOhvNMfMej1N4DtcYG0 yn43CdsQAjUVKeKPXdFzhffB+o9juY4jfZjgEXlbnUIf8Cq9SXC1h4J7iOZQl2vI VNyZF0b27gD+yxsc4LKQ+1NJsH+hMD26EtPZZpIAxaOPDMgSqov7YZh3AJJPhbzO GFPN9XvWSQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:42:56 2026 by rpki-client