$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft File: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft (raw, json) Hash identifier: wDKHdmluZ9QFKfK/tPvb9Wb9KVDPyar/oUXhCpN2neI= Subject key identifier: D4:DB:60:E7:1E:06:D5:BD:19:F9:C9:42:EC:3E:C0:B9:EF:DE:F7:19 Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Certificate serial: 6512B479F595C04E48FB97C764FFAC2BA62AB726 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 14:18:17 +0000 Manifest this update: Mon 02 Mar 2026 14:13:17 +0000 Manifest next update: Tue 03 Mar 2026 17:53:17 +0000 Files and hashes: 1: 3130312e3234372e302e302f31372d3234203d3e203338333635.roa (hash: qz7UatHFJqPS4ZsqhU/SG7lARONSPfeJMor5+B2g+QI=) 2: A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl (hash: u/7ho/ih7j2sb8Q7l1E195tC/QlZ+Zy1IzCLLE1ibIM=) 3: 34322e3139392e302e302f31362d3234203d3e203338333635.roa (hash: 7KEjERmB4Z/A9sqOzm5s/N9mbMV9i8uoubqBMFMghAM=) 4: 3131372e35382e302e302f31372d3234203d3e203338333635.roa (hash: VfFusDOOP1s8pzFyN3+E2jV1enMlvrNxUhUAZ+Dvbm4=) 5: 3138322e36312e3230302e302f32312d3234203d3e203338333635.roa (hash: WgV1yeo5WF52dTxG62HFDsVXOy6MY22rby9YB14g5EM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:12:b4:79:f5:95:c0:4e:48:fb:97:c7:64:ff:ac:2b:a6:2a:b7:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E Validity Not Before: Mar 2 14:13:17 2026 GMT Not After : Mar 3 17:53:17 2026 GMT Subject: CN=D4DB60E71E06D5BD19F9C942EC3EC0B9EFDEF719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:93:bb:53:93:a5:e8:14:32:58:86:96:e0: a8:82:5c:de:95:61:fb:5c:94:71:c6:3c:0f:9a:76: 17:be:8d:4f:c6:3e:27:c9:28:39:18:e7:b0:30:28: bc:a9:97:4a:37:85:66:9a:d7:2c:7a:a7:23:b3:42: 0e:77:d0:51:7b:35:1e:a0:2c:bf:58:cd:a8:d2:cd: 7c:20:b6:4e:e8:a7:c6:e0:5a:c5:bb:f3:c6:16:1d: 72:a4:f0:fb:a2:0f:1f:7b:c3:cd:48:4b:78:f6:b1: a9:fb:b5:5c:77:38:5b:a8:59:3f:4f:0f:31:07:77: fd:7e:5c:af:7b:b5:59:9c:7d:d2:be:12:3c:18:84: e7:53:71:be:c9:28:03:ba:22:53:bf:58:c0:df:a1: 6b:62:0c:0c:91:e1:7b:cb:7e:5a:fa:3f:15:0e:64: f4:1c:49:37:ac:11:da:cd:da:b9:77:ee:5b:01:4e: f1:ce:f3:0d:5c:bf:09:1b:54:45:49:a3:86:89:4e: ad:f5:06:19:86:5f:a5:4e:90:50:a3:79:67:c1:06: cf:35:e1:3c:da:b1:d7:f2:4e:bd:64:65:15:e4:89: cf:5b:86:b0:53:73:67:63:69:3e:d3:31:b5:84:37: e5:56:44:77:a5:76:b7:22:38:7b:10:e3:b7:19:a5: 33:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DB:60:E7:1E:06:D5:BD:19:F9:C9:42:EC:3E:C0:B9:EF:DE:F7:19 X509v3 Authority Key Identifier: keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0a:03:32:8e:10:d3:a9:5d:ce:fb:ca:1d:0a:02:d3:39:e6: 8a:1f:9e:f9:37:9b:0a:42:c0:d8:b4:1e:b0:73:7c:75:1f:3c: b6:f8:cf:4f:61:ed:f4:f7:f1:a3:2d:0a:ba:3f:9f:3f:64:48: b7:8f:6d:b3:f1:20:f3:6d:fa:6a:53:ab:04:bf:6c:fd:43:99: 6e:42:71:c2:6d:44:a6:2c:30:c9:42:6d:2a:2d:1d:41:a6:08: a5:f5:57:46:57:69:fd:b7:a6:7b:c2:d2:26:a4:41:cd:48:a7: 52:ed:ae:32:cf:0e:8d:70:a4:c1:95:78:e3:9a:63:22:57:c2: a2:cd:0e:9a:fd:cb:aa:63:3c:99:a2:e1:55:8b:2f:d3:6c:82: e2:a9:30:6c:63:c2:f9:f1:db:7e:f2:91:62:65:f1:aa:df:99: e0:cc:90:d3:0c:f7:32:0c:b0:95:5c:6d:39:79:93:98:8d:50: 64:f0:04:50:4e:20:0a:2c:24:41:02:d0:c7:29:96:43:22:06: f3:f2:1c:1e:88:38:63:b9:26:4b:22:b1:e9:76:73:d8:3e:fd: 7b:5f:e9:f8:0d:ab:4e:04:e8:6c:51:2a:11:9a:14:18:9f:57: ef:da:f6:6d:fa:36:e7:e4:ce:25:10:fb:a0:08:78:1e:cd:ea: 8c:b0:56:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZRK0efWVwE5I+5fHZP+sK6YqtyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB OEVCQTcwRTAeFw0yNjAzMDIxNDEzMTdaFw0yNjAzMDMxNzUzMTdaMDMxMTAvBgNV BAMTKEQ0REI2MEU3MUUwNkQ1QkQxOUY5Qzk0MkVDM0VDMEI5RUZERUY3MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQd5O7U5Ol6BQyWIaW4KiCXN6V YftclHHGPA+adhe+jU/GPifJKDkY57AwKLypl0o3hWaa1yx6pyOzQg530FF7NR6g LL9YzajSzXwgtk7op8bgWsW788YWHXKk8PuiDx97w81IS3j2san7tVx3OFuoWT9P DzEHd/1+XK97tVmcfdK+EjwYhOdTcb7JKAO6IlO/WMDfoWtiDAyR4XvLflr6PxUO ZPQcSTesEdrN2rl37lsBTvHO8w1cvwkbVEVJo4aJTq31BhmGX6VOkFCjeWfBBs81 4TzasdfyTr1kZRXkic9bhrBTc2djaT7TMbWEN+VWRHeldrciOHsQ47cZpTOrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1Ntg5x4G1b0Z+clC7D7Aue/e9xkwHwYDVR0j BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxMTM5MjIvMC9BMTk2NzIyMDZBOURB N0RGNDI5NTM2QzlCRkZBREE5NEE4RUJBNzBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwoDMo4Q06ld zvvKHQoC0znmih+e+TebCkLA2LQesHN8dR88tvjPT2Ht9Pfxoy0Kuj+fP2RIt49t s/Eg8236alOrBL9s/UOZbkJxwm1EpiwwyUJtKi0dQaYIpfVXRldp/beme8LSJqRB zUinUu2uMs8OjXCkwZV445pjIlfCos0Omv3LqmM8maLhVYsv02yC4qkwbGPC+fHb fvKRYmXxqt+Z4MyQ0wz3MgywlVxtOXmTmI1QZPAEUE4gCiwkQQLQxymWQyIG8/Ic Hog4Y7kmSyKx6XZz2D79e1/p+A2rTgTobFEqEZoUGJ9X79r2bfo25+TOJRD7oAh4 Hs3qjLBWmg== -----END CERTIFICATE-----Generated at Mon Mar 2 16:44:14 2026 by rpki-client