$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft File: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft (raw, json) Hash identifier: orekl0gC4f+4EFfkrd/4MkxH9LxMjT/ohMrNepgW6VM= Subject key identifier: 8B:3C:86:A8:AC:39:A5:0D:76:BB:E0:B4:D0:E0:3D:4F:3A:8C:F1:88 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 670891CB4308B822CC941D46C10748CEEFA8DAEA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 20:48:16 +0000 Manifest this update: Sun 01 Mar 2026 20:43:16 +0000 Manifest next update: Mon 02 Mar 2026 22:27:16 +0000 Files and hashes: 1: 3130332e3230312e3139322e302f32342d3234203d3e20313331333134.roa (hash: OM/Zbo4+rhmJKkNEv9SMrBBMuzephsrrlzSkkgmexNE=) 2: 323430333a396230303a323430303a3a2f34382d3438203d3e203137363231.roa (hash: P2kJYoqRoYD0SqfvYjbkoouF8EZfEcslMZdxFkbZVa0=) 3: 323430333a396230303a363030303a3a2f34382d3438203d3e203435313130.roa (hash: ofTONHQ16mGQgbJs1sloxLXx4/7TSorjhpO9rnIwkh8=) 4: 3131312e3131382e3230302e302f32342d3234203d3e20313331333134.roa (hash: 7LSlu5OKw1qOtgyRN/pPG+VNMM4PDl4woSy90UEe4P8=) 5: 34332e3235342e3233302e302f32342d3234203d3e203435313130.roa (hash: NorobvWdGqodbBj8OyFKQCHfzKeN5Tjtw/VqDHOHG70=) 6: 323430333a396230303a323030303a3a2f34382d3438203d3e20313331333134.roa (hash: QaWug+cNDDzS9dvHPNuT1ZuZWisdg7F8igJGbDTVhns=) 7: 3130332e3230312e3139332e302f32342d3234203d3e20313334373733.roa (hash: 8eLHNRuQPDos/VQVqtrUan8VhqrgRT0eANeLwIl9R5A=) 8: 323430333a396230303a323030303a3a2f34382d3438203d3e2034383437.roa (hash: +SRL20ezVJ4xXC1XC6q4wh6WnZa2oCvwcc4Zp3ATaL0=) 9: 3130332e3230302e3232342e302f32342d3234203d3e2034383132.roa (hash: LIiH4yO0XiF6bKA9C6MKJWqsh+V2gF8apiHbu3m7f5Q=) 10: 3230322e36352e39362e302f32342d3234203d3e2034383437.roa (hash: r6hYqYkKaLY2KUvN1UAoHdA/G53GRFVL962VLu1kVXw=) 11: 34332e3235342e3232382e302f32322d3234203d3e203435313130.roa (hash: xkTXCqdqeVI+Xrgo9PUO1HTTi3bx7XtcQJ8tsJy96KQ=) 12: 3130332e3230312e3139322e302f32342d3234203d3e20313334373733.roa (hash: 6BLYddYeEeDqDU8fdzI0rnVzDC05vTqwdK+2yfGMwzA=) 13: 323430333a396230303a323430303a3a2f34382d3438203d3e20313331333134.roa (hash: h8Dsp5I71swsmHii1MzitIcYsL+pqCT7SgdRcyTJX7I=) 14: 34332e3235342e3232382e302f32342d3234203d3e203435313130.roa (hash: FXoD21RBqOqwuywgeejLde35DBrBDAnRi0f85zG0xj0=) 15: 8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl (hash: gfiCfJdXjx5W1AD+QlVJxcqFLuBI7+Vk2LEduRlW03M=) 16: 3130332e3230302e3232342e302f32342d3234203d3e20313331333134.roa (hash: 1C/L6TcWpvNm22ZzgpqJuGe58/EqXsxE5aPKEEX53xA=) 17: 3131392e3136312e3132342e302f32342d3234203d3e20313331333134.roa (hash: trDdHL32FPMMe1Pupksons//b+AQDqoBfLL/Onzj3Lc=) 18: 3230322e36352e39362e302f32342d3234203d3e2034383038.roa (hash: XInuRiVmp2gchaX1GICHppoHhbgEn885ELkzy+trvsU=) 19: 3130332e3230302e3232342e302f32342d3234203d3e203137363231.roa (hash: Be3hReiEFACxV6iYJQwfzk9wHKiJznC6Do1PJiOGduM=) 20: 3230322e36352e39362e302f32342d3234203d3e20313331333134.roa (hash: cb/Gqb6qtrEFBWMmIIpCS2l1uWPq+vkVShzM0pl28qY=) 21: 3230322e35372e3230312e302f32342d3234203d3e20313331333134.roa (hash: hGhV4E3aYHsMwtwfUvLKZMNlkn0O1oh3hS56LmlwRss=) 22: 323430333a396230303a323030303a3a2f34382d3438203d3e2034383038.roa (hash: k4vFlUdiMCS0bd4s8LdyWoletvKxAr290jb6WY/LSgs=) 23: 3230322e35372e3230312e302f32342d3234203d3e2034383132.roa (hash: utdVCY4l0dcFIG/TVJVwiWA21IYNF1kd1eD/Vknn8vs=) 24: 3130332e3230302e3232302e302f32322d3234203d3e203435313130.roa (hash: kzUThDj46vrC1FApvE33ujC68KuJ6SB7L3Mj3caB4S4=) 25: 3130332e3230312e3139332e302f32342d3234203d3e20313331333134.roa (hash: NTqsPXAjXp48oI3AI/C13TIn2Piu3xDHuu7t6RAetGc=) 26: 3130332e3230302e3232302e302f32322d3234203d3e20313331333134.roa (hash: EMW00fnBuKVnoiTvKKxsVDW2WHDg0xhGk6Oa1ZO6SRw=) 27: 3130332e3230302e3232302e302f32322d3234203d3e203137363231.roa (hash: z8k2fN2Pdv0kR4aQFAD9lFiI0sJXlm/SuhSkv2n308w=) 28: 3131312e3131382e3230302e302f32342d3234203d3e203435313130.roa (hash: 7UiV6DH4n2sZpsx+39CMi75Cc+wLwjEg9xmZoNvX3OQ=) 29: 3230322e34372e3131302e302f32342d3234203d3e2034383132.roa (hash: 9s3ic0lfpCLrK4v9PnYYThNn4W+qc6cqILtlqEH+bh8=) 30: 3130332e3230312e3139332e302f32342d3234203d3e203137363232.roa (hash: 7ijKsPmNlgXx+WTxf4W4VN3Nq7WHyK2KRy4WnwP8l7o=) 31: 3130332e3230302e3232302e302f32322d3234203d3e2034383132.roa (hash: siVNgfCDj6bvBI1m5sUrrPq9lO+mtUIABZ24C9DCFF0=) 32: 34332e3235342e3232392e302f32342d3234203d3e203435313130.roa (hash: hps40GthnEO7UU1qgDGV3g2kd4ewHW9K6snMzsnXMUw=) 33: 3131392e3136312e3132342e302f32342d3234203d3e2034383038.roa (hash: oJPzEgWiYmZnQp7PG/QBqGrmp02PI4wAhkJPWKQQ8CU=) 34: 3230322e34372e3131302e302f32342d3234203d3e20313331333134.roa (hash: 7adlvrP3uQseRyYtxDXWA+mafTgc5oe8hKf0jnYmZ+k=) 35: 323430333a396230303a323430303a3a2f34382d3438203d3e2034383132.roa (hash: Jp2XGNH52ssQ0bdikTWGuqpgPCbzux6iZDhsBMPzYMw=) 36: 3130332e3230312e3139322e302f32342d3234203d3e203137363232.roa (hash: lUVldvkW7zrCmTl2I/FkaVLNraKUrCWh1zaOfF1v1bE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 22:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:08:91:cb:43:08:b8:22:cc:94:1d:46:c1:07:48:ce:ef:a8:da:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Mar 1 20:43:16 2026 GMT Not After : Mar 2 22:27:16 2026 GMT Subject: CN=8B3C86A8AC39A50D76BBE0B4D0E03D4F3A8CF188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ca:1e:4a:c3:e9:94:fa:c3:16:2d:f5:24:f6: 40:98:52:4f:b6:83:77:8e:2a:3b:3d:8d:12:79:3a: 9a:0b:7c:c9:49:d9:67:98:74:6b:68:1e:76:93:ab: a2:df:12:80:d1:ae:97:ad:a0:65:ea:b2:b4:81:8c: 1a:06:a1:3d:49:73:e7:af:98:ae:10:89:6e:06:6a: 72:25:e7:45:e5:85:31:05:75:84:86:7a:f6:34:33: 21:5a:56:b3:67:98:af:00:dc:7c:23:95:74:9b:16: 92:89:b6:04:99:9a:4f:00:8a:df:ae:31:f9:90:8d: f7:74:18:73:a9:83:97:bc:2f:4b:d6:5b:ba:9d:88: f0:91:7a:3f:65:94:c5:d6:65:5a:1f:8e:1d:4c:cf: d0:64:ce:ac:1b:33:ad:71:33:8b:85:fe:6e:d4:8e: a2:2e:28:a4:c4:52:b6:83:46:15:2f:53:83:f5:3b: 13:e5:ba:6a:b5:8d:55:09:dd:9a:79:b7:d6:56:82: 46:f7:80:33:77:a1:6c:9f:c5:78:af:b5:b8:80:e4: 88:80:32:05:8e:41:8b:e8:8d:7f:88:32:1b:87:12: f5:5c:72:ce:43:22:14:3e:71:59:b7:69:d9:9a:ff: ed:04:65:0c:7c:7b:22:e0:c9:52:5f:b8:eb:d1:7d: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3C:86:A8:AC:39:A5:0D:76:BB:E0:B4:D0:E0:3D:4F:3A:8C:F1:88 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ce:11:42:26:78:95:72:df:82:55:cb:49:ce:ea:89:e9:2a: 1e:e7:f7:38:3b:9f:9b:6e:4c:6e:bd:b5:4d:e0:45:f7:d3:7d: 4a:99:2e:96:5d:47:38:3d:a0:07:5b:0e:2b:21:7d:23:17:17: 47:ec:54:8e:c7:44:a6:43:62:95:3e:bf:0e:3a:7a:d7:45:f7: 3d:e5:ef:b0:64:29:4d:2a:8d:41:7a:e4:65:d4:eb:94:0a:60: 1b:89:9b:4d:41:55:a7:10:c1:2e:89:41:7b:d5:51:4a:93:a8: ca:c6:e3:32:da:7a:b1:cc:04:e4:e8:65:df:25:d7:9d:71:95: 8f:6e:24:d2:0f:5c:64:d9:28:c2:54:ed:71:89:a4:f5:8e:77: 89:92:64:7e:64:39:af:cc:71:93:b9:18:7f:89:69:e4:22:a2: f9:d0:eb:98:83:52:ad:8f:38:4a:1c:2a:d6:c5:c1:fe:6f:c9: 89:bd:72:a0:8a:ef:53:e2:76:3a:7b:67:58:ce:46:2d:c6:48: fe:bd:f5:c1:34:16:45:ec:43:d0:7e:8f:de:bc:71:65:e0:9e: b4:d0:ae:34:b6:67:6d:9f:2b:a2:73:2f:7a:e6:22:e4:6c:b6: 58:c9:f2:48:65:7c:a7:2a:3b:3c:0b:31:f6:27:c9:91:fd:4b: 84:32:99:b2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZwiRy0MIuCLMlB1GwQdIzu+o2uowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjAzMDEyMDQzMTZaFw0yNjAzMDIyMjI3MTZaMDMxMTAvBgNV BAMTKDhCM0M4NkE4QUMzOUE1MEQ3NkJCRTBCNEQwRTAzRDRGM0E4Q0YxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTyh5Kw+mU+sMWLfUk9kCYUk+2 g3eOKjs9jRJ5OpoLfMlJ2WeYdGtoHnaTq6LfEoDRrpetoGXqsrSBjBoGoT1Jc+ev mK4QiW4GanIl50XlhTEFdYSGevY0MyFaVrNnmK8A3HwjlXSbFpKJtgSZmk8Ait+u MfmQjfd0GHOpg5e8L0vWW7qdiPCRej9llMXWZVofjh1Mz9BkzqwbM61xM4uF/m7U jqIuKKTEUraDRhUvU4P1OxPlumq1jVUJ3Zp5t9ZWgkb3gDN3oWyfxXivtbiA5IiA MgWOQYvojX+IMhuHEvVccs5DIhQ+cVm3adma/+0EZQx8eyLgyVJfuOvRfQyzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUizyGqKw5pQ12u+C00OA9TzqM8YgwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC84RDQ3M0I3QjQxRTNE NjIyREZCM0I2MEQ1RUI5NDY5OThGQkU3RUFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALs4RQiZ4lXLf glXLSc7qiekqHuf3ODufm25Mbr21TeBF99N9Spkull1HOD2gB1sOKyF9IxcXR+xU jsdEpkNilT6/Djp610X3PeXvsGQpTSqNQXrkZdTrlApgG4mbTUFVpxDBLolBe9VR SpOoysbjMtp6scwE5Ohl3yXXnXGVj24k0g9cZNkowlTtcYmk9Y53iZJkfmQ5r8xx k7kYf4lp5CKi+dDrmINSrY84Shwq1sXB/m/Jib1yoIrvU+J2OntnWM5GLcZI/r31 wTQWRexD0H6P3rxxZeCetNCuNLZnbZ8ronMveuYi5Gy2WMnySGV8pyo7PAsx9ifJ kf1LhDKZsg== -----END CERTIFICATE-----Generated at Mon Mar 2 16:39:59 2026 by rpki-client