$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft File: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft (raw, json) Hash identifier: o9Eg6XdabHVxXIphThaSsAswvVB/LzFocReLUJZUt3I= Subject key identifier: 54:33:DF:3A:01:A6:2B:19:4F:70:2C:20:2E:C1:A5:A7:9D:83:6B:04 Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Certificate serial: 57F87CFC8E768F132860CC3966E2897D0AC4754D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 17:53:16 +0000 Manifest this update: Sun 01 Mar 2026 17:48:16 +0000 Manifest next update: Mon 02 Mar 2026 20:01:16 +0000 Files and hashes: 1: 3230322e3137302e3231372e302f32342d3332203d3e203234343237.roa (hash: LJLHnynahTuEBARxNRPN8UwyfsQaRWudvGF9ghrX2DQ=) 2: 3230322e3137302e3232302e302f32342d3332203d3e203234343237.roa (hash: 0TeDafE41i2d4QLC5hOPZb7MUJrvUFIXOE/K9ScN3/I=) 3: 3230322e3137302e3232322e302f32342d3332203d3e203234343237.roa (hash: c/V9C/LDSLsX3ipXcneziAHRUZXaaPLA6P0kk/Q1q+w=) 4: 3230322e3137302e3231362e302f32342d3332203d3e203234343237.roa (hash: 0lrHVMK2Zz6L13Vbn9041R65XWn4Q9Io4S10ZHxxpeE=) 5: 3230322e3137302e3231392e302f32342d3332203d3e203234343237.roa (hash: PGdlBkvIO8J6pjhNUuYTr3nEOg0TKMZhDugFcUldVRM=) 6: 3230322e3137302e3232332e302f32342d3332203d3e203234343237.roa (hash: HDVqXdA4D8OhtaouQqSuZCb+F1lHRss6pFhHi0qkluk=) 7: 3230322e3137302e3232312e302f32342d3332203d3e203234343237.roa (hash: XtA9p9+3iEqJl9oNL4XSEWEUSb6vE+lI29hPVM6jgl8=) 8: 3230322e3137302e3231382e302f32342d3332203d3e203234343237.roa (hash: y6H54bzWpbbgzpsGKzSFZwssxd2MOGR7qkMWJLAw/ls=) 9: 2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl (hash: 0FvnpOtlt3d4e6tuNiYYVRfdlGRwkgU8te30On7Z/Ew=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f8:7c:fc:8e:76:8f:13:28:60:cc:39:66:e2:89:7d:0a:c4:75:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Validity Not Before: Mar 1 17:48:16 2026 GMT Not After : Mar 2 20:01:16 2026 GMT Subject: CN=5433DF3A01A62B194F702C202EC1A5A79D836B04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:93:93:c9:56:73:d3:30:5a:cb:e7:0c:ef:20: 30:15:d4:29:d3:f2:18:0d:09:21:a8:0a:82:32:05: e4:9a:9a:3a:b0:0e:66:49:39:c4:dc:f8:22:99:d9: 9d:8d:26:74:2b:0f:04:f7:a5:92:cb:fd:64:83:70: 70:20:4b:61:26:b9:f1:15:19:0a:e8:29:1e:4a:62: 48:fb:d8:45:1e:57:50:01:ed:87:81:f3:c0:12:df: df:3f:26:07:fb:3b:21:f9:6e:ec:40:0d:8c:0b:0b: 46:06:46:1f:72:a9:c7:53:00:d2:1d:67:1a:0c:fb: 7b:b6:2e:3b:fe:6e:dd:5b:bd:0d:39:ac:68:0b:0d: c7:d3:d5:fe:84:08:01:62:94:60:b6:09:61:98:a8: e7:6f:65:25:ba:35:06:6e:ac:c6:40:ae:ac:da:f0: a8:d4:7d:cc:f5:64:9d:36:fa:31:e9:99:9c:b7:c5: e9:cb:89:31:3a:cc:85:5f:fb:23:27:5c:3e:85:3c: 8f:2d:08:d1:f9:13:b2:3a:71:2d:5a:44:e0:e3:0e: 47:68:ad:18:7f:0a:09:d1:d8:a7:ca:5b:7d:40:cb: 7c:96:df:dd:21:ba:bc:9c:84:9a:5c:cc:c9:bf:07: 24:8f:c1:23:72:78:f0:1e:14:a3:94:c6:d7:64:99: dd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:33:DF:3A:01:A6:2B:19:4F:70:2C:20:2E:C1:A5:A7:9D:83:6B:04 X509v3 Authority Key Identifier: keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:38:e8:97:3a:5f:48:63:b7:69:38:d4:06:2d:b0:55:cd:a7: 34:ed:b6:e8:b0:bb:2c:aa:9e:a7:05:60:08:38:4e:85:46:e4: b5:d9:cf:ba:01:a3:d6:aa:5a:58:14:49:1e:c5:70:0f:51:53: ac:71:12:52:57:b0:80:1c:53:8a:4d:3e:8b:7a:ce:75:c3:b7: a1:4b:c2:79:d5:a2:5c:59:3d:0b:1e:c0:c3:e1:59:2b:56:c3: 37:db:ea:3f:75:06:f9:f9:37:81:31:4a:7b:e8:8c:51:cd:6d: 12:af:59:35:bd:43:4b:2f:45:b1:f7:e2:16:c8:1c:64:81:65: dc:ed:86:c6:e1:c9:60:6f:c7:3e:44:6c:6b:6a:00:73:9c:54: 37:56:63:3a:58:8b:a3:69:44:77:68:60:45:1f:32:f1:2a:43: bf:67:8d:4e:87:71:20:72:f5:8f:60:c4:f4:66:3a:43:5e:74: 40:56:85:03:ba:63:a5:0b:68:34:b9:2a:3f:70:4a:9f:13:dd: 07:d8:55:13:ef:53:22:92:13:d0:74:0f:b9:4c:ff:53:87:fc: f4:7a:cb:4b:3d:53:11:6d:cb:da:8e:ab:92:95:f1:99:ce:c8: 3a:9f:11:eb:a5:58:c2:4b:e7:d7:61:4a:c8:aa:76:3e:ef:8c: 59:8a:04:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV/h8/I52jxMoYMw5ZuKJfQrEdU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG NDgyRDhENTAeFw0yNjAzMDExNzQ4MTZaFw0yNjAzMDIyMDAxMTZaMDMxMTAvBgNV BAMTKDU0MzNERjNBMDFBNjJCMTk0RjcwMkMyMDJFQzFBNUE3OUQ4MzZCMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNk5PJVnPTMFrL5wzvIDAV1CnT 8hgNCSGoCoIyBeSamjqwDmZJOcTc+CKZ2Z2NJnQrDwT3pZLL/WSDcHAgS2EmufEV GQroKR5KYkj72EUeV1AB7YeB88AS398/Jgf7OyH5buxADYwLC0YGRh9yqcdTANId ZxoM+3u2Ljv+bt1bvQ05rGgLDcfT1f6ECAFilGC2CWGYqOdvZSW6NQZurMZArqza 8KjUfcz1ZJ02+jHpmZy3xenLiTE6zIVf+yMnXD6FPI8tCNH5E7I6cS1aRODjDkdo rRh/CgnR2KfKW31Ay3yW390hurychJpczMm/BySPwSNyePAeFKOUxtdkmd3LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVDPfOgGmKxlPcCwgLsGlp52DawQwHwYDVR0j BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8yMzM5OTIxMzYzRjcw MDNDM0RFQjQ3RUQ4NTM0QUZFMUY0ODJEOEQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETjolzpfSGO3 aTjUBi2wVc2nNO226LC7LKqepwVgCDhOhUbktdnPugGj1qpaWBRJHsVwD1FTrHES UlewgBxTik0+i3rOdcO3oUvCedWiXFk9Cx7Aw+FZK1bDN9vqP3UG+fk3gTFKe+iM Uc1tEq9ZNb1DSy9FsffiFsgcZIFl3O2GxuHJYG/HPkRsa2oAc5xUN1ZjOliLo2lE d2hgRR8y8SpDv2eNTodxIHL1j2DE9GY6Q150QFaFA7pjpQtoNLkqP3BKnxPdB9hV E+9TIpIT0HQPuUz/U4f89HrLSz1TEW3L2o6rkpXxmc7IOp8R66VYwkvn12FKyKp2 Pu+MWYoEAA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:54:36 2026 by rpki-client