$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft File: 8421F0680EB1B3756485D0F7681F78067E9C172E.mft (raw, json) Hash identifier: t+mKfJt9mwrI49FxRnOUb0q5XONPqf8TBuUIf/OrU5s= Subject key identifier: AD:81:74:D1:BD:7B:F7:7A:F3:C0:BB:77:B7:91:A0:3A:EF:DE:99:E1 Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 5CA954438071215C9CD2FA45536CE19632E9A074 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 22:53:16 +0000 Manifest this update: Sun 01 Mar 2026 22:48:16 +0000 Manifest next update: Tue 03 Mar 2026 00:43:16 +0000 Files and hashes: 1: 323430303a383230303a3a2f33322d313238203d3e203435303631.roa (hash: OJuPzB78ELG7oWhjMKLWmQEkKhS3FsL77IA5FBEyGug=) 2: 323430303a383230313a3a2f33322d313238203d3e203435303631.roa (hash: cCjZk6/D7FQRokzzWSYRnQwLRhmgRoE9l1n51OgrOrQ=) 3: 323430303a383230313a3a2f34382d313238203d3e203435303631.roa (hash: 36yhztcZ5Fu1fqVVziBV34gyTNeZzEm9a1ZFJhxb2Fs=) 4: 8421F0680EB1B3756485D0F7681F78067E9C172E.crl (hash: js4MUrkysC3ZIhYCCrmapO5AZG2GUq0OrXiCF8QHPRI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 00:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a9:54:43:80:71:21:5c:9c:d2:fa:45:53:6c:e1:96:32:e9:a0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: Mar 1 22:48:16 2026 GMT Not After : Mar 3 00:43:16 2026 GMT Subject: CN=AD8174D1BD7BF77AF3C0BB77B791A03AEFDE99E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:6e:5b:56:77:db:5a:7d:0c:d4:0a:aa:75: 39:6e:f6:c6:57:c5:8b:06:03:b3:24:42:01:6e:64: 15:ac:bc:08:cc:b0:70:83:43:c6:19:7a:b5:6b:f9: 32:7e:a5:ac:7c:73:56:da:62:bf:0e:bb:04:03:06: 19:9f:aa:0a:a9:b7:73:84:05:ee:bf:bd:be:92:2e: d2:70:9e:b1:08:ef:8c:e9:23:45:29:61:fa:dc:3a: fc:0a:e5:d1:fc:4f:0b:04:9b:47:d0:a7:e1:43:ad: 93:af:27:00:43:f8:55:b3:c4:c6:e1:13:7b:c0:6c: c5:5d:95:f0:0f:5b:74:8b:ce:1b:07:9a:36:0f:09: 7a:0b:ca:4c:a7:88:dd:bb:28:c7:7c:a3:2c:0c:38: ea:08:9a:9d:db:08:3e:b8:8c:e4:08:b5:4d:90:77: 2a:1e:5f:a3:ff:22:ff:87:66:cd:4c:28:12:8f:d2: 19:d2:95:f8:c1:98:47:5a:38:e1:b7:34:08:51:c3: ac:10:66:28:73:7f:40:57:f0:d5:bf:d6:7f:47:24: ec:32:09:0b:c9:29:b7:43:82:e1:5e:a4:86:a0:5c: 7d:1f:1d:7f:e8:76:c8:a1:bd:67:58:1f:9f:7e:d4: 28:8a:f4:f0:e6:0d:58:11:e5:49:29:a9:91:5c:d3: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:81:74:D1:BD:7B:F7:7A:F3:C0:BB:77:B7:91:A0:3A:EF:DE:99:E1 X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:69:da:3a:d0:02:ca:09:f1:93:05:e9:5a:11:be:aa:67:00: 1a:3d:c4:77:e6:7d:40:4b:17:61:70:5b:65:35:5f:e9:7a:63: 0d:3e:9a:8a:eb:92:e9:92:3f:34:64:58:89:70:49:1d:b9:16: 19:a3:ce:e1:4a:9c:06:81:9c:dc:2d:dd:24:d1:be:30:7d:1c: 4b:c8:dc:0b:b3:98:6f:c2:06:4b:90:7d:cd:5a:f7:3c:07:30: 4e:c5:ad:c9:4b:bc:c3:41:ec:a7:0f:40:51:ea:b5:2b:5b:b1: 41:20:a3:48:80:4d:c0:07:50:a3:ee:87:11:7d:c4:8a:e4:1d: 23:ef:74:7b:12:7a:4f:b6:4a:fe:68:d4:01:3b:cd:bc:d6:8a: c3:a0:0e:1a:cc:ca:c7:1b:6b:1f:9f:db:19:68:c8:8e:85:5e: 46:c6:cd:ad:13:09:0e:69:d5:5d:19:52:bd:de:0f:d0:b6:66: cc:7f:b8:bc:c9:a8:ec:5b:2d:76:73:af:f6:b3:d6:7b:81:b3: e9:e2:82:1c:6c:ac:d5:0e:0b:ec:68:72:07:0e:01:73:05:df: 29:7c:71:3e:82:96:0f:bd:f5:5f:67:68:fc:34:4f:48:bb:9d: 9c:d6:6e:3c:70:37:53:f5:33:27:de:4e:77:a5:f8:9c:36:17: 71:50:b7:cb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXKlUQ4BxIVyc0vpFU2zhljLpoHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjAzMDEyMjQ4MTZaFw0yNjAzMDMwMDQzMTZaMDMxMTAvBgNV BAMTKEFEODE3NEQxQkQ3QkY3N0FGM0MwQkI3N0I3OTFBMDNBRUZERTk5RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsW5bVnfbWn0M1AqqdTlu9sZX xYsGA7MkQgFuZBWsvAjMsHCDQ8YZerVr+TJ+pax8c1baYr8OuwQDBhmfqgqpt3OE Be6/vb6SLtJwnrEI74zpI0UpYfrcOvwK5dH8TwsEm0fQp+FDrZOvJwBD+FWzxMbh E3vAbMVdlfAPW3SLzhsHmjYPCXoLykyniN27KMd8oywMOOoImp3bCD64jOQItU2Q dyoeX6P/Iv+HZs1MKBKP0hnSlfjBmEdaOOG3NAhRw6wQZihzf0BX8NW/1n9HJOwy CQvJKbdDguFepIagXH0fHX/odsihvWdYH59+1CiK9PDmDVgR5UkpqZFc03bHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrYF00b1793rzwLt3t5GgOu/emeEwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0NzE4NzMvMC84NDIxRjA2ODBFQjFC Mzc1NjQ4NUQwRjc2ODFGNzgwNjdFOUMxNzJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGnaOtACygnx kwXpWhG+qmcAGj3Ed+Z9QEsXYXBbZTVf6XpjDT6aiuuS6ZI/NGRYiXBJHbkWGaPO 4UqcBoGc3C3dJNG+MH0cS8jcC7OYb8IGS5B9zVr3PAcwTsWtyUu8w0Hspw9AUeq1 K1uxQSCjSIBNwAdQo+6HEX3EiuQdI+90exJ6T7ZK/mjUATvNvNaKw6AOGszKxxtr H5/bGWjIjoVeRsbNrRMJDmnVXRlSvd4P0LZmzH+4vMmo7FstdnOv9rPWe4Gz6eKC HGys1Q4L7GhyBw4BcwXfKXxxPoKWD731X2do/DRPSLudnNZuPHA3U/UzJ95Od6X4 nDYXcVC3yw== -----END CERTIFICATE-----Generated at Mon Mar 2 07:30:37 2026 by rpki-client