$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft File: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft (raw, json) Hash identifier: rIitwCx9UF4T/AQH+JlfBjk53JZ9dq0cjnjDYX0ZRtA= Subject key identifier: 6C:67:F8:8A:E5:DF:78:34:3A:B5:C3:8A:AA:3F:A4:B5:08:8A:25:18 Authority key identifier: F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 Certificate issuer: /CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Certificate serial: 4DC8E3CC16A0EF7E565767D9C5DD69139C221E1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 14:18:16 +0000 Manifest this update: Sun 01 Mar 2026 14:13:16 +0000 Manifest next update: Mon 02 Mar 2026 18:16:16 +0000 Files and hashes: 1: 3130332e31322e3233322e302f32322d3234203d3e203536303032.roa (hash: S5pB5F7uR36651p5lp/LDVZg+Nbd2UsJ1SG+tvD3MGk=) 2: 3130332e31322e3233322e302f32342d3234203d3e203536303032.roa (hash: O3EQlEYLMow6je1ePRt5RD/Zk9ut4T5gxs1OEwM7bgg=) 3: 3130332e31322e3233342e302f32342d3234203d3e203536303032.roa (hash: 3iR5h9ciVEvWrNc9NRxpVrFGsUatGwA4KTKwjNShrDc=) 4: F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl (hash: YqkJCw3Xya/7sdGpmvREkrEEflkJGuRaqrYwd4zCmok=) 5: 3130332e31322e3233352e302f32342d3234203d3e203536303032.roa (hash: NNhok2ZJr/F1lqefCnBf3ZsQvzCKthXl585R1g5/2Rs=) 6: 3130332e31322e3233332e302f32342d3234203d3e203536303032.roa (hash: sfIyezGvMEI9sfmAU0jHzwMgIEbqwt2WZ8h4JTscNOM=) 7: 323430353a616430303a3a2f33322d3332203d3e203536303032.roa (hash: v8iH8/BvEZY2NvmziljOXkpUiX8bRKGNgC2M8D+en0k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 18:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c8:e3:cc:16:a0:ef:7e:56:57:67:d9:c5:dd:69:13:9c:22:1e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0 Validity Not Before: Mar 1 14:13:16 2026 GMT Not After : Mar 2 18:16:16 2026 GMT Subject: CN=6C67F88AE5DF78343AB5C38AAA3FA4B5088A2518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:e1:21:14:a6:33:72:43:bf:b4:98:2d:c6: 86:06:95:75:e4:d8:c5:71:ce:44:40:2e:90:f1:5b: 88:b3:15:1a:d8:4a:7c:d8:26:2c:eb:5f:46:96:49: 70:aa:1c:d3:f9:67:54:0f:31:a2:b5:b0:0d:12:b4: d1:75:bf:41:4b:17:84:ce:d8:b8:0c:50:e8:40:0a: f8:ef:f9:fe:2c:e5:63:30:de:2e:f5:fc:fa:01:9e: 48:9d:ec:7e:ae:1c:19:fd:7d:8f:9b:6c:8c:00:6e: 73:8d:b8:31:35:d1:ef:1a:12:38:99:29:f8:df:39: c0:ab:91:70:a7:ce:cd:d1:89:87:66:9b:16:4e:05: 56:17:f2:bd:6a:7f:01:51:64:12:15:77:3b:47:07: 38:42:39:38:73:90:b8:97:cd:d5:43:af:a5:ea:43: b1:b8:53:cc:ac:5b:ef:17:9a:10:1c:2c:a9:f9:09: 15:de:de:83:42:16:16:bb:b3:f0:5e:7b:86:97:36: da:a2:f6:35:d0:e2:5a:80:1c:1e:0e:6c:7a:3f:14: 62:16:c3:58:73:9c:8b:c3:f5:99:18:61:58:14:df: 25:f8:85:5f:9e:c5:0b:3b:69:fd:39:58:e6:ab:6e: 9f:58:2d:70:3a:d7:f3:8a:3b:5c:9d:bc:93:e0:14: a0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:67:F8:8A:E5:DF:78:34:3A:B5:C3:8A:AA:3F:A4:B5:08:8A:25:18 X509v3 Authority Key Identifier: keyid:F0:1F:F0:43:0F:A5:4C:A0:F6:D9:74:5B:54:FD:1A:B0:07:F1:D8:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947537409/0/F01FF0430FA54CA0F6D9745B54FD1AB007F1D8B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3b:fd:ab:cc:c7:d4:29:b0:4f:23:aa:dc:14:81:21:ea:ee: 4e:30:1d:79:b1:95:eb:84:b2:e4:b8:6d:8e:06:c2:f8:86:f4: 9e:f9:f4:73:ba:cb:5f:09:51:c3:2d:17:71:46:45:99:de:51: 59:95:ca:24:6e:a6:0b:3c:33:13:23:38:a1:66:30:ff:71:65: 01:60:63:ac:db:68:14:6f:2a:9d:41:f6:80:a1:15:32:b9:36: fb:0c:85:32:d7:a5:71:a0:25:12:76:bd:6f:e6:4a:c3:bb:54: 63:82:14:6f:5a:5b:4c:24:44:d1:4e:b1:9b:58:21:ed:3c:f5: 0e:32:27:e8:aa:6f:3c:2a:4c:75:4b:49:4c:7f:b4:94:70:2f: 72:cd:7a:f6:fe:28:c7:35:61:e0:79:10:7c:62:d7:39:1f:ab: d5:14:51:b4:04:bc:41:b7:44:33:e4:91:b3:d8:20:3b:c4:c6: 52:1b:92:ce:98:68:41:59:d4:36:54:02:41:ac:4b:85:ba:3f: 08:ae:42:d3:18:2b:9d:8e:fe:3d:92:c3:4e:3c:59:6e:90:19: 04:94:e4:94:e2:5b:06:c3:03:e5:39:cd:b6:27:1f:37:e8:09: 73:17:41:04:98:6c:ca:60:af:27:f3:18:7a:ff:60:a9:01:20: 84:df:c7:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTcjjzBag735WV2fZxd1pE5wiHh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAw N0YxRDhCMDAeFw0yNjAzMDExNDEzMTZaFw0yNjAzMDIxODE2MTZaMDMxMTAvBgNV BAMTKDZDNjdGODhBRTVERjc4MzQzQUI1QzM4QUFBM0ZBNEI1MDg4QTI1MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDb+EhFKYzckO/tJgtxoYGlXXk 2MVxzkRALpDxW4izFRrYSnzYJizrX0aWSXCqHNP5Z1QPMaK1sA0StNF1v0FLF4TO 2LgMUOhACvjv+f4s5WMw3i71/PoBnkid7H6uHBn9fY+bbIwAbnONuDE10e8aEjiZ KfjfOcCrkXCnzs3RiYdmmxZOBVYX8r1qfwFRZBIVdztHBzhCOThzkLiXzdVDr6Xq Q7G4U8ysW+8XmhAcLKn5CRXe3oNCFha7s/Bee4aXNtqi9jXQ4lqAHB4ObHo/FGIW w1hznIvD9ZkYYVgU3yX4hV+exQs7af05WOarbp9YLXA61/OKO1ydvJPgFKDxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbGf4iuXfeDQ6tcOKqj+ktQiKJRgwHwYDVR0j BBgwFoAU8B/wQw+lTKD22XRbVP0asAfx2LAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzUzNzQwOS8wL0YwMUZGMDQzMEZBNTRDQTBGNkQ5NzQ1QjU0RkQx QUIwMDdGMUQ4QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjAxRkYwNDMwRkE1NENBMEY2RDk3NDVCNTRGRDFBQjAwN0YxRDhCMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc1Mzc0MDkvMC9GMDFGRjA0MzBGQTU0 Q0EwRjZEOTc0NUI1NEZEMUFCMDA3RjFEOEIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzv9q8zH1Cmw TyOq3BSBIeruTjAdebGV64Sy5LhtjgbC+Ib0nvn0c7rLXwlRwy0XcUZFmd5RWZXK JG6mCzwzEyM4oWYw/3FlAWBjrNtoFG8qnUH2gKEVMrk2+wyFMtelcaAlEna9b+ZK w7tUY4IUb1pbTCRE0U6xm1gh7Tz1DjIn6KpvPCpMdUtJTH+0lHAvcs169v4oxzVh 4HkQfGLXOR+r1RRRtAS8QbdEM+SRs9ggO8TGUhuSzphoQVnUNlQCQaxLhbo/CK5C 0xgrnY7+PZLDTjxZbpAZBJTklOJbBsMD5TnNticfN+gJcxdBBJhsymCvJ/MYev9g qQEghN/Hzg== -----END CERTIFICATE-----Generated at Mon Mar 2 08:15:24 2026 by rpki-client