$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft File: 1FFF263C64163BC58514B539C10375CCB553D75E.mft (raw, json) Hash identifier: nX97PDTz58jxuy8aTF+MqId5ONO1qqHpc55fnU6fxE4= Subject key identifier: 3A:73:6E:2F:79:0C:42:86:5E:E6:53:0B:A5:38:D9:0F:C3:F8:05:FD Authority key identifier: 1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E Certificate issuer: /CN=1FFF263C64163BC58514B539C10375CCB553D75E Certificate serial: 455EAF2EE312FA75EF4C0D7B1B19FB7C9AF20F90 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft Manifest number: 3F Signing time: Mon 02 Mar 2026 04:58:16 +0000 Manifest this update: Mon 02 Mar 2026 04:53:16 +0000 Manifest next update: Tue 03 Mar 2026 05:04:16 +0000 Files and hashes: 1: AS59083.roa (hash: JGX98b/AHLYrVIkUKlpnnStVHUWgU4CqWbdxWDSwWqY=) 2: AS50983.roa (hash: 3xNnaG5XELIMcsyrOO9nWj0CAomHLhAMM1tNXRDhKfo=) 3: AS25743.roa (hash: jL7OCspekTn5WG0YDVfmdg1IRO40se8eoxW+gIQT9FU=) 4: AS139259.roa (hash: b98Fq36BOttqiOM4/djRqrmYEmWfycySLi/qH4KvII4=) 5: AS4812.roa (hash: pOmoghD0ExIFLzXl7hIa61iDEtf+bzoFL7dduBmk+Pw=) 6: AS17621.roa (hash: W4lDrD0ugeGLSP20hlfrT6/IveugyXhLDuR4xYSnH+w=) 7: AS138527.roa (hash: O5kVuwbCg2wl7TZ3PYtpZXLCpjh4EZ+6YLFnM/TE3u8=) 8: AS139076.roa (hash: 4hb5Gao9BASgg0FHiSjmmXy58KRA0R7rDGX4EJ/JsLI=) 9: AS394881.roa (hash: ewWUugoGRFlXdfDmxG/MeF2xl6lbgEZp+FrqCIkeU28=) 10: AS13444.roa (hash: 4ifTSplvWNjGCTj6XDZaz77B4//KZMNZ8KM1FNpFwxI=) 11: AS21859.roa (hash: PyEJ9jiI4zJ41G/B0QCB9AEFiPf7Sjty7tslKA90CEA=) 12: 1FFF263C64163BC58514B539C10375CCB553D75E.crl (hash: XgkH7Ej9nfKubTJwD5JSu+8LbeT+ozqhuzT0fptM8II=) 13: AS59803.roa (hash: SeQYgMliWNRTqWESU6Uf1AtTbZFuEqo/4Qb62dbRV1U=) 14: AS136897.roa (hash: BmKDzEqoqpKXS2dYeA1+8IcIV6gMdCP8Ne5uyd0f6cU=) 15: AS24373.roa (hash: mv5XfOipqsqDjk1q6Kb/6qCmPErR3fPDkBeQZeBbuLQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:5e:af:2e:e3:12:fa:75:ef:4c:0d:7b:1b:19:fb:7c:9a:f2:0f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FFF263C64163BC58514B539C10375CCB553D75E Validity Not Before: Mar 2 04:53:16 2026 GMT Not After : Mar 3 05:04:16 2026 GMT Subject: CN=3A736E2F790C42865EE6530BA538D90FC3F805FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:72:26:86:30:36:de:0c:a2:55:53:ce:01: e5:4f:07:0f:9e:64:17:9c:c7:84:13:73:5a:cd:4a: cb:b2:42:69:9e:95:e0:02:a6:2b:16:4f:4f:b9:b0: 15:9d:48:49:05:d1:31:8c:12:1e:e6:c5:cf:08:40: 06:8f:08:78:23:c7:d0:54:c4:9c:65:2b:6e:7f:a3: 02:b6:9b:36:27:c3:00:22:06:31:64:86:2d:f4:4b: dd:06:46:e4:6a:cd:43:bf:50:1d:6d:08:3b:c6:bd: 56:c4:7d:11:21:e4:9a:ef:1f:9b:b8:61:3e:8d:c5: 48:41:4e:cb:f8:a1:2b:5f:24:2b:00:9d:a2:eb:34: 82:94:0c:82:75:e0:de:59:78:bc:db:2e:53:57:47: 5c:83:bb:cc:94:a2:c6:92:cc:8e:08:15:c7:87:16: bb:8d:bf:a6:6b:0f:5a:a2:82:db:ec:85:2f:d8:9b: 53:6a:4b:fa:f4:cd:a6:00:b8:28:78:62:a9:c2:24: 76:ef:d6:ed:4b:77:f4:ad:09:02:a7:fa:7a:10:7b: 77:1a:81:8c:e2:fa:a1:96:1a:9d:c1:14:66:9d:2f: 65:6d:15:e0:ca:85:14:b7:8f:ff:98:a0:27:bf:df: 29:0b:29:9b:e7:cb:fe:28:f3:13:8c:bd:10:26:9a: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:73:6E:2F:79:0C:42:86:5E:E6:53:0B:A5:38:D9:0F:C3:F8:05:FD X509v3 Authority Key Identifier: keyid:1F:FF:26:3C:64:16:3B:C5:85:14:B5:39:C1:03:75:CC:B5:53:D7:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1FFF263C64163BC58514B539C10375CCB553D75E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394327043/0/1FFF263C64163BC58514B539C10375CCB553D75E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:df:95:01:13:e4:9a:a4:e4:72:52:43:c4:8c:1b:aa:b5:ab: 6d:8e:a4:22:6c:b5:1f:fe:64:b6:a5:bd:dd:b8:8f:f8:9e:89: 47:a0:0a:b6:de:00:24:7f:12:d5:10:fd:b4:f6:e0:95:4c:f0: e8:df:1c:c7:1a:79:72:a1:0c:b0:58:71:7b:4f:64:5a:40:ee: b4:06:17:b5:e7:2a:55:2d:05:5c:f6:02:dc:0b:f3:8e:52:7d: aa:fa:f0:76:db:4f:cc:00:c3:a9:1e:30:d1:68:0b:c1:32:27: 76:67:22:88:59:26:b1:0a:17:a8:f7:26:3b:4a:81:31:3a:32: c6:91:fa:38:51:7b:41:d3:5c:d4:70:14:c5:a9:c9:b8:c6:a7: 02:36:7b:3c:e9:f0:21:80:7d:b3:90:f0:54:9a:c9:f8:f8:ad: fd:b7:fe:1c:f9:5b:9c:05:42:05:27:9e:8c:69:e3:50:d2:62: e8:46:6a:b1:38:47:ad:0e:8a:17:d3:75:76:29:6b:97:50:ee: a6:d3:7c:17:6b:c4:70:f7:99:45:03:90:27:ff:22:9e:e3:7f: d0:61:df:09:21:1a:1d:fb:b7:25:8e:da:db:d5:e9:03:76:47: 93:ec:cf:8e:73:5c:24:60:ef:49:2b:54:58:f9:9a:27:21:92: 0a:1a:91:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURV6vLuMS+nXvTA17Gxn7fJryD5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NC NTUzRDc1RTAeFw0yNjAzMDIwNDUzMTZaFw0yNjAzMDMwNTA0MTZaMDMxMTAvBgNV BAMTKDNBNzM2RTJGNzkwQzQyODY1RUU2NTMwQkE1MzhEOTBGQzNGODA1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Z3ImhjA23gyiVVPOAeVPBw+e ZBecx4QTc1rNSsuyQmmeleACpisWT0+5sBWdSEkF0TGMEh7mxc8IQAaPCHgjx9BU xJxlK25/owK2mzYnwwAiBjFkhi30S90GRuRqzUO/UB1tCDvGvVbEfREh5JrvH5u4 YT6NxUhBTsv4oStfJCsAnaLrNIKUDIJ14N5ZeLzbLlNXR1yDu8yUosaSzI4IFceH FruNv6ZrD1qigtvshS/Ym1NqS/r0zaYAuCh4YqnCJHbv1u1Ld/StCQKn+noQe3ca gYzi+qGWGp3BFGadL2VtFeDKhRS3j/+YoCe/3ykLKZvny/4o8xOMvRAmmrulAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOnNuL3kMQoZe5lMLpTjZD8P4Bf0wHwYDVR0j BBgwFoAUH/8mPGQWO8WFFLU5wQN1zLVT114wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDMyNzA0My8wLzFGRkYyNjNDNjQxNjNCQzU4NTE0QjUzOUMxMDM3 NUNDQjU1M0Q3NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUZGRjI2M0M2NDE2M0JDNTg1MTRCNTM5QzEwMzc1Q0NCNTUzRDc1RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzMjcwNDMvMC8xRkZGMjYzQzY0MTYz QkM1ODUxNEI1MzlDMTAzNzVDQ0I1NTNENzVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEd+VARPkmqTk clJDxIwbqrWrbY6kImy1H/5ktqW93biP+J6JR6AKtt4AJH8S1RD9tPbglUzw6N8c xxp5cqEMsFhxe09kWkDutAYXtecqVS0FXPYC3AvzjlJ9qvrwdttPzADDqR4w0WgL wTIndmciiFkmsQoXqPcmO0qBMToyxpH6OFF7QdNc1HAUxanJuManAjZ7POnwIYB9 s5DwVJrJ+Pit/bf+HPlbnAVCBSeejGnjUNJi6EZqsThHrQ6KF9N1dilrl1DuptN8 F2vEcPeZRQOQJ/8inuN/0GHfCSEaHfu3JY7a29XpA3ZHk+zPjnNcJGDvSStUWPma JyGSChqR/w== -----END CERTIFICATE-----Generated at Mon Mar 2 13:17:31 2026 by rpki-client