$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft File: 2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft (raw, json) Hash identifier: HgWaplQ3KC+qCQ1LWKrw0U3L7a5DA+WlEsAcrkN/yQ8= Subject key identifier: 87:AC:B9:23:4D:A9:35:49:E7:9F:18:7D:DE:0B:AE:25:24:72:9A:8C Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 0E2FC886C8982D222E779C336E9EDE043319B811 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 04:38:16 +0000 Manifest this update: Mon 02 Mar 2026 04:33:16 +0000 Manifest next update: Tue 03 Mar 2026 06:38:16 +0000 Files and hashes: 1: 3130332e35362e3138352e302f32342d3234203d3e203539303433.roa (hash: H/aYJEZDszUQqZEgBSI4KYTtHU/iCJRnmxQv5XXPkG0=) 2: 2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl (hash: HYEuTWDIy8ATqll/F3CPyclbPSWA8f5dN3cliajSiSA=) 3: 3130332e35362e3138342e302f32342d3234203d3e203539303433.roa (hash: hmhm/J6fR0cLjZz5lcB7aw6zPjy50dHaMavZ+vQXS/E=) 4: 3130332e35362e3138362e302f32342d3234203d3e203539303433.roa (hash: 185Jozw9t6OPsftx2I3cbH+cAXu8MqzSEVvP5Bvz/0w=) 5: 3130332e35362e3138372e302f32342d3234203d3e203539303433.roa (hash: b93qXeOKMOA0k1Tq0lEXe8AyLgDN80wyTvETkl87my8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:2f:c8:86:c8:98:2d:22:2e:77:9c:33:6e:9e:de:04:33:19:b8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Mar 2 04:33:16 2026 GMT Not After : Mar 3 06:38:16 2026 GMT Subject: CN=87ACB9234DA93549E79F187DDE0BAE2524729A8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:94:29:87:80:92:7c:23:c4:60:dc:58:09:0d: 42:c0:a3:a2:d4:23:c1:0d:28:df:43:f5:c2:4c:0a: f6:da:ba:94:5f:8a:fd:7f:8e:de:67:6e:ab:fc:1b: 98:c0:d0:26:03:ee:a4:dc:96:59:c2:af:88:f0:62: 51:fc:0b:8f:ca:d0:9b:08:51:aa:88:90:c3:bf:13: 3e:19:1f:69:8f:d2:3c:0b:6d:77:4d:5c:ca:8d:69: c5:b2:de:29:ad:d0:37:23:c0:b9:64:56:7e:d9:2f: 6e:4f:f1:68:39:cd:da:99:54:51:38:f2:dd:a7:7a: 14:e1:05:43:64:f8:79:d6:15:8a:d2:d4:9f:4d:2f: f5:6c:3d:fc:37:56:13:bf:f7:c8:32:d5:51:5c:26: dd:ba:b4:97:21:15:91:01:9c:83:ca:2c:a7:39:40: 86:a9:34:ed:ac:03:6a:c0:6d:00:c9:61:8d:c3:54: 1b:c8:78:9e:70:9c:a7:dc:12:99:1b:ff:b2:64:f4: 01:3e:8c:02:dd:0f:7e:b9:8c:45:0f:45:57:77:52: 2e:df:6e:15:ee:03:a1:29:f4:9e:3c:90:07:62:c5: e5:79:15:ca:a7:af:13:75:c0:54:32:b0:e5:7d:be: 44:a7:55:99:c5:04:84:b7:19:38:57:74:fd:b1:49: 92:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AC:B9:23:4D:A9:35:49:E7:9F:18:7D:DE:0B:AE:25:24:72:9A:8C X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:24:f5:04:8b:99:d5:33:c5:43:e4:d6:42:80:50:8a:d2:a3: c8:51:46:68:c6:27:4e:b9:cf:fa:49:c0:6f:fe:2e:db:cd:4f: c6:2f:a9:94:1e:c6:1a:0a:3f:5c:0b:a7:69:bf:0e:74:cb:56: 3c:f4:32:8d:28:fc:f5:d4:f8:40:6c:ec:c6:01:4d:bf:68:d9: 25:2e:1a:46:c3:c9:80:8c:ad:48:46:33:bb:a3:d5:73:a0:29: cb:90:5f:d6:64:be:df:f0:9a:68:39:36:89:0c:90:81:91:e0: 0a:cf:12:2b:ca:88:7d:4a:00:42:be:9f:ab:a9:ee:3a:b9:25: d6:14:a3:f6:66:f3:6c:31:98:08:c0:a2:2c:7c:ad:a9:c6:18: 52:6a:fa:66:89:8e:3f:24:79:e2:5e:9a:81:96:d5:fd:84:2b: 3b:6c:c6:eb:6b:a6:20:3d:17:b6:03:7e:34:25:27:bd:f2:b3: 68:95:61:75:03:29:02:70:b8:11:47:ce:bb:53:e7:c7:eb:07: 90:99:73:eb:37:ad:b1:41:2d:d8:71:17:cd:cd:92:b4:88:ab: 1d:8b:96:2b:bb:66:43:4a:7f:e8:a8:ff:54:b5:12:73:9f:fe: de:7d:b0:48:ee:fb:e7:a1:89:a9:e5:00:60:78:67:ef:6f:c2: c5:2e:1d:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDi/IhsiYLSIud5wzbp7eBDMZuBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjAzMDIwNDMzMTZaFw0yNjAzMDMwNjM4MTZaMDMxMTAvBgNV BAMTKDg3QUNCOTIzNERBOTM1NDlFNzlGMTg3RERFMEJBRTI1MjQ3MjlBOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflCmHgJJ8I8Rg3FgJDULAo6LU I8ENKN9D9cJMCvbaupRfiv1/jt5nbqv8G5jA0CYD7qTcllnCr4jwYlH8C4/K0JsI UaqIkMO/Ez4ZH2mP0jwLbXdNXMqNacWy3imt0DcjwLlkVn7ZL25P8Wg5zdqZVFE4 8t2nehThBUNk+HnWFYrS1J9NL/VsPfw3VhO/98gy1VFcJt26tJchFZEBnIPKLKc5 QIapNO2sA2rAbQDJYY3DVBvIeJ5wnKfcEpkb/7Jk9AE+jALdD365jEUPRVd3Ui7f bhXuA6Ep9J48kAdixeV5FcqnrxN1wFQysOV9vkSnVZnFBIS3GThXdP2xSZKfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUh6y5I02pNUnnnxh93guuJSRymowwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3MjAyNTkvMC8yRDBCQzE2NTVEMTdB M0FCMDlDOTFFNDNBMzJERThEOEFCMjEzNTFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCT1BIuZ1TPF Q+TWQoBQitKjyFFGaMYnTrnP+knAb/4u281Pxi+plB7GGgo/XAunab8OdMtWPPQy jSj89dT4QGzsxgFNv2jZJS4aRsPJgIytSEYzu6PVc6Apy5Bf1mS+3/CaaDk2iQyQ gZHgCs8SK8qIfUoAQr6fq6nuOrkl1hSj9mbzbDGYCMCiLHytqcYYUmr6ZomOPyR5 4l6agZbV/YQrO2zG62umID0XtgN+NCUnvfKzaJVhdQMpAnC4EUfOu1Pnx+sHkJlz 6zetsUEt2HEXzc2StIirHYuWK7tmQ0p/6Kj/VLUSc5/+3n2wSO7756GJqeUAYHhn 72/CxS4deA== -----END CERTIFICATE-----Generated at Mon Mar 2 16:11:50 2026 by rpki-client