$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft File: 4155439EEB77ED19E3031F638A8E633394279977.mft (raw, json) Hash identifier: 5w0+eFXY/uQczmRe/tvoGOhWAhrXwtutKyPH/nD4/w8= Subject key identifier: A0:F0:87:8D:E9:CD:C7:EB:67:D9:2B:9A:43:43:0C:15:7E:10:B4:73 Authority key identifier: 41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77 Certificate issuer: /CN=4155439EEB77ED19E3031F638A8E633394279977 Certificate serial: 6BB24C494CA8E1CFC5D37FAD030DD4B1737D9F65 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 11:28:17 +0000 Manifest this update: Mon 02 Mar 2026 11:23:17 +0000 Manifest next update: Tue 03 Mar 2026 13:26:17 +0000 Files and hashes: 1: 323430303a656263303a3a2f33322d3332203d3e203539303232.roa (hash: Zn0noHN6iNJDzK6vOmfeSu3tfNVAG30zlSHKCwmfuzY=) 2: 4155439EEB77ED19E3031F638A8E633394279977.crl (hash: zZZqpvAsh8O+qgMtHtan7UnPSOodjjm6fbjBNY7htEc=) 3: 3130332e35362e32302e302f32322d3232203d3e203539303232.roa (hash: XqU+wlfWMeRYQpyFcOjqN7ncb39PGujTVpajP8KMuUQ=) 4: 34352e3131352e3234342e302f32322d3232203d3e203539303232.roa (hash: ge2Ti9DiKt4SjGrhGoUJ7CPWluyE8+KIRMqEhEbTarU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b2:4c:49:4c:a8:e1:cf:c5:d3:7f:ad:03:0d:d4:b1:73:7d:9f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4155439EEB77ED19E3031F638A8E633394279977 Validity Not Before: Mar 2 11:23:17 2026 GMT Not After : Mar 3 13:26:17 2026 GMT Subject: CN=A0F0878DE9CDC7EB67D92B9A43430C157E10B473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:70:f6:bd:46:a1:72:86:77:dc:e5:c1:66:4f: 05:e3:8e:24:a2:3f:af:23:70:c6:c0:0f:21:ac:2c: 1c:03:03:e0:32:e1:77:60:9e:72:cd:0b:46:0e:86: 3e:00:1a:78:d0:f9:57:c3:ea:8e:8e:fc:7f:35:82: af:a3:58:e5:7d:5f:e8:fe:c0:49:e1:4a:18:eb:e0: c2:e9:f7:93:4f:2d:db:ca:5f:62:d4:a3:8b:86:c6: 76:85:df:6a:4e:d4:9c:0e:1f:c5:c2:31:55:da:42: e4:68:6e:2d:bf:28:18:60:6c:39:1a:43:1e:04:77: 4f:7b:1b:b9:2e:8f:96:4b:79:56:c5:f9:c7:fe:a3: 58:e9:72:55:3b:29:8c:bc:39:c6:d3:32:8b:3d:60: d9:a2:86:0d:65:00:94:d3:47:76:d8:c5:e2:6c:f4: 87:70:b8:3c:69:96:63:4b:eb:88:6d:6d:5b:82:87: 8f:0a:15:e1:94:19:3e:89:cc:6d:ff:a4:35:86:1b: 41:ee:21:6d:06:ef:38:0c:b7:8e:e9:a8:64:24:14: fe:58:ff:1f:69:38:a4:69:e2:16:f8:de:e8:63:28: 45:9e:88:4e:55:57:76:11:c6:87:cd:20:12:db:da: 18:c0:05:ec:59:4c:9d:79:3f:26:58:d3:1d:8d:f9: 61:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F0:87:8D:E9:CD:C7:EB:67:D9:2B:9A:43:43:0C:15:7E:10:B4:73 X509v3 Authority Key Identifier: keyid:41:55:43:9E:EB:77:ED:19:E3:03:1F:63:8A:8E:63:33:94:27:99:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4155439EEB77ED19E3031F638A8E633394279977.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394851331/0/4155439EEB77ED19E3031F638A8E633394279977.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:fb:ef:c6:12:31:5a:85:ee:0a:da:26:90:1e:69:25:4d:5a: 85:94:66:7f:a0:e5:6c:20:0a:c7:c6:f8:71:46:d9:0a:c0:12: 58:b9:60:c3:ab:91:ec:0e:ac:2a:8d:86:07:01:ce:0d:1a:5d: 84:17:ec:12:74:44:e8:c9:28:ed:7d:56:84:3a:bc:90:fb:76: b2:48:dd:81:c7:42:fc:7b:bb:c5:bc:73:26:e7:99:e8:ad:82: 2d:bc:d7:fb:e3:d8:8e:7c:03:2b:b3:58:66:70:a4:46:f5:2c: e4:67:e3:6a:09:6a:e8:9d:fc:bd:05:f4:62:96:5b:fb:f7:e7: c0:98:5f:ae:ba:14:84:5d:76:c1:46:4b:ae:1c:94:56:2e:72: 81:5a:15:ca:97:95:88:9c:1b:37:94:7b:4e:3a:5d:73:b9:33: 5b:15:76:dc:ab:c0:6a:88:ee:79:16:60:b4:be:1d:53:65:6e: 9f:16:af:7e:7a:da:7e:5b:e1:16:16:98:22:6c:5a:15:62:e6: 16:55:0a:2b:f5:4c:0b:35:1f:e8:cc:e3:6a:11:87:bc:3f:ac: 2c:fc:25:2f:2d:76:b2:13:07:53:94:7d:a1:19:85:5b:f8:81: 93:63:1b:b5:f6:92:85:76:8d:38:79:b7:9d:cc:77:38:2d:0d: 79:ba:da:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa7JMSUyo4c/F03+tAw3UsXN9n2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5 NDI3OTk3NzAeFw0yNjAzMDIxMTIzMTdaFw0yNjAzMDMxMzI2MTdaMDMxMTAvBgNV BAMTKEEwRjA4NzhERTlDREM3RUI2N0Q5MkI5QTQzNDMwQzE1N0UxMEI0NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqcPa9RqFyhnfc5cFmTwXjjiSi P68jcMbADyGsLBwDA+Ay4XdgnnLNC0YOhj4AGnjQ+VfD6o6O/H81gq+jWOV9X+j+ wEnhShjr4MLp95NPLdvKX2LUo4uGxnaF32pO1JwOH8XCMVXaQuRobi2/KBhgbDka Qx4Ed097G7kuj5ZLeVbF+cf+o1jpclU7KYy8OcbTMos9YNmihg1lAJTTR3bYxeJs 9IdwuDxplmNL64htbVuCh48KFeGUGT6JzG3/pDWGG0HuIW0G7zgMt47pqGQkFP5Y /x9pOKRp4hb43uhjKEWeiE5VV3YRxofNIBLb2hjABexZTJ15PyZY0x2N+WE3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoPCHjenNx+tn2SuaQ0MMFX4QtHMwHwYDVR0j BBgwFoAUQVVDnut37RnjAx9jio5jM5QnmXcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDg1MTMzMS8wLzQxNTU0MzlFRUI3N0VEMTlFMzAzMUY2MzhBOEU2 MzMzOTQyNzk5NzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDE1NTQzOUVFQjc3RUQxOUUzMDMxRjYzOEE4RTYzMzM5NDI3OTk3Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ4NTEzMzEvMC80MTU1NDM5RUVCNzdF RDE5RTMwMzFGNjM4QThFNjMzMzk0Mjc5OTc3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw/vvxhIxWoXu CtomkB5pJU1ahZRmf6DlbCAKx8b4cUbZCsASWLlgw6uR7A6sKo2GBwHODRpdhBfs EnRE6Mko7X1WhDq8kPt2skjdgcdC/Hu7xbxzJueZ6K2CLbzX++PYjnwDK7NYZnCk RvUs5Gfjaglq6J38vQX0YpZb+/fnwJhfrroUhF12wUZLrhyUVi5ygVoVypeViJwb N5R7Tjpdc7kzWxV23KvAaojueRZgtL4dU2VunxavfnraflvhFhaYImxaFWLmFlUK K/VMCzUf6MzjahGHvD+sLPwlLy12shMHU5R9oRmFW/iBk2MbtfaShXaNOHm3ncx3 OC0NebraTA== -----END CERTIFICATE-----Generated at Mon Mar 2 14:24:08 2026 by rpki-client