$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json) Hash identifier: GNue7mglVdK65yjGLwX0pBujfo5YBM66pfs0tvZbclE= Subject key identifier: D8:C6:A2:11:D3:9C:83:19:92:BD:C9:D4:5D:DF:AC:17:A5:48:87:B1 Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Certificate serial: 0EED6DE09908F58F3F459F7ADBAA9F48BD4D6192 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 14:28:17 +0000 Manifest this update: Mon 02 Mar 2026 14:23:17 +0000 Manifest next update: Tue 03 Mar 2026 16:13:17 +0000 Files and hashes: 1: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=) 2: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=) 3: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=) 4: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: zPnGHP1W1V0Cq0hgnfFGTt7wFuRKJw3lf1o3OMofbs0=) 5: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ed:6d:e0:99:08:f5:8f:3f:45:9f:7a:db:aa:9f:48:bd:4d:61:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A Validity Not Before: Mar 2 14:23:17 2026 GMT Not After : Mar 3 16:13:17 2026 GMT Subject: CN=D8C6A211D39C831992BDC9D45DDFAC17A54887B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3d:d7:73:ab:7c:78:9c:48:29:3a:17:60:5c: f9:66:b5:45:b9:19:8c:57:1e:f1:9e:0a:b1:d2:c1: 76:44:0d:ed:6b:69:90:bf:0c:1c:9a:75:d9:b3:02: a3:82:b5:93:38:dc:f4:de:42:ff:6c:ff:7e:53:72: ce:6d:70:1b:d5:73:dd:7d:43:f7:aa:b9:69:51:ba: 88:a0:a1:08:c1:cc:27:61:d4:13:46:e1:69:28:d4: fa:e5:95:6f:5b:f9:5c:b9:e0:83:f5:ab:92:74:2c: 11:1e:5a:34:0a:95:2d:4e:82:65:b8:91:ac:a1:9f: 0a:9c:ad:b8:9b:3e:13:01:70:f7:86:91:06:c1:19: 0e:20:e0:2c:df:13:1a:85:ea:19:6c:73:b2:b6:0f: af:f6:ab:4e:ef:c4:71:39:15:86:ac:03:0e:d5:d3: 40:2e:f1:ff:7c:54:e5:3a:4d:bb:f9:7b:8c:ea:1c: 30:ff:a1:4a:98:a9:6e:ed:b2:bf:02:86:2e:89:7a: b6:22:98:d7:c0:d8:18:f8:53:f7:e9:b9:48:7c:b9: bc:e5:16:45:b4:b1:b2:00:10:58:09:8a:ae:0f:b9: 14:ed:21:6f:a3:2e:aa:38:bf:f2:36:97:aa:7c:67: ec:7d:32:74:f0:87:ab:0d:54:5a:e3:0e:5b:b1:ad: ab:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C6:A2:11:D3:9C:83:19:92:BD:C9:D4:5D:DF:AC:17:A5:48:87:B1 X509v3 Authority Key Identifier: keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:14:62:3e:ce:ee:b0:0e:60:3b:e4:b7:ff:4d:46:96:64:68: 79:2a:d0:3d:e0:19:00:0f:4b:fb:f7:fa:7f:2f:94:b6:68:b3: 4e:e6:ac:de:7b:a0:f6:75:fa:d8:7f:c4:66:3e:c9:a3:16:ee: 9d:12:78:a4:dd:7d:65:b8:cc:80:8f:41:98:d5:ec:73:aa:38: 53:b6:5a:a7:5b:25:76:ac:a2:5f:c5:68:8c:02:56:ce:f3:5b: 8a:39:3f:7c:f8:9a:ff:5e:87:25:83:9d:42:cb:fd:61:d2:98: b2:15:72:47:9f:29:75:03:6e:82:31:2c:e3:b1:53:0e:c4:04: 75:7d:af:f9:6e:5d:a7:12:ea:cb:28:4f:f9:5a:e1:c9:15:08: 79:81:2f:2c:48:40:97:c0:7a:a0:88:a6:75:92:2d:07:4a:5c: f3:90:3c:25:df:19:ec:e4:44:dc:37:ea:d6:60:bd:70:c9:bf: 07:41:38:7e:1c:a2:87:d5:ea:39:55:ba:fe:af:3d:4b:ff:ea: b0:a4:78:30:d4:50:ff:79:0f:e5:8e:26:bd:fb:f5:b9:e0:69: dc:a4:1b:19:a3:d4:72:a3:f2:7d:4e:b0:9b:3f:9e:18:e9:81: ef:2e:33:4f:ec:63:20:f2:09:0d:43:58:51:bd:7c:66:3d:06: be:d4:e4:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDu1t4JkI9Y8/RZ9626qfSL1NYZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJC QzVDMzQ2QTAeFw0yNjAzMDIxNDIzMTdaFw0yNjAzMDMxNjEzMTdaMDMxMTAvBgNV BAMTKEQ4QzZBMjExRDM5QzgzMTk5MkJEQzlENDVEREZBQzE3QTU0ODg3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Pddzq3x4nEgpOhdgXPlmtUW5 GYxXHvGeCrHSwXZEDe1raZC/DByaddmzAqOCtZM43PTeQv9s/35Tcs5tcBvVc919 Q/equWlRuoigoQjBzCdh1BNG4Wko1PrllW9b+Vy54IP1q5J0LBEeWjQKlS1OgmW4 kayhnwqcrbibPhMBcPeGkQbBGQ4g4CzfExqF6hlsc7K2D6/2q07vxHE5FYasAw7V 00Au8f98VOU6Tbv5e4zqHDD/oUqYqW7tsr8Chi6JerYimNfA2Bj4U/fpuUh8ubzl FkW0sbIAEFgJiq4PuRTtIW+jLqo4v/I2l6p8Z+x9MnTwh6sNVFrjDluxraubAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2MaiEdOcgxmSvcnUXd+sF6VIh7EwHwYDVR0j BBgwFoAUS9K8qjWwrodlSnDXYzWDsrxcNGowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NTA0NzkzOS8wLzRCRDJCQ0FBMzVCMEFFODc2NTRBNzBENzYzMzU4 M0IyQkM1QzM0NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEJEMkJDQUEzNUIwQUU4NzY1NEE3MEQ3NjMzNTgzQjJCQzVDMzQ2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTUwNDc5MzkvMC80QkQyQkNBQTM1QjBB RTg3NjU0QTcwRDc2MzM1ODNCMkJDNUMzNDZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchRiPs7usA5g O+S3/01GlmRoeSrQPeAZAA9L+/f6fy+UtmizTuas3nug9nX62H/EZj7JoxbunRJ4 pN19ZbjMgI9BmNXsc6o4U7Zap1sldqyiX8VojAJWzvNbijk/fPia/16HJYOdQsv9 YdKYshVyR58pdQNugjEs47FTDsQEdX2v+W5dpxLqyyhP+VrhyRUIeYEvLEhAl8B6 oIimdZItB0pc85A8Jd8Z7ORE3Dfq1mC9cMm/B0E4fhyih9XqOVW6/q89S//qsKR4 MNRQ/3kP5Y4mvfv1ueBp3KQbGaPUcqPyfU6wmz+eGOmB7y4zT+xjIPIJDUNYUb18 Zj0GvtTkbg== -----END CERTIFICATE-----Generated at Tue Mar 3 00:27:14 2026 by rpki-client