$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft File: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft (raw, json) Hash identifier: S16dAzfxhVZ6kDr7cWQ+uNqqDpzugS+LIdcnGi7IEXc= Subject key identifier: 47:75:E6:07:C1:DA:82:DF:AF:01:01:71:BE:15:D2:E8:BF:D4:47:A3 Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 3A71DD26CA85C183E6A7161243CD5CA52B5AE2A2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 07:03:16 +0000 Manifest this update: Mon 02 Mar 2026 06:58:16 +0000 Manifest next update: Tue 03 Mar 2026 07:39:16 +0000 Files and hashes: 1: 32372e302e3133332e302f32342d3234203d3e20313338393135.roa (hash: yjVaS9fU/BmpI0d1y40icFKgvmXLnvrVPGA9lnAYovg=) 2: 3130332e32372e342e302f32342d3234203d3e203538383534.roa (hash: qGte1Ot7Eg/0TbNzqdJBQ/lLSyl2J5F4UszZ0mAyRSA=) 3: EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl (hash: nKONkKsogDp/AfwuK+QWhnln26zOzG7PfMb3eTm4W2A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:71:dd:26:ca:85:c1:83:e6:a7:16:12:43:cd:5c:a5:2b:5a:e2:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: Mar 2 06:58:16 2026 GMT Not After : Mar 3 07:39:16 2026 GMT Subject: CN=4775E607C1DA82DFAF010171BE15D2E8BFD447A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8d:07:ea:07:e7:68:79:e1:60:bc:4d:47:72: ff:0d:92:45:f3:5f:9d:48:d4:48:cf:b0:d9:16:1c: 1b:52:41:d8:11:89:24:fb:3c:76:7b:ff:45:ce:76: 2e:2e:b7:e9:b6:96:87:e3:41:68:7e:ce:4f:56:57: e1:28:a9:94:1c:b4:ec:5c:c5:ad:2b:f1:8d:4e:e4: 9a:06:50:97:5d:71:5c:40:12:4d:1c:a4:7d:02:de: 26:eb:f8:75:90:3c:cb:00:d7:49:aa:ff:3d:96:fd: f7:10:06:b0:04:ab:19:da:11:a5:a9:21:4b:02:19: 27:72:bb:7a:b2:a2:8e:8a:1c:a9:1a:78:0d:52:75: 1f:4d:fb:1a:e5:56:1e:c6:de:68:26:a4:a7:8c:fe: 3a:90:9f:82:22:d5:72:eb:42:08:e7:c2:5e:af:d6: 0e:d0:d9:34:6d:86:b3:12:43:dd:48:1f:f2:6a:d3: 28:ba:65:d7:23:68:c4:72:03:12:51:70:2e:ec:83: 95:3b:f4:4e:06:18:d6:43:95:35:0f:d9:f6:5a:f9: d2:ed:23:c9:95:47:46:47:a5:cc:82:57:42:b2:0d: 0d:2a:0e:88:64:b0:47:2d:75:75:d4:26:c0:06:89: 2e:c6:7e:c3:f8:ab:31:b1:86:b9:66:b4:46:9d:16: 06:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:75:E6:07:C1:DA:82:DF:AF:01:01:71:BE:15:D2:E8:BF:D4:47:A3 X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f3:a0:9c:6f:ac:56:0f:ff:4c:ba:58:80:d1:5d:6d:ab:19: 21:78:d1:f5:d5:1b:0d:d7:a0:9e:23:32:c6:1c:9d:b1:5e:14: f1:34:16:99:3e:0f:ff:85:07:0d:9d:a0:3e:7b:73:27:ba:31: c3:25:dc:83:e2:e5:a5:e1:30:d2:ec:8f:f9:09:c0:c5:22:b1: 28:f5:bd:68:df:d0:f2:6c:b5:cf:d8:9e:6f:1e:d1:78:3e:c7: 99:dc:65:93:c4:cf:fa:60:fb:84:e1:ad:c4:0c:66:a5:7f:a0: cc:39:64:21:5e:8d:e0:09:12:99:02:d5:89:15:ab:38:0e:68: 61:c3:6d:2d:80:34:d8:c1:4a:78:e6:70:19:86:e1:55:72:57: 8d:45:0c:9d:ab:87:e6:39:01:7c:19:b4:db:af:50:8d:d5:54: 23:e1:c1:b4:5b:7a:32:2b:dd:08:61:45:1a:6c:be:74:ba:8f: 8f:6e:0e:da:54:9b:1e:d9:af:3f:16:b7:b7:97:b9:f4:33:f6: 25:1a:b8:93:67:68:d3:e9:4f:63:af:5a:c7:0c:a2:77:7a:2b: 5c:5f:26:4a:77:0d:c1:28:83:36:0c:06:9d:7c:33:b2:b3:1d: 0d:75:96:2f:5f:d9:a6:a2:67:69:ad:46:13:12:23:19:89:ec: ab:06:60:63 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOnHdJsqFwYPmpxYSQ81cpSta4qIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjAzMDIwNjU4MTZaFw0yNjAzMDMwNzM5MTZaMDMxMTAvBgNV BAMTKDQ3NzVFNjA3QzFEQTgyREZBRjAxMDE3MUJFMTVEMkU4QkZENDQ3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDljQfqB+doeeFgvE1Hcv8NkkXz X51I1EjPsNkWHBtSQdgRiST7PHZ7/0XOdi4ut+m2lofjQWh+zk9WV+EoqZQctOxc xa0r8Y1O5JoGUJddcVxAEk0cpH0C3ibr+HWQPMsA10mq/z2W/fcQBrAEqxnaEaWp IUsCGSdyu3qyoo6KHKkaeA1SdR9N+xrlVh7G3mgmpKeM/jqQn4Ii1XLrQgjnwl6v 1g7Q2TRthrMSQ91IH/Jq0yi6ZdcjaMRyAxJRcC7sg5U79E4GGNZDlTUP2fZa+dLt I8mVR0ZHpcyCV0KyDQ0qDohksEctdXXUJsAGiS7GfsP4qzGxhrlmtEadFgYXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUR3XmB8Hagt+vAQFxvhXS6L/UR6MwHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ0ODc4MDkvMC9FQzlFMUM4NDBDODcw NUU3NTRDMkUzRkYzMkE0NEZCOUQ3ODEwMUQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/OgnG+sVg// TLpYgNFdbasZIXjR9dUbDdegniMyxhydsV4U8TQWmT4P/4UHDZ2gPntzJ7oxwyXc g+LlpeEw0uyP+QnAxSKxKPW9aN/Q8my1z9iebx7ReD7Hmdxlk8TP+mD7hOGtxAxm pX+gzDlkIV6N4AkSmQLViRWrOA5oYcNtLYA02MFKeOZwGYbhVXJXjUUMnauH5jkB fBm0269QjdVUI+HBtFt6MivdCGFFGmy+dLqPj24O2lSbHtmvPxa3t5e59DP2JRq4 k2do0+lPY69axwyid3orXF8mSncNwSiDNgwGnXwzsrMdDXWWL1/ZpqJnaa1GExIj GYnsqwZgYw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:23:02 2026 by rpki-client