$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft File: 9B87DFEBDCCDA813116988D4421B088404578168.mft (raw, json) Hash identifier: 6n5OJDW0i3PcsDv2BGWZaZsKES59MJsEW/3/1CmDIos= Subject key identifier: 09:B3:B9:2B:3A:6F:C9:02:97:41:16:B1:4C:C2:E9:08:96:3B:97:83 Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168 Certificate serial: 7C608AFDA3DBC2864292D9A1B2073C7FCF71C187 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 22:13:16 +0000 Manifest this update: Sun 01 Mar 2026 22:08:16 +0000 Manifest next update: Mon 02 Mar 2026 23:33:16 +0000 Files and hashes: 1: 9B87DFEBDCCDA813116988D4421B088404578168.crl (hash: cFqMPAiFv385fpyRPBfUs6lzRp/yJBZz58Wdanzx2iE=) 2: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (hash: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg=) 3: 34352e3131362e39362e302f32322d3232203d3e20313439363238.roa (hash: aWgeDjinqxghP2O9gm5Jstjm/o8V7VlFXar3hlRu/AE=) 4: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (hash: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 23:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:60:8a:fd:a3:db:c2:86:42:92:d9:a1:b2:07:3c:7f:cf:71:c1:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168 Validity Not Before: Mar 1 22:08:16 2026 GMT Not After : Mar 2 23:33:16 2026 GMT Subject: CN=09B3B92B3A6FC902974116B14CC2E908963B9783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:04:ec:2a:05:7f:07:72:45:2d:f7:eb:6a:fb: 39:96:f7:df:14:bb:eb:24:d1:a8:e2:ee:b1:bf:ef: 27:84:79:1a:21:76:aa:f4:dd:4a:6f:42:92:d4:66: bc:10:cd:25:30:33:c0:bf:78:69:68:30:41:71:6a: 89:b3:03:a8:de:58:a0:fe:03:d3:1d:8f:5f:28:12: 6f:e1:3a:a7:09:58:8b:a4:8a:c6:f2:f7:d4:d4:9f: 65:e7:a4:95:85:5d:f9:b2:c1:74:e3:55:24:a6:c5: 5e:b6:c0:9e:a1:ee:5e:b8:cd:3d:f8:f1:a7:a2:a9: 7c:03:a1:3d:95:1b:9d:b1:0c:9d:cd:4e:9f:b9:aa: b1:ef:3f:71:ac:ce:cf:9b:ae:73:f2:fd:83:8d:4f: 31:99:21:13:03:13:29:31:56:04:46:a5:a8:f5:46: a8:ea:2e:7b:fb:4b:65:31:1a:44:50:4a:2b:8b:11: f1:af:63:91:19:6d:c8:4a:ec:9d:1b:ee:7a:87:66: ab:dc:89:c4:ae:9a:99:9b:2e:ad:32:c9:4d:0a:9a: 9c:a9:49:ca:bc:be:6e:16:0b:87:a7:a4:76:8a:d2: 6e:0f:71:f6:b5:7f:34:9e:ae:e1:33:13:1b:ee:ae: 45:4f:fd:51:1e:b0:a4:1d:16:2a:05:e2:54:a7:3d: 96:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B3:B9:2B:3A:6F:C9:02:97:41:16:B1:4C:C2:E9:08:96:3B:97:83 X509v3 Authority Key Identifier: keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:00:db:78:3d:fe:be:6b:75:8c:96:3b:12:34:a7:68:c7:8e: 1f:d3:5b:cc:79:ce:3a:c1:66:00:f9:d0:b8:27:4b:93:75:3c: 9e:32:5d:12:a6:e8:1c:14:1e:75:14:ac:94:e2:3b:be:d6:12: 6b:7a:a6:83:b1:73:96:39:24:ee:6f:f8:be:98:33:14:04:ec: b6:58:21:74:5d:cb:53:02:d8:73:85:6b:88:84:74:50:32:c8: e1:ab:8d:32:ce:e0:41:0b:75:f1:26:ca:f8:b8:25:1b:36:db: 07:a0:d2:06:fa:37:65:4b:fb:7d:ed:7b:01:66:d6:5f:ce:2e: 44:c7:f9:b7:ed:77:e6:b7:1b:67:ea:56:b1:59:f3:ee:e9:90: 66:de:89:23:c7:95:e6:d8:98:b1:74:dc:d1:87:ab:86:88:6d: ce:0e:20:e2:97:16:b4:98:37:8b:4d:b0:9a:98:08:e7:ba:9c: 1a:51:a2:32:f6:2d:8d:65:ec:ae:75:ad:0a:55:ca:1f:d3:9d: 94:14:55:62:23:22:50:70:0d:14:43:51:31:bc:99:e0:5f:e4: ae:a0:8a:33:d6:ff:08:7e:e5:90:d2:8e:b7:3f:96:3e:8e:99: 34:e3:3c:50:d9:81:b8:17:70:ab:a2:94:32:dd:10:66:90:f2: ad:e2:13:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfGCK/aPbwoZCktmhsgc8f89xwYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQw NDU3ODE2ODAeFw0yNjAzMDEyMjA4MTZaFw0yNjAzMDIyMzMzMTZaMDMxMTAvBgNV BAMTKDA5QjNCOTJCM0E2RkM5MDI5NzQxMTZCMTRDQzJFOTA4OTYzQjk3ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiBOwqBX8HckUt9+tq+zmW998U u+sk0aji7rG/7yeEeRohdqr03UpvQpLUZrwQzSUwM8C/eGloMEFxaomzA6jeWKD+ A9Mdj18oEm/hOqcJWIukisby99TUn2XnpJWFXfmywXTjVSSmxV62wJ6h7l64zT34 8aeiqXwDoT2VG52xDJ3NTp+5qrHvP3Gszs+brnPy/YONTzGZIRMDEykxVgRGpaj1 RqjqLnv7S2UxGkRQSiuLEfGvY5EZbchK7J0b7nqHZqvcicSumpmbLq0yyU0Kmpyp Scq8vm4WC4enpHaK0m4Pcfa1fzSeruEzExvurkVP/VEesKQdFioF4lSnPZbzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCbO5KzpvyQKXQRaxTMLpCJY7l4MwHwYDVR0j BBgwFoAUm4ff69zNqBMRaYjUQhsIhARXgWgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDc0OTk1My8wLzlCODdERkVCRENDREE4MTMxMTY5ODhENDQyMUIw ODg0MDQ1NzgxNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ3NDk5NTMvMC85Qjg3REZFQkRDQ0RB ODEzMTE2OTg4RDQ0MjFCMDg4NDA0NTc4MTY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgDbeD3+vmt1 jJY7EjSnaMeOH9NbzHnOOsFmAPnQuCdLk3U8njJdEqboHBQedRSslOI7vtYSa3qm g7Fzljkk7m/4vpgzFATstlghdF3LUwLYc4VriIR0UDLI4auNMs7gQQt18SbK+Lgl GzbbB6DSBvo3ZUv7fe17AWbWX84uRMf5t+135rcbZ+pWsVnz7umQZt6JI8eV5tiY sXTc0Yerhohtzg4g4pcWtJg3i02wmpgI57qcGlGiMvYtjWXsrnWtClXKH9OdlBRV YiMiUHANFENRMbyZ4F/krqCKM9b/CH7lkNKOtz+WPo6ZNOM8UNmBuBdwq6KUMt0Q ZpDyreITJw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:39:49 2026 by rpki-client