$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft File: B1F9550677201454EB206CCFD059783FCDDB44F0.mft (raw, json) Hash identifier: Hb/MG3Oys4t8nc1DPWiE9mU9te5DiashtbJEnbrZZr0= Subject key identifier: ED:C2:04:E5:AD:0A:11:37:44:C5:A8:B6:8B:EE:EC:92:FD:10:C7:43 Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Certificate serial: 1CAB6FC9DF870259C83EA98C4EEB89F53C28963E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 21:18:16 +0000 Manifest this update: Sun 01 Mar 2026 21:13:16 +0000 Manifest next update: Mon 02 Mar 2026 22:54:16 +0000 Files and hashes: 1: B1F9550677201454EB206CCFD059783FCDDB44F0.crl (hash: Y35DfxbZOfe1keplBM4ChjvBYx1c+slwBJ3WD+sFGNo=) 2: 3130332e31392e3233322e302f32322d3232203d3e203632343638.roa (hash: FIyKRHnh6ANBsNFHBDZY9OW6prlllmKtfsx4VFw8aRA=) 3: 34352e3234382e382e302f32322d3232203d3e203632343638.roa (hash: PRQJYfAdJbDuylQLPpP0OmrWCtfzAtohw68L22CpuFQ=) 4: 34352e3234382e382e302f32322d3232203d3e20313333303333.roa (hash: qsctuPBSfA+Dx7b6pLOln9nnloiMUANcbyygIqgY4OQ=) 5: 34332e3235342e3139322e302f32322d3332203d3e20313333303333.roa (hash: r3XpPj1FYm8r25RMxCEfXoeyc9BUGQNJDYDBp+PrjQI=) 6: 3130332e31392e3233322e302f32322d3232203d3e20313333303333.roa (hash: 36wbu1SRDiLaujfYKA/iSyCAeDESkUTmIlUT9M35B30=) 7: 3130332e36302e3136342e302f32322d3232203d3e20313333303333.roa (hash: vvsbD3Qmkj+urJIzHpJtcmG8mKUbyHobxkx5+Svk+iM=) 8: 3130332e36302e3136342e302f32322d3232203d3e203632343638.roa (hash: auyuE2h/GPKANCvbz6Bw8Yi8e4eCZJDu9XTdgBKbank=) 9: 34332e3235342e3139322e302f32322d3332203d3e203632343638.roa (hash: bobpjRftY4EVuVK7RVubsSzMLbBd0b7awOTlrxaV/28=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 22:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ab:6f:c9:df:87:02:59:c8:3e:a9:8c:4e:eb:89:f5:3c:28:96:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0 Validity Not Before: Mar 1 21:13:16 2026 GMT Not After : Mar 2 22:54:16 2026 GMT Subject: CN=EDC204E5AD0A113744C5A8B68BEEEC92FD10C743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:1e:16:79:a6:e1:92:8e:4e:fe:73:f7:20: 3a:2d:6f:72:2d:96:f3:41:89:e0:a2:d1:63:ce:f4: 00:72:70:b1:af:60:ea:d6:e7:a4:c2:e3:83:7d:ab: 08:c8:ac:b3:cd:19:f7:a1:91:ee:b8:1a:24:57:9a: db:f9:78:c9:17:99:b8:63:db:40:86:80:22:80:ef: c7:4e:fa:42:81:86:fa:a0:f6:08:3f:cd:a4:96:ca: af:eb:4f:ef:40:44:51:69:97:ac:76:71:32:e2:fa: fe:53:2f:57:4f:3c:4c:ae:88:7a:31:6d:a7:c2:e4: 89:bd:d3:d3:34:d2:72:3f:66:45:ac:f5:1b:5c:10: 8b:6b:1a:cb:ab:4f:44:10:90:e7:44:15:f1:c7:88: 39:7a:7e:cf:53:40:39:5e:3d:12:3c:83:b0:21:df: ca:fb:c6:18:3f:dc:cd:37:54:fa:af:4a:64:46:d7: 09:fd:54:1a:a7:74:76:c3:60:51:8f:39:f8:ed:51: db:7b:3c:01:1b:e6:c7:9d:51:8c:4a:db:2e:04:ce: 8d:38:77:35:d9:95:d0:0d:1a:f0:ee:5a:b7:f9:4a: 29:fd:19:50:35:9f:2e:28:d7:44:18:0f:7e:06:21: 28:2f:ce:9b:5a:91:1a:08:97:62:98:30:56:57:fa: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C2:04:E5:AD:0A:11:37:44:C5:A8:B6:8B:EE:EC:92:FD:10:C7:43 X509v3 Authority Key Identifier: keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:13:f7:e9:f9:ec:db:74:20:9c:e0:db:ed:be:4d:d6:8e:c6: 90:1f:1f:1b:71:7d:ac:1e:34:ff:6e:cd:27:46:83:6b:88:5d: 0c:fe:4a:25:18:7f:3d:07:44:50:fc:30:61:ac:ff:e1:be:fe: 96:f1:16:48:e3:f8:37:14:06:06:6f:3c:f3:de:1c:ac:80:bf: 14:cc:fa:99:9d:d5:54:7f:e0:7d:0e:23:e6:d0:ac:ea:b0:4f: 55:50:ad:42:a0:2d:06:9e:f9:6b:fd:a8:0b:7a:fa:ec:a3:40: e4:9f:08:b2:93:cc:f8:aa:79:60:9e:4b:96:9f:42:f6:6a:23: bc:38:73:f8:a7:2f:5f:d1:2f:41:92:42:8c:ab:76:3a:58:a9: fc:26:0b:7b:fc:af:72:8b:7c:c4:08:ae:7e:40:04:f5:11:8d: 3a:aa:3f:c4:82:bc:ea:ef:14:32:77:35:58:6d:6c:47:5b:4f: 62:ee:f1:32:53:ac:79:bf:38:aa:a4:80:01:8b:02:96:7b:9c: 5e:4d:b9:87:7b:17:95:94:24:b6:4a:a4:8f:c8:32:6e:a2:86: e0:aa:d9:3d:90:31:b1:69:ce:e2:f3:b9:f8:57:3c:ae:04:7f: c7:d5:03:2e:e0:fa:05:5e:98:e3:6b:35:2e:91:6e:64:33:63: 34:58:54:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHKtvyd+HAlnIPqmMTuuJ9Twolj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD RERCNDRGMDAeFw0yNjAzMDEyMTEzMTZaFw0yNjAzMDIyMjU0MTZaMDMxMTAvBgNV BAMTKEVEQzIwNEU1QUQwQTExMzc0NEM1QThCNjhCRUVFQzkyRkQxMEM3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3kB4Weabhko5O/nP3IDotb3It lvNBieCi0WPO9ABycLGvYOrW56TC44N9qwjIrLPNGfehke64GiRXmtv5eMkXmbhj 20CGgCKA78dO+kKBhvqg9gg/zaSWyq/rT+9ARFFpl6x2cTLi+v5TL1dPPEyuiHox bafC5Im909M00nI/ZkWs9RtcEItrGsurT0QQkOdEFfHHiDl6fs9TQDlePRI8g7Ah 38r7xhg/3M03VPqvSmRG1wn9VBqndHbDYFGPOfjtUdt7PAEb5sedUYxK2y4Ezo04 dzXZldANGvDuWrf5Sin9GVA1ny4o10QYD34GISgvzptakRoIl2KYMFZX+hAdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7cIE5a0KETdExai2i+7skv0Qx0MwHwYDVR0j BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3 ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4MTU0ODkvMC9CMUY5NTUwNjc3MjAx NDU0RUIyMDZDQ0ZEMDU5NzgzRkNEREI0NEYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthP36fns23Qg nODb7b5N1o7GkB8fG3F9rB40/27NJ0aDa4hdDP5KJRh/PQdEUPwwYaz/4b7+lvEW SOP4NxQGBm88894crIC/FMz6mZ3VVH/gfQ4j5tCs6rBPVVCtQqAtBp75a/2oC3r6 7KNA5J8IspPM+Kp5YJ5Llp9C9mojvDhz+KcvX9EvQZJCjKt2Olip/CYLe/yvcot8 xAiufkAE9RGNOqo/xIK86u8UMnc1WG1sR1tPYu7xMlOseb84qqSAAYsClnucXk25 h3sXlZQktkqkj8gybqKG4KrZPZAxsWnO4vO5+Fc8rgR/x9UDLuD6BV6Y42s1LpFu ZDNjNFhUsA== -----END CERTIFICATE-----Generated at Mon Mar 2 07:23:45 2026 by rpki-client