$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft File: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft (raw, json) Hash identifier: 7nGJHsEmwktpL0f6FzJ3TI9DWFlNpzzrg3Zznm5Yz/E= Subject key identifier: 82:9B:6A:3A:D0:7E:B4:74:67:E5:08:93:0B:EC:E2:56:ED:63:7C:04 Authority key identifier: 79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF Certificate issuer: /CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF Certificate serial: 64862517034024ADB54A643CAD8692DD2BFF6C47 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 14:28:17 +0000 Manifest this update: Mon 02 Mar 2026 14:23:17 +0000 Manifest next update: Tue 03 Mar 2026 16:40:17 +0000 Files and hashes: 1: 79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl (hash: k8kCa98QPgNsDMnHPatfAOvxlotIHBb9n3t+ejOaNao=) 2: 3130332e392e3130382e302f32322d3234203d3e20313531323936.roa (hash: u9TH7kS6NsN1y7YmlOW0ie+K8ZWX9sGtjrQcgOMa7ns=) 3: 323430363a383838303a3a2f33322d3438203d3e20313531323936.roa (hash: 6jkJHvaNfJJtutlBO8hSVpCzbKvz9/2EnreSyJOv8js=) 4: 3138302e3231302e3231322e302f32322d3234203d3e20313531323936.roa (hash: kkm/8CDZqODXpO/QeXBWBwDLwQw2WYXyUBGvuF12C1I=) 5: 3130332e392e32342e302f32322d3234203d3e20313531323936.roa (hash: tYibZuj8OEdbI/Q3XU9CgQa43up3w/0XZUPoQrVWfiI=) 6: 3130332e37312e36382e302f32322d3234203d3e20313531323936.roa (hash: jQm71q4usHyZ9nJvSyXcTJ5XN9QvxSzUc33cqUIvKFA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:86:25:17:03:40:24:ad:b5:4a:64:3c:ad:86:92:dd:2b:ff:6c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79ACCAD4491529EDA38170F34A5884D2A0F432BF Validity Not Before: Mar 2 14:23:17 2026 GMT Not After : Mar 3 16:40:17 2026 GMT Subject: CN=829B6A3AD07EB47467E508930BECE256ED637C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d0:48:c0:87:dc:40:94:eb:21:8a:7e:d7:08: c3:d4:ed:2d:1f:64:a4:af:04:53:66:f0:5a:2f:83: 74:de:84:85:ab:ff:a2:17:70:78:ac:ec:3c:fe:15: 59:0a:09:f6:3d:95:7c:64:f3:12:cb:33:46:47:08: ed:2f:cd:49:f9:2d:cf:df:c8:87:24:b0:3f:de:01: 35:d6:c3:37:5f:a7:59:82:ac:56:b7:d0:e0:cb:5c: ea:f5:b0:70:0e:04:5f:24:ed:9e:61:7e:8e:be:b3: 16:14:d8:e1:49:9d:1b:07:39:c4:f1:3c:57:9a:e0: ca:0d:49:01:2e:80:6a:21:32:a1:06:3a:5f:37:14: ea:07:c8:e0:1a:35:4a:a3:f9:59:ef:67:37:fb:46: 1d:ca:a7:78:b3:4b:e5:1e:f8:10:24:88:8e:70:86: a7:f1:68:66:e8:4a:23:9c:98:c9:b9:9a:06:7d:01: 8e:d1:b3:7e:75:2a:72:28:1e:8a:49:dc:68:c8:97: d3:c8:29:26:94:19:fb:ff:b5:3a:68:7d:11:cf:fc: 7b:df:db:c1:f8:e5:74:36:1b:da:a5:50:20:1f:1a: d2:4e:0a:d2:79:70:8a:dc:4f:c1:f5:16:a0:5c:99: 7b:0f:db:a6:46:52:9a:6d:81:d2:dc:12:89:29:6f: c7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:9B:6A:3A:D0:7E:B4:74:67:E5:08:93:0B:EC:E2:56:ED:63:7C:04 X509v3 Authority Key Identifier: keyid:79:AC:CA:D4:49:15:29:ED:A3:81:70:F3:4A:58:84:D2:A0:F4:32:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79ACCAD4491529EDA38170F34A5884D2A0F432BF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714881025/0/79ACCAD4491529EDA38170F34A5884D2A0F432BF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:66:e5:58:01:0e:6b:28:57:38:6e:1b:4d:fe:97:7b:e0:55: d9:50:00:79:c2:bc:c3:54:95:0a:ff:00:64:21:f8:50:12:cd: 86:d2:e6:d4:b8:52:5e:27:fc:fb:95:7e:07:73:5c:f8:aa:9c: 7c:b0:d7:ea:1e:d6:e7:85:28:45:30:ce:cb:37:57:e6:f0:89: 37:ab:7e:d6:c5:78:aa:e2:17:25:c2:6d:26:cb:fb:6a:44:ea: 9b:31:32:a9:6c:26:10:ba:4c:66:d7:b8:04:de:24:05:32:23: 05:4d:2f:c2:db:b8:70:3f:7f:a3:c7:31:07:7d:6e:fc:0b:f0: c0:ff:a9:d7:8b:ce:5c:26:94:a1:ee:51:d6:71:30:98:ff:2a: e8:72:a6:86:3b:db:8b:66:90:d8:8a:49:e9:47:34:36:92:04: aa:1f:c5:8f:38:92:cb:18:10:e6:38:be:04:ea:a0:7e:a1:1c: 75:8d:5d:27:00:91:1b:6d:4e:0c:12:c3:04:44:6b:19:ef:a4: 22:90:f6:08:28:76:85:6e:d1:3b:db:5e:c2:b3:8d:86:3a:7b: 0e:9e:0c:24:6f:e8:30:8b:50:ea:b1:14:ea:b6:49:49:d5:12: 89:c3:4a:55:a9:b9:67:36:80:6f:8e:59:5b:9c:10:30:0e:38: 53:2a:95:59 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZIYlFwNAJK21SmQ8rYaS3Sv/bEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJB MEY0MzJCRjAeFw0yNjAzMDIxNDIzMTdaFw0yNjAzMDMxNjQwMTdaMDMxMTAvBgNV BAMTKDgyOUI2QTNBRDA3RUI0NzQ2N0U1MDg5MzBCRUNFMjU2RUQ2MzdDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60EjAh9xAlOshin7XCMPU7S0f ZKSvBFNm8Fovg3TehIWr/6IXcHis7Dz+FVkKCfY9lXxk8xLLM0ZHCO0vzUn5Lc/f yIcksD/eATXWwzdfp1mCrFa30ODLXOr1sHAOBF8k7Z5hfo6+sxYU2OFJnRsHOcTx PFea4MoNSQEugGohMqEGOl83FOoHyOAaNUqj+VnvZzf7Rh3Kp3izS+Ue+BAkiI5w hqfxaGboSiOcmMm5mgZ9AY7Rs351KnIoHopJ3GjIl9PIKSaUGfv/tTpofRHP/Hvf 28H45XQ2G9qlUCAfGtJOCtJ5cIrcT8H1FqBcmXsP26ZGUpptgdLcEokpb8eFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgptqOtB+tHRn5QiTC+ziVu1jfAQwHwYDVR0j BBgwFoAUeazK1EkVKe2jgXDzSliE0qD0Mr8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDg4MTAyNS8wLzc5QUNDQUQ0NDkxNTI5RURBMzgxNzBGMzRBNTg4 NEQyQTBGNDMyQkYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzlBQ0NBRDQ0OTE1MjlFREEzODE3MEYzNEE1ODg0RDJBMEY0MzJCRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4ODEwMjUvMC83OUFDQ0FENDQ5MTUy OUVEQTM4MTcwRjM0QTU4ODREMkEwRjQzMkJGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmblWAEOayhX OG4bTf6Xe+BV2VAAecK8w1SVCv8AZCH4UBLNhtLm1LhSXif8+5V+B3Nc+KqcfLDX 6h7W54UoRTDOyzdX5vCJN6t+1sV4quIXJcJtJsv7akTqmzEyqWwmELpMZte4BN4k BTIjBU0vwtu4cD9/o8cxB31u/AvwwP+p14vOXCaUoe5R1nEwmP8q6HKmhjvbi2aQ 2IpJ6Uc0NpIEqh/FjziSyxgQ5ji+BOqgfqEcdY1dJwCRG21ODBLDBERrGe+kIpD2 CCh2hW7RO9tewrONhjp7Dp4MJG/oMItQ6rEU6rZJSdUSicNKVam5ZzaAb45ZW5wQ MA44UyqVWQ== -----END CERTIFICATE-----Generated at Mon Mar 2 18:31:55 2026 by rpki-client