$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft File: 4F94A5F36F866F21180775DFFF3827990F956B62.mft (raw, json) Hash identifier: nrPcqtU3XY07ID4kc7wJ77porEQNJayNw10yvw61SYY= Subject key identifier: 52:A2:53:7E:BC:36:69:B5:AB:0C:EC:59:9E:9C:4F:80:8E:66:0E:D5 Authority key identifier: 4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62 Certificate issuer: /CN=4F94A5F36F866F21180775DFFF3827990F956B62 Certificate serial: 697028CA11794F5C0AF4AAA5D79CE2D4F09852E3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 09:28:17 +0000 Manifest this update: Mon 02 Mar 2026 09:23:17 +0000 Manifest next update: Tue 03 Mar 2026 09:43:17 +0000 Files and hashes: 1: 34392e35312e3136302e302f32302d3234203d3e20313332323033.roa (hash: PB0JB14Q+SPXSqFDSxMJHnR1t3Bc1PbzBDzUhbGN6og=) 2: 34392e35312e3132382e302f31392d3234203d3e20313332323033.roa (hash: zKOA0n66BU+SoiPBnug1At88IlANvpPXbu8zTTSrK+E=) 3: 3137352e3137382e302e302f31362d3234203d3e203435303930.roa (hash: otXE+GqI4j/mppm9d8nW5lPCUPLmlpxn4TaFwv6GbIo=) 4: 4F94A5F36F866F21180775DFFF3827990F956B62.crl (hash: xWpfOhzjrpWsyAP2TrpvPNFwHQutUYHim7Bj8mIMEOc=) 5: 3131392e32382e3136342e302f32342d3234203d3e20313332323033.roa (hash: 0Z+dIKQTaqtzNcJSDxsCOL6c/ypiLtMJz6U/VQ3ohxU=) 6: 34392e35312e3134362e302f32332d3234203d3e20313332323033.roa (hash: uIV/dmn3TVHh2QVgkyPZUpUMRN5xFb2AeTCQlqGyDio=) 7: 3131392e32382e3136352e302f32342d3234203d3e20313332323033.roa (hash: j0RqjBq8wrjomiyuSOQR78fWeXiufJocLW2SuMQDVQE=) 8: 3132342e3232302e302e302f31342d3234203d3e203435303930.roa (hash: lmPbNRtj+ouq09Px6mN22kmiy8QTEZ2MlJjaiOQc3b4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:70:28:ca:11:79:4f:5c:0a:f4:aa:a5:d7:9c:e2:d4:f0:98:52:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F94A5F36F866F21180775DFFF3827990F956B62 Validity Not Before: Mar 2 09:23:17 2026 GMT Not After : Mar 3 09:43:17 2026 GMT Subject: CN=52A2537EBC3669B5AB0CEC599E9C4F808E660ED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:94:47:28:88:54:9c:75:ae:8e:93:9b:87: d0:ac:38:0f:6e:2d:56:00:ba:a7:bf:5d:56:3a:ad: 31:37:a5:ae:ab:98:a7:dc:ee:28:78:6d:08:1f:56: d0:dd:d9:88:15:83:f4:3b:01:40:5e:1a:5d:d7:8f: 98:bb:c2:e9:c2:d9:6f:7d:31:fc:0a:08:86:a7:85: 54:63:4c:29:7b:91:ba:80:5a:f3:50:62:3b:c9:f2: 33:a4:1e:03:c4:a5:31:b1:75:ff:50:d5:ed:f2:4a: e7:c1:1e:90:7a:c5:1e:dc:df:0a:f3:09:7f:32:79: 5c:c8:52:01:4e:98:93:29:9d:8d:b8:3d:d9:49:5e: 83:98:f3:b5:de:33:00:6a:33:a0:16:b1:ea:bf:c5: c1:fa:ac:e7:d6:54:53:b9:e7:fe:a4:97:05:bc:56: bd:d1:10:1d:21:b7:55:b4:da:45:31:f1:f2:c5:5c: 9b:01:61:66:ce:4c:8f:99:ea:87:29:bb:bb:20:b4: 4a:dd:78:c2:38:db:b6:ab:2e:3b:62:78:ca:7f:c8: da:3c:eb:b9:54:2a:ca:9a:32:21:cb:c4:3a:f1:f4: d1:2d:72:54:42:93:1b:7b:74:04:f0:6d:a2:6f:55: 32:d5:90:64:d0:fc:57:25:97:81:b2:0a:4f:74:50: 85:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A2:53:7E:BC:36:69:B5:AB:0C:EC:59:9E:9C:4F:80:8E:66:0E:D5 X509v3 Authority Key Identifier: keyid:4F:94:A5:F3:6F:86:6F:21:18:07:75:DF:FF:38:27:99:0F:95:6B:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4F94A5F36F866F21180775DFFF3827990F956B62.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/0/4F94A5F36F866F21180775DFFF3827990F956B62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:11:70:1b:c9:2d:fd:d4:cf:49:ab:0b:ba:e0:77:dc:10:b5: 60:2d:9b:2a:a8:d3:9a:c6:be:ba:99:20:a0:f6:87:e5:1a:06: f4:bf:c6:07:d3:ed:67:4f:31:9d:3f:6a:34:97:0c:b1:1f:7c: 91:00:9d:e8:d4:e7:ac:6b:0a:cd:cc:74:57:94:9f:23:71:a2: be:c7:de:77:95:26:b9:b3:29:14:8d:d6:8c:28:dd:6c:51:85: b8:71:bb:59:5f:2c:dc:7e:18:7e:5c:15:2f:d4:1b:8d:94:42: 1b:d4:cb:8f:16:ce:da:ae:68:e8:85:fc:e1:3b:0d:24:2d:93: 47:eb:04:1b:10:7e:69:d8:17:50:65:43:87:51:9b:c9:bc:59: 5d:5d:92:47:db:87:97:1b:91:e0:20:6d:73:ae:60:03:1e:d0: 02:b8:03:3e:b2:0f:6a:c9:4d:61:04:a2:8d:01:51:2a:94:b4: 74:14:8b:8b:5e:27:e0:0e:8d:21:3e:98:00:7a:c5:07:68:5c: e4:73:f0:39:c7:15:dc:36:cc:b8:a0:7d:e0:e8:6b:50:0c:a2: 61:40:02:cd:f6:51:a6:ad:c9:6d:1b:f4:38:7d:c4:98:f6:74: f2:25:97:d6:c5:19:e8:e7:39:82:db:1f:97:e6:f4:5a:09:2b: 05:5f:fb:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaXAoyhF5T1wK9Kql15zi1PCYUuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkw Rjk1NkI2MjAeFw0yNjAzMDIwOTIzMTdaFw0yNjAzMDMwOTQzMTdaMDMxMTAvBgNV BAMTKDUyQTI1MzdFQkMzNjY5QjVBQjBDRUM1OTlFOUM0RjgwOEU2NjBFRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwX5RHKIhUnHWujpObh9CsOA9u LVYAuqe/XVY6rTE3pa6rmKfc7ih4bQgfVtDd2YgVg/Q7AUBeGl3Xj5i7wunC2W99 MfwKCIanhVRjTCl7kbqAWvNQYjvJ8jOkHgPEpTGxdf9Q1e3ySufBHpB6xR7c3wrz CX8yeVzIUgFOmJMpnY24PdlJXoOY87XeMwBqM6AWseq/xcH6rOfWVFO55/6klwW8 Vr3REB0ht1W02kUx8fLFXJsBYWbOTI+Z6ocpu7sgtErdeMI427arLjtieMp/yNo8 67lUKsqaMiHLxDrx9NEtclRCkxt7dATwbaJvVTLVkGTQ/Fcll4GyCk90UIXTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUqJTfrw2abWrDOxZnpxPgI5mDtUwHwYDVR0j BBgwFoAUT5Sl82+GbyEYB3Xf/zgnmQ+Va2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8wLzRGOTRBNUYzNkY4NjZGMjExODA3NzVERkZGMzgy Nzk5MEY5NTZCNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEY5NEE1RjM2Rjg2NkYyMTE4MDc3NURGRkYzODI3OTkwRjk1NkI2Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMC80Rjk0QTVGMzZGODY2 RjIxMTgwNzc1REZGRjM4Mjc5OTBGOTU2QjYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBFwG8kt/dTP SasLuuB33BC1YC2bKqjTmsa+upkgoPaH5RoG9L/GB9PtZ08xnT9qNJcMsR98kQCd 6NTnrGsKzcx0V5SfI3Givsfed5UmubMpFI3WjCjdbFGFuHG7WV8s3H4YflwVL9Qb jZRCG9TLjxbO2q5o6IX84TsNJC2TR+sEGxB+adgXUGVDh1GbybxZXV2SR9uHlxuR 4CBtc65gAx7QArgDPrIPaslNYQSijQFRKpS0dBSLi14n4A6NIT6YAHrFB2hc5HPw OccV3DbMuKB94OhrUAyiYUACzfZRpq3JbRv0OH3EmPZ08iWX1sUZ6Oc5gtsfl+b0 WgkrBV/7kw== -----END CERTIFICATE-----Generated at Mon Mar 2 15:46:37 2026 by rpki-client