$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft File: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft (raw, json) Hash identifier: 8FKfn03uqC0lIedAyr8m/AeW08mLrYqPiJzAcn4eyaw= Subject key identifier: 98:82:69:7A:FC:7B:97:85:F5:DC:88:0B:15:C2:D2:B3:13:D7:C0:86 Authority key identifier: 5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C Certificate issuer: /CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Certificate serial: 205FF570F9266F9B5A29418F9DA397F463319B8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 21:38:16 +0000 Manifest this update: Sun 01 Mar 2026 21:33:16 +0000 Manifest next update: Tue 03 Mar 2026 01:36:16 +0000 Files and hashes: 1: 5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl (hash: NMl3q+prTy6Srh6Phf+5eulfeiWgGNs7d0uhTckCoY8=) 2: 34352e3235352e3135322e302f32322d3232203d3e203633373139.roa (hash: 2lRS9oUNXcn70+ieKrNCACD47lQDpXznWCgoixy1F0E=) 3: 323430313a323738303a3a2f33322d3332203d3e203633373139.roa (hash: 2AwyfkAC/4Drijra8YbkKbKnJvVysEglKgRsuAWcqGo=) 4: 3130332e3233322e3134342e302f32322d3232203d3e203633373139.roa (hash: gWEyoD8i/KAG6HKTHIPr1VGYVw5fCMw/nA41X2XFLJQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 01:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5f:f5:70:f9:26:6f:9b:5a:29:41:8f:9d:a3:97:f4:63:31:9b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FF4C92D6AAB65FC205E3ED414AB92362344BA6C Validity Not Before: Mar 1 21:33:16 2026 GMT Not After : Mar 3 01:36:16 2026 GMT Subject: CN=9882697AFC7B9785F5DC880B15C2D2B313D7C086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:07:3d:b2:ef:f9:94:b6:bc:c4:a2:ad:e7: 23:cd:f0:7e:d8:08:98:13:e1:b5:84:d3:9c:16:e3: b7:9c:45:76:e4:fc:7a:02:04:d4:e0:c1:0c:4f:9f: 8a:83:46:57:f4:05:7c:7c:82:c6:e6:c0:fd:9b:84: c1:13:74:3d:4f:c8:1e:aa:3a:b8:6d:e7:6d:2d:70: c7:c8:67:c5:c5:d6:47:33:83:77:0d:e6:01:c7:fc: 4c:c5:6e:0e:75:7b:b4:2b:3a:20:25:5e:29:fa:d0: fd:0b:c1:a3:86:bc:d4:db:e3:56:9a:e4:28:b1:0d: 0d:79:64:30:f8:76:3d:ab:b4:2b:f3:65:fd:4d:8d: a6:eb:81:d8:8e:5c:f5:7a:3e:f7:c7:75:17:e9:6c: cf:61:58:83:c8:9e:44:36:74:1e:f9:4e:d8:bd:47: df:ce:3e:7a:89:12:6e:2c:85:e9:d6:45:1d:4f:2a: c7:bd:7d:3b:8e:1d:16:9f:70:57:82:ef:4a:29:b9: 06:6d:50:4c:a7:ac:05:e6:73:25:d5:10:88:8a:20: ab:62:ef:22:b8:23:e5:17:91:dc:68:22:1c:5d:ed: 6f:76:95:35:75:84:7f:e7:69:1d:a0:dc:ff:2e:08: 5a:a6:e2:93:af:41:e1:1e:35:81:b2:5b:b3:9a:41: 12:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:82:69:7A:FC:7B:97:85:F5:DC:88:0B:15:C2:D2:B3:13:D7:C0:86 X509v3 Authority Key Identifier: keyid:5F:F4:C9:2D:6A:AB:65:FC:20:5E:3E:D4:14:AB:92:36:23:44:BA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121625090/0/5FF4C92D6AAB65FC205E3ED414AB92362344BA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:92:90:e0:07:13:d9:a3:38:53:b3:9f:9b:e8:9c:8e:d6:a7: 12:c1:19:86:3a:34:cd:08:35:66:c0:a3:f1:66:62:91:b8:df: 72:d7:c9:cc:23:07:d6:fe:41:55:5f:41:77:c8:85:53:80:5f: 05:7c:b3:4a:7f:de:3a:b1:4b:16:82:66:8c:9e:d4:37:b6:87: 10:1a:b1:19:9c:6c:40:a4:c8:45:ca:1d:f2:bb:92:34:47:2f: 69:b3:22:33:db:51:c6:2c:4c:49:e4:79:80:29:a1:e3:b3:dc: 0e:08:d3:26:ba:5b:81:39:d5:56:07:03:b4:db:34:88:53:27: b6:48:63:e2:c5:8b:1c:18:a3:00:67:91:97:48:97:4e:ce:87: dd:20:ff:d0:b2:4c:8a:99:5c:3f:33:83:ce:e3:65:c3:75:ea: cc:a8:0d:da:be:cf:8d:43:d0:0c:3a:3e:99:33:80:c8:ed:43: 96:48:7f:77:6c:54:68:95:83:30:8a:87:85:7a:90:83:15:34: 74:32:e9:09:48:48:34:c4:38:b9:f4:e8:e9:4e:4e:44:a9:fb: b6:ac:d8:d1:73:e1:ff:31:bf:3e:61:b3:43:41:be:06:c2:e0: 80:7f:95:ac:29:51:77:65:d7:bf:b2:8b:dc:37:ce:a0:fc:36: 1b:ef:6b:eb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIF/1cPkmb5taKUGPnaOX9GMxm4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYy MzQ0QkE2QzAeFw0yNjAzMDEyMTMzMTZaFw0yNjAzMDMwMTM2MTZaMDMxMTAvBgNV BAMTKDk4ODI2OTdBRkM3Qjk3ODVGNURDODgwQjE1QzJEMkIzMTNEN0MwODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7wc9su/5lLa8xKKt5yPN8H7Y CJgT4bWE05wW47ecRXbk/HoCBNTgwQxPn4qDRlf0BXx8gsbmwP2bhMETdD1PyB6q Orht520tcMfIZ8XF1kczg3cN5gHH/EzFbg51e7QrOiAlXin60P0LwaOGvNTb41aa 5CixDQ15ZDD4dj2rtCvzZf1NjabrgdiOXPV6PvfHdRfpbM9hWIPInkQ2dB75Tti9 R9/OPnqJEm4shenWRR1PKse9fTuOHRafcFeC70opuQZtUEynrAXmcyXVEIiKIKti 7yK4I+UXkdxoIhxd7W92lTV1hH/naR2g3P8uCFqm4pOvQeEeNYGyW7OaQRIrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmIJpevx7l4X13IgLFcLSsxPXwIYwHwYDVR0j BBgwFoAUX/TJLWqrZfwgXj7UFKuSNiNEumwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTYyNTA5MC8wLzVGRjRDOTJENkFBQjY1RkMyMDVFM0VENDE0QUI5 MjM2MjM0NEJBNkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZGNEM5MkQ2QUFCNjVGQzIwNUUzRUQ0MTRBQjkyMzYyMzQ0QkE2Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2MjUwOTAvMC81RkY0QzkyRDZBQUI2 NUZDMjA1RTNFRDQxNEFCOTIzNjIzNDRCQTZDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJKQ4AcT2aM4 U7Ofm+icjtanEsEZhjo0zQg1ZsCj8WZikbjfctfJzCMH1v5BVV9Bd8iFU4BfBXyz Sn/eOrFLFoJmjJ7UN7aHEBqxGZxsQKTIRcod8ruSNEcvabMiM9tRxixMSeR5gCmh 47PcDgjTJrpbgTnVVgcDtNs0iFMntkhj4sWLHBijAGeRl0iXTs6H3SD/0LJMiplc PzODzuNlw3XqzKgN2r7PjUPQDDo+mTOAyO1Dlkh/d2xUaJWDMIqHhXqQgxU0dDLp CUhINMQ4ufTo6U5ORKn7tqzY0XPh/zG/PmGzQ0G+BsLggH+VrClRd2XXv7KL3DfO oPw2G+9r6w== -----END CERTIFICATE-----Generated at Mon Mar 2 17:34:59 2026 by rpki-client