$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft File: B8C15036932176BBE4E7217ED5772ACA3DB00427.mft (raw, json) Hash identifier: 0UjIAIhbtzh9n+S2qLObK9FJbz5Rc1nkR3gHHF7nO7w= Subject key identifier: BB:BE:6B:BE:DB:A1:FB:0D:DA:03:07:74:BE:8C:90:A9:5B:57:D6:4D Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 Certificate issuer: /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Certificate serial: 0D0FC50B6166857E141A4E9D268CDFE320E2170B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 03:28:16 +0000 Manifest this update: Mon 02 Mar 2026 03:23:16 +0000 Manifest next update: Tue 03 Mar 2026 05:30:16 +0000 Files and hashes: 1: 34332e3232342e3234302e302f32342d3234203d3e2034383038.roa (hash: VZdouybWTmMR/dD6/6+ICJKr/ZGHu6EZhyfCeNZnSRA=) 2: B8C15036932176BBE4E7217ED5772ACA3DB00427.crl (hash: sbweknXwDYdrtFDLXbtBHtKQbyA2/AaZq/xPdHflX1U=) 3: 3130332e34332e3234312e302f32342d3234203d3e2034383038.roa (hash: GzguvVAUN/QsRFgpZbpng5ljs24N7/shA4iD6/un6DY=) 4: 323430333a336438303a3a2f33322d3332203d3e203138343634.roa (hash: jmZoJtvNeF3nRBqm9mCIeeNh40ogUOoqJVCfZUbJjSw=) 5: 3130332e34332e3234302e302f32342d3234203d3e2034383038.roa (hash: /6V8/lHSdyOZ/qsg/Eu2PZkif0ZtiWnLcFDDZfE9+dU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0f:c5:0b:61:66:85:7e:14:1a:4e:9d:26:8c:df:e3:20:e2:17:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Validity Not Before: Mar 2 03:23:16 2026 GMT Not After : Mar 3 05:30:16 2026 GMT Subject: CN=BBBE6BBEDBA1FB0DDA030774BE8C90A95B57D64D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:36:30:85:ff:d1:1d:cf:3d:18:dd:c1:0e:cb: 6b:cd:54:a2:de:97:ee:a9:2a:41:4e:1f:02:22:dd: e8:01:45:03:da:f3:b8:85:25:7b:33:ad:94:f2:c5: 79:94:ad:67:df:22:14:eb:09:96:e6:a8:d9:86:61: 0a:be:26:f5:2f:3f:a2:2a:02:e1:9f:62:e3:06:1a: df:22:7f:20:e4:22:5c:86:2b:83:f6:83:4c:50:5e: 81:d5:b0:6b:f9:24:a6:28:82:52:3f:11:8d:00:28: dd:96:37:6d:25:17:57:bf:91:29:ac:97:5b:1e:09: 27:eb:3e:bd:40:e1:81:b7:f8:29:4b:7d:c6:6c:72: d5:e8:92:ae:8c:30:19:6a:58:f7:87:69:e7:7e:83: 72:8c:31:9b:76:6c:a6:00:67:c1:cf:bc:70:e1:2c: 70:fe:96:80:a8:88:05:db:22:61:06:5f:bc:d7:da: ce:3c:1e:c6:05:84:d0:3d:0c:e4:c3:a3:08:53:22: e6:b7:2e:bb:47:33:0c:19:7f:5c:f1:c9:86:a6:c8: 58:27:4c:a4:fe:87:ad:61:21:9a:f8:97:f0:3e:30: cb:a2:b8:31:a2:3a:e6:0e:5a:3b:10:d9:7d:46:23: d3:58:7c:3f:85:c2:01:11:be:3d:73:3d:5f:d3:3d: c7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BE:6B:BE:DB:A1:FB:0D:DA:03:07:74:BE:8C:90:A9:5B:57:D6:4D X509v3 Authority Key Identifier: keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:bf:24:e7:a4:86:69:d8:d1:fb:f0:47:0e:ef:ff:b5:24:6c: 57:36:ad:19:52:de:53:94:27:14:66:c5:62:ed:e2:9a:9c:7e: 56:83:a0:52:78:ba:28:e8:e3:c5:dd:b2:e3:19:5a:8a:5e:ad: 9c:28:40:58:62:f8:b7:29:3d:01:72:5e:5d:6c:c8:ee:70:6b: 7a:c3:9a:3a:b0:b4:bf:05:f5:f7:71:ce:f7:b4:a0:20:de:c2: 44:dd:84:99:a3:c6:af:ca:23:9f:31:e8:29:b3:c9:04:f5:41: 5c:74:ae:e7:63:f9:ed:71:39:64:e1:bf:9a:aa:5f:58:0d:a6: 0c:7c:fd:66:ba:38:19:61:20:aa:3e:51:7b:41:e9:48:6b:49: 64:ef:09:ee:ca:da:df:c5:10:51:14:82:a4:6c:62:08:7c:30: e7:05:e0:03:1c:8d:53:81:ec:42:5d:97:e3:b5:7d:cf:20:36: c3:8b:30:90:ec:8f:e2:0d:0a:05:fc:6f:4d:2e:a2:5f:79:78: ea:71:2e:51:a4:3b:d3:96:5f:d7:5a:2a:7c:76:9b:ca:3e:66: 2d:77:d5:3a:89:60:b7:ab:34:f3:09:e9:51:f3:39:dd:3c:ad: b7:50:1e:2a:64:ce:d5:7c:8e:0e:66:f1:02:4c:88:b2:1c:c2: 95:cb:97:6f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDQ/FC2FmhX4UGk6dJozf4yDiFwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0Ez REIwMDQyNzAeFw0yNjAzMDIwMzIzMTZaFw0yNjAzMDMwNTMwMTZaMDMxMTAvBgNV BAMTKEJCQkU2QkJFREJBMUZCMEREQTAzMDc3NEJFOEM5MEE5NUI1N0Q2NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTNjCF/9Edzz0Y3cEOy2vNVKLe l+6pKkFOHwIi3egBRQPa87iFJXszrZTyxXmUrWffIhTrCZbmqNmGYQq+JvUvP6Iq AuGfYuMGGt8ifyDkIlyGK4P2g0xQXoHVsGv5JKYoglI/EY0AKN2WN20lF1e/kSms l1seCSfrPr1A4YG3+ClLfcZsctXokq6MMBlqWPeHaed+g3KMMZt2bKYAZ8HPvHDh LHD+loCoiAXbImEGX7zX2s48HsYFhNA9DOTDowhTIua3LrtHMwwZf1zxyYamyFgn TKT+h61hIZr4l/A+MMuiuDGiOuYOWjsQ2X1GI9NYfD+FwgERvj1zPV/TPcc5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUu75rvtuh+w3aAwd0voyQqVtX1k0wHwYDVR0j BBgwFoAUuMFQNpMhdrvk5yF+1Xcqyj2wBCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTY5MDYyNi8wL0I4QzE1MDM2OTMyMTc2QkJFNEU3MjE3RUQ1Nzcy QUNBM0RCMDA0MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0EzREIwMDQyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE2OTA2MjYvMC9COEMxNTAzNjkzMjE3 NkJCRTRFNzIxN0VENTc3MkFDQTNEQjAwNDI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfr8k56SGadjR +/BHDu//tSRsVzatGVLeU5QnFGbFYu3impx+VoOgUni6KOjjxd2y4xlail6tnChA WGL4tyk9AXJeXWzI7nBresOaOrC0vwX193HO97SgIN7CRN2EmaPGr8ojnzHoKbPJ BPVBXHSu52P57XE5ZOG/mqpfWA2mDHz9Zro4GWEgqj5Re0HpSGtJZO8J7sra38UQ URSCpGxiCHww5wXgAxyNU4HsQl2X47V9zyA2w4swkOyP4g0KBfxvTS6iX3l46nEu UaQ705Zf11oqfHabyj5mLXfVOolgt6s08wnpUfM53Tytt1AeKmTO1XyODmbxAkyI shzClcuXbw== -----END CERTIFICATE-----Generated at Mon Mar 2 09:28:03 2026 by rpki-client