$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft File: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft (raw, json) Hash identifier: 1aJvcvoZpy0pdbmK77Ufw7ouv0xvY/H7N1OJnP9PFEM= Subject key identifier: B2:AF:59:46:9F:34:04:B6:D6:46:DF:1F:55:78:81:57:6B:69:5D:FB Authority key identifier: 7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 Certificate issuer: /CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Certificate serial: 295C9E046838CCC62BFBA636ACB13823D0920FE1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 10:23:17 +0000 Manifest this update: Mon 02 Mar 2026 10:18:17 +0000 Manifest next update: Tue 03 Mar 2026 13:25:17 +0000 Files and hashes: 1: 3130332e37322e3132302e302f32322d3234203d3e20313331343832.roa (hash: ctGGCNq4nRpYgra1wDvw66bj18SIbAYdwHOIE8r5oyw=) 2: 3130332e37322e3132302e302f32322d3234203d3e20333938373034.roa (hash: RrCPvhZU9IZKK5cS9lkHdr/2eu5Y2sHNnCawIrSLmN8=) 3: 3130332e37322e3132302e302f32322d3234203d3e20313331353330.roa (hash: 2ziNEvn3V2HFQD2ci6SlBfEpeWgS1+0+rWoj5oXkfL4=) 4: 7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl (hash: Too5r4MsKZGjOjwosGfbzZvqyZCjUoRhp8ozCjIlQGY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5c:9e:04:68:38:cc:c6:2b:fb:a6:36:ac:b1:38:23:d0:92:0f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F08B8DC6E267E8B159C15F2F20AB10B347C7A20 Validity Not Before: Mar 2 10:18:17 2026 GMT Not After : Mar 3 13:25:17 2026 GMT Subject: CN=B2AF59469F3404B6D646DF1F557881576B695DFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7e:ce:75:60:06:34:47:4a:f6:9a:a0:b9:fb: 23:48:a7:08:fa:36:bf:d2:2d:6d:01:11:84:71:b4: 9c:e3:a7:7c:5a:9a:15:f8:bf:56:40:0f:91:fb:1a: 4c:ea:8d:92:b1:f0:36:fa:e9:a8:cf:61:90:aa:fb: 3c:c0:f2:fa:dd:1b:88:5d:4f:da:8c:b2:81:ea:6c: 4a:8b:e8:b5:25:b3:d4:a1:fd:1f:b4:35:42:80:6e: 2c:b0:63:b5:1b:55:1b:ae:13:67:98:fc:41:df:95: 97:78:65:4a:36:55:a8:a2:67:27:76:76:7c:f8:b9: fa:17:77:1e:f2:77:5e:c9:bc:94:f4:30:d9:d2:52: d4:61:5e:84:61:b2:3a:f8:3b:9f:64:49:87:ae:cc: a9:9a:2e:cc:7f:07:48:13:ed:65:10:59:f9:23:01: 82:d4:c7:c6:80:f3:79:c5:6a:e9:e8:25:5f:e2:e1: 03:e0:0b:34:06:e1:80:3f:2b:21:e3:17:d5:92:b7: 6d:83:f5:6d:e2:5a:ff:1c:ee:58:f2:95:3f:cd:da: 1d:2b:e4:48:f6:29:f3:12:5b:f8:f3:1c:aa:d3:67: 71:51:30:bc:7a:57:e6:4c:73:56:a7:fd:27:95:df: f6:d1:1e:fc:f0:a4:16:73:af:1b:26:92:06:c8:f8: a2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AF:59:46:9F:34:04:B6:D6:46:DF:1F:55:78:81:57:6B:69:5D:FB X509v3 Authority Key Identifier: keyid:7F:08:B8:DC:6E:26:7E:8B:15:9C:15:F2:F2:0A:B1:0B:34:7C:7A:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346733569/0/7F08B8DC6E267E8B159C15F2F20AB10B347C7A20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:cf:de:0f:ea:5a:dd:e2:1e:49:27:92:1c:52:4b:75:86:cf: dd:bd:7e:02:5e:45:8c:3e:35:41:13:d5:3c:67:28:60:68:70: 4d:bc:ed:1c:ed:4f:9a:d7:a2:20:51:64:5f:03:eb:d7:9c:9f: d4:5a:24:15:c5:1d:56:5a:80:40:38:ce:a0:43:ac:01:b4:4b: be:f5:a2:b5:56:3b:8d:1e:b9:d8:90:d2:5b:a8:12:5e:79:74: 82:d1:83:00:19:ac:b0:95:04:55:f7:ab:48:10:b7:ff:c6:eb: d6:91:02:05:6f:ad:5d:c1:00:e5:25:af:c0:9d:d8:6e:e2:76: 20:7e:69:9f:8a:75:5e:f1:7a:76:05:67:14:f9:54:f6:a0:40: bd:58:49:13:c5:8b:8f:31:e1:86:f4:43:0b:1a:ff:a3:f9:6b: a4:dd:5a:f6:84:77:f6:15:2a:c9:53:e1:74:a6:44:0f:a7:be: b8:2b:03:2b:e3:2e:c6:29:31:9d:b9:ab:d8:5f:c0:8c:01:e4: 7c:b8:e9:19:bc:e3:f0:aa:cd:86:8a:4d:49:8d:f7:44:82:c1: 99:88:02:57:78:54:7d:d6:85:02:3c:ca:04:09:61:57:79:bb: 93:35:45:60:f7:2c:f2:67:0a:75:6d:69:b2:71:00:4f:ea:0f: 9b:cb:69:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKVyeBGg4zMYr+6Y2rLE4I9CSD+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIz NDdDN0EyMDAeFw0yNjAzMDIxMDE4MTdaFw0yNjAzMDMxMzI1MTdaMDMxMTAvBgNV BAMTKEIyQUY1OTQ2OUYzNDA0QjZENjQ2REYxRjU1Nzg4MTU3NkI2OTVERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMfs51YAY0R0r2mqC5+yNIpwj6 Nr/SLW0BEYRxtJzjp3xamhX4v1ZAD5H7GkzqjZKx8Db66ajPYZCq+zzA8vrdG4hd T9qMsoHqbEqL6LUls9Sh/R+0NUKAbiywY7UbVRuuE2eY/EHflZd4ZUo2VaiiZyd2 dnz4ufoXdx7yd17JvJT0MNnSUtRhXoRhsjr4O59kSYeuzKmaLsx/B0gT7WUQWfkj AYLUx8aA83nFaunoJV/i4QPgCzQG4YA/KyHjF9WSt22D9W3iWv8c7ljylT/N2h0r 5Ej2KfMSW/jzHKrTZ3FRMLx6V+ZMc1an/SeV3/bRHvzwpBZzrxsmkgbI+KK5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsq9ZRp80BLbWRt8fVXiBV2tpXfswHwYDVR0j BBgwFoAUfwi43G4mfosVnBXy8gqxCzR8eiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NjczMzU2OS8wLzdGMDhCOERDNkUyNjdFOEIxNTlDMTVGMkYyMEFC MTBCMzQ3QzdBMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwOEI4REM2RTI2N0U4QjE1OUMxNUYyRjIwQUIxMEIzNDdDN0EyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3MzM1NjkvMC83RjA4QjhEQzZFMjY3 RThCMTU5QzE1RjJGMjBBQjEwQjM0N0M3QTIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlM/eD+pa3eIe SSeSHFJLdYbP3b1+Al5FjD41QRPVPGcoYGhwTbztHO1PmteiIFFkXwPr15yf1Fok FcUdVlqAQDjOoEOsAbRLvvWitVY7jR652JDSW6gSXnl0gtGDABmssJUEVferSBC3 /8br1pECBW+tXcEA5SWvwJ3YbuJ2IH5pn4p1XvF6dgVnFPlU9qBAvVhJE8WLjzHh hvRDCxr/o/lrpN1a9oR39hUqyVPhdKZED6e+uCsDK+Muxikxnbmr2F/AjAHkfLjp Gbzj8KrNhopNSY33RILBmYgCV3hUfdaFAjzKBAlhV3m7kzVFYPcs8mcKdW1psnEA T+oPm8tpdA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:46:21 2026 by rpki-client