$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft File: 909D556251A0BE5F9234514028EBD37CE8E1280A.mft (raw, json) Hash identifier: 0YGJxbATAv2L6nVptxk4cQ82cIzz0TZiC9pr4XFgLLQ= Subject key identifier: 00:17:B3:74:35:03:6F:7F:23:4D:4C:F3:FB:F4:26:58:0B:6E:44:24 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 3A83A9A72EA978AC6AADD26DD3B135FF05DE775D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 22:23:16 +0000 Manifest this update: Sun 01 Mar 2026 22:18:16 +0000 Manifest next update: Tue 03 Mar 2026 02:05:16 +0000 Files and hashes: 1: 3132332e34392e3233372e302f32342d3234203d3e203633363431.roa (hash: 7pKQkhzkq1U210D2cZU/h7MDDRd2cNlncacV8dcNrfg=) 2: 3132332e34392e3234312e302f32342d3234203d3e203633363431.roa (hash: oJWDFgNP10dQZ/IsB56YuUh2YzqysBIN0PTRtohD/D0=) 3: 3132332e34392e3234372e302f32342d3234203d3e203633363431.roa (hash: p79j4YGmWW4IV+Ou8ryXl//w37lh9IuSadq/jTt/hgA=) 4: 909D556251A0BE5F9234514028EBD37CE8E1280A.crl (hash: Rg/+sARHz/1AQJyZQ4tccwa2nGVxE6ZYkWW28oZlwbw=) 5: 3132332e34392e3234322e302f32342d3234203d3e203633363431.roa (hash: 4yFeBtOnx6PJDSGqWWlfXw9GOt3LnYBEIdTySWvAfJw=) 6: 3132332e34392e3139362e302f32342d3234203d3e203633363431.roa (hash: 0iTDK2jBtrXhBc+FRVAS0NVqOcMAurUMKS5nPe1dw2E=) 7: 3132332e34392e3234362e302f32342d3234203d3e2034353135.roa (hash: iOY+HPVvGy3/dXGKhLG1Kw8dLVPZsso+CaY41zAgyRY=) 8: 3132332e34392e3234322e302f32342d3234203d3e2034353135.roa (hash: KwDAtrxOe3gPNr0PBcclw0t4c/e2Kbrw4nqX1PJIpDY=) 9: 3132332e34392e3233372e302f32342d3234203d3e2034353135.roa (hash: jJftpG3x4g3cL1YrT7aEpgobH6HBDOkt05jsoCJTJ2Q=) 10: 3132332e34392e3234352e302f32342d3234203d3e2034383132.roa (hash: eHtoU26S9uQP9D4qKQ0M3F2642XYQQ/3cUcRnCSD8Kw=) 11: 3132332e34392e3234372e302f32342d3234203d3e2034353135.roa (hash: kAVWZq0A9zD+vWiTRlhRcXBRkWNI+ZpkNQpWt0I2T2w=) 12: 3132332e34392e3234352e302f32342d3234203d3e203338383134.roa (hash: AV+aDx+v2jUPKJf06Aq7/Zc2xAoUeTp3ckA3OJ2cWeQ=) 13: 3132332e34392e3234362e302f32342d3234203d3e203633363431.roa (hash: ZLaSbqkhr0ckiAj1yXpXnIu2V3obfSobsdCH83ZzjdY=) 14: 3132332e34392e3139352e302f32342d3234203d3e203633363431.roa (hash: rO+l5Qlk15uuhyb0exm7lOm58oejeBgyGycLSvlGIsA=) 15: 3132332e34392e3234312e302f32342d3234203d3e2034353135.roa (hash: TQFKLb6QXJghjcVvTOVEQ+qkJHS6U3QD78fM7fDfLRo=) 16: 3132332e34392e3234352e302f32342d3234203d3e203633363431.roa (hash: URY/fnRSKZtxcyZMIV2zonyjJhXZIXVlZKxZiD23qHc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:83:a9:a7:2e:a9:78:ac:6a:ad:d2:6d:d3:b1:35:ff:05:de:77:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Mar 1 22:18:16 2026 GMT Not After : Mar 3 02:05:16 2026 GMT Subject: CN=0017B37435036F7F234D4CF3FBF426580B6E4424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:61:a5:dd:da:86:f1:c3:fd:c4:53:64:97:2e: 3e:55:39:2c:73:3c:34:4a:32:30:9e:2e:71:b4:e7: 5f:12:00:61:49:95:a2:d8:30:02:98:fb:36:3c:01: 74:8c:fd:ba:85:90:83:40:d4:89:4c:51:bc:55:33: 44:e5:58:7f:0e:52:d4:0a:82:ea:c2:7b:9b:45:f4: 5e:95:49:fd:4c:d9:3f:53:ae:fd:19:92:9f:32:9b: c0:ef:8f:82:0d:ef:54:ff:c0:cc:f6:9c:c0:18:53: 91:92:6c:d7:8c:4e:02:2f:1a:d7:ec:b4:93:97:3d: 6c:20:10:0e:34:6e:32:7c:6e:30:3c:01:b9:68:b5: f2:b7:76:27:3a:74:e9:df:2d:92:a9:63:c1:42:33: 7e:e9:a0:6c:5e:d0:cd:2a:0a:a1:33:49:1c:e4:04: 46:39:5f:62:44:83:ec:9a:4f:c8:59:f7:e9:bf:b2: 25:bb:3c:af:f3:04:37:ce:c5:88:5d:36:c1:cf:87: 56:16:63:83:1d:a6:a0:bb:70:0f:52:35:9b:04:0a: 8e:60:cc:a7:e3:aa:6f:3a:9e:84:75:6b:7f:f7:f1: b4:f1:8d:8b:14:99:be:37:62:2a:60:38:74:1b:33: 76:64:0e:a2:04:80:c2:5a:75:d8:6d:2f:73:36:05: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:17:B3:74:35:03:6F:7F:23:4D:4C:F3:FB:F4:26:58:0B:6E:44:24 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1a:41:fa:aa:d3:81:35:cc:80:b3:4c:51:5e:f9:c3:2e:ed: 7f:ce:a5:bd:85:aa:a8:21:68:8b:1a:ca:ad:2d:74:c1:7e:3a: 2a:2b:16:01:fc:4a:28:51:fd:26:97:02:51:19:80:8e:12:cb: b1:4f:04:46:41:85:be:be:b6:ab:e9:01:23:b6:a2:b6:4a:c4: 83:4b:2b:ca:ca:5a:65:40:0d:f3:ed:96:c3:c9:9b:0a:40:f9: c5:e0:8b:35:d0:c4:eb:c8:2e:06:89:3e:72:3a:08:4f:77:0f: 7c:9a:34:aa:25:13:ce:2a:bf:6d:95:9f:0e:9c:e1:75:69:4b: 94:86:f1:78:0f:f4:bd:f8:9c:b3:af:5e:5a:eb:19:ba:d3:30: 9d:34:76:7b:6a:ae:11:ba:d8:f5:49:0e:43:48:ce:14:1e:5c: 6f:70:ed:23:54:5b:10:45:46:8d:f7:f6:1b:cf:1c:50:f8:c4: 26:0d:ad:fd:ac:b5:6f:ff:bf:2d:a4:0f:01:23:79:40:c1:d9: d1:54:d0:ae:9e:ff:f1:18:94:1a:ce:6e:c6:47:49:90:46:f2: 68:98:5a:23:cb:21:5a:87:d9:30:a6:af:49:56:dc:4b:d4:5f: 44:55:59:11:d4:3d:dd:e0:d9:a7:4e:34:9f:82:71:31:04:26: 6a:6b:f1:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOoOppy6peKxqrdJt07E1/wXed10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjAzMDEyMjE4MTZaFw0yNjAzMDMwMjA1MTZaMDMxMTAvBgNV BAMTKDAwMTdCMzc0MzUwMzZGN0YyMzRENENGM0ZCRjQyNjU4MEI2RTQ0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYYaXd2obxw/3EU2SXLj5VOSxz PDRKMjCeLnG0518SAGFJlaLYMAKY+zY8AXSM/bqFkINA1IlMUbxVM0TlWH8OUtQK gurCe5tF9F6VSf1M2T9Trv0Zkp8ym8Dvj4IN71T/wMz2nMAYU5GSbNeMTgIvGtfs tJOXPWwgEA40bjJ8bjA8AblotfK3dic6dOnfLZKpY8FCM37poGxe0M0qCqEzSRzk BEY5X2JEg+yaT8hZ9+m/siW7PK/zBDfOxYhdNsHPh1YWY4MdpqC7cA9SNZsECo5g zKfjqm86noR1a3/38bTxjYsUmb43YipgOHQbM3ZkDqIEgMJaddhtL3M2BRdPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUABezdDUDb38jTUzz+/QmWAtuRCQwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDY3OTkxMDUvMC85MDlENTU2MjUxQTBC RTVGOTIzNDUxNDAyOEVCRDM3Q0U4RTEyODBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRpB+qrTgTXM gLNMUV75wy7tf86lvYWqqCFoixrKrS10wX46KisWAfxKKFH9JpcCURmAjhLLsU8E RkGFvr62q+kBI7aitkrEg0sryspaZUAN8+2Ww8mbCkD5xeCLNdDE68guBok+cjoI T3cPfJo0qiUTziq/bZWfDpzhdWlLlIbxeA/0vfics69eWusZutMwnTR2e2quEbrY 9UkOQ0jOFB5cb3DtI1RbEEVGjff2G88cUPjEJg2t/ay1b/+/LaQPASN5QMHZ0VTQ rp7/8RiUGs5uxkdJkEbyaJhaI8shWofZMKavSVbcS9RfRFVZEdQ93eDZp040n4Jx MQQmamvxcg== -----END CERTIFICATE-----Generated at Mon Mar 2 14:25:13 2026 by rpki-client