$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft File: DE3831D69587EC59C3002006198FD58A977ED1AD.mft (raw, json) Hash identifier: 7EUdQKB12RrG8lkS85anrEtr56pLOZCZZ4iU5AKvGMI= Subject key identifier: D6:ED:BF:D1:E4:48:7B:8F:A5:4D:D5:5E:0D:6A:19:D1:79:E4:54:62 Authority key identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD Certificate issuer: /CN=DE3831D69587EC59C3002006198FD58A977ED1AD Certificate serial: 01B38171A323B0E4C00D48458CB56240297CAD2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 22:53:16 +0000 Manifest this update: Sun 01 Mar 2026 22:48:16 +0000 Manifest next update: Mon 02 Mar 2026 23:36:16 +0000 Files and hashes: 1: 323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa (hash: 8AtmVxPyfg99YhJH0s1wWLM8GE+VM4pFN2d/cSoQXeA=) 2: 3130332e3132342e34382e302f32342d3234203d3e20313337373330.roa (hash: IJdUyzKY6sON6HIqic7qwxP6xVzVXKeLZ7w4umnpbRc=) 3: DE3831D69587EC59C3002006198FD58A977ED1AD.crl (hash: OMdFPEDDvyc4y+lXV6ipm/AwUVEC+HC1lYeYVPInjoA=) 4: 323430333a643963303a3a2f34382d3438203d3e20313337373330.roa (hash: VPrOCsLkPUwzRM6lSxhL059qgm+Bdhv3YweeIJffRuY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 23:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b3:81:71:a3:23:b0:e4:c0:0d:48:45:8c:b5:62:40:29:7c:ad:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3831D69587EC59C3002006198FD58A977ED1AD Validity Not Before: Mar 1 22:48:16 2026 GMT Not After : Mar 2 23:36:16 2026 GMT Subject: CN=D6EDBFD1E4487B8FA54DD55E0D6A19D179E45462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:7b:3f:b9:2f:50:eb:ad:89:b5:85:95:b8: d4:19:5a:86:f1:8a:e9:1e:b8:6f:7f:08:8d:f4:a3: 20:92:89:ff:bf:35:27:3f:ef:b9:f3:ae:6f:21:8e: 99:e6:ae:26:38:20:bb:33:fe:a7:5e:29:a1:37:59: ca:d2:e8:fc:65:c0:39:6e:6d:16:09:98:a9:4a:30: 9a:54:66:36:be:15:c0:a8:3e:e0:79:2f:a6:e6:0b: 47:f2:6e:70:18:7f:65:bc:5b:52:d3:a2:8e:e2:cc: 31:b6:3d:c7:80:f6:4f:2f:c5:b6:67:9b:ef:cf:84: db:0a:82:93:03:e6:f0:58:2e:1a:90:b3:f0:85:46: 64:29:d9:68:40:48:73:c4:e3:8d:a6:16:a8:9d:c6: 73:26:92:55:48:60:03:31:67:ed:90:3f:83:7c:a7: f0:85:6b:c7:f3:06:c3:05:cb:66:4d:e6:32:a5:19: a4:1e:d9:66:ea:92:57:1a:d4:d5:62:79:e8:e6:c5: 99:fc:3e:34:89:b5:97:de:6f:a4:f1:8d:d8:4c:f2: 4f:d0:49:17:62:fe:27:6c:46:03:e8:48:58:72:f0: 98:bb:dc:9f:e7:b6:f2:5b:7f:36:6f:e6:fd:0c:55: 7c:b3:81:d2:d4:53:ac:21:d0:3c:fe:3e:7a:e3:d5: 06:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:ED:BF:D1:E4:48:7B:8F:A5:4D:D5:5E:0D:6A:19:D1:79:E4:54:62 X509v3 Authority Key Identifier: keyid:DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:1d:a0:56:dc:46:c4:7c:b9:e7:31:1a:af:c8:a8:92:a3:64: eb:60:49:a9:a6:12:b6:05:08:06:81:a0:81:49:be:2b:a9:62: 6f:d4:1d:c5:ae:28:7d:b8:13:dd:14:c4:44:c9:a2:89:6c:52: e3:8c:5e:30:71:b0:a9:ec:02:a6:ab:b9:3e:61:c6:ba:29:31: a6:3f:32:3e:73:e1:b9:1d:65:8e:d2:76:40:55:d2:db:95:98: 1b:88:47:04:3b:4d:50:de:5a:41:90:12:7e:19:22:6f:c5:16: db:e4:bf:d9:b9:ed:19:d0:27:76:60:93:19:b4:2b:eb:86:df: e5:bb:b5:63:05:4a:de:c5:c5:19:32:6d:47:9e:2f:b1:01:89: 9e:10:d0:79:17:91:cf:7f:e6:85:68:fc:69:8b:2c:17:af:28: 70:bc:68:cf:b3:b6:e5:b7:ec:9d:b4:f6:e9:48:de:f2:4f:67: 9f:ed:16:65:a0:58:5f:96:8d:31:51:4c:64:15:6a:78:2b:38: 1f:cc:64:18:5d:64:08:c6:2d:d9:71:3e:5c:c2:04:49:d3:7d: 28:f1:21:04:db:98:f4:80:e2:25:23:3a:aa:19:54:31:93:0f: 7a:30:66:ab:f6:03:55:1a:3a:68:70:ee:05:65:c1:6f:2f:90: fc:57:b5:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAbOBcaMjsOTADUhFjLViQCl8rS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5 NzdFRDFBRDAeFw0yNjAzMDEyMjQ4MTZaFw0yNjAzMDIyMzM2MTZaMDMxMTAvBgNV BAMTKEQ2RURCRkQxRTQ0ODdCOEZBNTRERDU1RTBENkExOUQxNzlFNDU0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9Hs/uS9Q662JtYWVuNQZWobx iukeuG9/CI30oyCSif+/NSc/77nzrm8hjpnmriY4ILsz/qdeKaE3WcrS6PxlwDlu bRYJmKlKMJpUZja+FcCoPuB5L6bmC0fybnAYf2W8W1LToo7izDG2PceA9k8vxbZn m+/PhNsKgpMD5vBYLhqQs/CFRmQp2WhASHPE442mFqidxnMmklVIYAMxZ+2QP4N8 p/CFa8fzBsMFy2ZN5jKlGaQe2Wbqklca1NVieejmxZn8PjSJtZfeb6TxjdhM8k/Q SRdi/idsRgPoSFhy8Ji73J/ntvJbfzZv5v0MVXyzgdLUU6wh0Dz+Pnrj1QYjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1u2/0eRIe4+lTdVeDWoZ0XnkVGIwHwYDVR0j BBgwFoAU3jgx1pWH7FnDACAGGY/Vipd+0a0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzMyMzM5My8wL0RFMzgzMUQ2OTU4N0VDNTlDMzAwMjAwNjE5OEZE NThBOTc3RUQxQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5NzdFRDFBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczMjMzOTMvMC9ERTM4MzFENjk1ODdF QzU5QzMwMDIwMDYxOThGRDU4QTk3N0VEMUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGB2gVtxGxHy5 5zEar8iokqNk62BJqaYStgUIBoGggUm+K6lib9Qdxa4ofbgT3RTERMmiiWxS44xe MHGwqewCpqu5PmHGuikxpj8yPnPhuR1ljtJ2QFXS25WYG4hHBDtNUN5aQZASfhki b8UW2+S/2bntGdAndmCTGbQr64bf5bu1YwVK3sXFGTJtR54vsQGJnhDQeReRz3/m hWj8aYssF68ocLxoz7O25bfsnbT26Uje8k9nn+0WZaBYX5aNMVFMZBVqeCs4H8xk GF1kCMYt2XE+XMIESdN9KPEhBNuY9IDiJSM6qhlUMZMPejBmq/YDVRo6aHDuBWXB by+Q/Fe15w== -----END CERTIFICATE-----Generated at Mon Mar 2 13:10:34 2026 by rpki-client