$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json) Hash identifier: laU3R2qirSIz7JWWwg4WJxdEUDnhT3Nj6HPEA0XOmuQ= Subject key identifier: 87:86:43:84:67:E1:E9:C8:28:E1:C0:76:E9:04:A8:AF:56:CD:EA:DC Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 37A89B0B3CD7980941C7C7AF7949D49748A3C2D0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 21:43:16 +0000 Manifest this update: Sun 01 Mar 2026 21:38:16 +0000 Manifest next update: Tue 03 Mar 2026 01:12:16 +0000 Files and hashes: 1: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=) 2: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=) 3: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: yyfmqNxG6rWaz3L3rqNaoDBObOKJBiQoeBmhgUhcBgY=) 4: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=) 5: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=) 6: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 01:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a8:9b:0b:3c:d7:98:09:41:c7:c7:af:79:49:d4:97:48:a3:c2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: Mar 1 21:38:16 2026 GMT Not After : Mar 3 01:12:16 2026 GMT Subject: CN=8786438467E1E9C828E1C076E904A8AF56CDEADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:fd:cc:87:7f:65:b4:b6:e8:52:28:ee:74: b9:24:95:58:83:d5:20:c3:f3:23:07:58:1d:66:36: a7:14:87:73:ea:5b:86:a8:77:13:63:d3:22:69:03: 70:f8:88:a3:10:09:f6:3a:5a:b9:66:57:51:3c:ed: 8a:45:b9:19:45:a9:8e:6b:bb:96:52:48:c3:b7:21: d4:4e:9d:0f:ae:65:d2:7e:30:a4:7c:7a:cb:c7:95: 7f:df:ea:3d:cf:77:9e:79:dd:64:7f:19:44:9e:bc: a0:15:21:75:96:68:f2:e6:9d:f5:c7:a0:c3:43:55: 95:64:6b:51:fb:7d:b5:92:b7:26:01:17:ea:12:f5: 01:6f:55:ff:ab:bc:53:ab:78:f8:dc:8f:0a:db:47: ad:93:75:07:80:15:86:f6:6f:c4:be:8b:b3:6c:6d: 10:f8:39:fb:32:c1:72:f3:ef:9c:10:cb:bb:0a:2e: b5:03:de:d2:6e:bc:87:bf:d6:25:63:93:1f:06:8b: fe:8b:8b:9b:77:18:d9:f2:0e:bd:9b:a1:0c:ec:ba: 19:2b:94:f9:85:32:ec:47:48:22:6e:62:02:1f:da: 92:8d:84:c1:01:ab:43:29:9d:ac:e4:7f:65:02:1e: 68:1c:f0:9b:67:a4:58:87:bd:f2:a5:0b:4f:41:7f: 74:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:86:43:84:67:E1:E9:C8:28:E1:C0:76:E9:04:A8:AF:56:CD:EA:DC X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:70:8e:5c:7d:1f:fd:05:ba:74:a1:e3:52:de:da:c1:3e:02: ad:96:0d:08:6d:22:c7:ff:2a:a2:f6:97:2c:78:09:cf:44:45: 38:dc:7d:fc:84:2c:65:c1:d9:8f:9e:0a:19:4b:f1:d2:d0:45: 39:50:cd:51:ae:7a:4c:2d:bf:5d:20:ac:d7:38:98:01:90:c6: 1d:cc:47:92:26:16:7f:6a:b6:86:d7:fc:f4:f9:1c:d1:6c:c4: a1:1b:a8:89:bb:17:85:0b:f7:5c:d3:3f:5d:fe:80:8c:df:12: c1:98:ed:19:0a:5e:58:30:af:12:73:62:c1:ba:5e:d9:6a:34: e8:20:22:c1:9e:07:81:6f:ed:d1:e6:40:b3:0c:f6:37:3a:f6: 74:74:1f:0d:49:30:e3:1b:95:3b:e3:27:a1:5a:7d:ca:01:8d: 7c:5f:51:93:1b:63:0d:02:79:59:95:c2:fa:f9:64:0e:0f:56: dc:64:69:4f:07:08:aa:c6:a8:f1:18:81:b6:d8:8a:3e:21:0e: b4:62:bb:f6:82:09:fc:69:7a:bb:8f:eb:99:8f:e0:c1:60:b0: 4a:75:d3:04:9e:58:fb:5e:02:e2:6e:35:5b:f6:10:4b:9d:20: 6a:99:f1:50:f3:cd:4d:80:14:ae:51:40:a2:e6:90:f5:2e:80: 7f:2e:85:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN6ibCzzXmAlBx8eveUnUl0ijwtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjAzMDEyMTM4MTZaFw0yNjAzMDMwMTEyMTZaMDMxMTAvBgNV BAMTKDg3ODY0Mzg0NjdFMUU5QzgyOEUxQzA3NkU5MDRBOEFGNTZDREVBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6/3Mh39ltLboUijudLkklViD 1SDD8yMHWB1mNqcUh3PqW4aodxNj0yJpA3D4iKMQCfY6WrlmV1E87YpFuRlFqY5r u5ZSSMO3IdROnQ+uZdJ+MKR8esvHlX/f6j3Pd5553WR/GUSevKAVIXWWaPLmnfXH oMNDVZVka1H7fbWStyYBF+oS9QFvVf+rvFOrePjcjwrbR62TdQeAFYb2b8S+i7Ns bRD4OfsywXLz75wQy7sKLrUD3tJuvIe/1iVjkx8Gi/6Li5t3GNnyDr2boQzsuhkr lPmFMuxHSCJuYgIf2pKNhMEBq0Mpnazkf2UCHmgc8JtnpFiHvfKlC09Bf3RJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUh4ZDhGfh6cgo4cB26QSor1bN6twwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1 RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnCOXH0f/QW6 dKHjUt7awT4CrZYNCG0ix/8qovaXLHgJz0RFONx9/IQsZcHZj54KGUvx0tBFOVDN Ua56TC2/XSCs1ziYAZDGHcxHkiYWf2q2htf89Pkc0WzEoRuoibsXhQv3XNM/Xf6A jN8SwZjtGQpeWDCvEnNiwbpe2Wo06CAiwZ4HgW/t0eZAswz2Nzr2dHQfDUkw4xuV O+MnoVp9ygGNfF9RkxtjDQJ5WZXC+vlkDg9W3GRpTwcIqsao8RiBttiKPiEOtGK7 9oIJ/Gl6u4/rmY/gwWCwSnXTBJ5Y+14C4m41W/YQS50gapnxUPPNTYAUrlFAouaQ 9S6Afy6FWw== -----END CERTIFICATE-----Generated at Mon Mar 2 08:15:12 2026 by rpki-client