$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft File: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft (raw, json) Hash identifier: kWobe95EY50AtlQOFQM0lI6M6uZstTX5B8zwOBenZ4Q= Subject key identifier: 5E:E6:06:64:6F:EE:E0:AC:05:5A:EC:E2:A5:8B:61:DF:79:15:C9:78 Authority key identifier: 8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA Certificate issuer: /CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Certificate serial: 54FBAED221349C2CB7E4716C3D4F1DEA46CE3C8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 15:33:17 +0000 Manifest this update: Mon 02 Mar 2026 15:28:17 +0000 Manifest next update: Tue 03 Mar 2026 16:12:17 +0000 Files and hashes: 1: 3130332e36392e3131362e302f32342d3234203d3e20313332303139.roa (hash: 6fKt+iWBT7Q5Y3KR8pcHYlERn6kfxco0IUXDIcBVXEE=) 2: 3130332e36392e3131392e302f32342d3234203d3e20313332303139.roa (hash: v6+Xt5KX6FCFr/kDH7TPnhemegugV1zI5HrLePwi2Cg=) 3: 3130332e36392e3131382e302f32342d3234203d3e20313332303139.roa (hash: 8/8FvHoie4tfIh7Mpczm9t8SBVlDU4RC2dY4ZrjOSks=) 4: 8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl (hash: mh+WOTtMv6yiQ2j9bg8gchKzRlJ+f8bPP0PUVSATXzc=) 5: 3130332e36392e3131362e302f32322d3232203d3e20313332303139.roa (hash: cibk/iG/QSAePqg1IwPf4lD3ZBA9b4WVRPQUL958404=) 6: 3130332e36392e3131372e302f32342d3234203d3e20313332303139.roa (hash: vil7EgU6wE1InPsOolnxd/QKjQCTx0u10fodLgx/dqk=) 7: 323430353a663538303a3a2f33322d3332203d3e20313332303139.roa (hash: YQzrjgeuPwnSuxcPlfLg/lWMi5JSl38WLOn2dowz6iA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:12:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fb:ae:d2:21:34:9c:2c:b7:e4:71:6c:3d:4f:1d:ea:46:ce:3c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB918464FE81C36C010BE5C5C69A7FA392D3DFA Validity Not Before: Mar 2 15:28:17 2026 GMT Not After : Mar 3 16:12:17 2026 GMT Subject: CN=5EE606646FEEE0AC055AECE2A58B61DF7915C978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9e:6f:d1:a5:fa:e0:99:a2:38:ed:6e:6c:2d: 77:17:b2:e7:73:f1:e0:eb:dd:6e:13:f5:f1:0d:29: c2:ed:c8:d2:7e:63:84:69:75:07:bf:ac:52:44:71: 3f:9a:6d:ac:9a:52:38:c4:bf:a2:64:f2:4d:d1:8a: b8:2c:90:fc:26:3e:a5:d4:84:a6:ed:a8:5f:dd:87: bc:de:ce:11:fd:70:2c:6c:4f:8c:ad:17:21:bc:41: 1a:16:4e:75:95:34:97:e0:e8:97:67:ee:5e:1a:fa: 4f:5e:c4:c5:a5:85:92:26:be:9f:cb:ca:e5:e0:73: ae:43:01:f8:bf:6f:a9:be:d4:67:ff:ea:48:dd:86: 80:d9:54:42:93:d4:33:dd:00:b3:c8:7c:d3:91:b4: 79:d4:a8:0f:20:00:36:9e:41:05:b7:94:4e:27:8b: df:b5:80:78:e1:bf:44:c6:ac:00:07:3e:74:79:08: 5a:9e:23:9d:8c:6e:d3:0f:74:33:0d:79:8c:51:e6: 94:81:c5:87:51:ad:b5:4a:9b:eb:03:4c:4a:c6:45: 35:28:51:8a:7f:ba:8d:ec:27:d7:cb:fc:d5:00:32: e6:bd:9f:ea:6f:5d:f9:0e:11:75:bd:99:30:2e:ee: 01:0c:44:12:33:06:a0:6d:34:43:3c:ba:17:c4:95: 52:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E6:06:64:6F:EE:E0:AC:05:5A:EC:E2:A5:8B:61:DF:79:15:C9:78 X509v3 Authority Key Identifier: keyid:8F:B9:18:46:4F:E8:1C:36:C0:10:BE:5C:5C:69:A7:FA:39:2D:3D:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577793538/0/8FB918464FE81C36C010BE5C5C69A7FA392D3DFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:57:fa:ed:dd:0d:b9:87:a2:6c:31:83:db:5b:34:89:d8:2c: 2b:a1:a6:34:9e:e1:7a:93:05:38:79:31:b6:db:91:66:7c:28: 3e:15:2e:13:11:1a:44:19:ba:00:0c:92:67:2c:bc:dc:da:67: 6c:b4:c1:0a:41:39:a0:3f:87:64:e0:fe:67:d8:46:4b:80:b6: 3f:83:7c:45:66:92:55:fd:1e:26:97:b8:6a:c2:58:fa:75:4e: 51:7d:75:ce:40:42:5c:ce:73:6c:ab:69:1f:29:43:28:69:24: 34:b0:00:0d:0f:ac:3c:c6:ea:06:0e:ff:d8:a5:1b:80:f0:9c: cb:47:46:63:c5:24:f8:7a:24:78:f4:d7:75:0b:55:08:fa:f2: e7:b8:db:15:50:05:28:86:7e:81:cc:76:9f:ff:eb:d8:97:dd: 8c:1e:3a:53:1f:e7:93:9a:26:0f:3a:e8:31:bb:1f:e5:09:40: 3b:a2:f0:41:60:8c:92:14:f4:90:86:76:7d:e8:51:02:f0:55: 7f:ec:9c:16:c6:a6:ce:46:1b:ee:95:b5:05:f6:d0:ad:f4:6d: f4:b7:56:1a:7d:6f:b6:1d:7d:36:dc:31:f6:10:12:16:8e:cc: bf:13:f2:a6:5d:82:8e:a1:6c:fa:83:93:ed:17:a4:e6:e7:bd: 1d:3c:07:38 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVPuu0iE0nCy35HFsPU8d6kbOPI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEz OTJEM0RGQTAeFw0yNjAzMDIxNTI4MTdaFw0yNjAzMDMxNjEyMTdaMDMxMTAvBgNV BAMTKDVFRTYwNjY0NkZFRUUwQUMwNTVBRUNFMkE1OEI2MURGNzkxNUM5NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnm/RpfrgmaI47W5sLXcXsudz 8eDr3W4T9fENKcLtyNJ+Y4RpdQe/rFJEcT+abayaUjjEv6Jk8k3RirgskPwmPqXU hKbtqF/dh7zezhH9cCxsT4ytFyG8QRoWTnWVNJfg6Jdn7l4a+k9exMWlhZImvp/L yuXgc65DAfi/b6m+1Gf/6kjdhoDZVEKT1DPdALPIfNORtHnUqA8gADaeQQW3lE4n i9+1gHjhv0TGrAAHPnR5CFqeI52MbtMPdDMNeYxR5pSBxYdRrbVKm+sDTErGRTUo UYp/uo3sJ9fL/NUAMua9n+pvXfkOEXW9mTAu7gEMRBIzBqBtNEM8uhfElVLbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXuYGZG/u4KwFWuzipYth33kVyXgwHwYDVR0j BBgwFoAUj7kYRk/oHDbAEL5cXGmn+jktPfowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzc5MzUzOC8wLzhGQjkxODQ2NEZFODFDMzZDMDEwQkU1QzVDNjlB N0ZBMzkyRDNERkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZCOTE4NDY0RkU4MUMzNkMwMTBCRTVDNUM2OUE3RkEzOTJEM0RGQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc3OTM1MzgvMC84RkI5MTg0NjRGRTgx QzM2QzAxMEJFNUM1QzY5QTdGQTM5MkQzREZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlf67d0NuYei bDGD21s0idgsK6GmNJ7hepMFOHkxttuRZnwoPhUuExEaRBm6AAySZyy83NpnbLTB CkE5oD+HZOD+Z9hGS4C2P4N8RWaSVf0eJpe4asJY+nVOUX11zkBCXM5zbKtpHylD KGkkNLAADQ+sPMbqBg7/2KUbgPCcy0dGY8Uk+HokePTXdQtVCPry57jbFVAFKIZ+ gcx2n//r2JfdjB46Ux/nk5omDzroMbsf5QlAO6LwQWCMkhT0kIZ2fehRAvBVf+yc FsamzkYb7pW1BfbQrfRt9LdWGn1vth19Ntwx9hASFo7MvxPypl2CjqFs+oOT7Rek 5ue9HTwHOA== -----END CERTIFICATE-----Generated at Mon Mar 2 23:05:11 2026 by rpki-client