$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft File: 78C8633B586EBF2867C6E406C7122B6F5618F20F.mft (raw, json) Hash identifier: H8QgmhWq+B1zdeTHYtw3r7HVhNbYl7SJ644ekadLzBY= Subject key identifier: 9D:D9:04:73:CB:BF:82:C0:EC:E2:38:05:14:00:0B:57:0A:53:3C:F5 Authority key identifier: 78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F Certificate issuer: /CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Certificate serial: 155E0F15DC4ACD25463C69B2638BED9856799532 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 13:03:17 +0000 Manifest this update: Mon 02 Mar 2026 12:58:17 +0000 Manifest next update: Tue 03 Mar 2026 15:44:17 +0000 Files and hashes: 1: 3130332e3131342e3233362e302f32342d3234203d3e20313337383036.roa (hash: jQ1M4rk892CCL7V3Kskg4kdoBsmezbgv+F9IURAACCc=) 2: 78C8633B586EBF2867C6E406C7122B6F5618F20F.crl (hash: kjm8GEgvnBnSPhLVaaG8qVYUbLAqBqelTH8xevBwHb4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5e:0f:15:dc:4a:cd:25:46:3c:69:b2:63:8b:ed:98:56:79:95:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78C8633B586EBF2867C6E406C7122B6F5618F20F Validity Not Before: Mar 2 12:58:17 2026 GMT Not After : Mar 3 15:44:17 2026 GMT Subject: CN=9DD90473CBBF82C0ECE2380514000B570A533CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d4:a6:a6:d9:76:19:ba:7d:3a:0a:c9:ce:8c: bd:b2:83:be:ca:a2:65:b0:cb:b7:d3:63:fe:83:fb: 8c:50:ce:1d:90:4a:b5:10:ec:6b:99:93:78:7f:78: 53:32:1c:0c:46:57:4b:14:1b:3a:b2:d9:eb:b9:1d: 2c:9e:c3:c2:65:db:34:d0:6f:a0:06:2a:7d:6e:3b: f9:83:0c:c3:62:02:91:6e:24:9f:1f:05:24:60:90: e7:e4:eb:e1:d3:fb:70:82:f7:e8:df:f6:49:06:ea: 5e:14:64:6e:2a:19:be:ed:43:d7:73:9c:81:73:5f: ac:77:59:ae:9d:5c:71:0f:bb:65:2d:a3:26:ed:76: 47:55:d0:4d:a7:7d:17:c3:fd:69:b0:37:7e:06:50: 35:e6:64:88:37:01:28:38:df:c6:0d:9f:1c:6d:c6: 0e:5f:aa:64:c0:b0:9d:12:15:d2:eb:9c:e5:8a:d7: de:5d:0c:9c:2e:ce:46:c6:99:c3:95:34:e8:4e:e3: 5d:89:fa:e7:c9:02:5e:93:b2:0d:7c:16:ea:8a:cf: 19:5a:25:a9:26:36:58:72:ae:8e:64:20:72:e3:7a: 7a:a9:7d:d4:56:d1:f6:02:26:89:b2:5e:92:0d:a5: 5f:5d:97:37:9d:e6:ef:81:8b:41:b8:c1:bf:e0:0e: 61:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D9:04:73:CB:BF:82:C0:EC:E2:38:05:14:00:0B:57:0A:53:3C:F5 X509v3 Authority Key Identifier: keyid:78:C8:63:3B:58:6E:BF:28:67:C6:E4:06:C7:12:2B:6F:56:18:F2:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78C8633B586EBF2867C6E406C7122B6F5618F20F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972205571/0/78C8633B586EBF2867C6E406C7122B6F5618F20F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:32:57:6d:de:69:5b:12:fb:4f:02:23:92:57:58:87:d5:bc: ee:53:31:23:c8:d0:fd:4e:dc:b9:63:65:03:18:19:c3:0b:91: 49:c8:ac:8f:d8:81:17:78:f0:bc:60:e5:57:9d:db:36:30:c4: 08:52:eb:72:d0:ce:3d:43:eb:e7:6e:cd:43:69:02:a8:76:20: be:29:60:5e:33:31:e0:10:c7:78:a3:47:0c:ba:fc:65:18:c1: ea:f8:dd:99:96:fb:0c:75:29:13:1b:ee:54:05:7c:ce:83:50: 47:b8:6e:b9:fc:96:e6:7d:9b:00:21:32:c9:da:bf:a2:c6:07: a4:17:e6:63:5d:16:f3:87:5c:db:25:4c:ef:de:c4:d9:a0:6f: b1:76:35:c0:ca:8a:eb:57:4c:fe:7f:1a:32:0f:3a:77:c9:71: 33:ad:a9:5a:a4:15:14:5b:f7:f4:ae:b8:12:9b:31:71:cc:9a: 00:a7:a0:a3:c2:f4:56:17:9d:d7:26:4e:8e:e9:f1:f8:7e:d5: 4b:ed:0d:cb:ef:69:09:6a:e8:36:56:12:e6:06:84:cd:c9:10: 91:27:05:e1:ed:4f:a2:67:9a:c4:4d:23:1e:5e:c2:f8:97:71: d6:e1:d5:59:fe:28:c2:f2:9a:13:b2:54:64:f6:7b:c8:fd:68: 02:3c:62:04 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFV4PFdxKzSVGPGmyY4vtmFZ5lTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1 NjE4RjIwRjAeFw0yNjAzMDIxMjU4MTdaFw0yNjAzMDMxNTQ0MTdaMDMxMTAvBgNV BAMTKDlERDkwNDczQ0JCRjgyQzBFQ0UyMzgwNTE0MDAwQjU3MEE1MzNDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV1Kam2XYZun06CsnOjL2yg77K omWwy7fTY/6D+4xQzh2QSrUQ7GuZk3h/eFMyHAxGV0sUGzqy2eu5HSyew8Jl2zTQ b6AGKn1uO/mDDMNiApFuJJ8fBSRgkOfk6+HT+3CC9+jf9kkG6l4UZG4qGb7tQ9dz nIFzX6x3Wa6dXHEPu2UtoybtdkdV0E2nfRfD/WmwN34GUDXmZIg3ASg438YNnxxt xg5fqmTAsJ0SFdLrnOWK195dDJwuzkbGmcOVNOhO412J+ufJAl6Tsg18FuqKzxla JakmNlhyro5kIHLjenqpfdRW0fYCJomyXpINpV9dlzed5u+Bi0G4wb/gDmEtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUndkEc8u/gsDs4jgFFAALVwpTPPUwHwYDVR0j BBgwFoAUeMhjO1huvyhnxuQGxxIrb1YY8g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjIwNTU3MS8wLzc4Qzg2MzNCNTg2RUJGMjg2N0M2RTQwNkM3MTIy QjZGNTYxOEYyMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzhDODYzM0I1ODZFQkYyODY3QzZFNDA2QzcxMjJCNkY1NjE4RjIwRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyMDU1NzEvMC83OEM4NjMzQjU4NkVC RjI4NjdDNkU0MDZDNzEyMkI2RjU2MThGMjBGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTJXbd5pWxL7 TwIjkldYh9W87lMxI8jQ/U7cuWNlAxgZwwuRScisj9iBF3jwvGDlV53bNjDECFLr ctDOPUPr527NQ2kCqHYgvilgXjMx4BDHeKNHDLr8ZRjB6vjdmZb7DHUpExvuVAV8 zoNQR7huufyW5n2bACEyydq/osYHpBfmY10W84dc2yVM797E2aBvsXY1wMqK61dM /n8aMg86d8lxM62pWqQVFFv39K64EpsxccyaAKego8L0Vhed1yZOjunx+H7VS+0N y+9pCWroNlYS5gaEzckQkScF4e1PomeaxE0jHl7C+Jdx1uHVWf4owvKaE7JUZPZ7 yP1oAjxiBA== -----END CERTIFICATE-----Generated at Mon Mar 2 21:21:14 2026 by rpki-client