$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft File: 8FAB27452D80D270582E88C3F77F13734A31720D.mft (raw, json) Hash identifier: tZlP/qOd3aWF2n5YlRtluN+iOfuDkuYcyqkB0RB90W8= Subject key identifier: 7D:D0:3C:D7:A7:D5:1B:40:9C:C3:03:F9:AA:92:A9:97:D9:04:F3:9D Authority key identifier: 8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D Certificate issuer: /CN=8FAB27452D80D270582E88C3F77F13734A31720D Certificate serial: 152F6A3129E8408C5D9AA8FBBBC8B2D83FFFA5D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 23:18:16 +0000 Manifest this update: Sun 01 Mar 2026 23:13:16 +0000 Manifest next update: Tue 03 Mar 2026 02:44:16 +0000 Files and hashes: 1: 3131352e3137322e33322e302f31392d3234203d3e20313339313438.roa (hash: pUGYuJENq1VokZ+43LamEj9VNynTWrglpiwhuT26Djs=) 2: 3130332e3134352e34322e302f32332d3234203d3e20313339313438.roa (hash: +lc2+n+aPSrTCDzpXimH4lcT9x2pWVbTWmkaTbofx/g=) 3: 8FAB27452D80D270582E88C3F77F13734A31720D.crl (hash: UcXLTVh/4SxxGm3vfXd6pYkMdXJoW9b/t/35jGy3az0=) 4: 323430353a373863303a3a2f33322d3438203d3e20313339313438.roa (hash: qLtJdk4nrOuqBW1XAGZCANJf88XjnEDjPfPDkOOCFrM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:2f:6a:31:29:e8:40:8c:5d:9a:a8:fb:bb:c8:b2:d8:3f:ff:a5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FAB27452D80D270582E88C3F77F13734A31720D Validity Not Before: Mar 1 23:13:16 2026 GMT Not After : Mar 3 02:44:16 2026 GMT Subject: CN=7DD03CD7A7D51B409CC303F9AA92A997D904F39D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:99:7a:71:1d:14:99:6a:7f:ae:da:ae:d5: f6:96:97:2b:ef:f8:85:47:b3:11:be:33:e6:b9:38: 4d:62:90:aa:97:70:77:b7:2e:10:a7:3d:3e:69:80: 5f:21:da:97:50:1b:3c:ce:51:e4:99:33:47:bf:ee: 38:55:bb:12:58:7e:89:d0:ca:7d:f4:89:d7:06:2c: 2b:fa:30:66:b1:97:f1:17:a3:af:02:10:35:f1:c5: 7e:d7:64:fb:a6:1e:51:89:1b:64:f4:3d:03:53:34: a6:d3:98:3e:17:dc:cf:84:c0:f7:b5:c5:d5:82:a1: 54:97:f3:15:b9:b6:8e:cf:e5:93:2c:9f:d5:63:61: 41:5c:95:09:50:a1:82:a1:a3:fa:c5:f9:24:d6:9b: d8:f2:da:bd:26:9e:80:39:49:7f:d3:81:a3:a1:ac: f1:9b:56:ba:b0:97:3b:5b:92:19:26:f0:a6:62:3a: 16:f7:d4:86:c2:2b:a7:88:b9:11:b5:b6:93:dc:92: 18:04:03:43:69:54:25:b9:06:6f:8f:0d:b5:ce:d9: 69:b8:cf:10:62:cd:da:8c:ff:0f:1b:01:46:a1:f2: 71:c8:ee:74:e2:72:aa:7c:11:ce:ad:75:eb:7f:4a: f9:57:35:e1:b1:5c:ac:0e:0e:09:04:82:6c:07:be: 80:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D0:3C:D7:A7:D5:1B:40:9C:C3:03:F9:AA:92:A9:97:D9:04:F3:9D X509v3 Authority Key Identifier: keyid:8F:AB:27:45:2D:80:D2:70:58:2E:88:C3:F7:7F:13:73:4A:31:72:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8FAB27452D80D270582E88C3F77F13734A31720D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972271107/0/8FAB27452D80D270582E88C3F77F13734A31720D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:be:df:69:be:ea:b1:8c:36:1f:9f:66:90:57:ab:55:a8:fb: 52:04:4f:8b:1c:e6:f0:66:ae:1b:5a:fe:4d:03:59:ca:bb:8a: b1:36:51:d7:36:83:a6:db:0a:99:3b:ee:b0:f2:ee:11:db:83: 05:93:66:e6:3c:e4:b5:e3:ec:ee:1f:38:1e:5f:3f:3b:20:31: 30:34:2b:d9:70:1a:fa:dd:3a:f0:cb:e1:52:8b:21:9a:18:ab: a2:65:16:4a:a5:ed:74:7c:b9:06:09:5f:13:ee:54:36:53:34: 06:92:e7:c4:e8:ed:2e:84:07:50:70:a9:1b:72:c5:cf:39:c1: 30:ed:19:72:49:a3:61:91:62:88:22:7d:03:88:12:ed:73:cf: 8d:32:42:03:70:f9:cc:67:f1:7b:86:70:d4:2d:e4:9d:07:d7: 97:b1:ae:38:35:ff:b1:18:30:fb:f6:e6:68:a9:6b:37:88:2e: 9f:f0:06:ea:7f:25:c0:54:ee:a8:9f:18:46:7f:82:de:5c:53: c3:e1:06:e0:86:74:18:49:60:e9:ac:ba:90:45:99:67:50:ac: 41:09:74:69:a5:30:6a:cb:f4:f8:ed:94:9f:eb:12:7f:3e:e7: f1:fc:13:0a:14:ba:94:49:54:10:60:27:44:6d:07:cd:65:2a: 87:c5:7a:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFS9qMSnoQIxdmqj7u8iy2D//pdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0 QTMxNzIwRDAeFw0yNjAzMDEyMzEzMTZaFw0yNjAzMDMwMjQ0MTZaMDMxMTAvBgNV BAMTKDdERDAzQ0Q3QTdENTFCNDA5Q0MzMDNGOUFBOTJBOTk3RDkwNEYzOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/Jl6cR0UmWp/rtqu1faWlyvv +IVHsxG+M+a5OE1ikKqXcHe3LhCnPT5pgF8h2pdQGzzOUeSZM0e/7jhVuxJYfonQ yn30idcGLCv6MGaxl/EXo68CEDXxxX7XZPumHlGJG2T0PQNTNKbTmD4X3M+EwPe1 xdWCoVSX8xW5to7P5ZMsn9VjYUFclQlQoYKho/rF+STWm9jy2r0mnoA5SX/TgaOh rPGbVrqwlztbkhkm8KZiOhb31IbCK6eIuRG1tpPckhgEA0NpVCW5Bm+PDbXO2Wm4 zxBizdqM/w8bAUah8nHI7nTicqp8Ec6tdet/SvlXNeGxXKwODgkEgmwHvoADAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfdA816fVG0CcwwP5qpKpl9kE850wHwYDVR0j BBgwFoAUj6snRS2A0nBYLojD938Tc0oxcg0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjI3MTEwNy8wLzhGQUIyNzQ1MkQ4MEQyNzA1ODJFODhDM0Y3N0Yx MzczNEEzMTcyMEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEZBQjI3NDUyRDgwRDI3MDU4MkU4OEMzRjc3RjEzNzM0QTMxNzIwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIyNzExMDcvMC84RkFCMjc0NTJEODBE MjcwNTgyRTg4QzNGNzdGMTM3MzRBMzE3MjBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYL7fab7qsYw2 H59mkFerVaj7UgRPixzm8GauG1r+TQNZyruKsTZR1zaDptsKmTvusPLuEduDBZNm 5jzktePs7h84Hl8/OyAxMDQr2XAa+t068MvhUoshmhiromUWSqXtdHy5BglfE+5U NlM0BpLnxOjtLoQHUHCpG3LFzznBMO0ZckmjYZFiiCJ9A4gS7XPPjTJCA3D5zGfx e4Zw1C3knQfXl7GuODX/sRgw+/bmaKlrN4gun/AG6n8lwFTuqJ8YRn+C3lxTw+EG 4IZ0GElg6ay6kEWZZ1CsQQl0aaUwasv0+O2Un+sSfz7n8fwTChS6lElUEGAnRG0H zWUqh8V6GQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:17:44 2026 by rpki-client