$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: ObHFG0mEQZbiHtTALPgpxygGCZOuvVeYxHQR9J/c6sM= Subject key identifier: DC:C9:1D:15:3E:2F:B9:1B:B1:38:8F:94:6E:51:FE:5A:F9:6A:F8:46 Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 3B866BCB48567EE4CA833B298847B2FEA87B3B0C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 08:43:17 +0000 Manifest this update: Mon 02 Mar 2026 08:38:17 +0000 Manifest next update: Tue 03 Mar 2026 09:15:17 +0000 Files and hashes: 1: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: 6oCyIrkkfWKChgoHBnui20ktzVpIk1eHmeKRm9vIduI=) 2: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:86:6b:cb:48:56:7e:e4:ca:83:3b:29:88:47:b2:fe:a8:7b:3b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Mar 2 08:38:17 2026 GMT Not After : Mar 3 09:15:17 2026 GMT Subject: CN=DCC91D153E2FB91BB1388F946E51FE5AF96AF846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fc:1d:b8:9f:ab:bb:66:f9:3d:82:65:e7:9d: 21:f3:eb:d3:c6:12:f3:45:ce:b7:be:41:1b:86:ba: a4:de:ad:ee:ac:9a:85:2e:e2:53:2d:47:e6:da:6c: 6b:a8:17:62:64:f9:52:64:f1:6c:21:f5:bf:d2:f7: 61:17:90:83:1b:c5:91:01:52:6f:75:95:31:d2:5e: 3a:89:0f:19:25:33:e2:af:0e:57:6c:34:6f:66:0f: 98:b0:1a:e4:20:86:b4:b1:a4:4a:32:49:02:d9:9b: 33:8b:4e:df:29:1e:67:a6:e6:7a:5a:3e:f8:81:b0: e6:c7:1f:36:55:46:6a:d9:fe:f3:b8:2f:f3:a9:9b: d6:f1:8b:55:27:03:39:39:6c:20:2e:0f:8c:e9:5d: c8:f6:96:79:bb:6b:94:84:96:94:e9:66:27:37:af: ff:52:35:cb:d6:03:5f:6f:6b:41:67:4d:5d:0c:95: 34:d4:00:15:1e:eb:9c:f1:26:d8:64:ca:50:cf:34: ed:be:b6:cc:01:34:80:27:80:b0:fe:06:ca:b7:60: 49:03:d9:f2:ab:bb:5f:2c:9d:80:d9:05:a7:1f:0e: b5:7f:94:b1:a5:3f:5d:7c:13:d2:ca:b7:b9:37:66: a6:26:2d:e9:c9:0c:f5:1e:bd:6b:5d:b2:8d:5a:8a: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C9:1D:15:3E:2F:B9:1B:B1:38:8F:94:6E:51:FE:5A:F9:6A:F8:46 X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4d:e1:58:42:71:8a:8b:2e:78:e7:e1:9f:61:f4:10:6d:be: 63:ed:1c:61:44:b4:49:38:ee:d6:66:4e:9c:b6:9a:53:ac:0a: 71:50:af:4d:a2:93:b4:eb:c2:4a:d8:31:49:59:32:4b:7a:34: 8a:23:f4:5a:0b:3a:07:a3:9d:99:03:ad:e2:dc:7f:27:ea:b2: ec:95:31:60:44:e5:6f:fa:89:0f:9a:e0:36:22:b9:73:fd:a2: be:45:bc:f7:67:d3:19:be:30:e5:86:3c:a6:bc:70:0a:e8:f7: ba:e2:8a:be:30:45:ab:6c:bd:df:e5:12:d6:1e:a7:a9:d0:ae: 07:2d:a9:2f:f2:ef:09:ca:17:0d:84:b3:bc:09:d4:2f:1b:fc: c8:a6:4c:a1:53:77:ac:d9:7b:1e:5f:57:00:ad:0e:ef:d2:b5: 80:17:78:7c:2f:55:d4:93:63:50:6c:d5:e6:bd:f9:04:5c:7e: 5e:58:31:c0:e1:e2:10:d2:6e:5a:37:93:5e:c7:c3:f2:0e:c4: 8d:cd:98:a4:2e:17:53:aa:cb:a4:65:73:9a:b6:dd:9d:d3:09: 01:2d:cb:d0:16:d1:ab:7c:6a:39:1e:1c:ae:36:de:41:dd:a0: 36:bc:3f:23:c1:e4:2b:16:dd:09:5a:cf:a8:a2:c2:b5:34:a6: 31:51:89:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO4Zry0hWfuTKgzspiEey/qh7OwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjAzMDIwODM4MTdaFw0yNjAzMDMwOTE1MTdaMDMxMTAvBgNV BAMTKERDQzkxRDE1M0UyRkI5MUJCMTM4OEY5NDZFNTFGRTVBRjk2QUY4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/B24n6u7Zvk9gmXnnSHz69PG EvNFzre+QRuGuqTere6smoUu4lMtR+babGuoF2Jk+VJk8Wwh9b/S92EXkIMbxZEB Um91lTHSXjqJDxklM+KvDldsNG9mD5iwGuQghrSxpEoySQLZmzOLTt8pHmem5npa PviBsObHHzZVRmrZ/vO4L/Opm9bxi1UnAzk5bCAuD4zpXcj2lnm7a5SElpTpZic3 r/9SNcvWA19va0FnTV0MlTTUABUe65zxJthkylDPNO2+tswBNIAngLD+Bsq3YEkD 2fKru18snYDZBacfDrV/lLGlP118E9LKt7k3ZqYmLenJDPUevWtdso1aiiOLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3MkdFT4vuRuxOI+UblH+Wvlq+EYwHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAE3hWEJxiosu eOfhn2H0EG2+Y+0cYUS0STju1mZOnLaaU6wKcVCvTaKTtOvCStgxSVkyS3o0iiP0 Wgs6B6OdmQOt4tx/J+qy7JUxYETlb/qJD5rgNiK5c/2ivkW892fTGb4w5YY8prxw Cuj3uuKKvjBFq2y93+US1h6nqdCuBy2pL/LvCcoXDYSzvAnULxv8yKZMoVN3rNl7 Hl9XAK0O79K1gBd4fC9V1JNjUGzV5r35BFx+XlgxwOHiENJuWjeTXsfD8g7Ejc2Y pC4XU6rLpGVzmrbdndMJAS3L0BbRq3xqOR4crjbeQd2gNrw/I8HkKxbdCVrPqKLC tTSmMVGJmg== -----END CERTIFICATE-----Generated at Mon Mar 2 17:02:43 2026 by rpki-client