$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json) Hash identifier: jdNf1LkJNZB2cKyjAy2XqOAUI2m5vTleiWCJdWFlBcc= Subject key identifier: 04:0D:73:11:04:B7:00:36:AC:89:D9:3F:96:91:28:CE:F1:9E:6F:61 Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Certificate serial: 4599410D5EFF031C8F39C8B4D0C1B54BCDF4CC5A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 07:23:16 +0000 Manifest this update: Mon 02 Mar 2026 07:18:16 +0000 Manifest next update: Tue 03 Mar 2026 09:40:16 +0000 Files and hashes: 1: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=) 2: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: w6J4wI7vw92U0YEHvED0YYmskHS9egmlT5jmADSnorI=) 3: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:99:41:0d:5e:ff:03:1c:8f:39:c8:b4:d0:c1:b5:4b:cd:f4:cc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Validity Not Before: Mar 2 07:18:16 2026 GMT Not After : Mar 3 09:40:16 2026 GMT Subject: CN=040D731104B70036AC89D93F969128CEF19E6F61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d3:ed:50:56:40:6b:1d:29:2d:eb:e3:a3:2d: bd:e9:48:ab:f9:2a:1c:eb:eb:c2:a2:14:41:5a:0d: 20:45:9a:92:2c:50:cc:c5:4c:10:2e:9a:d1:83:4d: 99:f2:9f:16:c9:e8:cd:28:95:4d:da:8e:0c:02:63: 56:61:30:88:2f:75:23:6b:99:22:b4:ff:8d:ec:07: 26:95:57:48:2b:f3:6b:fe:07:5e:72:06:52:68:aa: 31:a1:de:3d:a3:83:54:3f:f4:7f:e5:aa:0a:eb:8a: 07:1d:7f:9c:34:c6:dd:fc:94:1c:30:ad:90:c1:71: a6:07:15:6e:f4:4a:63:c9:1f:5a:87:13:7c:a6:3f: b2:f9:29:46:09:c2:71:d5:a3:14:95:1b:4c:c3:14: fa:e0:49:76:8a:8a:07:94:2c:e6:7d:a8:67:58:d5: b4:31:32:53:90:c6:17:d0:81:21:fe:2f:e1:b5:41: f3:39:36:fb:54:8a:fc:77:13:89:a4:50:c7:d5:19: f6:fe:a3:13:4f:6b:c5:24:7e:a9:81:a2:ec:2d:48: 62:aa:45:93:d0:5e:98:76:18:57:fa:20:21:c6:4b: 55:8d:a9:89:69:51:c7:92:8b:27:34:e8:d1:b0:f3: fa:20:2b:b6:7d:fb:9f:7b:b9:42:5d:e2:42:50:74: 11:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0D:73:11:04:B7:00:36:AC:89:D9:3F:96:91:28:CE:F1:9E:6F:61 X509v3 Authority Key Identifier: keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ad:27:93:af:89:f1:fd:0e:eb:1c:f6:b8:f6:6e:40:ac:3d: ac:04:18:2c:eb:fb:b2:e5:d0:87:01:1e:31:d3:ad:6f:14:c1: eb:59:74:4e:04:d9:f2:59:76:76:3b:69:b8:0b:7f:e6:98:87: 1f:2c:d2:53:49:15:87:b2:a5:1e:50:c8:54:20:b2:94:3f:79: fb:dc:b8:95:e5:0a:db:53:13:98:f1:8e:6f:ff:f0:32:2b:13: 1e:8f:2a:36:3d:3a:2c:41:f4:94:df:d2:d3:4c:54:e4:5e:f6: b7:1a:9e:e7:ee:33:a0:c2:e1:d7:6c:12:90:9e:07:9b:35:33: a1:de:cb:63:a3:84:f6:8d:3b:78:ba:b1:bc:8c:ff:54:70:21: c7:e7:ce:f4:f2:73:70:32:5d:52:ad:06:26:ad:ac:6e:71:c8: 7a:47:ba:ad:e4:d5:11:40:5c:2f:db:43:aa:95:c0:6b:94:fe: 3d:aa:1c:7a:6e:11:40:c4:a1:51:25:39:07:4b:d6:5f:0a:97: dd:a5:8c:c2:2e:38:15:fa:75:12:57:2b:8c:35:98:7b:02:b4: 29:d8:0b:e8:f6:d2:4d:29:eb:72:c4:30:52:2f:20:b2:05:2a: ac:d1:ad:cf:6d:91:44:d0:71:9f:cb:52:2b:35:d4:f6:50:49: 63:f4:2b:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURZlBDV7/AxyPOci00MG1S830zFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2 QThDQTY2MTAeFw0yNjAzMDIwNzE4MTZaFw0yNjAzMDMwOTQwMTZaMDMxMTAvBgNV BAMTKDA0MEQ3MzExMDRCNzAwMzZBQzg5RDkzRjk2OTEyOENFRjE5RTZGNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0+1QVkBrHSkt6+OjLb3pSKv5 Khzr68KiFEFaDSBFmpIsUMzFTBAumtGDTZnynxbJ6M0olU3ajgwCY1ZhMIgvdSNr mSK0/43sByaVV0gr82v+B15yBlJoqjGh3j2jg1Q/9H/lqgrrigcdf5w0xt38lBww rZDBcaYHFW70SmPJH1qHE3ymP7L5KUYJwnHVoxSVG0zDFPrgSXaKigeULOZ9qGdY 1bQxMlOQxhfQgSH+L+G1QfM5NvtUivx3E4mkUMfVGfb+oxNPa8UkfqmBouwtSGKq RZPQXph2GFf6ICHGS1WNqYlpUceSiyc06NGw8/ogK7Z9+597uUJd4kJQdBE7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBA1zEQS3ADasidk/lpEozvGeb2EwHwYDVR0j BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0 NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU60nk6+J8f0O 6xz2uPZuQKw9rAQYLOv7suXQhwEeMdOtbxTB61l0TgTZ8ll2djtpuAt/5piHHyzS U0kVh7KlHlDIVCCylD95+9y4leUK21MTmPGOb//wMisTHo8qNj06LEH0lN/S00xU 5F72txqe5+4zoMLh12wSkJ4HmzUzod7LY6OE9o07eLqxvIz/VHAhx+fO9PJzcDJd Uq0GJq2sbnHIeke6reTVEUBcL9tDqpXAa5T+Paocem4RQMShUSU5B0vWXwqX3aWM wi44Ffp1ElcrjDWYewK0KdgL6PbSTSnrcsQwUi8gsgUqrNGtz22RRNBxn8tSKzXU 9lBJY/Qrog== -----END CERTIFICATE-----Generated at Mon Mar 2 23:22:37 2026 by rpki-client