$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft File: 848188DBA8D369CB93B918182269D397DE354F44.mft (raw, json) Hash identifier: jCo6wirPaxRe7W3HjwwagZq1bUNvUxcE79JpAc5dATU= Subject key identifier: A5:24:A1:03:FF:72:CA:D8:82:7C:04:96:BB:75:48:C5:3A:91:1D:31 Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44 Certificate serial: 2272ACFA772066C23542BE36A8EBE4A83C267264 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 19:38:16 +0000 Manifest this update: Sun 01 Mar 2026 19:33:16 +0000 Manifest next update: Mon 02 Mar 2026 22:15:16 +0000 Files and hashes: 1: 848188DBA8D369CB93B918182269D397DE354F44.crl (hash: NJDLFZ5n1Djxc4mbR2x0eMK7a3/oiCwJNAhHpm7nTxU=) 2: 3131312e3232332e382e302f32322d3234203d3e203234343039.roa (hash: S/Wh/JVPJO7YKvn1vwUqixNT3YF0XjGX3yFXKcclN04=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 22:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:72:ac:fa:77:20:66:c2:35:42:be:36:a8:eb:e4:a8:3c:26:72:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44 Validity Not Before: Mar 1 19:33:16 2026 GMT Not After : Mar 2 22:15:16 2026 GMT Subject: CN=A524A103FF72CAD8827C0496BB7548C53A911D31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c4:aa:21:18:7e:7b:e9:1e:c1:58:30:95:dc: 15:f0:67:e8:ea:7e:f1:c9:7d:da:bd:6b:4c:8b:85: 3a:ed:36:3b:13:cd:2a:75:2e:25:8b:90:a5:f6:38: 2c:9e:b3:49:cf:d2:c0:5e:55:8d:33:5d:7f:11:fa: bd:ab:22:1c:5c:7a:42:7a:dd:55:40:a6:b2:5d:bd: 75:ce:2b:67:be:6b:b5:50:b4:5f:5f:68:bd:eb:06: ac:de:53:2f:01:da:59:a3:7c:50:6f:fd:c9:b6:36: cc:e9:6b:e7:6d:e8:7e:ed:9c:3f:7a:70:e4:b1:cc: 37:a2:9e:9d:3d:f4:79:a4:6d:b5:eb:92:93:20:f3: fb:ec:77:34:2f:9b:65:b9:76:0e:c0:b2:01:93:f5: 06:b3:33:af:d3:02:2e:1c:99:3a:71:bb:11:4e:8a: c6:45:d6:59:90:25:1c:0d:96:ee:da:ce:80:b5:f7: 26:d3:86:da:30:9a:37:33:fd:69:f3:07:1c:a9:ad: 25:1b:83:03:16:b8:20:3a:ca:3a:8f:5e:6a:53:41: 9f:c1:f1:d0:98:4a:14:0f:b6:cf:7c:4a:41:de:8c: fe:15:d4:52:2a:66:67:c8:aa:36:87:66:7f:41:09: 55:88:9e:60:96:c5:15:ea:68:36:31:40:39:1d:90: 7a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:24:A1:03:FF:72:CA:D8:82:7C:04:96:BB:75:48:C5:3A:91:1D:31 X509v3 Authority Key Identifier: keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f0:e8:2a:e6:12:29:6a:ec:45:ef:39:a6:76:c5:d5:02:44: 26:3e:04:3d:b3:17:24:44:65:bc:6c:53:41:68:4c:49:af:5e: d7:3a:20:af:f9:f6:ed:19:ad:ac:a0:ec:4b:ab:87:46:45:c8: 66:87:a7:4d:1b:64:48:20:da:7c:02:56:75:85:60:eb:25:4e: dd:01:4d:7f:9b:45:d3:b3:fa:06:56:61:b9:a0:3b:f5:83:38: 6b:cc:e5:11:c1:21:1c:c6:a7:9e:3b:05:2d:d8:53:b2:9c:ea: 4f:00:86:89:75:d5:9c:8b:86:ae:51:29:bf:71:db:c7:c4:60: 36:57:d8:39:3f:07:1b:c4:2e:40:97:26:6c:a4:f6:4e:f6:7c: 62:90:62:56:6a:30:07:66:cb:05:10:6b:05:a6:9a:86:e7:fe: 41:cb:c7:15:6c:a5:ce:de:77:3d:71:74:17:15:31:fb:ee:14: 42:cb:dc:8f:7a:59:97:4b:ed:11:17:11:3f:c8:ca:3f:27:81: 8b:dd:48:ae:a1:27:cc:ad:6a:16:e1:5b:ea:8f:3a:f0:d4:1e: 32:1f:c6:09:eb:92:83:61:9a:36:6a:9d:5e:37:21:04:c9:4d: 4a:e2:f2:6a:67:38:f7:12:c1:12:ce:ef:48:eb:07:92:7e:29: eb:97:4b:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUInKs+ncgZsI1Qr42qOvkqDwmcmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdE RTM1NEY0NDAeFw0yNjAzMDExOTMzMTZaFw0yNjAzMDIyMjE1MTZaMDMxMTAvBgNV BAMTKEE1MjRBMTAzRkY3MkNBRDg4MjdDMDQ5NkJCNzU0OEM1M0E5MTFEMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHxKohGH576R7BWDCV3BXwZ+jq fvHJfdq9a0yLhTrtNjsTzSp1LiWLkKX2OCyes0nP0sBeVY0zXX8R+r2rIhxcekJ6 3VVAprJdvXXOK2e+a7VQtF9faL3rBqzeUy8B2lmjfFBv/cm2Nszpa+dt6H7tnD96 cOSxzDeinp099HmkbbXrkpMg8/vsdzQvm2W5dg7AsgGT9QazM6/TAi4cmTpxuxFO isZF1lmQJRwNlu7azoC19ybThtowmjcz/WnzBxyprSUbgwMWuCA6yjqPXmpTQZ/B 8dCYShQPts98SkHejP4V1FIqZmfIqjaHZn9BCVWInmCWxRXqaDYxQDkdkHpFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpSShA/9yytiCfASWu3VIxTqRHTEwHwYDVR0j BBgwFoAUhIGI26jTacuTuRgYImnTl941T0QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTc1NzE4Ni8wLzg0ODE4OERCQThEMzY5Q0I5M0I5MTgxODIyNjlE Mzk3REUzNTRGNDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdERTM1NEY0NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU3NTcxODYvMC84NDgxODhEQkE4RDM2 OUNCOTNCOTE4MTgyMjY5RDM5N0RFMzU0RjQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/DoKuYSKWrs Re85pnbF1QJEJj4EPbMXJERlvGxTQWhMSa9e1zogr/n27RmtrKDsS6uHRkXIZoen TRtkSCDafAJWdYVg6yVO3QFNf5tF07P6BlZhuaA79YM4a8zlEcEhHMannjsFLdhT spzqTwCGiXXVnIuGrlEpv3Hbx8RgNlfYOT8HG8QuQJcmbKT2TvZ8YpBiVmowB2bL BRBrBaaahuf+QcvHFWylzt53PXF0FxUx++4UQsvcj3pZl0vtERcRP8jKPyeBi91I rqEnzK1qFuFb6o868NQeMh/GCeuSg2GaNmqdXjchBMlNSuLyamc49xLBEs7vSOsH kn4p65dL1w== -----END CERTIFICATE-----Generated at Mon Mar 2 05:26:55 2026 by rpki-client