$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft File: F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft (raw, json) Hash identifier: iTvQYTQy79MbjPKHFsrS9ZXvtZfrQU1XnHGsfkqNDDU= Subject key identifier: A4:DC:67:A4:43:76:8C:0B:50:A7:8B:2A:AE:00:9C:92:7E:F6:6E:91 Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Certificate serial: 08C246094C9A3F73594B772D4A91A2811FD358D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 04:53:16 +0000 Manifest this update: Mon 02 Mar 2026 04:48:16 +0000 Manifest next update: Tue 03 Mar 2026 06:25:16 +0000 Files and hashes: 1: 3130332e322e3138382e302f32332d3233203d3e20313436373838.roa (hash: 1mZLsbSQDgVY9UCD1VPGrkN6C62vdnF4KG0dgCvVkDM=) 2: F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl (hash: WThTe7xK4oGc8ASaOWPBmOND9ozeTBPx5iV3htDk7WY=) 3: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (hash: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c2:46:09:4c:9a:3f:73:59:4b:77:2d:4a:91:a2:81:1f:d3:58:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Validity Not Before: Mar 2 04:48:16 2026 GMT Not After : Mar 3 06:25:16 2026 GMT Subject: CN=A4DC67A443768C0B50A78B2AAE009C927EF66E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d0:14:0a:72:4a:23:4c:27:5c:35:5b:6e:e4: 70:ef:f8:4c:07:b1:9c:89:fd:50:4f:57:12:d5:0a: 99:e2:83:22:e1:ee:9f:ac:4f:29:57:8d:b7:37:bb: ae:b6:99:68:78:f3:0c:11:7b:f9:5f:4b:fb:31:15: 65:90:69:53:d1:f4:b6:af:eb:97:25:92:f7:1c:8e: 8c:8c:42:07:32:41:b3:e5:3f:db:8f:ec:af:ef:57: 7a:f7:7d:8c:c3:d7:3c:34:ba:d2:7e:77:e8:d7:97: 43:e3:fa:a9:be:9a:16:95:b8:a1:31:20:84:c2:cc: 28:3f:2e:53:60:ac:f6:d7:49:80:6c:0a:09:56:b4: a5:7b:36:c4:fe:80:b5:43:3c:2d:cf:13:5d:b5:66: 1d:60:81:4b:74:fb:45:9f:6f:1b:70:22:d3:fc:64: 44:f3:7d:d8:b6:8b:98:d4:ba:d9:c2:b3:4a:e0:f0: 96:40:6a:42:89:bb:6b:74:04:04:dc:57:ca:f5:e2: 7f:aa:db:ec:e0:0d:e5:81:13:a7:7b:8c:3f:8f:ba: 84:2d:9f:c0:c6:75:3f:52:cf:2f:42:10:e3:54:6f: 32:f9:e9:81:dc:77:09:ee:62:8f:6e:4f:df:0c:73: e3:a0:e2:fa:61:41:8c:19:ee:b7:22:f5:03:83:d6: 49:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DC:67:A4:43:76:8C:0B:50:A7:8B:2A:AE:00:9C:92:7E:F6:6E:91 X509v3 Authority Key Identifier: keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e9:62:d9:24:bc:40:a2:42:06:70:2b:9e:ac:91:e5:16:38: 95:e1:3c:00:c2:f4:10:95:20:fc:a3:e0:0f:57:1d:ac:7f:5b: 1a:c6:c2:13:f6:25:fe:dc:a0:a2:7c:10:5b:4c:14:69:e9:e4: 3c:75:a8:c9:0d:1f:e8:68:d9:aa:c7:4b:0f:2a:fe:8d:5e:1a: 01:36:b9:88:b6:a2:37:66:19:8b:76:3f:d4:7f:72:f0:11:d7: 43:18:78:38:21:c5:0f:e8:2a:a2:c8:e3:47:c0:4e:30:7a:4b: e3:57:0b:a8:b3:75:3f:d9:8b:b6:85:05:45:dc:f1:0f:fd:21: f1:d9:d4:7a:3f:d3:a5:74:ff:42:69:b4:49:93:10:51:1a:22: 13:e7:c0:45:95:07:8e:5f:b7:c1:c4:58:80:0b:a9:0b:a2:0f: 5a:74:5d:12:cc:4c:a0:12:41:d5:a8:06:6f:42:fc:64:4c:c6: 81:73:10:90:87:8a:6e:2b:51:ad:4a:65:90:d1:92:37:31:f6: f7:4e:c8:50:3e:7a:ee:b2:47:3a:a6:7a:2e:43:f7:4c:15:47: 96:47:ae:13:ac:f8:cf:a7:87:2e:b4:7b:b9:03:3f:86:e2:ce: 2e:bc:85:5b:c0:16:34:10:97:4d:e0:65:da:88:68:53:14:b9: 5f:5f:e0:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCMJGCUyaP3NZS3ctSpGigR/TWNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhD OTVDNjc3MzAeFw0yNjAzMDIwNDQ4MTZaFw0yNjAzMDMwNjI1MTZaMDMxMTAvBgNV BAMTKEE0REM2N0E0NDM3NjhDMEI1MEE3OEIyQUFFMDA5QzkyN0VGNjZFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd0BQKckojTCdcNVtu5HDv+EwH sZyJ/VBPVxLVCpnigyLh7p+sTylXjbc3u662mWh48wwRe/lfS/sxFWWQaVPR9Lav 65clkvccjoyMQgcyQbPlP9uP7K/vV3r3fYzD1zw0utJ+d+jXl0Pj+qm+mhaVuKEx IITCzCg/LlNgrPbXSYBsCglWtKV7NsT+gLVDPC3PE121Zh1ggUt0+0WfbxtwItP8 ZETzfdi2i5jUutnCs0rg8JZAakKJu2t0BATcV8r14n+q2+zgDeWBE6d7jD+PuoQt n8DGdT9Szy9CEONUbzL56YHcdwnuYo9uT98Mc+Og4vphQYwZ7rci9QOD1km5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpNxnpEN2jAtQp4sqrgCckn72bpEwHwYDVR0j BBgwFoAU8K/zYsewkUf1xkNRIW++uMlcZ3MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTg4ODI1OC8wL0YwQUZGMzYyQzdCMDkxNDdGNUM2NDM1MTIxNkZC RUI4Qzk1QzY3NzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhDOTVDNjc3My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4ODgyNTgvMC9GMEFGRjM2MkM3QjA5 MTQ3RjVDNjQzNTEyMTZGQkVCOEM5NUM2NzczLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuli2SS8QKJC BnArnqyR5RY4leE8AML0EJUg/KPgD1cdrH9bGsbCE/Yl/tygonwQW0wUaenkPHWo yQ0f6GjZqsdLDyr+jV4aATa5iLaiN2YZi3Y/1H9y8BHXQxh4OCHFD+gqosjjR8BO MHpL41cLqLN1P9mLtoUFRdzxD/0h8dnUej/TpXT/Qmm0SZMQURoiE+fARZUHjl+3 wcRYgAupC6IPWnRdEsxMoBJB1agGb0L8ZEzGgXMQkIeKbitRrUplkNGSNzH2907I UD567rJHOqZ6LkP3TBVHlkeuE6z4z6eHLrR7uQM/huLOLryFW8AWNBCXTeBl2oho UxS5X1/gxg== -----END CERTIFICATE-----Generated at Mon Mar 2 10:44:29 2026 by rpki-client