$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft File: E44A11245B84A6269EEC23D7321F11971335E4E9.mft (raw, json) Hash identifier: ZyLtca4fdV19+fykm34AeOBkXqm+Rca0QBYixYqnmHY= Subject key identifier: 8A:8D:03:AC:5E:CB:52:43:C2:5D:E3:C8:B1:9F:DC:1F:D3:49:4B:25 Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9 Certificate issuer: /CN=E44A11245B84A6269EEC23D7321F11971335E4E9 Certificate serial: 678589FC11ADC7CFBBCD3A6976D1D9BEFABCF766 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 02:38:16 +0000 Manifest this update: Mon 02 Mar 2026 02:33:16 +0000 Manifest next update: Tue 03 Mar 2026 04:42:16 +0000 Files and hashes: 1: 34352e3131322e3233322e302f32342d3234203d3e20313531323631.roa (hash: IOZwuMEqrOSqCjp4OdE4qWo28zAgS1iGgWf7fe/RtoQ=) 2: E44A11245B84A6269EEC23D7321F11971335E4E9.crl (hash: 7Ao36D1H1S35xsZt8nF3s9ogRo/UbvgTZATGQIx7FNA=) 3: 34352e3131332e31362e302f32332d3332203d3e20313531323631.roa (hash: LQqTuamZJecJVVqiprVHJhT1U57uhuSeYxVF1Jp6NjU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:85:89:fc:11:ad:c7:cf:bb:cd:3a:69:76:d1:d9:be:fa:bc:f7:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9 Validity Not Before: Mar 2 02:33:16 2026 GMT Not After : Mar 3 04:42:16 2026 GMT Subject: CN=8A8D03AC5ECB5243C25DE3C8B19FDC1FD3494B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:94:dc:f5:1d:b0:b9:3c:0e:40:ba:30:82: c8:28:1d:86:91:b1:69:d1:be:bf:38:f3:a3:25:54: bf:ee:d9:78:85:72:79:20:18:0f:49:7c:22:a1:f6: a1:c1:85:da:3f:5e:9c:57:f4:3a:c9:d5:f7:67:9b: c0:8f:57:31:5c:42:56:39:e1:12:79:a4:c6:dd:e9: 46:e7:41:85:fc:5f:cf:c9:94:b0:d2:92:a8:53:a3: bc:4d:e6:64:52:33:b9:b5:23:8b:52:62:0a:ec:4c: ba:b6:1b:d7:23:b2:57:cf:c9:76:57:37:04:8b:14: 9c:ec:85:15:fc:8c:cc:7a:cc:41:74:0c:cb:16:e2: 34:90:7f:9f:7e:c6:65:d7:3b:34:76:e6:2b:01:ae: 75:d0:ac:46:d8:dc:c7:c7:93:cf:76:57:0b:58:da: c7:3e:ef:c2:fb:49:82:9a:0a:c6:a6:c7:0d:33:80: 62:8a:00:43:26:32:bf:69:91:55:6e:a0:db:dd:d6: b7:da:15:0d:2b:04:43:0d:d2:63:46:3b:2d:d2:fa: 0a:36:26:f6:ae:fc:1e:08:f8:31:3a:0c:04:e7:1b: 22:41:15:52:5d:e1:d2:44:34:4a:17:61:9f:ee:4f: 5a:4d:37:ea:b0:e2:5b:65:2e:db:e0:5a:2e:4a:1c: 71:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:03:AC:5E:CB:52:43:C2:5D:E3:C8:B1:9F:DC:1F:D3:49:4B:25 X509v3 Authority Key Identifier: keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e8:17:33:2c:6c:9a:59:c5:44:07:09:c4:b5:cc:1f:d2:cb: df:de:59:d8:91:75:ba:ab:7b:3f:69:b6:00:44:b2:6b:2a:60: 80:3f:90:39:66:36:5c:4b:6b:d1:58:0f:94:08:58:1c:06:63: 16:67:56:41:58:a6:af:56:bb:b1:2f:59:e6:e8:21:06:50:cb: 7d:0f:07:df:0f:b9:79:63:43:6b:84:87:52:32:d1:ef:08:d8: 49:1d:b9:31:4c:2c:a7:1d:5d:b0:a0:47:da:72:e2:61:f7:cd: 4a:91:29:93:a0:ec:6b:0e:7a:f3:02:dc:76:a6:d9:42:f5:8c: d3:a7:8a:4c:39:0e:d2:4b:4f:bd:75:7d:bf:0a:6a:d3:60:18: 5c:95:80:16:6d:02:e1:11:4f:46:d2:96:b9:d7:c9:05:95:f3: ae:70:3c:ca:e9:ce:ef:08:8f:9b:8e:27:17:ea:9b:30:61:ed: d9:d4:3a:a6:7b:70:5b:a1:a6:3e:cd:ed:a4:d1:b2:1a:0e:4c: 92:8d:d8:36:0f:94:a4:d4:17:c6:9d:18:4a:b3:3a:6b:24:c4: 07:ae:5c:49:52:9a:13:fd:3f:7d:79:ac:ac:3a:62:df:d5:2f: cf:5f:7a:da:b6:4a:0d:51:56:28:3e:c7:4c:78:13:eb:1c:46: 56:5e:3a:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ4WJ/BGtx8+7zTppdtHZvvq892YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ0QTExMjQ1Qjg0QTYyNjlFRUMyM0Q3MzIxRjExOTcx MzM1RTRFOTAeFw0yNjAzMDIwMjMzMTZaFw0yNjAzMDMwNDQyMTZaMDMxMTAvBgNV BAMTKDhBOEQwM0FDNUVDQjUyNDNDMjVERTNDOEIxOUZEQzFGRDM0OTRCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0c5Tc9R2wuTwOQLowgsgoHYaR sWnRvr8486MlVL/u2XiFcnkgGA9JfCKh9qHBhdo/XpxX9DrJ1fdnm8CPVzFcQlY5 4RJ5pMbd6UbnQYX8X8/JlLDSkqhTo7xN5mRSM7m1I4tSYgrsTLq2G9cjslfPyXZX NwSLFJzshRX8jMx6zEF0DMsW4jSQf59+xmXXOzR25isBrnXQrEbY3MfHk892VwtY 2sc+78L7SYKaCsamxw0zgGKKAEMmMr9pkVVuoNvd1rfaFQ0rBEMN0mNGOy3S+go2 Jvau/B4I+DE6DATnGyJBFVJd4dJENEoXYZ/uT1pNN+qw4ltlLtvgWi5KHHFTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUio0DrF7LUkPCXePIsZ/cH9NJSyUwHwYDVR0j BBgwFoAU5EoRJFuEpiae7CPXMh8RlxM15OkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjE1MDQwMi8wL0U0NEExMTI0NUI4NEE2MjY5RUVDMjNENzMyMUYx MTk3MTMzNUU0RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTQ0QTExMjQ1Qjg0QTYyNjlFRUMyM0Q3MzIxRjExOTcxMzM1RTRFOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYxNTA0MDIvMC9FNDRBMTEyNDVCODRB NjI2OUVFQzIzRDczMjFGMTE5NzEzMzVFNEU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+gXMyxsmlnF RAcJxLXMH9LL395Z2JF1uqt7P2m2AESyaypggD+QOWY2XEtr0VgPlAhYHAZjFmdW QVimr1a7sS9Z5ughBlDLfQ8H3w+5eWNDa4SHUjLR7wjYSR25MUwspx1dsKBH2nLi YffNSpEpk6Dsaw568wLcdqbZQvWM06eKTDkO0ktPvXV9vwpq02AYXJWAFm0C4RFP RtKWudfJBZXzrnA8yunO7wiPm44nF+qbMGHt2dQ6pntwW6GmPs3tpNGyGg5Mko3Y Ng+UpNQXxp0YSrM6ayTEB65cSVKaE/0/fXmsrDpi39Uvz1962rZKDVFWKD7HTHgT 6xxGVl46XQ== -----END CERTIFICATE-----Generated at Mon Mar 2 19:59:28 2026 by rpki-client