$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft File: 18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json) Hash identifier: PGQLoptbZcwT78VrsUhZbexuPj7kakGS1bDjh0e4NBs= Subject key identifier: 2B:4E:B8:DF:27:10:72:7F:C6:BB:2F:18:9F:6B:A8:8E:7A:BE:B2:3C Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 3DA62877E8349C17BBE68FA41E3EF21C8217E044 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 22:23:16 +0000 Manifest this update: Sun 01 Mar 2026 22:18:16 +0000 Manifest next update: Mon 02 Mar 2026 23:14:16 +0000 Files and hashes: 1: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=) 2: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=) 3: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=) 4: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=) 5: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: ex+YViz3mmYDd0WaStvlcPsk7vrUUEa2os6wpToASvk=) 6: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=) 7: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 23:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a6:28:77:e8:34:9c:17:bb:e6:8f:a4:1e:3e:f2:1c:82:17:e0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: Mar 1 22:18:16 2026 GMT Not After : Mar 2 23:14:16 2026 GMT Subject: CN=2B4EB8DF2710727FC6BB2F189F6BA88E7ABEB23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bb:3a:15:2f:d5:c3:29:0b:c6:f6:53:f8:96: a7:78:fb:34:23:00:64:7a:aa:e5:43:96:6b:43:31: a7:de:a0:9a:40:16:f5:a2:40:07:fa:e4:4d:53:43: 0a:86:41:03:e4:46:59:b3:45:2d:f5:14:fc:ee:50: b6:a5:69:da:ea:ad:5a:63:7e:a5:f2:1f:8f:aa:9f: d1:26:9b:bf:c5:80:ac:6e:c1:ee:4f:9b:a9:3e:e7: ed:85:60:c0:28:db:cc:6f:d8:9c:4b:dc:d9:18:5c: ea:ec:12:19:8c:15:ba:8a:c3:77:67:ea:72:0a:01: b7:f2:49:89:15:5c:2c:f3:b6:62:35:a6:9b:92:ef: 8c:83:59:eb:91:f7:2c:fa:ff:30:49:ec:cf:9b:a2: 4e:ef:84:80:0b:6c:18:01:29:e9:b7:a1:d7:d1:62: 55:2e:4f:36:10:dd:45:21:38:c1:9f:5c:c6:75:f9: 14:3a:17:4b:94:c8:39:e6:6d:a3:8f:c1:49:b3:f4: 37:26:db:db:97:a0:7b:bb:95:4f:41:8c:3f:58:20: 1a:78:3d:e4:22:ac:44:35:66:c3:30:71:4a:f1:13: 03:ac:ce:a1:50:67:77:02:d3:d1:36:03:5c:fc:fe: f1:d9:54:ce:07:c2:79:40:d1:e8:e9:eb:3d:35:42: d8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4E:B8:DF:27:10:72:7F:C6:BB:2F:18:9F:6B:A8:8E:7A:BE:B2:3C X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:5b:ca:ec:6c:7a:2c:44:cd:7e:6f:d4:7a:7e:18:d2:62:d3: 39:55:4f:47:a2:f2:03:11:6c:fe:e4:5d:36:0c:fe:3e:7d:bf: c1:0f:d3:bc:4c:68:42:c1:4d:7c:0d:88:ba:99:1a:a3:55:ad: 3e:0c:e1:39:14:43:85:b0:b5:1d:d1:66:65:3e:a1:cd:6b:3c: d3:ee:95:28:51:0b:c2:5d:ec:b4:bd:7a:99:ae:e7:2f:07:c9: 9c:65:e4:12:b4:51:18:41:f3:90:71:b2:44:68:23:fb:81:96: f9:f1:f5:df:7b:e5:51:82:54:8f:df:2e:74:2e:c0:c9:45:fc: 84:3a:d6:1d:f4:4b:5c:73:c2:33:d7:9e:b7:d2:4d:a6:63:85: b8:e3:61:f8:1d:b1:2f:9e:82:75:05:e8:ec:da:e5:bc:06:fa: 89:05:8a:1d:c0:81:a9:41:ae:3c:cb:3d:26:3b:f3:1f:f2:67: e5:36:41:ab:a5:5a:88:d0:c8:2f:fa:8d:95:e9:6a:1f:d7:f0: 83:67:b2:28:07:f1:16:4f:5a:16:86:9b:ad:62:ef:5c:3d:f9: 0b:c4:0a:ce:70:ad:34:c6:7b:ad:a2:99:55:93:4f:b2:93:a4: 45:04:d7:3c:b6:45:4d:46:0e:41:d5:26:5f:5f:dd:f8:de:ef: 48:bd:11:e8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPaYod+g0nBe75o+kHj7yHIIX4EQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjAzMDEyMjE4MTZaFw0yNjAzMDIyMzE0MTZaMDMxMTAvBgNV BAMTKDJCNEVCOERGMjcxMDcyN0ZDNkJCMkYxODlGNkJBODhFN0FCRUIyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDouzoVL9XDKQvG9lP4lqd4+zQj AGR6quVDlmtDMafeoJpAFvWiQAf65E1TQwqGQQPkRlmzRS31FPzuULaladrqrVpj fqXyH4+qn9Emm7/FgKxuwe5Pm6k+5+2FYMAo28xv2JxL3NkYXOrsEhmMFbqKw3dn 6nIKAbfySYkVXCzztmI1ppuS74yDWeuR9yz6/zBJ7M+bok7vhIALbBgBKem3odfR YlUuTzYQ3UUhOMGfXMZ1+RQ6F0uUyDnmbaOPwUmz9Dcm29uXoHu7lU9BjD9YIBp4 PeQirEQ1ZsMwcUrxEwOszqFQZ3cC09E2A1z8/vHZVM4HwnlA0ejp6z01QthXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK0643ycQcn/Guy8Yn2uojnq+sjwwHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMC8xODg0MUM2M0NEODkz ODMzMDNGMUJBMDQ4MDg1QzIyMTJCMDNCMEJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvVvK7Gx6LETN fm/Uen4Y0mLTOVVPR6LyAxFs/uRdNgz+Pn2/wQ/TvExoQsFNfA2Iupkao1WtPgzh ORRDhbC1HdFmZT6hzWs80+6VKFELwl3stL16ma7nLwfJnGXkErRRGEHzkHGyRGgj +4GW+fH133vlUYJUj98udC7AyUX8hDrWHfRLXHPCM9eet9JNpmOFuONh+B2xL56C dQXo7NrlvAb6iQWKHcCBqUGuPMs9JjvzH/Jn5TZBq6VaiNDIL/qNlelqH9fwg2ey KAfxFk9aFoabrWLvXD35C8QKznCtNMZ7raKZVZNPspOkRQTXPLZFTUYOQdUmX1/d +N7vSL0R6A== -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:24 2026 by rpki-client