$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft File: F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft (raw, json) Hash identifier: F48ur5YdFlYutvVZDCn0zmtdJv+Rn6mU5glTEmGFu4I= Subject key identifier: 64:B1:EB:48:7D:63:06:57:F6:AD:7D:2D:AE:75:66:BA:DE:18:70:0D Authority key identifier: F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 Certificate issuer: /CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Certificate serial: 7BF11F21F6BC1E65C0344A892CF169734C957DD6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 00:43:16 +0000 Manifest this update: Mon 02 Mar 2026 00:38:16 +0000 Manifest next update: Tue 03 Mar 2026 00:57:16 +0000 Files and hashes: 1: 3136352e3130312e37302e302f32342d3332203d3e20313339313837.roa (hash: CKV8MpGE2SB7rvrp/kk1nwjUyU7uYGhV5IglQ/G9LRo=) 2: 3136352e3130312e37302e302f32342d3332203d3e2034383337.roa (hash: kDv6iwPAf1ZieValA95kBNEQSe+g9yEnqUGtirExvJk=) 3: 3136352e3130312e37312e302f32342d3332203d3e20313339313837.roa (hash: nhsI3SM0BNooBXteXRdYRb2HoI3GqN8f+FtM6cmmIjM=) 4: 3136352e3130312e37312e302f32342d3332203d3e203136353039.roa (hash: 0mFHqtJ99+cpwKS5wgk/Li+bTLSi+1gBBAboHWvN4rw=) 5: 3136352e3130312e37302e302f32342d3332203d3e20313337323634.roa (hash: OFW+AyUk6AajEk+Y+/6xYlyX7Q9q/Cg4YSR5op5MuDw=) 6: 3136352e3130312e37312e302f32342d3332203d3e20313337323634.roa (hash: sv3cZRqsmsIMhTUh+jVQts191O/MilJM7fEF6fodozg=) 7: F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl (hash: gWFHzUUrinSkMHZiuwJew3wuuJsHkuxGfrkcrVsTZ5Q=) 8: 3136352e3130312e37312e302f32342d3332203d3e203134363138.roa (hash: JioU5n5ZADFZKbSBYkGEmdb6Cgmb19+pW7ZaL4VWgxE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 00:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f1:1f:21:f6:bc:1e:65:c0:34:4a:89:2c:f1:69:73:4c:95:7d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8EFF99E092A172620E148B3D7996FD9A2D8B852 Validity Not Before: Mar 2 00:38:16 2026 GMT Not After : Mar 3 00:57:16 2026 GMT Subject: CN=64B1EB487D630657F6AD7D2DAE7566BADE18700D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:4b:8e:17:fd:af:cb:65:07:fe:fa:22:a3: 8f:fe:5e:aa:0e:ee:3b:bd:43:e0:16:79:5a:e9:3f: ba:8e:0d:5f:d8:64:c5:d1:45:4c:78:d4:0e:67:71: cc:41:b1:a0:73:e3:a6:88:f4:19:4a:f2:3c:c9:38: 4d:52:8f:53:11:92:67:41:4b:be:d2:37:bb:8b:c4: 31:1e:16:d1:4a:2d:2b:d9:85:00:50:09:13:f6:de: b1:30:08:ba:b2:d9:c3:8b:f5:a7:1a:2c:1b:ba:fa: 37:92:97:9d:26:e7:89:97:23:e6:7a:75:81:3e:20: 43:df:b7:be:72:c6:9a:13:4a:75:08:ed:5f:db:7b: 95:f4:87:76:b3:0a:3d:14:68:79:84:c9:22:15:b4: 74:83:8f:31:7b:7c:13:cc:5e:bc:c5:20:68:ef:aa: 44:1c:c1:b7:2d:f4:4e:9d:6a:46:12:dd:e4:c0:13: 74:1e:24:ae:f5:7d:02:b3:25:e6:35:21:69:c7:2d: eb:61:50:9e:33:21:ac:36:87:de:42:4a:bf:5c:e2: 81:e5:14:1e:b6:28:72:75:63:21:54:bd:ad:c3:3f: 09:d6:f6:21:88:8e:d1:18:94:91:43:97:3b:3b:be: ec:cc:a6:6d:3a:99:1a:05:8b:9a:4b:18:df:6c:77: 49:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B1:EB:48:7D:63:06:57:F6:AD:7D:2D:AE:75:66:BA:DE:18:70:0D X509v3 Authority Key Identifier: keyid:F8:EF:F9:9E:09:2A:17:26:20:E1:48:B3:D7:99:6F:D9:A2:D8:B8:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8EFF99E092A172620E148B3D7996FD9A2D8B852.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/1/F8EFF99E092A172620E148B3D7996FD9A2D8B852.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:1e:8e:4e:4b:d6:a9:85:25:7c:3c:15:e8:09:d7:6f:a2:96: 45:36:9d:91:8a:b3:d2:7b:de:24:09:de:45:f3:2c:48:6c:dc: b1:27:20:a4:55:44:cf:f6:7a:6f:61:bd:e9:fa:8d:a8:f8:42: 37:32:dd:3f:2b:d9:12:73:17:ed:95:21:75:a9:ce:3f:1c:e0: 15:53:d0:6b:8e:34:fc:99:3a:24:ce:a9:46:70:7a:9e:3c:4b: 3e:44:b8:87:75:5e:4d:c5:e8:38:4e:99:a7:ff:9d:97:03:28: dc:e1:6f:f1:4f:a3:eb:93:ac:63:f5:c6:3d:93:d4:81:b7:ce: 09:8b:1e:76:91:15:2c:65:17:4e:10:2b:f2:1b:c2:98:7b:a1: b3:fc:bd:59:28:41:c2:0b:0a:c5:10:56:20:62:6d:81:21:15: 40:df:e6:ae:f2:e4:41:6f:81:e8:62:15:1a:9c:3e:2e:c6:e3: 26:8d:60:6f:ce:14:04:fc:26:6a:43:f3:5c:09:47:65:1e:58: a4:7b:85:d1:f2:5f:60:18:ab:69:a7:a3:34:a8:5e:90:b0:2a: d8:08:31:40:ef:63:4a:9c:bf:61:d2:08:8e:08:9a:2c:a0:7c: 95:a9:4d:07:aa:b0:01:75:e9:63:04:a8:c3:24:cf:a3:32:18: 5d:db:78:70 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe/EfIfa8HmXANEqJLPFpc0yVfdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlB MkQ4Qjg1MjAeFw0yNjAzMDIwMDM4MTZaFw0yNjAzMDMwMDU3MTZaMDMxMTAvBgNV BAMTKDY0QjFFQjQ4N0Q2MzA2NTdGNkFEN0QyREFFNzU2NkJBREUxODcwMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWfUuOF/2vy2UH/voio4/+XqoO 7ju9Q+AWeVrpP7qODV/YZMXRRUx41A5nccxBsaBz46aI9BlK8jzJOE1Sj1MRkmdB S77SN7uLxDEeFtFKLSvZhQBQCRP23rEwCLqy2cOL9acaLBu6+jeSl50m54mXI+Z6 dYE+IEPft75yxpoTSnUI7V/be5X0h3azCj0UaHmEySIVtHSDjzF7fBPMXrzFIGjv qkQcwbct9E6dakYS3eTAE3QeJK71fQKzJeY1IWnHLethUJ4zIaw2h95CSr9c4oHl FB62KHJ1YyFUva3DPwnW9iGIjtEYlJFDlzs7vuzMpm06mRoFi5pLGN9sd0l1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZLHrSH1jBlf2rX0trnVmut4YcA0wHwYDVR0j BBgwFoAU+O/5ngkqFyYg4Uiz15lv2aLYuFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8xL0Y4RUZGOTlFMDkyQTE3MjYyMEUxNDhCM0Q3OTk2 RkQ5QTJEOEI4NTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjhFRkY5OUUwOTJBMTcyNjIwRTE0OEIzRDc5OTZGRDlBMkQ4Qjg1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMS9GOEVGRjk5RTA5MkEx NzI2MjBFMTQ4QjNENzk5NkZEOUEyRDhCODUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhh6OTkvWqYUl fDwV6AnXb6KWRTadkYqz0nveJAneRfMsSGzcsScgpFVEz/Z6b2G96fqNqPhCNzLd PyvZEnMX7ZUhdanOPxzgFVPQa440/Jk6JM6pRnB6njxLPkS4h3VeTcXoOE6Zp/+d lwMo3OFv8U+j65OsY/XGPZPUgbfOCYsedpEVLGUXThAr8hvCmHuhs/y9WShBwgsK xRBWIGJtgSEVQN/mrvLkQW+B6GIVGpw+LsbjJo1gb84UBPwmakPzXAlHZR5YpHuF 0fJfYBiraaejNKhekLAq2AgxQO9jSpy/YdIIjgiaLKB8lalNB6qwAXXpYwSowyTP ozIYXdt4cA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:19:24 2026 by rpki-client