$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: N+QCQo2bV0U+DwVV5eJp6092P0ZTcjJeyfPFqZmUSvA= Subject key identifier: CF:E1:19:B2:8B:15:C8:D3:71:37:E9:88:2D:BF:62:D5:71:EC:CE:0A Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 66FEEC6F04E59CF72E05AD4979DD2B3B430EED7C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 12:18:17 +0000 Manifest this update: Mon 02 Mar 2026 12:13:17 +0000 Manifest next update: Tue 03 Mar 2026 14:36:17 +0000 Files and hashes: 1: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: rjpL5q0n1FGGLd/lg+zkkD9CPaLVzA5Qh+VLzh9lez8=) 2: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:fe:ec:6f:04:e5:9c:f7:2e:05:ad:49:79:dd:2b:3b:43:0e:ed:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Mar 2 12:13:17 2026 GMT Not After : Mar 3 14:36:17 2026 GMT Subject: CN=CFE119B28B15C8D37137E9882DBF62D571ECCE0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:e4:f7:e7:a2:4a:70:6e:74:f9:88:35:6f: f4:da:9a:5a:95:1d:4a:63:7a:f5:ed:ac:57:38:9a: c5:18:2d:db:60:0b:78:d4:89:c0:e5:15:60:53:07: cf:ae:2a:45:d7:aa:c8:94:21:09:85:9f:e5:0b:be: 31:3f:42:c0:42:6d:94:74:75:97:34:d5:7a:f8:15: ac:b4:b1:3a:8c:35:48:2e:d7:c7:ad:20:4f:b5:6e: bc:2b:69:b4:29:02:c9:61:9f:2f:6a:cc:4f:35:6f: 57:b1:35:0c:f3:02:48:eb:a9:8a:65:23:e8:11:a7: 17:da:0b:bb:c0:53:3f:7f:f7:87:85:00:b1:93:7a: 65:f6:79:71:a3:df:9a:87:1f:83:a8:ac:7a:df:7f: 42:58:6a:94:9c:53:02:f8:ec:74:32:64:36:17:21: d0:89:49:b6:64:bf:b4:72:6f:fb:0a:c7:ec:12:be: ae:b1:6d:a4:88:65:6b:e6:b0:79:cc:65:f2:ab:03: 54:73:36:02:54:d8:8c:55:78:f1:be:cc:31:0a:56: f4:ed:56:ec:1f:0c:61:70:b5:c0:2b:0a:e7:7e:bd: 3f:80:08:57:96:4a:11:62:e0:c3:2a:1d:55:b1:29: 3e:07:33:62:25:27:fc:92:4f:f9:35:c9:a3:a1:39: 96:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E1:19:B2:8B:15:C8:D3:71:37:E9:88:2D:BF:62:D5:71:EC:CE:0A X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:05:cd:6c:a3:93:db:d7:b3:67:9a:38:2b:35:2e:be:24:65: 17:c8:69:08:0a:5e:d6:cb:c1:db:f0:22:7a:22:de:21:69:7a: 71:ae:60:2b:67:18:6f:d8:78:1f:36:b1:fe:49:dd:39:f5:12: 6b:01:bf:97:86:b9:26:27:3c:f8:8d:5a:a1:7a:c0:01:ad:f6: 56:31:8a:50:3c:ce:81:91:24:51:cb:02:38:73:e1:fe:64:71: 60:07:d3:b6:36:38:bc:c3:2e:e6:a1:93:a4:2d:66:a3:a2:ae: 88:7d:e7:e8:3e:de:02:72:3d:ae:7a:7e:55:19:9a:07:32:5c: 9e:5e:66:a9:34:47:fd:1c:04:04:5a:3d:8b:5b:05:8e:fa:3b: 8e:c4:60:aa:d5:24:99:e6:34:62:e3:8d:ac:8e:55:43:ef:86: a9:96:f3:fd:fb:b3:dc:53:21:c0:d9:3b:f0:be:95:37:56:f7: 07:30:3e:d6:5c:aa:83:69:e4:0f:ad:44:d1:24:5e:21:0a:0e: 57:0d:8f:60:3a:3c:33:4c:9a:4c:e9:86:2e:01:93:c2:c1:c4: 73:07:51:ac:38:9e:b2:3e:81:f5:88:bb:56:4a:ac:e8:91:48: f4:11:c6:fa:59:40:99:1d:a4:d2:87:b4:a5:28:2b:8d:98:ab: f9:ee:33:ee -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZv7sbwTlnPcuBa1Jed0rO0MO7XwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjAzMDIxMjEzMTdaFw0yNjAzMDMxNDM2MTdaMDMxMTAvBgNV BAMTKENGRTExOUIyOEIxNUM4RDM3MTM3RTk4ODJEQkY2MkQ1NzFFQ0NFMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/m+T356JKcG50+Yg1b/TamlqV HUpjevXtrFc4msUYLdtgC3jUicDlFWBTB8+uKkXXqsiUIQmFn+ULvjE/QsBCbZR0 dZc01Xr4Fay0sTqMNUgu18etIE+1brwrabQpAslhny9qzE81b1exNQzzAkjrqYpl I+gRpxfaC7vAUz9/94eFALGTemX2eXGj35qHH4OorHrff0JYapScUwL47HQyZDYX IdCJSbZkv7Ryb/sKx+wSvq6xbaSIZWvmsHnMZfKrA1RzNgJU2IxVePG+zDEKVvTt VuwfDGFwtcArCud+vT+ACFeWShFi4MMqHVWxKT4HM2IlJ/yST/k1yaOhOZa3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUz+EZsosVyNNxN+mILb9i1XHszgowHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgXNbKOT29ez Z5o4KzUuviRlF8hpCApe1svB2/AieiLeIWl6ca5gK2cYb9h4Hzax/kndOfUSawG/ l4a5Jic8+I1aoXrAAa32VjGKUDzOgZEkUcsCOHPh/mRxYAfTtjY4vMMu5qGTpC1m o6KuiH3n6D7eAnI9rnp+VRmaBzJcnl5mqTRH/RwEBFo9i1sFjvo7jsRgqtUkmeY0 YuONrI5VQ++GqZbz/fuz3FMhwNk78L6VN1b3BzA+1lyqg2nkD61E0SReIQoOVw2P YDo8M0yaTOmGLgGTwsHEcwdRrDiesj6B9Yi7Vkqs6JFI9BHG+llAmR2k0oe0pSgr jZir+e4z7g== -----END CERTIFICATE-----Generated at Mon Mar 2 18:31:51 2026 by rpki-client