$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft (raw, json) Hash identifier: DrD4i6wqpkKIhL1GY1ZY5uHNJKnqPFoBKL+MJixuL+0= Subject key identifier: 58:95:DB:C3:52:00:07:EF:78:55:A2:BF:95:67:90:E1:D1:3F:78:F7 Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Certificate serial: 0ECC4E7C98567F77528FB08153359D8B21061198 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 07:08:16 +0000 Manifest this update: Mon 02 Mar 2026 07:03:16 +0000 Manifest next update: Tue 03 Mar 2026 08:43:16 +0000 Files and hashes: 1: 3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (hash: /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=) 2: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl (hash: 6dWLn55YciFNdpYxLtsT0EEkuGR1kFJaS0CA/ab3e4o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cc:4e:7c:98:56:7f:77:52:8f:b0:81:53:35:9d:8b:21:06:11:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Validity Not Before: Mar 2 07:03:16 2026 GMT Not After : Mar 3 08:43:16 2026 GMT Subject: CN=5895DBC3520007EF7855A2BF956790E1D13F78F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:eb:0e:9f:da:20:20:ef:31:31:ac:db:8b: aa:19:63:a4:4f:30:12:1e:fb:49:0c:c5:8c:66:ff: ee:26:5a:96:60:3c:c0:0a:fb:7f:bd:33:c0:9a:a2: 24:6f:a2:f5:ee:31:0f:b4:c6:49:b4:8a:75:01:8e: 06:90:7d:6e:9b:00:09:81:a0:71:b2:f7:08:d2:75: 43:47:97:10:e6:72:8a:f3:f2:e7:ca:17:97:3e:d7: 3b:50:aa:9d:c3:0a:ef:72:f0:3a:14:10:ed:3d:eb: db:20:82:13:b4:cd:8c:d9:4d:23:0a:d7:17:ab:29: ca:31:bc:0a:f5:4e:de:61:fc:14:a8:ca:c5:33:c1: e0:c2:d4:6c:04:fd:c1:f8:6f:65:0e:99:a8:84:e8: a8:03:35:a0:df:4d:62:92:28:a9:59:a4:20:75:a5: 25:a2:25:2d:25:f9:55:77:68:45:f0:33:91:f8:0b: 82:39:9e:57:c4:8b:37:2e:c2:73:ab:52:07:70:03: 19:cb:df:22:1d:fd:6d:86:db:c3:d2:b7:96:ee:be: 34:43:75:cb:7e:3c:d9:de:2d:f5:4a:82:6c:16:93: f6:2c:65:37:b0:8e:3a:1a:66:0f:9d:47:28:a5:40: 95:08:be:fb:51:83:9c:50:5f:c9:5a:5d:96:d0:35: 07:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:95:DB:C3:52:00:07:EF:78:55:A2:BF:95:67:90:E1:D1:3F:78:F7 X509v3 Authority Key Identifier: keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8b:01:3e:1b:f9:7f:91:35:74:fe:4d:43:7c:c2:53:11:db: 4b:d2:51:31:38:c0:a6:7a:a9:3e:d7:64:78:1c:fb:16:86:96: 68:ee:03:75:37:bd:62:77:2c:60:04:da:86:45:5a:b2:81:eb: 72:80:5d:b1:0a:4b:e4:a9:7e:e4:fe:4d:21:25:f5:00:fb:7d: d8:4c:9b:6f:fd:7e:a4:c0:ac:4e:3e:4f:35:69:69:76:b5:47: aa:63:7a:f5:bb:4a:68:4d:d7:0d:4c:11:3d:95:00:8f:f3:39: 46:2d:04:2c:ad:96:44:52:29:fd:51:7b:bf:fb:76:c2:92:f3: 97:e8:6d:e0:b6:29:63:71:96:d3:32:77:af:9a:b0:02:43:46: 58:58:b8:0f:4c:8f:e0:f6:24:33:b0:9a:67:f2:a4:e7:b9:6f: 5a:7c:15:29:ed:48:ba:c1:fc:9e:49:43:1d:c1:79:42:d1:65: e6:31:87:3b:e4:a4:f6:0c:ad:79:e4:ee:06:d6:fc:2a:a7:01: 68:67:46:91:ba:5b:42:36:d8:27:51:f7:90:ce:37:f6:c4:ed: 62:ce:d4:e2:b2:15:0c:c7:90:09:90:f8:6c:e2:1e:8d:97:75: 7d:61:bb:af:83:4e:09:0b:e8:e6:e3:9b:74:30:80:a8:7b:08: 8e:28:e3:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDsxOfJhWf3dSj7CBUzWdiyEGEZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1 RUU5Q0E3NjAeFw0yNjAzMDIwNzAzMTZaFw0yNjAzMDMwODQzMTZaMDMxMTAvBgNV BAMTKDU4OTVEQkMzNTIwMDA3RUY3ODU1QTJCRjk1Njc5MEUxRDEzRjc4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCluusOn9ogIO8xMazbi6oZY6RP MBIe+0kMxYxm/+4mWpZgPMAK+3+9M8CaoiRvovXuMQ+0xkm0inUBjgaQfW6bAAmB oHGy9wjSdUNHlxDmcorz8ufKF5c+1ztQqp3DCu9y8DoUEO0969sgghO0zYzZTSMK 1xerKcoxvAr1Tt5h/BSoysUzweDC1GwE/cH4b2UOmaiE6KgDNaDfTWKSKKlZpCB1 pSWiJS0l+VV3aEXwM5H4C4I5nlfEizcuwnOrUgdwAxnL3yId/W2G28PSt5buvjRD dct+PNneLfVKgmwWk/YsZTewjjoaZg+dRyilQJUIvvtRg5xQX8laXZbQNQebAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWJXbw1IAB+94VaK/lWeQ4dE/ePcwHwYDVR0j BBgwFoAUgEZCOsalt9bRHpvLl4rEBl7pynYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8xLzgwNDY0MjNBQzZBNUI3RDZEMTFFOUJDQjk3OEFD NDA2NUVFOUNBNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMS84MDQ2NDIzQUM2QTVC N0Q2RDExRTlCQ0I5NzhBQzQwNjVFRTlDQTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4sBPhv5f5E1 dP5NQ3zCUxHbS9JRMTjApnqpPtdkeBz7FoaWaO4DdTe9YncsYATahkVasoHrcoBd sQpL5Kl+5P5NISX1APt92Eybb/1+pMCsTj5PNWlpdrVHqmN69btKaE3XDUwRPZUA j/M5Ri0ELK2WRFIp/VF7v/t2wpLzl+ht4LYpY3GW0zJ3r5qwAkNGWFi4D0yP4PYk M7CaZ/Kk57lvWnwVKe1IusH8nklDHcF5QtFl5jGHO+Sk9gyteeTuBtb8KqcBaGdG kbpbQjbYJ1H3kM439sTtYs7U4rIVDMeQCZD4bOIejZd1fWG7r4NOCQvo5uObdDCA qHsIjijjSA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:36:27 2026 by rpki-client