$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft File: B7CD3069B4897C94D73E4A5156A5BB580263686D.mft (raw, json) Hash identifier: TkgVDLspedEt+eEKAxPTQpT7h4Z7arGP3yIUyvsu4jk= Subject key identifier: 00:86:2D:BD:6A:61:83:38:93:EA:03:3F:AD:6B:71:77:52:27:C5:89 Authority key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D Certificate issuer: /CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Certificate serial: 7A151A097449362131FC772B6AB608DEAC811A16 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 16:53:17 +0000 Manifest this update: Mon 02 Mar 2026 16:48:17 +0000 Manifest next update: Tue 03 Mar 2026 18:08:17 +0000 Files and hashes: 1: B7CD3069B4897C94D73E4A5156A5BB580263686D.crl (hash: DbxlxLhjbR4BvddeZ0CdMWB81QIJUuMlVFNkUu/Kpfc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:15:1a:09:74:49:36:21:31:fc:77:2b:6a:b6:08:de:ac:81:1a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Validity Not Before: Mar 2 16:48:17 2026 GMT Not After : Mar 3 18:08:17 2026 GMT Subject: CN=00862DBD6A61833893EA033FAD6B71775227C589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ef:5b:af:e0:04:dd:b1:2b:89:5b:70:24:d6: 4c:7a:cf:f2:c1:b5:a0:af:14:d1:3e:9e:a9:92:2e: 85:07:a5:5d:69:e0:b3:51:c3:f6:96:cb:df:31:bd: ed:22:90:e0:36:e8:93:bb:3f:c7:84:1f:5e:46:46: 69:12:08:99:14:14:4c:b7:c1:28:4e:db:43:2c:54: a3:ac:b7:54:fb:4f:60:23:4b:7a:44:33:ca:5a:9a: 67:e1:b6:35:a6:d8:4d:02:65:9e:18:dc:e7:d6:31: d7:35:3e:44:e6:6a:87:9a:d7:c3:3c:54:f5:92:93: 11:2f:00:a9:5e:73:16:b9:3a:10:ce:cb:85:d9:15: c0:cd:29:32:64:e0:ed:16:68:f2:1a:94:8d:8c:a4: c4:a9:5f:d9:9a:a0:b9:b9:1b:23:39:84:3f:7f:22: 1d:f7:77:08:63:07:94:54:1b:c5:1f:24:d4:03:39: c2:d6:4f:38:99:2b:4f:e8:bf:25:b0:0c:76:1b:bc: 71:33:5b:7d:dd:c9:64:fe:52:6f:10:b2:ff:57:17: 14:3e:62:c3:7a:da:46:3a:20:2c:eb:dc:20:15:70: 1c:2d:a9:54:06:19:59:5d:39:59:21:a3:16:88:01: 00:5c:37:b0:fb:4e:59:6d:be:18:27:82:4a:0a:e3: 43:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:86:2D:BD:6A:61:83:38:93:EA:03:3F:AD:6B:71:77:52:27:C5:89 X509v3 Authority Key Identifier: keyid:B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a9:4e:c7:93:b8:da:a2:d9:33:24:b0:38:d5:d8:e8:49:03: d7:ba:bc:2b:e1:66:ea:89:33:a4:86:ae:c5:96:1f:ef:f7:1f: 59:11:2c:78:42:78:19:1f:48:14:86:c4:a1:ff:15:1f:4c:67: ae:f0:1c:e3:a3:2e:7b:b8:1f:26:57:c3:07:77:d2:71:d8:4d: ee:ec:f7:58:5a:d6:1b:6e:b8:e3:de:16:aa:c2:f7:42:84:5a: 63:b1:df:74:4d:c5:95:8d:a9:3f:aa:2e:27:28:74:47:66:b1: 4e:c3:e0:8d:34:1c:2f:04:1d:0e:92:88:c5:ca:e9:2b:ab:92: 5e:1a:f0:75:a8:86:7b:a4:52:fb:b2:95:16:de:f9:7c:e9:93: 55:83:76:d8:c8:99:3d:a1:8d:ab:9b:11:15:27:25:7f:b2:0c: da:48:c2:a4:33:4d:9f:80:5b:95:4c:7c:10:17:4a:a8:f7:fa: 3d:71:2f:4e:82:34:45:2b:40:12:a6:b7:f7:3b:70:bb:85:ea: 88:24:05:04:d7:be:ba:ec:33:0b:7f:07:18:38:2b:3e:05:97: f0:c1:68:76:95:a5:19:f0:35:6e:b8:fc:13:c9:52:35:74:e5: 43:2f:eb:1b:fe:ac:f3:76:46:a8:cc:8b:9a:21:91:77:e7:d7: 13:90:3b:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUehUaCXRJNiEx/HcrarYI3qyBGhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgw MjYzNjg2RDAeFw0yNjAzMDIxNjQ4MTdaFw0yNjAzMDMxODA4MTdaMDMxMTAvBgNV BAMTKDAwODYyREJENkE2MTgzMzg5M0VBMDMzRkFENkI3MTc3NTIyN0M1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU71uv4ATdsSuJW3Ak1kx6z/LB taCvFNE+nqmSLoUHpV1p4LNRw/aWy98xve0ikOA26JO7P8eEH15GRmkSCJkUFEy3 wShO20MsVKOst1T7T2AjS3pEM8pammfhtjWm2E0CZZ4Y3OfWMdc1PkTmaoea18M8 VPWSkxEvAKlecxa5OhDOy4XZFcDNKTJk4O0WaPIalI2MpMSpX9maoLm5GyM5hD9/ Ih33dwhjB5RUG8UfJNQDOcLWTziZK0/ovyWwDHYbvHEzW33dyWT+Um8Qsv9XFxQ+ YsN62kY6ICzr3CAVcBwtqVQGGVldOVkhoxaIAQBcN7D7TlltvhgngkoK40MBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAIYtvWphgziT6gM/rWtxd1InxYkwHwYDVR0j BBgwFoAUt80wabSJfJTXPkpRVqW7WAJjaG0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8wL0I3Q0QzMDY5QjQ4OTdDOTRENzNFNEE1MTU2QTVC QjU4MDI2MzY4NkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgwMjYzNjg2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMC9CN0NEMzA2OUI0ODk3 Qzk0RDczRTRBNTE1NkE1QkI1ODAyNjM2ODZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKlOx5O42qLZ MySwONXY6EkD17q8K+Fm6okzpIauxZYf7/cfWREseEJ4GR9IFIbEof8VH0xnrvAc 46Mue7gfJlfDB3fScdhN7uz3WFrWG264494WqsL3QoRaY7HfdE3FlY2pP6ouJyh0 R2axTsPgjTQcLwQdDpKIxcrpK6uSXhrwdaiGe6RS+7KVFt75fOmTVYN22MiZPaGN q5sRFSclf7IM2kjCpDNNn4BblUx8EBdKqPf6PXEvToI0RStAEqa39ztwu4XqiCQF BNe+uuwzC38HGDgrPgWX8MFodpWlGfA1brj8E8lSNXTlQy/rG/6s83ZGqMyLmiGR d+fXE5A7IQ== -----END CERTIFICATE-----Generated at Mon Mar 2 22:32:44 2026 by rpki-client