$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: 9KMJO864CpBkdtPP3VeRPhXR0GJjV8WR0MapeGd6Fkg= Subject key identifier: E1:81:7B:D7:7F:5B:CB:F3:0E:C1:4B:F1:21:8E:F9:A7:38:E3:DA:63 Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 706956EBFDECE280200BD819E59E23E8D8C626CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 04:58:16 +0000 Manifest this update: Mon 02 Mar 2026 04:53:16 +0000 Manifest next update: Tue 03 Mar 2026 05:29:16 +0000 Files and hashes: 1: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: IGhTBPMJH3EBfQPremRPkMKK4j/4CHtzdCq5LI7Bp28=) 2: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) 3: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:69:56:eb:fd:ec:e2:80:20:0b:d8:19:e5:9e:23:e8:d8:c6:26:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Mar 2 04:53:16 2026 GMT Not After : Mar 3 05:29:16 2026 GMT Subject: CN=E1817BD77F5BCBF30EC14BF1218EF9A738E3DA63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:b8:1f:c3:a0:34:83:26:82:f6:bf:01:6a: 2b:72:5b:14:6c:7a:71:54:6b:1e:05:2e:64:87:98: d7:cd:3f:a0:0e:79:ad:ef:c2:27:04:64:0e:c3:9a: 35:eb:1c:81:58:08:53:48:8b:b5:ec:b8:c9:e1:0f: 0d:3d:61:5a:8e:8c:22:1b:da:32:b4:98:66:21:4f: 44:7a:c8:a0:57:5a:5e:83:51:30:53:69:eb:59:fb: 1a:10:bb:fb:13:69:ae:d6:b1:db:09:d8:31:39:33: 12:8d:9e:7d:22:0f:b3:e1:88:b5:44:73:fa:ba:3b: 15:53:e7:85:e8:f1:3d:a1:18:1f:92:e6:4b:8c:cd: fa:a4:95:83:07:9a:c6:b9:0d:8d:97:0f:9d:6d:74: fc:21:3e:89:3f:08:8c:d6:f0:02:8c:3c:ec:45:cf: bf:ae:c5:27:04:65:84:02:e9:98:a7:94:e2:b0:63: 04:a3:7f:bc:15:ea:91:cb:9c:8f:ce:a1:d9:23:bd: e7:ca:9b:8e:ec:7e:76:46:8a:15:c5:9f:d0:1e:1f: eb:94:18:80:86:78:8f:ae:d5:f9:19:3f:39:03:d0: 86:de:5d:f9:9a:56:9f:47:c8:01:14:16:42:ab:b9: c0:63:4b:4a:a6:71:7a:1e:a3:1e:ae:00:eb:98:1a: 6a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:81:7B:D7:7F:5B:CB:F3:0E:C1:4B:F1:21:8E:F9:A7:38:E3:DA:63 X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:5e:d5:2a:19:ee:f1:7e:24:fa:14:8b:6b:b2:64:1f:84:fe: 42:53:24:60:5a:e9:1a:50:4e:4c:2c:32:1b:d4:48:a7:53:ec: 61:79:32:91:00:cb:60:35:23:1b:9e:1d:39:ad:fd:7c:12:3e: f3:c8:ae:96:af:12:b8:38:35:e3:34:23:9f:be:48:14:be:d8: 49:ff:df:da:7f:23:db:77:44:77:bc:95:f8:13:30:2c:c9:46: 11:01:fc:29:bd:32:ce:60:d3:1e:3c:3f:8a:5c:70:1f:6a:ef: cd:59:94:de:44:5f:f2:6b:bc:1d:75:7e:31:fe:98:16:4b:3a: 31:2d:ab:42:64:08:4e:6f:ac:f0:7d:22:93:c5:81:bf:f1:82: 1b:fd:ba:a7:77:15:79:de:e2:06:84:1e:17:4d:8a:10:fb:0c: 46:eb:1a:0a:d5:30:2f:fd:f6:f5:13:28:70:af:2f:0f:82:85: 16:3e:22:cd:6d:e7:a7:cc:76:3e:f9:c2:69:7d:76:27:11:3d: a3:d0:21:b3:c4:8a:7e:9d:64:d7:23:d7:69:6a:c3:5f:fe:1e: 47:4c:28:fb:c5:24:d4:3b:d6:3c:f0:97:00:5b:0a:12:dc:cc: aa:a7:0e:d7:9a:8f:3d:cb:1b:a9:71:66:88:b0:74:90:82:6a: ad:33:1d:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcGlW6/3s4oAgC9gZ5Z4j6NjGJswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjAzMDIwNDUzMTZaFw0yNjAzMDMwNTI5MTZaMDMxMTAvBgNV BAMTKEUxODE3QkQ3N0Y1QkNCRjMwRUMxNEJGMTIxOEVGOUE3MzhFM0RBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Brgfw6A0gyaC9r8BaityWxRs enFUax4FLmSHmNfNP6AOea3vwicEZA7DmjXrHIFYCFNIi7XsuMnhDw09YVqOjCIb 2jK0mGYhT0R6yKBXWl6DUTBTaetZ+xoQu/sTaa7WsdsJ2DE5MxKNnn0iD7PhiLVE c/q6OxVT54Xo8T2hGB+S5kuMzfqklYMHmsa5DY2XD51tdPwhPok/CIzW8AKMPOxF z7+uxScEZYQC6ZinlOKwYwSjf7wV6pHLnI/OodkjvefKm47sfnZGihXFn9AeH+uU GICGeI+u1fkZPzkD0IbeXfmaVp9HyAEUFkKrucBjS0qmcXoeox6uAOuYGmqPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4YF7139by/MOwUvxIY75pzjj2mMwHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQl7VKhnu8X4k +hSLa7JkH4T+QlMkYFrpGlBOTCwyG9RIp1PsYXkykQDLYDUjG54dOa39fBI+88iu lq8SuDg14zQjn75IFL7YSf/f2n8j23dEd7yV+BMwLMlGEQH8Kb0yzmDTHjw/ilxw H2rvzVmU3kRf8mu8HXV+Mf6YFks6MS2rQmQITm+s8H0ik8WBv/GCG/26p3cVed7i BoQeF02KEPsMRusaCtUwL/329RMocK8vD4KFFj4izW3np8x2PvnCaX12JxE9o9Ah s8SKfp1k1yPXaWrDX/4eR0wo+8Uk1DvWPPCXAFsKEtzMqqcO15qPPcsbqXFmiLB0 kIJqrTMdvA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:34:47 2026 by rpki-client