$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft File: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft (raw, json) Hash identifier: 5iXpiSaZgkuL6MOIFMVT7u3LwyOIR4Q7o4xN9WM5mww= Subject key identifier: 2D:D9:C3:F5:96:78:06:B6:EA:7F:69:D7:31:A4:4F:45:03:1A:92:FE Authority key identifier: 9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 Certificate issuer: /CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Certificate serial: 596AF96EE365596AC7AAB7125C91BE8184EE89E2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 11:58:17 +0000 Manifest this update: Mon 02 Mar 2026 11:53:17 +0000 Manifest next update: Tue 03 Mar 2026 14:23:17 +0000 Files and hashes: 1: 9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl (hash: MHrd1shmPWj4TWCINjkDCftuwtlIgj3ScS8QN1M0IHk=) 2: 3130332e31352e342e302f32322d3234203d3e2034383539.roa (hash: QM9xMhAupKafU2/GiSC2JRi4YYNLQ6Q7r4ilk2vVsfo=) 3: 323430343a633330303a3a2f33322d3438203d3e2034383539.roa (hash: ip1J2ouAZigoSGodZ7/lBH5DsDzxWzij/QZU6caXH9I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6a:f9:6e:e3:65:59:6a:c7:aa:b7:12:5c:91:be:81:84:ee:89:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66 Validity Not Before: Mar 2 11:53:17 2026 GMT Not After : Mar 3 14:23:17 2026 GMT Subject: CN=2DD9C3F5967806B6EA7F69D731A44F45031A92FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8c:63:04:f9:81:e8:c1:07:6f:9c:52:0a:07: 17:05:63:1f:bf:f7:4f:72:7c:bc:f8:78:1e:b1:b1: b8:f0:44:04:96:12:06:2c:49:a2:62:91:ea:3e:dc: 3c:8a:f4:03:b4:ce:80:f1:9a:59:37:7d:63:60:61: 53:32:7b:64:0e:cd:88:7c:82:bc:d9:40:4f:66:87: e7:29:af:79:3e:07:86:c6:52:9c:96:bd:2f:58:7c: 3c:95:af:91:d0:48:02:63:ae:44:b8:54:26:22:f9: ab:12:a8:e9:a0:ab:51:92:fa:7e:79:22:d3:5e:bd: 21:79:e8:d0:1b:8f:c6:87:c7:10:74:76:d1:9e:9f: 01:58:19:dc:55:5f:a2:b1:6c:c2:5a:c2:aa:8a:01: 47:63:0a:42:e2:6a:73:1d:fb:79:56:71:eb:e4:84: a4:42:6b:bf:86:04:94:1d:ea:ca:e5:40:91:1f:5f: a1:b6:2d:ac:31:e3:ae:fb:54:87:50:38:29:7a:10: 56:2f:5c:66:47:9a:0d:fd:24:a5:f7:2f:02:64:01: ee:50:c3:22:5f:57:58:ed:07:be:20:3e:6c:54:c5: 2e:b6:9d:00:8c:44:ab:f4:52:7f:da:5f:81:83:52: 3e:e0:62:fb:16:72:25:35:fe:81:04:54:38:8f:70: 58:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D9:C3:F5:96:78:06:B6:EA:7F:69:D7:31:A4:4F:45:03:1A:92:FE X509v3 Authority Key Identifier: keyid:9D:10:FC:6E:39:15:87:CB:1F:78:E8:B6:3F:ED:0E:5B:46:DC:8D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524970497/0/9D10FC6E391587CB1F78E8B63FED0E5B46DC8D66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:0e:8b:0a:77:10:93:a2:64:ab:6c:d2:51:76:78:dd:87:9c: 21:c0:26:57:af:ab:ee:fb:dd:2b:a1:32:fb:f2:79:1e:be:54: e8:34:f3:50:c6:dc:a8:9c:0c:1e:58:87:73:e5:1b:c5:73:7b: 00:c8:6b:83:4c:cb:06:66:12:6e:cc:4d:4b:42:48:0e:9d:26: 7a:5c:de:56:3b:44:6f:ec:81:0a:3c:db:ee:9c:16:72:52:dc: 85:93:00:f4:b0:c7:72:cd:1d:de:44:9b:38:3b:c3:14:96:be: e9:e0:c7:45:95:0c:dd:ad:c9:c5:86:2a:05:62:5c:a8:47:9b: 15:0c:b6:c6:c8:df:ad:b3:68:a0:6c:ef:44:4c:ff:10:75:4d: b3:12:e5:04:12:bd:a3:78:9f:c2:a9:03:a8:3f:c5:55:b2:a0: 0f:8b:78:fd:86:a5:7a:58:c7:05:61:f6:8b:fa:e5:bf:02:0f: c8:bd:cd:fb:31:00:fb:30:f2:be:19:5a:f8:f6:2b:ea:6e:f0: 92:06:72:26:0f:13:61:b3:cd:69:86:fa:11:cb:21:b9:2a:a3: 11:67:4d:48:e6:64:9c:e0:6b:bd:1c:bb:6d:fd:0a:91:de:78: 2f:3b:59:4a:92:e0:62:ce:4d:3c:14:a1:a3:9d:32:72:6b:c0: e1:21:b6:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWWr5buNlWWrHqrcSXJG+gYTuieIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0 NkRDOEQ2NjAeFw0yNjAzMDIxMTUzMTdaFw0yNjAzMDMxNDIzMTdaMDMxMTAvBgNV BAMTKDJERDlDM0Y1OTY3ODA2QjZFQTdGNjlENzMxQTQ0RjQ1MDMxQTkyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfjGME+YHowQdvnFIKBxcFYx+/ 909yfLz4eB6xsbjwRASWEgYsSaJikeo+3DyK9AO0zoDxmlk3fWNgYVMye2QOzYh8 grzZQE9mh+cpr3k+B4bGUpyWvS9YfDyVr5HQSAJjrkS4VCYi+asSqOmgq1GS+n55 ItNevSF56NAbj8aHxxB0dtGenwFYGdxVX6KxbMJawqqKAUdjCkLianMd+3lWcevk hKRCa7+GBJQd6srlQJEfX6G2Lawx4677VIdQOCl6EFYvXGZHmg39JKX3LwJkAe5Q wyJfV1jtB74gPmxUxS62nQCMRKv0Un/aX4GDUj7gYvsWciU1/oEEVDiPcFjnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULdnD9ZZ4Brbqf2nXMaRPRQMakv4wHwYDVR0j BBgwFoAUnRD8bjkVh8sfeOi2P+0OW0bcjWYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDk3MDQ5Ny8wLzlEMTBGQzZFMzkxNTg3Q0IxRjc4RThCNjNGRUQw RTVCNDZEQzhENjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUQxMEZDNkUzOTE1ODdDQjFGNzhFOEI2M0ZFRDBFNUI0NkRDOEQ2Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5NzA0OTcvMC85RDEwRkM2RTM5MTU4 N0NCMUY3OEU4QjYzRkVEMEU1QjQ2REM4RDY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQ6LCncQk6Jk q2zSUXZ43YecIcAmV6+r7vvdK6Ey+/J5Hr5U6DTzUMbcqJwMHliHc+UbxXN7AMhr g0zLBmYSbsxNS0JIDp0melzeVjtEb+yBCjzb7pwWclLchZMA9LDHcs0d3kSbODvD FJa+6eDHRZUM3a3JxYYqBWJcqEebFQy2xsjfrbNooGzvREz/EHVNsxLlBBK9o3if wqkDqD/FVbKgD4t4/YaleljHBWH2i/rlvwIPyL3N+zEA+zDyvhla+PYr6m7wkgZy Jg8TYbPNaYb6EcshuSqjEWdNSOZknOBrvRy7bf0Kkd54LztZSpLgYs5NPBSho50y cmvA4SG2eA== -----END CERTIFICATE-----Generated at Mon Mar 2 21:08:15 2026 by rpki-client