$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft File: C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft (raw, json) Hash identifier: XNcwZliWSEumRpncT+9sjjuHt8zqLwPohm0FzvcVtJw= Subject key identifier: 18:77:BA:C3:2B:63:49:8C:47:50:14:A8:F4:0F:55:E5:43:B0:51:EF Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD Certificate issuer: /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD Certificate serial: 2BC573F35616FE47CDBE83127C99E0563D5EE37C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 11:33:17 +0000 Manifest this update: Mon 02 Mar 2026 11:28:17 +0000 Manifest next update: Tue 03 Mar 2026 15:03:17 +0000 Files and hashes: 1: C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl (hash: LICj3l802wSfeG7H2FoSPMQY7ou2vDZQNXhvGRJx4LM=) 2: 34332e3232372e3138382e302f32322d3234203d3e203337393633.roa (hash: GthCqUEvhOKCNWGGqKmg3IQs74n77l+6rL7RHOIf5Tc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c5:73:f3:56:16:fe:47:cd:be:83:12:7c:99:e0:56:3d:5e:e3:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD Validity Not Before: Mar 2 11:28:17 2026 GMT Not After : Mar 3 15:03:17 2026 GMT Subject: CN=1877BAC32B63498C475014A8F40F55E543B051EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:00:0b:06:a3:3c:45:56:62:90:01:c5:bf: 6e:60:55:63:93:f7:72:32:06:43:7e:d0:0c:e2:0f: 14:3b:0c:98:70:a8:37:b6:08:31:ad:13:cb:45:d2: cb:29:ed:92:9f:f5:06:ed:57:24:ef:69:55:e0:3c: 2b:2f:69:d9:fa:93:ab:b3:10:58:99:d4:22:3e:84: 61:36:b5:be:60:00:48:96:5a:b6:45:5e:91:72:bf: e9:bc:ab:98:67:1a:51:c6:e6:58:a3:60:d6:bf:7c: 9b:9c:76:86:6e:68:57:1c:0d:ff:9a:46:9c:84:59: dd:53:20:dd:86:9a:2b:db:cf:a7:51:71:19:d2:29: 69:a8:f3:4d:ee:b2:a8:54:73:60:3a:98:30:2c:a5: e7:6e:eb:22:22:6d:04:96:32:25:d8:4a:3e:ad:81: 7c:41:f6:80:b7:60:c7:60:a8:05:30:da:48:2e:31: 60:71:b0:04:b1:8e:e0:45:eb:f6:27:11:c3:2a:da: 1b:d2:d5:42:e1:f0:06:93:95:b5:92:f2:fb:ad:83: e8:6a:31:c6:3c:eb:a7:2e:20:11:9f:b8:ac:2e:08: e6:76:0f:cc:26:fb:12:be:46:82:ad:87:b5:59:d7: 2b:35:01:73:62:63:81:62:95:40:c1:b4:34:fb:41: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:77:BA:C3:2B:63:49:8C:47:50:14:A8:F4:0F:55:E5:43:B0:51:EF X509v3 Authority Key Identifier: keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:dd:1f:41:ce:b7:16:c3:85:45:26:67:fb:2c:f4:77:d5:00: 64:5b:32:c1:4b:28:ba:82:b8:d0:ef:7f:cc:60:f9:13:8c:3d: 25:9b:c6:47:d7:5d:e1:fd:59:01:a4:be:07:d9:5c:f9:c0:77: 2c:fb:c4:c3:21:eb:9a:9b:ac:03:08:93:15:2a:9e:88:28:ef: ce:52:a2:67:82:a5:0f:06:63:59:e8:fd:9d:91:36:e3:e9:ac: 95:b8:64:8b:c4:11:84:fe:05:58:28:cf:f3:61:f8:ca:5a:03: 2d:d1:94:91:7b:b2:3b:fc:49:14:a9:3a:b6:32:75:4a:47:41: 13:e8:68:c6:3c:e8:0c:c5:dd:f4:f0:73:a7:97:7d:4d:d8:55: 20:d6:6b:b2:bc:e3:74:a1:5b:95:a0:cb:34:17:f7:19:67:42: b2:cd:3b:7a:ef:be:cc:48:4c:73:38:fa:8f:8f:94:c7:d6:05: 0c:3a:6c:9f:3c:cc:93:98:c2:c4:4b:43:be:fb:aa:ce:4e:24: 5d:29:8e:10:d6:1f:e7:e3:ac:5d:92:91:52:dd:64:74:99:53: 38:1b:7b:ce:f4:4f:91:59:44:5e:08:a0:48:b7:61:c1:00:8b: 73:3a:7e:44:66:a7:81:2f:ed:87:cb:5c:a1:fd:06:ca:2f:26: 60:fb:15:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK8Vz81YW/kfNvoMSfJngVj1e43wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgyNjY3QzJCQ0JCNTM3REVCN0EzRTQxNTU3N0IyNjkw NTIxRDVERDAeFw0yNjAzMDIxMTI4MTdaFw0yNjAzMDMxNTAzMTdaMDMxMTAvBgNV BAMTKDE4NzdCQUMzMkI2MzQ5OEM0NzUwMTRBOEY0MEY1NUU1NDNCMDUxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSgALBqM8RVZikAHFv25gVWOT 93IyBkN+0AziDxQ7DJhwqDe2CDGtE8tF0ssp7ZKf9QbtVyTvaVXgPCsvadn6k6uz EFiZ1CI+hGE2tb5gAEiWWrZFXpFyv+m8q5hnGlHG5lijYNa/fJucdoZuaFccDf+a RpyEWd1TIN2Gmivbz6dRcRnSKWmo803usqhUc2A6mDAspedu6yIibQSWMiXYSj6t gXxB9oC3YMdgqAUw2kguMWBxsASxjuBF6/YnEcMq2hvS1ULh8AaTlbWS8vutg+hq McY866cuIBGfuKwuCOZ2D8wm+xK+RoKth7VZ1ys1AXNiY4FilUDBtDT7QYkdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGHe6wytjSYxHUBSo9A9V5UOwUe8wHwYDVR0j BBgwFoAUyCZnwry7U33rej5BVXeyaQUh1d0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTQ1OTcxNS8wL0M4MjY2N0MyQkNCQjUzN0RFQjdBM0U0MTU1NzdC MjY5MDUyMUQ1REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzgyNjY3QzJCQ0JCNTM3REVCN0EzRTQxNTU3N0IyNjkwNTIxRDVERC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk0NTk3MTUvMC9DODI2NjdDMkJDQkI1 MzdERUI3QTNFNDE1NTc3QjI2OTA1MjFENURELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtt0fQc63FsOF RSZn+yz0d9UAZFsywUsouoK40O9/zGD5E4w9JZvGR9dd4f1ZAaS+B9lc+cB3LPvE wyHrmpusAwiTFSqeiCjvzlKiZ4KlDwZjWej9nZE24+mslbhki8QRhP4FWCjP82H4 yloDLdGUkXuyO/xJFKk6tjJ1SkdBE+hoxjzoDMXd9PBzp5d9TdhVINZrsrzjdKFb laDLNBf3GWdCss07eu++zEhMczj6j4+Ux9YFDDpsnzzMk5jCxEtDvvuqzk4kXSmO ENYf5+OsXZKRUt1kdJlTOBt7zvRPkVlEXgigSLdhwQCLczp+RGangS/th8tcof0G yi8mYPsVcw== -----END CERTIFICATE-----Generated at Mon Mar 2 18:21:35 2026 by rpki-client