$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json) Hash identifier: kGo0AeovOngHaakINxWTjiZfUx6jcqNzFcl0lKxgOzo= Subject key identifier: 9B:85:21:15:BE:63:94:32:4D:7B:5E:52:E7:B5:7F:F9:AA:D1:27:EA Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 7C67F389212117651E3631F9AF4FC8E82DD7CC29 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft Manifest number: 37 Signing time: Sun 01 Mar 2026 11:48:16 +0000 Manifest this update: Sun 01 Mar 2026 11:43:16 +0000 Manifest next update: Mon 02 Mar 2026 14:25:16 +0000 Files and hashes: 1: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: M054Iv2JLddYObPE/+A7XHgm+pg7fsV3HQ8n5yUxzw0=) 2: 3130332e32302e34362e302f32342d3234203d3e203137343038.roa (hash: Cqxt0WZEcv/CrX8zUgyTIyMtPh2X566qKRuS9+MgsQI=) 3: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 14:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:67:f3:89:21:21:17:65:1e:36:31:f9:af:4f:c8:e8:2d:d7:cc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Mar 1 11:43:16 2026 GMT Not After : Mar 2 14:25:16 2026 GMT Subject: CN=9B852115BE6394324D7B5E52E7B57FF9AAD127EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:89:14:da:d6:7b:8f:a3:33:92:41:17:71:fd: 92:8d:72:9c:11:01:5d:f6:1b:3e:ff:98:da:e4:d5: 93:17:47:fc:bd:c5:92:36:07:fa:79:a3:74:09:7a: 6e:24:15:92:49:fc:3a:47:94:a1:84:61:53:2f:fc: 51:28:31:53:b1:35:16:2c:93:40:c5:29:ba:ea:f7: 4c:1d:01:56:47:48:36:2c:8c:7b:e3:33:b6:6b:42: c0:73:4e:f2:b2:02:c7:16:d2:92:6a:e7:97:bc:34: f3:b6:55:2d:61:a1:3e:a8:0d:89:f0:27:63:53:ee: 46:a6:e8:57:ca:a9:b2:a0:2f:57:a0:28:7a:89:48: cc:0d:4a:3a:ee:c0:7b:9a:b4:5f:65:45:e9:f4:42: 59:ac:45:da:25:16:81:da:13:ba:3c:77:a4:9d:8f: 5a:ba:9e:91:ab:f5:6c:c8:85:66:16:70:ee:66:65: a7:af:14:3a:fe:3b:1b:35:f2:16:66:3b:28:4b:1d: 6b:c9:70:f5:9d:6d:57:e5:9f:4a:17:93:58:0f:1b: 3b:f6:b4:ce:cd:7a:74:5e:a1:67:10:d5:9b:b4:03: d8:69:71:84:04:7d:93:ea:bd:d3:7c:f3:ee:1c:86: de:72:72:cf:ae:2d:f1:74:ac:23:b8:a6:99:83:fd: b9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:85:21:15:BE:63:94:32:4D:7B:5E:52:E7:B5:7F:F9:AA:D1:27:EA X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c2:b3:52:40:ce:eb:ad:0b:d6:05:c9:59:25:7f:7d:80:c7: 9c:ac:da:31:12:29:73:18:7f:91:d3:aa:1d:21:40:6a:53:14: 68:53:1d:20:0d:22:18:8b:8b:3f:a4:9c:2e:db:48:18:c8:55: da:8c:1d:ef:df:72:84:26:71:a3:b8:31:15:1e:c8:ea:c3:f2: 0b:e6:c7:00:fe:56:d7:14:6c:d5:35:c4:20:82:b2:71:d9:63: a7:1d:e7:93:a6:ee:1c:6f:51:64:3a:54:62:f4:9e:a3:44:ce: ec:54:90:61:20:db:b7:1b:7f:dd:3e:a7:78:59:9a:8d:19:7e: 6c:d8:cf:b1:63:0f:53:b4:af:70:c1:b4:5c:55:02:25:4e:9b: c9:52:76:8d:04:43:61:fc:28:d4:a0:bd:8c:89:c8:7f:59:0a: 0c:ef:22:e0:ce:c5:ff:6f:11:1e:1c:68:d8:30:80:b5:e0:d7: 31:60:4a:42:92:10:1f:ae:de:7d:5e:fa:24:4b:14:54:74:49: cd:2d:5f:a4:83:dc:35:5b:4e:ca:bb:93:6a:cc:1b:f4:0e:4e: 70:ea:8e:de:bd:4d:a6:04:43:fd:b2:c8:29:d0:13:09:11:b3: c6:e8:66:26:b7:17:14:1f:64:ac:d9:5c:a3:0e:e4:e4:9e:79: 84:f3:91:3c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfGfziSEhF2UeNjH5r0/I6C3XzCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjAzMDExMTQzMTZaFw0yNjAzMDIxNDI1MTZaMDMxMTAvBgNV BAMTKDlCODUyMTE1QkU2Mzk0MzI0RDdCNUU1MkU3QjU3RkY5QUFEMTI3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCliRTa1nuPozOSQRdx/ZKNcpwR AV32Gz7/mNrk1ZMXR/y9xZI2B/p5o3QJem4kFZJJ/DpHlKGEYVMv/FEoMVOxNRYs k0DFKbrq90wdAVZHSDYsjHvjM7ZrQsBzTvKyAscW0pJq55e8NPO2VS1hoT6oDYnw J2NT7kam6FfKqbKgL1egKHqJSMwNSjruwHuatF9lRen0QlmsRdolFoHaE7o8d6Sd j1q6npGr9WzIhWYWcO5mZaevFDr+Oxs18hZmOyhLHWvJcPWdbVfln0oXk1gPGzv2 tM7NenReoWcQ1Zu0A9hpcYQEfZPqvdN88+4cht5ycs+uLfF0rCO4ppmD/bmjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUm4UhFb5jlDJNe15S57V/+arRJ+owHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1OTA3ODcvMC9GRjRFNjhFRDEwQUFC MDdEOEY0RUVDMDVGRDAzNDU3OTUzRjkzN0UxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcKzUkDO660L 1gXJWSV/fYDHnKzaMRIpcxh/kdOqHSFAalMUaFMdIA0iGIuLP6ScLttIGMhV2owd 799yhCZxo7gxFR7I6sPyC+bHAP5W1xRs1TXEIIKycdljpx3nk6buHG9RZDpUYvSe o0TO7FSQYSDbtxt/3T6neFmajRl+bNjPsWMPU7SvcMG0XFUCJU6byVJ2jQRDYfwo 1KC9jInIf1kKDO8i4M7F/28RHhxo2DCAteDXMWBKQpIQH67efV76JEsUVHRJzS1f pIPcNVtOyruTaswb9A5OcOqO3r1NpgRD/bLIKdATCRGzxuhmJrcXFB9krNlcow7k 5J55hPORPA== -----END CERTIFICATE-----Generated at Mon Mar 2 08:41:07 2026 by rpki-client