$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: SNV9OUIS4c0XxkS3uLY8C4yzXyQgxL5eWdLJdgWOl04= Subject key identifier: 02:42:4D:18:0D:FD:D1:6C:BC:77:6E:17:F7:E6:A1:4B:73:B8:50:4B Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 07E601C1CD5149249CFEE222466485D5A8140197 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 09:38:17 +0000 Manifest this update: Mon 02 Mar 2026 09:33:17 +0000 Manifest next update: Tue 03 Mar 2026 11:16:17 +0000 Files and hashes: 1: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) 2: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: WI0miEucDHyitfyhUBRzU98LjCWu1NF5vSVGRbRLcBM=) 3: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e6:01:c1:cd:51:49:24:9c:fe:e2:22:46:64:85:d5:a8:14:01:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: Mar 2 09:33:17 2026 GMT Not After : Mar 3 11:16:17 2026 GMT Subject: CN=02424D180DFDD16CBC776E17F7E6A14B73B8504B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:e4:5b:49:4b:c0:be:69:54:6a:25:b7:90: cf:18:be:48:09:24:88:0f:ca:d5:06:2c:37:8f:a8: 3c:99:ad:94:8a:2c:c2:7e:aa:81:a9:b2:31:9c:16: 93:5e:2f:e6:2a:4e:a2:88:65:e7:b4:a7:b3:bf:aa: 03:5b:d6:97:46:db:bc:0b:41:4b:8f:4a:82:b1:ab: 1d:11:be:0f:6c:f2:4b:f1:c7:00:6a:0d:de:de:a3: bc:49:56:c6:98:f8:d1:3d:21:f4:ae:fb:64:63:91: ce:58:92:a8:7f:fa:ef:1c:dd:a8:6f:0a:7e:93:a6: 2b:10:ea:5b:38:cc:62:ee:19:00:9f:84:ba:a4:3e: ec:20:4a:3d:99:13:2a:e5:a8:78:90:24:a0:4a:51: 89:01:74:0b:23:91:07:76:1f:7d:0c:e7:a4:c8:3e: aa:d2:7e:8e:27:51:de:21:d5:50:21:b5:a0:7b:24: bc:c1:30:1b:e1:49:6b:30:68:f0:d6:f3:14:34:b9: 5b:e4:45:e8:8b:87:e3:27:ff:6b:5b:9b:2c:80:f6: 74:cf:bb:09:9e:3b:92:e1:67:01:21:d3:b2:11:a4: 60:9e:9f:83:a1:e5:8d:53:20:a4:18:dd:b8:a4:2c: c5:8c:1c:dc:14:4c:32:a9:b8:d5:7e:19:7d:77:d8: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:42:4D:18:0D:FD:D1:6C:BC:77:6E:17:F7:E6:A1:4B:73:B8:50:4B X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7f:da:d1:22:31:4f:dc:6b:d0:ce:dc:eb:03:c7:52:ba:57: b8:06:ba:22:43:f3:0e:46:14:c3:c1:e7:42:bb:f4:ff:5c:f6: 5b:ae:ed:56:f5:c3:01:61:ab:80:d8:3c:83:95:fb:71:00:79: 9e:14:b2:58:46:fb:8e:b3:96:14:84:5f:56:80:1d:52:b6:bf: c2:4f:c7:5f:fe:22:be:3f:d1:06:d0:87:1a:a8:51:a6:c2:25: cb:61:6c:8f:e1:83:03:c5:0a:75:49:c2:9f:af:52:f0:61:62: 7c:c5:64:d2:5a:4e:63:dd:a2:d2:a1:61:49:11:26:12:a7:28: a6:3b:fa:f3:61:d6:d9:4b:66:07:3d:6d:df:5f:41:13:92:fb: b6:d5:dd:99:b2:fb:7e:17:8b:38:01:7a:07:31:51:e7:1a:be: 46:54:0a:23:30:70:e0:e9:83:0f:16:f2:d0:3f:c4:f6:ac:83: fc:9d:23:d0:f9:e6:fd:bc:fd:e0:07:d7:30:0b:4c:8c:2c:9f: 77:b5:d3:89:c6:1d:74:7a:62:b9:4e:bf:49:ac:a4:20:f3:ae: 40:a3:47:5e:c0:e1:20:96:51:82:e6:7d:77:37:3d:22:46:7e: 9f:00:ae:53:9e:1a:fe:20:ef:16:68:ff:11:76:85:5d:40:a9: 20:74:18:ed -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB+YBwc1RSSSc/uIiRmSF1agUAZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjAzMDIwOTMzMTdaFw0yNjAzMDMxMTE2MTdaMDMxMTAvBgNV BAMTKDAyNDI0RDE4MERGREQxNkNCQzc3NkUxN0Y3RTZBMTRCNzNCODUwNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkOuRbSUvAvmlUaiW3kM8YvkgJ JIgPytUGLDePqDyZrZSKLMJ+qoGpsjGcFpNeL+YqTqKIZee0p7O/qgNb1pdG27wL QUuPSoKxqx0Rvg9s8kvxxwBqDd7eo7xJVsaY+NE9IfSu+2Rjkc5Ykqh/+u8c3ahv Cn6TpisQ6ls4zGLuGQCfhLqkPuwgSj2ZEyrlqHiQJKBKUYkBdAsjkQd2H30M56TI PqrSfo4nUd4h1VAhtaB7JLzBMBvhSWswaPDW8xQ0uVvkReiLh+Mn/2tbmyyA9nTP uwmeO5LhZwEh07IRpGCen4Oh5Y1TIKQY3bikLMWMHNwUTDKpuNV+GX132KV1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAkJNGA390Wy8d24X9+ahS3O4UEswHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3/a0SIxT9xr 0M7c6wPHUrpXuAa6IkPzDkYUw8HnQrv0/1z2W67tVvXDAWGrgNg8g5X7cQB5nhSy WEb7jrOWFIRfVoAdUra/wk/HX/4ivj/RBtCHGqhRpsIly2Fsj+GDA8UKdUnCn69S 8GFifMVk0lpOY92i0qFhSREmEqcopjv682HW2UtmBz1t319BE5L7ttXdmbL7fheL OAF6BzFR5xq+RlQKIzBw4OmDDxby0D/E9qyD/J0j0Pnm/bz94AfXMAtMjCyfd7XT icYddHpiuU6/SaykIPOuQKNHXsDhIJZRguZ9dzc9IkZ+nwCuU54a/iDvFmj/EXaF XUCpIHQY7Q== -----END CERTIFICATE-----Generated at Mon Mar 2 15:21:28 2026 by rpki-client