$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft File: 9B22C19D842E45AA84439366694E4C828C309CEE.mft (raw, json) Hash identifier: KxjaecWLm54+nkCZwX3rsuY+zgADUUuewVY8hKS+F00= Subject key identifier: 42:24:5A:30:88:46:F3:C2:15:B6:39:85:77:D4:84:32:BE:7E:DF:D7 Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE Certificate serial: 60952F5371817EA7B88B577171C534071C61D6C2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 12:58:17 +0000 Manifest this update: Mon 02 Mar 2026 12:53:17 +0000 Manifest next update: Tue 03 Mar 2026 13:36:17 +0000 Files and hashes: 1: 32372e302e3230382e302f32322d3234203d3e203633363737.roa (hash: f6wHotEj2eoN3MumWENhqkv2ZvV5V3GlKzk8Z47fNgU=) 2: 32372e302e3230342e302f32342d3234203d3e203633363738.roa (hash: Hx9VqQQEhxgaeT7KLW6yIfAzEMTB8K9rTxv2/TDSETk=) 3: 32372e302e3230342e302f32322d3234203d3e203233363530.roa (hash: rWK2v7aXbVIEAIwcbsiIL06XkwR5vO5SAmXJWyiZwd4=) 4: 32372e302e3230342e302f32322d3234203d3e203633363737.roa (hash: vNEBNDQ5XIIGXBZka1cVDjpAYI7eTN064f/yZRY4WGc=) 5: 32372e302e3230372e302f32342d3234203d3e203633363739.roa (hash: FRkm9JB/rrai+gOwgOa3Nip6NXE5SBOt5jTPPdgIVnk=) 6: 3130332e3230382e34382e302f32322d3234203d3e203633363739.roa (hash: PTCJ8osXQ96yenupPq3Qe194qtFNmzQ7FrSPJp3gDQg=) 7: 32372e302e3231322e302f32322d3234203d3e203633363737.roa (hash: ixjJUr/2XMEk+vezfUTfViQ2eX2Nagx8bYlSwGNoOV8=) 8: 3130332e3230382e34382e302f32322d3234203d3e203633363737.roa (hash: fpE/EiwUplHjkiflwKUh3EuFdN+KdT2wGpInbK2XCGw=) 9: 32372e302e3230342e302f32322d3234203d3e203633363739.roa (hash: 6fCR77vOtg3dqdGmOEVR2pv7jRW0oPBo9+Es+3KxHfA=) 10: 9B22C19D842E45AA84439366694E4C828C309CEE.crl (hash: cUzY8xbUtdfw0Sl1sSPARKOoQtgHwgHlNkIAGyV29VU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:95:2f:53:71:81:7e:a7:b8:8b:57:71:71:c5:34:07:1c:61:d6:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE Validity Not Before: Mar 2 12:53:17 2026 GMT Not After : Mar 3 13:36:17 2026 GMT Subject: CN=42245A308846F3C215B6398577D48432BE7EDFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6c:b2:32:d5:2f:ad:a1:8f:c7:73:d9:dd:f7: 7a:3f:76:df:01:52:2d:32:9f:d1:53:c6:19:5c:ab: ea:00:e0:69:ae:34:88:0d:2b:f6:a2:d4:2c:bb:9a: 74:81:9a:ab:a5:e7:4e:56:7e:a0:37:f7:08:7e:dd: 6d:db:fb:30:64:e2:c5:36:cb:5f:36:58:2e:68:7c: fd:d3:49:5b:aa:ef:dc:be:94:a9:f4:37:e2:70:42: 38:db:f3:c7:d9:a3:e5:f5:4f:3d:7d:48:ad:b6:ff: da:f3:f5:38:2b:d5:1c:5a:00:c2:b0:21:ce:ed:2a: 9e:ed:64:68:c6:03:71:68:ee:db:35:ff:f3:03:bc: 8a:c0:4b:45:91:fb:1b:96:a1:27:44:16:d3:3b:ca: c1:e3:3c:3a:a9:4d:48:7c:d2:70:10:53:10:a4:fe: 6e:af:ad:82:42:83:2f:ad:fe:46:20:00:82:4d:b5: 3b:fb:13:2c:74:a2:7b:b2:50:cb:ff:6f:87:38:2e: 06:54:e3:5d:b7:8d:a9:d2:a2:41:e8:55:a9:e5:4a: b4:b0:4c:c1:a4:9f:fe:18:da:9e:40:22:e6:69:0a: 37:24:5c:85:86:be:ad:af:a5:99:0c:cb:a0:9d:90: ea:71:c9:09:40:d1:12:f0:3d:7a:06:bc:47:92:1a: 9a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:24:5A:30:88:46:F3:C2:15:B6:39:85:77:D4:84:32:BE:7E:DF:D7 X509v3 Authority Key Identifier: keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f1:5e:62:4f:3f:0b:a5:b7:89:96:b4:98:12:e9:ed:f7:20: 9a:d5:49:f0:c4:0a:8d:6d:e2:92:7d:2a:20:7f:d9:a2:56:c0: 0a:38:13:99:0b:2d:db:46:95:c5:bb:a6:7e:24:4d:af:5f:a0: 22:0a:48:c4:41:f9:91:97:9e:8e:c9:11:ee:8d:d3:3f:59:bc: 8a:e7:78:57:c6:2d:0e:3c:1f:0e:0a:72:da:55:75:b8:39:a5: 37:2f:3c:5d:05:c8:36:8e:fc:2f:75:ef:a1:40:b1:78:7d:a2: 98:22:2c:09:08:d0:d9:b2:55:47:5a:9c:08:97:c2:30:35:a3: 3d:88:45:50:f6:10:7d:02:51:4e:3f:5a:bd:ac:ec:d6:07:09: 69:42:bd:e6:91:0e:70:0f:62:ae:5a:f5:9c:a3:c5:2a:8a:2a: 1f:58:e6:cd:36:08:d2:ab:d7:d0:33:be:e9:ce:49:ec:61:4f: 55:69:5d:76:dc:0c:f0:d8:00:da:a4:56:ca:00:60:58:cb:07: 34:85:03:5e:46:44:c4:c9:5f:f9:71:cd:f5:fd:87:6b:fd:3c: f8:e4:ba:63:69:c6:00:75:4e:3d:4c:0e:96:bc:4e:4c:cf:64: 22:ce:32:31:af:96:1c:5c:2f:b4:14:8d:e4:38:d6:c7:2b:bd: 32:57:f1:8b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYJUvU3GBfqe4i1dxccU0Bxxh1sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4 QzMwOUNFRTAeFw0yNjAzMDIxMjUzMTdaFw0yNjAzMDMxMzM2MTdaMDMxMTAvBgNV BAMTKDQyMjQ1QTMwODg0NkYzQzIxNUI2Mzk4NTc3RDQ4NDMyQkU3RURGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgbLIy1S+toY/Hc9nd93o/dt8B Ui0yn9FTxhlcq+oA4GmuNIgNK/ai1Cy7mnSBmqul505WfqA39wh+3W3b+zBk4sU2 y182WC5ofP3TSVuq79y+lKn0N+JwQjjb88fZo+X1Tz19SK22/9rz9Tgr1RxaAMKw Ic7tKp7tZGjGA3Fo7ts1//MDvIrAS0WR+xuWoSdEFtM7ysHjPDqpTUh80nAQUxCk /m6vrYJCgy+t/kYgAIJNtTv7Eyx0onuyUMv/b4c4LgZU4123janSokHoVanlSrSw TMGkn/4Y2p5AIuZpCjckXIWGvq2vpZkMy6CdkOpxyQlA0RLwPXoGvEeSGppfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQiRaMIhG88IVtjmFd9SEMr5+39cwHwYDVR0j BBgwFoAUmyLBnYQuRaqEQ5NmaU5MgowwnO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTcyMTg1OS8wLzlCMjJDMTlEODQyRTQ1QUE4NDQzOTM2NjY5NEU0 QzgyOEMzMDlDRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4QzMwOUNFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk3MjE4NTkvMC85QjIyQzE5RDg0MkU0 NUFBODQ0MzkzNjY2OTRFNEM4MjhDMzA5Q0VFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvFeYk8/C6W3 iZa0mBLp7fcgmtVJ8MQKjW3ikn0qIH/ZolbACjgTmQst20aVxbumfiRNr1+gIgpI xEH5kZeejskR7o3TP1m8iud4V8YtDjwfDgpy2lV1uDmlNy88XQXINo78L3XvoUCx eH2imCIsCQjQ2bJVR1qcCJfCMDWjPYhFUPYQfQJRTj9avazs1gcJaUK95pEOcA9i rlr1nKPFKooqH1jmzTYI0qvX0DO+6c5J7GFPVWlddtwM8NgA2qRWygBgWMsHNIUD XkZExMlf+XHN9f2Ha/08+OS6Y2nGAHVOPUwOlrxOTM9kIs4yMa+WHFwvtBSN5DjW xyu9Mlfxiw== -----END CERTIFICATE-----Generated at Mon Mar 2 20:01:13 2026 by rpki-client