$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft File: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft (raw, json) Hash identifier: J0Spgb7yzGCDgH/3Icd/ZPDmB0dbSvJxalQhj9jTXtE= Subject key identifier: A5:2A:47:BF:E1:0B:CC:7F:EB:64:F1:06:03:D1:ED:23:31:6B:5F:70 Authority key identifier: 9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 Certificate issuer: /CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Certificate serial: 2C0D3846D23C634A73FD07A21ACF3DE7774370D0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 23:48:16 +0000 Manifest this update: Sun 01 Mar 2026 23:43:16 +0000 Manifest next update: Tue 03 Mar 2026 02:10:16 +0000 Files and hashes: 1: 323430303a353238303a343430303a3a2f33382d3338203d3e203633313939.roa (hash: PZpvOJ79B3+v+Ig/cY0R0dd/kREz5TklSnuw4BHna5k=) 2: 9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl (hash: ggiIdTm+aRzhySdyoe0D1a+fLMvQpOWymHM3xfRny10=) 3: 323430303a353238303a343030303a3a2f33382d3338203d3e203633313939.roa (hash: VLWs1MOagyRUFeUiUi74U3IkGzuxu68szaETh9T31ns=) 4: 323430303a353238303a343830303a3a2f33382d3338203d3e203633313939.roa (hash: 7ssKnd9cjBOU2kO59bHrjY+5RWNLO5X7QF02nxsOFtk=) 5: 323430303a353238303a336330303a3a2f33382d3338203d3e203633313939.roa (hash: vLjzej9BGyHuqC6sUVDGzNiHv3TweGRyRvLEckbizcc=) 6: 3130362e332e3133392e302f32342d3234203d3e203633313939.roa (hash: yg1jTqj1EVwFDnWcCKP21rIIoexnkGEjd3BNf40P0DM=) 7: 323430303a353238303a323030303a3a2f33382d3338203d3e203633313939.roa (hash: fuUdVOrhiUcDjt1XkJLg6UX15/AKeKejc2EgKLTBOo0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0d:38:46:d2:3c:63:4a:73:fd:07:a2:1a:cf:3d:e7:77:43:70:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E07B02EF274E339B3C4B2259855E52AFD2C0115 Validity Not Before: Mar 1 23:43:16 2026 GMT Not After : Mar 3 02:10:16 2026 GMT Subject: CN=A52A47BFE10BCC7FEB64F10603D1ED23316B5F70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:3a:4b:20:93:bb:20:8e:21:81:ad:32:c7: f9:33:2d:02:f4:29:24:dc:46:f1:1d:28:3b:c1:ca: 87:b7:f1:a9:08:04:6e:50:8c:f3:4a:1b:93:48:c0: 00:e7:bb:89:69:d6:58:27:b6:54:33:1d:f4:fa:80: a6:ef:c3:26:67:c9:a8:36:a7:ae:95:6c:da:8b:4c: a4:c9:1b:a7:e7:60:3a:a3:5a:4b:d3:8f:ca:d8:dd: ac:4e:1c:68:60:00:8f:a7:ab:6b:c0:ba:9d:ae:ab: 0c:ba:64:f7:02:6d:26:2b:06:ff:b6:51:2a:46:34: 67:3d:e0:fe:6e:af:2a:69:26:a6:b0:31:ab:c6:76: 21:c7:ec:45:fa:41:8b:7d:a1:7b:3e:b1:ed:11:d2: 91:77:52:94:2b:2a:ef:5e:89:7c:7a:dd:c8:b9:e9: 6f:3e:10:4b:7d:95:07:d5:52:4d:9e:58:01:e7:81: 11:25:8c:b2:83:cf:96:df:48:0b:89:b6:49:ce:43: 8c:6b:83:98:d7:9e:27:50:8d:2c:b2:d7:98:a3:c9: 2c:13:eb:f0:13:9e:aa:ad:e9:e5:10:e2:fa:03:ce: ee:90:09:c0:53:3d:ec:19:ec:3b:fe:8b:1f:93:e4: ce:01:f8:6a:d6:ae:05:56:6f:d2:51:60:b1:4a:c5: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2A:47:BF:E1:0B:CC:7F:EB:64:F1:06:03:D1:ED:23:31:6B:5F:70 X509v3 Authority Key Identifier: keyid:9E:07:B0:2E:F2:74:E3:39:B3:C4:B2:25:98:55:E5:2A:FD:2C:01:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9E07B02EF274E339B3C4B2259855E52AFD2C0115.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/0/9E07B02EF274E339B3C4B2259855E52AFD2C0115.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:25:cd:47:35:b5:ae:60:89:05:f5:b1:f5:d5:5c:db:35:7d: 2f:8e:76:db:9f:2c:e2:77:63:48:4d:94:69:9c:cb:1e:38:01: fe:13:09:da:60:a8:6e:d0:77:2f:13:a0:78:db:ba:6d:2e:d8: 9a:67:ae:b3:03:63:b3:63:1d:14:14:0f:ab:65:ee:e1:fd:01: 31:14:b2:56:8b:4c:5f:a7:44:7e:11:ab:2d:15:b5:1f:14:40: 49:08:84:a8:0d:8f:3f:fc:80:1b:b6:73:6d:9a:9b:fa:65:68: be:c0:06:1f:52:8a:3a:05:67:6f:09:79:d9:38:fd:db:c1:04: 3e:35:b5:e7:49:59:4f:64:57:2f:e9:23:d8:9a:8e:10:ea:46: 5e:b9:c4:cc:d3:cb:e6:5b:f3:fe:29:b4:dc:54:30:52:69:35: bd:4c:44:51:e3:74:d8:bf:9a:32:b0:46:39:37:68:03:6c:2a: 60:bd:b4:0b:fb:17:4c:eb:fd:e7:5d:c1:75:d8:df:dd:ad:38: c5:7f:b8:f5:48:00:eb:5e:30:c4:1b:cc:36:18:f7:87:49:65: 02:78:10:84:b1:51:1b:1a:44:6b:bd:bb:62:17:bf:b3:10:ab: 16:ef:f4:4e:6d:3b:2a:8d:f7:6b:6a:c7:bf:6c:12:52:20:53: 30:f3:84:a5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULA04RtI8Y0pz/QeiGs8953dDcNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFG RDJDMDExNTAeFw0yNjAzMDEyMzQzMTZaFw0yNjAzMDMwMjEwMTZaMDMxMTAvBgNV BAMTKEE1MkE0N0JGRTEwQkNDN0ZFQjY0RjEwNjAzRDFFRDIzMzE2QjVGNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25DpLIJO7II4hga0yx/kzLQL0 KSTcRvEdKDvByoe38akIBG5QjPNKG5NIwADnu4lp1lgntlQzHfT6gKbvwyZnyag2 p66VbNqLTKTJG6fnYDqjWkvTj8rY3axOHGhgAI+nq2vAup2uqwy6ZPcCbSYrBv+2 USpGNGc94P5uryppJqawMavGdiHH7EX6QYt9oXs+se0R0pF3UpQrKu9eiXx63ci5 6W8+EEt9lQfVUk2eWAHngREljLKDz5bfSAuJtknOQ4xrg5jXnidQjSyy15ijySwT 6/ATnqqt6eUQ4voDzu6QCcBTPewZ7Dv+ix+T5M4B+GrWrgVWb9JRYLFKxVjVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpSpHv+ELzH/rZPEGA9HtIzFrX3AwHwYDVR0j BBgwFoAUngewLvJ04zmzxLIlmFXlKv0sARUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODE1NjkzMC8wLzlFMDdCMDJFRjI3NEUzMzlCM0M0QjIyNTk4NTVF NTJBRkQyQzAxMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUUwN0IwMkVGMjc0RTMzOUIzQzRCMjI1OTg1NUU1MkFGRDJDMDExNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgxNTY5MzAvMC85RTA3QjAyRUYyNzRF MzM5QjNDNEIyMjU5ODU1RTUyQUZEMkMwMTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSXNRzW1rmCJ BfWx9dVc2zV9L452258s4ndjSE2UaZzLHjgB/hMJ2mCobtB3LxOgeNu6bS7Ymmeu swNjs2MdFBQPq2Xu4f0BMRSyVotMX6dEfhGrLRW1HxRASQiEqA2PP/yAG7ZzbZqb +mVovsAGH1KKOgVnbwl52Tj928EEPjW150lZT2RXL+kj2JqOEOpGXrnEzNPL5lvz /im03FQwUmk1vUxEUeN02L+aMrBGOTdoA2wqYL20C/sXTOv9513Bddjf3a04xX+4 9UgA614wxBvMNhj3h0llAngQhLFRGxpEa727Yhe/sxCrFu/0Tm07Ko33a2rHv2wS UiBTMPOEpQ== -----END CERTIFICATE-----Generated at Mon Mar 2 18:44:25 2026 by rpki-client