$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft File: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json) Hash identifier: E0EE0df/cA7KZcouVJ9u0ZvaMShY+HHEuaqtFaOGE1w= Subject key identifier: E3:F3:DB:9F:F2:D6:04:21:2E:AE:70:28:B9:6D:B4:8A:BA:B6:6A:9D Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 Certificate issuer: /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85 Certificate serial: 6F3889F6F3619BD6953F1D56B33C2C484BC17F1F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 23:08:16 +0000 Manifest this update: Sun 01 Mar 2026 23:03:16 +0000 Manifest next update: Tue 03 Mar 2026 00:53:16 +0000 Files and hashes: 1: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: 2+1onCzEZvQh27eklZ+avVHStruvhMD42qkNjfVZUG0=) 2: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 00:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:38:89:f6:f3:61:9b:d6:95:3f:1d:56:b3:3c:2c:48:4b:c1:7f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85 Validity Not Before: Mar 1 23:03:16 2026 GMT Not After : Mar 3 00:53:16 2026 GMT Subject: CN=E3F3DB9FF2D604212EAE7028B96DB48ABAB66A9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:b7:6f:83:9f:a8:44:b3:9f:da:de:3e:73: c3:5d:15:b8:3b:a7:4e:a9:b7:16:e0:63:23:30:a9: 9d:57:24:f1:48:19:25:40:d6:90:36:ba:2e:ca:5f: 5c:26:f1:32:04:e2:a9:89:dc:6b:51:44:e2:2e:98: 02:96:4a:ab:03:27:e4:d7:78:59:3e:eb:70:27:c0: b3:f3:60:51:9c:0f:9c:04:c9:35:93:f8:b6:9b:e6: ca:58:4c:2d:25:84:ec:36:92:9e:1a:f8:36:fe:81: 29:85:2a:2f:3f:9a:22:68:93:61:56:b6:c0:bb:11: ff:7b:8c:63:b7:63:ec:55:d4:6e:41:90:7c:90:3d: b2:3e:08:8b:06:95:97:ac:fd:de:f4:f0:29:21:54: a5:7c:66:58:d6:aa:3b:ca:8d:b0:5f:8f:ef:f5:9d: ba:95:dc:80:9c:02:52:d3:42:4e:01:57:f1:d7:2a: 3c:28:f8:0d:b9:6b:04:9b:35:b2:ac:32:df:6f:b6: 18:3f:58:c9:17:f0:79:63:68:26:91:89:53:fa:f9: 07:81:0a:5a:cc:e2:61:59:6d:c9:23:d8:d7:63:d2: 5e:3f:37:57:11:b6:b5:e9:34:b5:47:f1:b2:a6:75: ac:55:d8:a6:4e:b4:ee:1f:2e:a1:b3:a3:41:31:db: d6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F3:DB:9F:F2:D6:04:21:2E:AE:70:28:B9:6D:B4:8A:BA:B6:6A:9D X509v3 Authority Key Identifier: keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bf:96:16:fc:78:28:03:b5:4b:46:d3:7f:c0:86:a1:df:c2: 86:e1:44:d7:53:7a:d1:54:39:40:fe:34:26:50:de:23:f4:fc: 3b:f2:67:bb:e9:cd:1e:17:b2:16:de:9c:7d:80:31:cc:5f:54: 88:3a:19:94:b1:c9:a2:01:84:d4:5a:90:d6:b1:a1:8c:3f:78: 78:02:9a:1c:79:9f:ce:43:6e:a5:98:24:a6:9d:7b:4b:f3:0e: a9:a7:b2:48:c4:d5:4b:fa:9f:75:75:d0:e9:f8:c3:86:df:fa: 85:eb:91:43:39:7f:d0:10:b0:c9:24:14:dc:5a:56:5c:64:bb: b7:ae:18:8f:dd:5d:c6:b9:43:a8:39:5d:a6:01:0d:2a:d3:e2: a4:48:91:70:f1:1b:f3:f7:9d:3c:96:8b:d1:0d:a4:3b:d5:b8: da:60:46:57:5a:79:06:7e:89:74:bd:7f:c1:e3:ef:b1:6f:39: b0:44:4d:d7:01:53:12:d6:24:de:96:13:3b:95:98:b9:9d:9f: 37:2a:67:1a:c5:16:da:95:92:34:cd:cd:48:97:39:a0:2f:de: 12:1e:8e:10:76:47:20:1e:15:a0:53:da:31:81:cf:03:7a:46: be:5c:f0:e4:2d:a6:51:be:97:d5:31:59:7e:5b:d1:4a:7d:67: c8:bd:6b:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbziJ9vNhm9aVPx1WszwsSEvBfx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1 ODFBNUM4NTAeFw0yNjAzMDEyMzAzMTZaFw0yNjAzMDMwMDUzMTZaMDMxMTAvBgNV BAMTKEUzRjNEQjlGRjJENjA0MjEyRUFFNzAyOEI5NkRCNDhBQkFCNjZBOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwIrdvg5+oRLOf2t4+c8NdFbg7 p06ptxbgYyMwqZ1XJPFIGSVA1pA2ui7KX1wm8TIE4qmJ3GtRROIumAKWSqsDJ+TX eFk+63AnwLPzYFGcD5wEyTWT+Lab5spYTC0lhOw2kp4a+Db+gSmFKi8/miJok2FW tsC7Ef97jGO3Y+xV1G5BkHyQPbI+CIsGlZes/d708CkhVKV8ZljWqjvKjbBfj+/1 nbqV3ICcAlLTQk4BV/HXKjwo+A25awSbNbKsMt9vthg/WMkX8HljaCaRiVP6+QeB ClrM4mFZbckj2Ndj0l4/N1cRtrXpNLVH8bKmdaxV2KZOtO4fLqGzo0Ex29btAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4/Pbn/LWBCEurnAouW20irq2ap0wHwYDVR0j BBgwFoAULmvn7gQ6AdPNSD8wLDReRlgaXIUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzU0NjQ5OS8wLzJFNkJFN0VFMDQzQTAxRDNDRDQ4M0YzMDJDMzQ1 RTQ2NTgxQTVDODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1ODFBNUM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc1NDY0OTkvMC8yRTZCRTdFRTA0M0Ew MUQzQ0Q0ODNGMzAyQzM0NUU0NjU4MUE1Qzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7+WFvx4KAO1 S0bTf8CGod/ChuFE11N60VQ5QP40JlDeI/T8O/Jnu+nNHheyFt6cfYAxzF9UiDoZ lLHJogGE1FqQ1rGhjD94eAKaHHmfzkNupZgkpp17S/MOqaeySMTVS/qfdXXQ6fjD ht/6heuRQzl/0BCwySQU3FpWXGS7t64Yj91dxrlDqDldpgENKtPipEiRcPEb8/ed PJaL0Q2kO9W42mBGV1p5Bn6JdL1/wePvsW85sERN1wFTEtYk3pYTO5WYuZ2fNypn GsUW2pWSNM3NSJc5oC/eEh6OEHZHIB4VoFPaMYHPA3pGvlzw5C2mUb6X1TFZflvR Sn1nyL1r9g== -----END CERTIFICATE-----Generated at Mon Mar 2 11:49:46 2026 by rpki-client