$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft File: 12292A8CE4276ED3C82E79BA376F7A0363A06716.mft (raw, json) Hash identifier: PYkMRX9PTsY4povs6hv8dRuHpqQsvoW93k/gayvsF5I= Subject key identifier: 61:03:16:99:5A:06:73:54:54:67:DF:9B:10:3C:EA:27:FF:70:CA:3E Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16 Certificate issuer: /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716 Certificate serial: 71DE4E5EE9D195680A0CA5819814E2AEEF3D6DDA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 01:18:16 +0000 Manifest this update: Mon 02 Mar 2026 01:13:16 +0000 Manifest next update: Tue 03 Mar 2026 04:00:16 +0000 Files and hashes: 1: 3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa (hash: zBALkojrGEY7SR5/7+fqt3Odg1/G/Zmmn1B3936v+KM=) 2: 12292A8CE4276ED3C82E79BA376F7A0363A06716.crl (hash: mnPZ4MbZCK1QGWIwmR91Y8/6n0OMJPPa9v1D7ZnhuXQ=) 3: 3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa (hash: POleG0l4wno//ZX5b+0oZBB9yM8f+wy3+HMPXea5rYs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:de:4e:5e:e9:d1:95:68:0a:0c:a5:81:98:14:e2:ae:ef:3d:6d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716 Validity Not Before: Mar 2 01:13:16 2026 GMT Not After : Mar 3 04:00:16 2026 GMT Subject: CN=610316995A0673545467DF9B103CEA27FF70CA3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:74:16:f9:f3:91:fe:d1:e8:1a:b3:64:49: 41:cb:74:44:99:39:ad:a0:60:eb:b3:aa:06:4f:94: 9d:ce:d5:90:91:33:8b:31:7e:be:80:97:01:a2:ad: 1d:10:c7:c2:92:78:b3:15:80:f6:c7:a9:84:ba:f3: 8c:f9:65:21:95:8f:13:c5:11:60:b0:68:c5:46:3f: ce:45:8f:83:7d:8c:24:cd:f6:e8:14:be:ec:ff:dd: 3f:57:8f:71:a6:f2:bd:d7:f1:93:0a:ad:7a:28:6b: f2:1b:69:40:06:be:2e:8a:32:3c:80:4a:40:04:da: 51:82:b2:53:a8:1d:ec:51:1a:05:8b:32:f5:90:4f: fa:28:92:aa:04:64:84:b7:3c:47:43:08:ab:8e:f0: ad:c5:ed:12:78:a9:43:84:db:af:84:a8:0a:af:13: 60:5f:a9:04:02:61:e8:28:b3:86:73:4f:8c:d4:a6: 3c:77:12:c6:bd:a4:f0:11:86:fe:23:a8:a1:12:f4: ca:c6:99:7d:3b:d0:08:ed:ed:03:c8:34:a5:64:50: 26:30:db:93:83:bb:e1:26:2c:b4:37:a5:33:6a:39: bc:05:65:87:3d:d1:d7:37:b5:98:6b:e7:ea:ce:8c: 4b:3b:e3:97:74:47:3d:00:ff:5c:9e:94:ca:e1:45: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:03:16:99:5A:06:73:54:54:67:DF:9B:10:3C:EA:27:FF:70:CA:3E X509v3 Authority Key Identifier: keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c6:b5:09:c4:60:ce:2a:c2:a7:61:6d:06:19:e9:4a:3b:cd: 6c:49:1e:ce:76:c8:52:62:3f:3d:5e:a3:1d:2b:7c:73:b8:b1: 08:bf:8f:a4:80:c5:ad:31:d1:9c:d3:68:cc:bd:98:8f:bd:89: b8:eb:64:ff:10:fe:34:8d:e8:28:90:b1:b7:02:11:a6:00:c7: 35:60:06:0e:86:68:5f:58:86:e7:6e:fc:5a:42:0b:ee:c7:21: 22:7a:da:8d:6c:79:63:61:46:3b:4a:4c:b4:bd:da:73:3a:a1: 51:92:e8:3f:ab:cd:5a:1f:24:b3:c0:3f:d7:7c:74:56:fb:b1: c6:8e:f0:ec:0b:51:f7:8c:e8:a8:48:35:e3:c7:ab:03:9e:dc: f2:de:25:8c:1f:c8:78:17:0b:5e:60:5f:96:db:a8:60:d5:a9: 37:3d:21:7a:9a:b3:61:23:41:26:7d:6c:c7:8b:51:3d:a3:50: 42:9f:35:3c:b5:3d:6e:ee:94:7d:9e:c5:47:a7:4d:fa:03:41: a9:de:8d:5d:08:8d:4f:ec:26:f4:21:fe:d3:01:e8:35:00:ba: db:d5:4e:2f:b4:fc:9b:5f:6d:ea:cb:42:b8:82:da:7e:fc:32: 68:34:1c:be:a8:51:30:bc:05:a0:93:f3:b1:c4:d4:d8:6d:e0: 7b:bf:93:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcd5OXunRlWgKDKWBmBTiru89bdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2 M0EwNjcxNjAeFw0yNjAzMDIwMTEzMTZaFw0yNjAzMDMwNDAwMTZaMDMxMTAvBgNV BAMTKDYxMDMxNjk5NUEwNjczNTQ1NDY3REY5QjEwM0NFQTI3RkY3MENBM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDOHQW+fOR/tHoGrNkSUHLdESZ Oa2gYOuzqgZPlJ3O1ZCRM4sxfr6AlwGirR0Qx8KSeLMVgPbHqYS684z5ZSGVjxPF EWCwaMVGP85Fj4N9jCTN9ugUvuz/3T9Xj3Gm8r3X8ZMKrXooa/IbaUAGvi6KMjyA SkAE2lGCslOoHexRGgWLMvWQT/ookqoEZIS3PEdDCKuO8K3F7RJ4qUOE26+EqAqv E2BfqQQCYegos4ZzT4zUpjx3Esa9pPARhv4jqKES9MrGmX070Ajt7QPINKVkUCYw 25ODu+EmLLQ3pTNqObwFZYc90dc3tZhr5+rOjEs745d0Rz0A/1yelMrhRVvlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYQMWmVoGc1RUZ9+bEDzqJ/9wyj4wHwYDVR0j BBgwFoAUEikqjOQnbtPILnm6N296A2OgZxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTY2MjQ2NS8wLzEyMjkyQThDRTQyNzZFRDNDODJFNzlCQTM3NkY3 QTAzNjNBMDY3MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2M0EwNjcxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE2NjI0NjUvMC8xMjI5MkE4Q0U0Mjc2 RUQzQzgyRTc5QkEzNzZGN0EwMzYzQTA2NzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACca1CcRgzirC p2FtBhnpSjvNbEkeznbIUmI/PV6jHSt8c7ixCL+PpIDFrTHRnNNozL2Yj72JuOtk /xD+NI3oKJCxtwIRpgDHNWAGDoZoX1iG5278WkIL7schInrajWx5Y2FGO0pMtL3a czqhUZLoP6vNWh8ks8A/13x0Vvuxxo7w7AtR94zoqEg148erA57c8t4ljB/IeBcL XmBfltuoYNWpNz0hepqzYSNBJn1sx4tRPaNQQp81PLU9bu6UfZ7FR6dN+gNBqd6N XQiNT+wm9CH+0wHoNQC629VOL7T8m19t6stCuILafvwyaDQcvqhRMLwFoJPzscTU 2G3ge7+Txg== -----END CERTIFICATE-----Generated at Mon Mar 2 19:58:06 2026 by rpki-client