$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json) Hash identifier: FVLaT3dNRqzkMwSHZ/LS9KNRANT6LsHvn1sl/UmvNMM= Subject key identifier: AB:04:B2:CF:1A:72:44:D1:2A:24:87:DC:B2:46:6E:81:46:9B:92:C4 Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Certificate serial: 1F8EAE5AC0B2DC0F22245C536830F7558E4D5146 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 05:48:16 +0000 Manifest this update: Mon 02 Mar 2026 05:43:16 +0000 Manifest next update: Tue 03 Mar 2026 09:08:16 +0000 Files and hashes: 1: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: 7fZPU2CkxgbEgmbqi6+i7uJAP2jv/Sad+j1ibnk6AcU=) 2: 323430313a353138303a3a2f33322d3332203d3e203539303030.roa (hash: TRLluA6jf4NdFyOWtNNpbTdRhqAOQP2P0L4Vhj+33WU=) 3: 323430313a353138303a3a2f33322d3332203d3e203331323136.roa (hash: c2BFIJVN4JIT5LRTdXldbHvwV8Z329mItcC2iWdKyZo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:8e:ae:5a:c0:b2:dc:0f:22:24:5c:53:68:30:f7:55:8e:4d:51:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Validity Not Before: Mar 2 05:43:16 2026 GMT Not After : Mar 3 09:08:16 2026 GMT Subject: CN=AB04B2CF1A7244D12A2487DCB2466E81469B92C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a8:dd:4d:ad:06:9f:0b:fc:0c:b8:2a:21:76: 60:43:da:76:d3:1e:15:91:0a:ef:94:39:f6:cd:5d: 59:b0:ec:2e:5b:39:03:4f:ce:46:19:bf:02:c9:46: e7:b0:6f:16:64:42:f0:e8:98:e0:cd:09:74:4b:91: 35:17:94:9e:8e:a5:9b:c0:94:de:63:63:1e:54:03: f3:3b:ef:05:af:d8:90:84:9d:2e:42:3a:93:10:77: 98:c6:86:fb:1c:ef:0a:a7:41:5f:3d:1b:5d:e6:09: e7:8e:29:6f:1e:86:3d:27:b2:da:16:0d:ff:33:8f: c0:95:28:13:7f:9a:de:90:0b:56:16:8c:ce:26:b6: 38:f6:ad:43:38:f9:d3:34:1b:0d:ab:5e:35:8a:c2: 78:9f:33:82:c2:f5:7b:61:c0:6d:69:92:3f:31:1d: 9d:60:33:2c:64:d6:b2:8d:80:de:66:ad:97:86:44: 04:8e:10:d4:27:fd:82:ba:ca:6c:67:89:fe:43:8e: 9a:df:db:41:04:98:04:a7:67:59:7c:ce:ca:3a:65: 4e:0e:7f:3f:87:b8:eb:68:d1:92:e7:92:2f:6d:2d: 9b:cd:2a:6d:97:8b:7a:53:d8:28:a0:d1:ea:67:04: 1b:1b:16:9b:62:f0:27:53:8e:b8:ad:49:6a:74:59: 04:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:04:B2:CF:1A:72:44:D1:2A:24:87:DC:B2:46:6E:81:46:9B:92:C4 X509v3 Authority Key Identifier: keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a3:59:d2:e3:62:26:9f:50:48:c0:ea:2f:a5:da:25:09:e4: 84:fc:17:13:75:ba:aa:b4:2f:fc:8e:3a:97:95:9a:0a:12:36: 91:ac:f7:e9:3a:47:8b:89:21:ed:d4:22:44:a7:32:ca:33:d3: 0b:cc:19:dc:cc:30:0a:df:6d:05:e3:c3:c7:6b:17:c9:29:b9: 3e:f7:be:d4:89:f3:86:7c:c8:6f:b4:6f:1d:1c:bc:00:e6:89: 4b:0c:fd:cf:2b:3c:bc:68:a3:d8:11:c2:79:d6:68:ff:70:de: 68:40:a5:85:a6:7b:3a:49:8e:2b:88:65:b2:9f:c7:33:47:59: 90:df:32:59:ab:23:58:de:46:26:82:ee:68:5b:06:38:53:d1: cf:51:5b:eb:66:fa:80:29:28:f5:8a:0b:e4:bf:c7:82:d7:7b: 2f:29:ec:a8:51:34:20:68:fd:ff:55:ca:11:56:a6:d3:a3:47: 87:2c:92:ba:97:6f:d4:38:50:92:4c:0e:d8:85:c3:67:82:33: 2e:e3:c5:ba:a0:9d:18:d8:7c:a0:60:f1:f2:e2:aa:1f:ea:57: 11:2e:38:24:01:bc:7b:69:1d:74:fe:77:ad:af:b7:91:28:98: 85:66:49:69:7b:77:ae:36:dd:fc:db:ec:19:a3:2b:86:58:52: d1:b6:4f:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUH46uWsCy3A8iJFxTaDD3VY5NUUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYy M0FDNjk1ODAeFw0yNjAzMDIwNTQzMTZaFw0yNjAzMDMwOTA4MTZaMDMxMTAvBgNV BAMTKEFCMDRCMkNGMUE3MjQ0RDEyQTI0ODdEQ0IyNDY2RTgxNDY5QjkyQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqN1NrQafC/wMuCohdmBD2nbT HhWRCu+UOfbNXVmw7C5bOQNPzkYZvwLJRuewbxZkQvDomODNCXRLkTUXlJ6OpZvA lN5jYx5UA/M77wWv2JCEnS5COpMQd5jGhvsc7wqnQV89G13mCeeOKW8ehj0nstoW Df8zj8CVKBN/mt6QC1YWjM4mtjj2rUM4+dM0Gw2rXjWKwnifM4LC9XthwG1pkj8x HZ1gMyxk1rKNgN5mrZeGRASOENQn/YK6ymxnif5Djprf20EEmASnZ1l8zso6ZU4O fz+HuOto0ZLnki9tLZvNKm2Xi3pT2Cig0epnBBsbFpti8CdTjritSWp0WQTxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqwSyzxpyRNEqJIfcskZugUabksQwHwYDVR0j BBgwFoAUoCNO6GdfpSKMzPlnDuFR1iOsaVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTcyODAwMS8wL0EwMjM0RUU4Njc1RkE1MjI4Q0NDRjk2NzBFRTE1 MUQ2MjNBQzY5NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYyM0FDNjk1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3MjgwMDEvMC9BMDIzNEVFODY3NUZB NTIyOENDQ0Y5NjcwRUUxNTFENjIzQUM2OTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6NZ0uNiJp9Q SMDqL6XaJQnkhPwXE3W6qrQv/I46l5WaChI2kaz36TpHi4kh7dQiRKcyyjPTC8wZ 3MwwCt9tBePDx2sXySm5Pve+1InzhnzIb7RvHRy8AOaJSwz9zys8vGij2BHCedZo /3DeaEClhaZ7OkmOK4hlsp/HM0dZkN8yWasjWN5GJoLuaFsGOFPRz1Fb62b6gCko 9YoL5L/Hgtd7LynsqFE0IGj9/1XKEVam06NHhyySupdv1DhQkkwO2IXDZ4IzLuPF uqCdGNh8oGDx8uKqH+pXES44JAG8e2kddP53ra+3kSiYhWZJaXt3rjbd/NvsGaMr hlhS0bZPiQ== -----END CERTIFICATE-----Generated at Mon Mar 2 18:05:07 2026 by rpki-client