$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft File: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft (raw, json) Hash identifier: vH+KACUQrUogTaJ7SzZ2rxm1003tTudD+S31JfZ+EKM= Subject key identifier: 5D:53:AA:74:03:03:AD:D5:CE:4F:CA:9F:2F:4D:46:74:9C:15:4F:C2 Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516 Certificate serial: 3A49213F82838ADC505464606AE25E83C0FCB4AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 16:18:16 +0000 Manifest this update: Sun 01 Mar 2026 16:13:16 +0000 Manifest next update: Mon 02 Mar 2026 20:08:16 +0000 Files and hashes: 1: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (hash: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw=) 2: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (hash: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=) 3: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (hash: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo=) 4: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (hash: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=) 5: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (hash: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=) 6: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl (hash: ZMJlCdawbRxXwKXMsyg8USP8QglTuqaDIEZjZYgrMZg=) 7: 3135372e36362e34322e302f32332d3233203d3e20323039323432.roa (hash: HIHD4+vJEqN67iNJaPRj3O/8PeBUKrUaC2/UlqKhO0A=) 8: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (hash: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI=) 9: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (hash: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 20:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:49:21:3f:82:83:8a:dc:50:54:64:60:6a:e2:5e:83:c0:fc:b4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516 Validity Not Before: Mar 1 16:13:16 2026 GMT Not After : Mar 2 20:08:16 2026 GMT Subject: CN=5D53AA740303ADD5CE4FCA9F2F4D46749C154FC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:78:4b:2d:28:8c:e4:e8:a9:9d:d9:17:38:8f: dc:1f:8b:a5:74:15:ba:1a:0c:56:0b:9c:bf:9a:8f: d5:98:79:e2:3f:90:13:e9:9a:49:6f:99:f5:84:73: 3d:80:bb:e8:3d:6c:a3:53:fd:be:1a:3b:09:3a:a0: 7a:9d:9d:dd:d4:0f:0d:c6:b5:1f:bc:14:0c:db:52: 5d:4a:fb:06:cc:6c:f1:4e:11:de:ec:33:a3:cd:62: a5:35:f0:ff:e6:e4:ac:33:f6:3e:53:c4:d5:48:85: cc:62:f7:c0:9e:e0:69:5d:47:94:80:14:9a:96:41: b0:28:00:fd:d0:27:4e:46:d3:92:d7:f4:96:66:20: dd:1c:9a:f7:f3:4a:c1:c2:de:5a:ef:29:33:3c:b5: 53:4f:64:ad:da:d0:42:4b:0f:ae:4e:35:8a:62:ea: 09:a3:bb:3c:66:4f:14:95:8a:bc:df:5d:01:5c:25: 71:e6:82:67:fe:47:1c:44:eb:97:c5:9e:0e:46:f1: c8:63:48:de:8a:6d:89:cd:6c:bc:da:84:40:a0:92: 24:f2:f6:27:00:96:bb:bd:53:29:a2:12:e4:f5:06: d1:d9:c9:8b:3b:12:72:70:2c:59:c1:49:aa:75:8a: 1c:f6:39:6c:5e:87:b5:8c:28:b3:35:32:14:49:ba: a0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:53:AA:74:03:03:AD:D5:CE:4F:CA:9F:2F:4D:46:74:9C:15:4F:C2 X509v3 Authority Key Identifier: keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5d:43:d5:38:1d:aa:23:d1:78:8f:4c:cd:49:2c:0e:6f:d7: 64:11:2a:ae:e4:51:84:b8:5a:f1:de:27:2a:7a:83:03:33:ea: 6c:c3:5f:29:48:3e:48:ad:13:90:27:ee:68:b4:4f:a0:5c:1b: 81:2e:1a:24:07:53:4c:f7:3f:f9:15:06:19:99:4a:f8:e7:fe: c8:64:55:0b:83:94:2e:50:77:8b:98:e7:65:19:73:73:5c:e7: eb:09:fd:76:f4:42:72:aa:23:76:83:c9:2b:62:9c:50:99:5c: 8a:a9:bc:3a:51:00:92:73:80:83:45:f0:f7:34:da:81:4d:15: aa:8c:ef:b0:06:d8:fc:c3:71:f3:c2:d8:53:06:1e:df:7e:a2: b4:7a:08:54:f1:86:fd:77:8f:00:61:f5:a1:a6:53:27:82:f9: 95:6c:8f:d5:fd:30:d6:9c:d3:d6:27:98:e2:b0:ce:59:48:5d: 30:25:fc:e9:36:36:6a:25:20:69:df:65:68:e8:36:be:c4:d3: 90:85:e2:e4:6e:d9:89:08:ae:37:a2:6c:01:dc:87:99:bb:23: 55:7b:de:bc:2f:ca:5f:97:65:1b:70:36:6e:7b:2a:e0:42:d5: 02:9c:3b:56:7f:ba:d6:63:18:59:83:25:b5:d9:ee:90:e8:86: 2e:d8:bd:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOkkhP4KDitxQVGRgauJeg8D8tK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3 QzkwNTUxNjAeFw0yNjAzMDExNjEzMTZaFw0yNjAzMDIyMDA4MTZaMDMxMTAvBgNV BAMTKDVENTNBQTc0MDMwM0FERDVDRTRGQ0E5RjJGNEQ0Njc0OUMxNTRGQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCweEstKIzk6Kmd2Rc4j9wfi6V0 FboaDFYLnL+aj9WYeeI/kBPpmklvmfWEcz2Au+g9bKNT/b4aOwk6oHqdnd3UDw3G tR+8FAzbUl1K+wbMbPFOEd7sM6PNYqU18P/m5Kwz9j5TxNVIhcxi98Ce4GldR5SA FJqWQbAoAP3QJ05G05LX9JZmIN0cmvfzSsHC3lrvKTM8tVNPZK3a0EJLD65ONYpi 6gmjuzxmTxSVirzfXQFcJXHmgmf+RxxE65fFng5G8chjSN6KbYnNbLzahECgkiTy 9icAlru9UymiEuT1BtHZyYs7EnJwLFnBSap1ihz2OWxeh7WMKLM1MhRJuqAlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXVOqdAMDrdXOT8qfL01GdJwVT8IwHwYDVR0j BBgwFoAUf8VBi0pZDfFTVeFnt6/A/3yQVRYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTk3Mjk5NC8wLzdGQzU0MThCNEE1OTBERjE1MzU1RTE2N0I3QUZD MEZGN0M5MDU1MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5NzI5OTQvMC83RkM1NDE4QjRBNTkw REYxNTM1NUUxNjdCN0FGQzBGRjdDOTA1NTE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb11D1TgdqiPR eI9MzUksDm/XZBEqruRRhLha8d4nKnqDAzPqbMNfKUg+SK0TkCfuaLRPoFwbgS4a JAdTTPc/+RUGGZlK+Of+yGRVC4OULlB3i5jnZRlzc1zn6wn9dvRCcqojdoPJK2Kc UJlciqm8OlEAknOAg0Xw9zTagU0VqozvsAbY/MNx88LYUwYe336itHoIVPGG/XeP AGH1oaZTJ4L5lWyP1f0w1pzT1ieY4rDOWUhdMCX86TY2aiUgad9laOg2vsTTkIXi 5G7ZiQiuN6JsAdyHmbsjVXvevC/KX5dlG3A2bnsq4ELVApw7Vn+61mMYWYMltdnu kOiGLti9sw== -----END CERTIFICATE-----Generated at Mon Mar 2 09:26:34 2026 by rpki-client