$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft File: B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft (raw, json) Hash identifier: XIQ9xE1rtUGBYiK+KRhv8/k6clCrQBtN48RdhH2SlzE= Subject key identifier: EF:F9:C6:49:E8:A3:50:6B:A2:16:3A:B9:9A:E5:5A:B8:18:3D:EB:AB Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 2967F5BDB4998651C339413A733D19F07F2090C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft Manifest number: 3B Signing time: Mon 02 Mar 2026 15:48:17 +0000 Manifest this update: Mon 02 Mar 2026 15:43:17 +0000 Manifest next update: Tue 03 Mar 2026 18:31:17 +0000 Files and hashes: 1: 3131322e3132362e302e302f31352d3135203d3e203337393633.roa (hash: FdOZEfGKClBYoXB7pc6OA0OyxtCs3v7jL0QmWrkPMgg=) 2: 323430353a653030303a3a2f33322d3438203d3e203337393633.roa (hash: LLk+wL4dYmNtV+Ttmv8QW35kUZaNPcs2hOl7TcDkV+Y=) 3: 3131322e3132342e302e302f31352d3135203d3e203337393633.roa (hash: HrxzZSXdX7+SXiAtVFXWEaXNTmRFpOf1krlUUQGaq4Y=) 4: 323430363a323838303a3a2f33322d3438203d3e203337393633.roa (hash: rWCQVTBmLmXUSKc3bxnDItzi3nNjAIwB9tZw96f2FAA=) 5: 3131322e3132342e302e302f31342d3134203d3e203337393633.roa (hash: RlIzuqtLZFY/AyZ+gI2Uy7dDwcT3KJRDY+Kan/fqhVU=) 6: 3135372e3131392e3139322e302f32332d3233203d3e203337393633.roa (hash: d85GdIxTHF9Rw1pywiDP/VQLaUyACze09vZCzp1zdMw=) 7: 323430373a626330303a3a2f33322d3438203d3e203337393633.roa (hash: +haY8UqkEWYU9s9FGkdagnnD2aOzR+OUWWpUy84haQI=) 8: 323430383a343031363a3a2f33322d3332203d3e203234343239.roa (hash: JY6EyEHObFN70WtIyyCcgFcMUMI20Yh+7uSNKIo60Bg=) 9: B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl (hash: xhTh7VpPaxAm4y6DK2ynQqFZK0yvIivP2b19PAK2hJ0=) 10: 3131322e3132342e302e302f31362d3234203d3e203337393633.roa (hash: Mk/05zpZqtgnYq/+gGO7xCjBwe9RIZVxgBhE9qeWpDc=) 11: 3131322e3132362e302e302f31362d3234203d3e203337393633.roa (hash: azRrezG+l+poPSWi8QrlWFGHsPHHzef6/dDX2yt64dc=) 12: 3131322e3132372e302e302f31362d3234203d3e203337393633.roa (hash: goE3v337E72XTpSyZ1GGzQZcIkJqpGaZayoHHRYCyyI=) 13: 3135372e3131392e3139322e302f32322d3234203d3e203337393633.roa (hash: NvYcvgpbx6I9/r422RHq98K59aloqU/WXru2lzELV3o=) 14: 3131322e3132352e302e302f31362d3234203d3e203337393633.roa (hash: aVwCtUf4CHRKNiIbNF2n4nOJkda7r3fi/o0daicqHfo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:67:f5:bd:b4:99:86:51:c3:39:41:3a:73:3d:19:f0:7f:20:90:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Mar 2 15:43:17 2026 GMT Not After : Mar 3 18:31:17 2026 GMT Subject: CN=EFF9C649E8A3506BA2163AB99AE55AB8183DEBAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1e:36:76:ae:81:fb:ec:bd:c4:dd:76:5f:a5: ee:65:03:cb:21:80:a8:12:e4:e0:30:93:86:2d:27: fa:a1:34:7c:b6:4a:f9:f7:85:03:a8:3c:9a:79:68: dc:1c:47:c7:40:a1:01:2a:20:b8:c2:6c:a8:0a:46: 24:6c:7e:a0:d8:31:61:4a:eb:99:3c:56:e3:ba:9e: 90:2b:c2:42:26:88:09:20:f3:24:09:6d:03:67:73: 13:c0:d8:c3:18:13:ed:67:5b:4f:4f:69:65:79:96: df:c5:d2:92:56:4a:af:e5:5b:bf:13:83:40:a2:fb: 74:d2:18:15:69:c9:a2:a7:ba:5d:ce:4a:4b:be:ef: 1c:3b:7f:6e:c0:8e:dc:42:5a:ab:71:98:32:5d:6e: 84:06:23:ea:98:23:35:13:8a:2e:fc:83:42:20:a4: 0e:20:88:2b:a2:43:55:3e:d4:3d:02:c2:9a:f4:a0: 77:00:b7:df:21:23:bb:50:8d:bf:b8:69:89:40:02: 05:94:7e:82:a4:f9:07:30:2b:06:81:7c:78:7a:03: 7f:87:fe:88:1c:0f:c5:eb:4a:bb:43:ea:1f:3c:35: 6a:a0:87:61:1d:25:1d:57:04:0b:72:e3:a9:a5:cd: 26:c5:c6:ea:55:df:1c:62:67:5c:c4:b0:64:31:94: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:F9:C6:49:E8:A3:50:6B:A2:16:3A:B9:9A:E5:5A:B8:18:3D:EB:AB X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:5f:5d:4d:61:bd:9d:c3:8c:98:3c:c4:5f:8a:6a:f4:28:b3: a2:1a:ef:1c:4b:aa:da:a6:78:9b:e0:8a:fd:84:9d:07:f1:ad: e9:b1:03:47:65:03:ca:35:55:fd:3c:ca:be:da:29:f9:26:05: d7:d2:20:37:c5:12:61:2a:7a:99:3d:aa:73:18:5e:6e:f9:48: 48:bf:d3:7f:5d:22:e1:73:c2:94:68:e9:8c:a9:0e:21:72:2e: 9e:86:93:f7:79:14:3c:37:2c:32:55:9e:1e:2c:b3:a3:82:eb: 42:d3:38:c8:e0:ce:f0:0e:e0:f9:49:84:90:98:3d:c6:38:1a: f3:63:2c:d4:51:b6:0b:dd:1a:7c:49:d9:8a:e2:9b:77:6b:f7: f6:cb:62:ab:e4:48:16:39:45:04:f1:78:b5:f9:58:c6:12:5e: e2:cd:93:e7:59:59:38:ea:f1:48:e6:2c:5f:95:d1:2e:c0:d7: a2:4d:bd:17:3f:45:e3:66:23:7c:39:7c:58:39:4d:d3:f9:87: bf:97:9c:d4:34:eb:7f:41:27:2e:bb:64:72:88:af:5e:09:33: c4:19:18:57:c8:6a:0d:78:f5:f3:e2:4b:34:bf:a8:bf:34:71: 53:9b:f8:a2:d1:69:9a:11:8f:d2:ba:59:84:eb:b7:ac:b1:59: b1:21:87:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKWf1vbSZhlHDOUE6cz0Z8H8gkMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjAzMDIxNTQzMTdaFw0yNjAzMDMxODMxMTdaMDMxMTAvBgNV BAMTKEVGRjlDNjQ5RThBMzUwNkJBMjE2M0FCOTlBRTU1QUI4MTgzREVCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZHjZ2roH77L3E3XZfpe5lA8sh gKgS5OAwk4YtJ/qhNHy2Svn3hQOoPJp5aNwcR8dAoQEqILjCbKgKRiRsfqDYMWFK 65k8VuO6npArwkImiAkg8yQJbQNncxPA2MMYE+1nW09PaWV5lt/F0pJWSq/lW78T g0Ci+3TSGBVpyaKnul3OSku+7xw7f27AjtxCWqtxmDJdboQGI+qYIzUTii78g0Ig pA4giCuiQ1U+1D0Cwpr0oHcAt98hI7tQjb+4aYlAAgWUfoKk+QcwKwaBfHh6A3+H /ogcD8XrSrtD6h88NWqgh2EdJR1XBAty46mlzSbFxupV3xxiZ1zEsGQxlJkNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7/nGSeijUGuiFjq5muVauBg966swHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU4ODc2NDQwOTA2MzAxNDUvMC9CM0NBRkI1OUYxMEIw M0FEMjEwNkU4MjE1REJCOTAzRjE1N0QwQzhFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuV9dTWG9ncOM mDzEX4pq9CizohrvHEuq2qZ4m+CK/YSdB/Gt6bEDR2UDyjVV/TzKvtop+SYF19Ig N8USYSp6mT2qcxhebvlISL/Tf10i4XPClGjpjKkOIXIunoaT93kUPDcsMlWeHiyz o4LrQtM4yODO8A7g+UmEkJg9xjga82Ms1FG2C90afEnZiuKbd2v39stiq+RIFjlF BPF4tflYxhJe4s2T51lZOOrxSOYsX5XRLsDXok29Fz9F42YjfDl8WDlN0/mHv5ec 1DTrf0EnLrtkcoivXgkzxBkYV8hqDXj18+JLNL+ovzRxU5v4otFpmhGP0rpZhOu3 rLFZsSGHgg== -----END CERTIFICATE-----Generated at Mon Mar 2 22:31:18 2026 by rpki-client