$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft File: D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json) Hash identifier: CilHeqNepbtwL9GmxXDxtadpqx3qDJgjvtLXAxFnV2M= Subject key identifier: B1:F6:14:0F:DC:8C:FE:92:DC:8E:F2:21:33:83:29:F3:8E:8C:3A:99 Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 5FFA0DC691BC9FFB76F44AA107890AAA5B412615 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft Manifest number: 30 Signing time: Mon 02 Mar 2026 11:03:17 +0000 Manifest this update: Mon 02 Mar 2026 10:58:17 +0000 Manifest next update: Tue 03 Mar 2026 14:43:17 +0000 Files and hashes: 1: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: EgpumNj7AaFGaDK92FUIytUUWAIcb/Wsxx7zOhGp4u8=) 2: 312e3131382e33362e302f32342d3234203d3e20313337373533.roa (hash: wX3KXCFY3ZU/rDO+Um660eZhmmPPFKIuR9ybyalQ4a8=) 3: 312e3131382e332e302f32342d3234203d3e203136353039.roa (hash: +sGAlSoNhJAnufejm1rjSFdGhkbm95UUnsMG7/4cIj8=) 4: 312e3131382e332e302f32342d3234203d3e203134363138.roa (hash: Z80TJPKgWBszaQisJj/8BpK4zah/4emmNvfcSctsSwU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:fa:0d:c6:91:bc:9f:fb:76:f4:4a:a1:07:89:0a:aa:5b:41:26:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Mar 2 10:58:17 2026 GMT Not After : Mar 3 14:43:17 2026 GMT Subject: CN=B1F6140FDC8CFE92DC8EF221338329F38E8C3A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:41:61:bf:9a:fc:33:86:44:72:0b:00:3d:40: 00:d2:4f:89:65:a8:f0:70:72:32:a2:5a:97:25:df: 37:45:2c:61:a7:c7:32:86:fd:21:62:fb:91:a2:3e: 4d:c0:c6:31:14:20:db:b6:29:7d:51:48:ee:68:4a: 52:6b:07:99:3b:3e:93:bc:7b:18:b4:41:a0:93:86: 63:55:20:1d:c4:2c:14:95:da:db:42:0c:9c:45:60: d7:85:ae:6c:9a:a2:d2:65:b5:da:9c:82:f4:a5:3e: 5f:d6:81:b4:71:6a:b2:64:90:d8:dc:77:fa:8b:7c: c0:31:0b:fd:5f:5c:a0:bb:4f:0a:e1:81:71:30:d0: 48:53:4e:0a:c1:0b:7e:0f:40:28:b0:d0:46:06:c0: 26:6b:c5:ca:fb:ec:5d:a4:ad:57:f4:cb:49:62:a2: f0:54:f2:36:29:3b:29:26:ea:e2:3e:0a:4b:3f:42: a2:99:ab:83:63:19:36:ed:c3:b1:53:a6:81:94:15: b9:74:88:20:81:65:20:13:e9:ab:03:de:ea:11:c4: 83:8e:61:6c:cd:37:52:ed:08:0b:e3:ef:5b:47:16: 37:e4:64:8c:00:e6:00:c0:57:3c:be:ef:8b:4a:dc: d5:ba:84:92:40:86:6f:50:53:17:43:88:e4:30:20: 92:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F6:14:0F:DC:8C:FE:92:DC:8E:F2:21:33:83:29:F3:8E:8C:3A:99 X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:0f:49:00:d0:f1:88:f1:39:bc:74:2f:4a:d8:6c:30:4d:88: c8:66:11:b9:e2:df:47:ef:7b:95:d2:81:08:22:52:e1:8c:56: 81:ea:f5:58:3d:6a:e1:3d:74:80:9c:10:6c:46:ee:a4:1d:4a: e2:ea:71:06:5d:19:c0:b8:53:de:71:a1:fa:79:d6:8a:6a:a2: 27:1e:e2:b4:a2:c3:af:e1:03:f4:d6:cd:98:ea:76:4d:34:4a: f7:c7:51:29:72:ad:74:86:09:b7:12:e6:75:e2:f9:31:7b:cc: 74:60:4a:51:d5:f4:8c:07:0c:5c:6e:a1:ef:31:ad:1e:63:d9: 28:37:bd:71:f3:00:ed:c3:43:dd:05:47:f2:58:bb:8d:eb:26: 81:13:68:06:44:fd:7e:93:75:73:51:c9:5d:12:39:51:47:a4: f5:29:39:c6:0b:4b:a6:c4:22:e4:7c:76:87:dc:77:75:68:fb: 53:d4:95:e7:19:82:65:8e:a4:6d:30:a4:c3:68:37:a0:d0:8c: 8b:27:ea:97:6d:f8:b2:58:2b:0d:69:ac:ee:36:0b:6e:69:f7: 47:7a:e3:f3:38:e7:42:9c:e2:f9:f1:27:45:88:8c:95:11:34: 31:7b:23:dc:44:5e:bf:fe:0b:a4:77:92:14:00:fd:ed:f3:14: a0:09:b1:fe -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX/oNxpG8n/t29EqhB4kKqltBJhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjAzMDIxMDU4MTdaFw0yNjAzMDMxNDQzMTdaMDMxMTAvBgNV BAMTKEIxRjYxNDBGREM4Q0ZFOTJEQzhFRjIyMTMzODMyOUYzOEU4QzNBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhQWG/mvwzhkRyCwA9QADST4ll qPBwcjKiWpcl3zdFLGGnxzKG/SFi+5GiPk3AxjEUINu2KX1RSO5oSlJrB5k7PpO8 exi0QaCThmNVIB3ELBSV2ttCDJxFYNeFrmyaotJltdqcgvSlPl/WgbRxarJkkNjc d/qLfMAxC/1fXKC7TwrhgXEw0EhTTgrBC34PQCiw0EYGwCZrxcr77F2krVf0y0li ovBU8jYpOykm6uI+Cks/QqKZq4NjGTbtw7FTpoGUFbl0iCCBZSAT6asD3uoRxIOO YWzNN1LtCAvj71tHFjfkZIwA5gDAVzy+74tK3NW6hJJAhm9QUxdDiOQwIJKZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsfYUD9yM/pLcjvIhM4Mp846MOpkwHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMC9ENjgwNURCMzA5MDU3 NjEyQ0M5MjcyQ0IyQzg1QkE2Q0IwRDM4OUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaw9JANDxiPE5 vHQvSthsME2IyGYRueLfR+97ldKBCCJS4YxWger1WD1q4T10gJwQbEbupB1K4upx Bl0ZwLhT3nGh+nnWimqiJx7itKLDr+ED9NbNmOp2TTRK98dRKXKtdIYJtxLmdeL5 MXvMdGBKUdX0jAcMXG6h7zGtHmPZKDe9cfMA7cND3QVH8li7jesmgRNoBkT9fpN1 c1HJXRI5UUek9Sk5xgtLpsQi5Hx2h9x3dWj7U9SV5xmCZY6kbTCkw2g3oNCMiyfq l234slgrDWms7jYLbmn3R3rj8zjnQpzi+fEnRYiMlRE0MXsj3ERev/4LpHeSFAD9 7fMUoAmx/g== -----END CERTIFICATE-----Generated at Mon Mar 2 18:20:35 2026 by rpki-client