$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft File: F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft (raw, json) Hash identifier: Rd+6kr7nkESyK4huQNY7Bv0yWutyRgkwZBACKsWo014= Subject key identifier: 7E:E4:01:09:5B:67:A9:53:FB:72:F8:77:DB:1A:7D:21:3E:78:96:74 Authority key identifier: F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85 Certificate issuer: /CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485 Certificate serial: 7342F841D84A28C37E48E103C47F0DAD0FC15F61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft Manifest number: 2D Signing time: Mon 02 Mar 2026 18:08:17 +0000 Manifest this update: Mon 02 Mar 2026 18:03:17 +0000 Manifest next update: Tue 03 Mar 2026 22:04:17 +0000 Files and hashes: 1: F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl (hash: w6iQme6/ViCKTCsR8gq8d9a0AOLlJwLW65q5PuooWhU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:42:f8:41:d8:4a:28:c3:7e:48:e1:03:c4:7f:0d:ad:0f:c1:5f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485 Validity Not Before: Mar 2 18:03:17 2026 GMT Not After : Mar 3 22:04:17 2026 GMT Subject: CN=7EE401095B67A953FB72F877DB1A7D213E789674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:56:ee:01:bf:9c:71:23:e1:9e:45:89:ac:53: 94:9b:74:72:ab:15:03:d8:ce:7b:cf:fc:31:ba:cd: 88:fe:c4:86:dc:68:36:07:55:f1:09:99:dc:ca:b7: d5:f8:26:da:9c:88:be:60:29:25:f5:76:a3:ed:73: dc:26:fe:2b:79:54:e1:09:23:0f:d2:ef:db:60:d4: 66:e8:65:de:a9:5a:d9:31:84:50:c5:9c:9e:f1:22: ad:fc:04:6c:1a:a8:23:46:96:f4:9d:ca:a8:cd:1b: fa:1f:a5:53:72:d8:9f:73:41:63:9a:be:a8:4f:75: 96:a9:97:20:a7:00:83:bd:aa:e2:85:5e:b2:d0:2e: f4:d9:1b:46:cf:71:ea:f9:22:a3:58:f0:0e:63:1c: 78:6e:b5:05:4c:ea:1d:c0:28:fa:e9:79:c3:8b:c4: b8:a7:3f:83:98:21:b3:60:39:36:c5:a7:92:38:29: 72:b2:0c:41:f5:3a:12:c6:73:22:24:12:2d:1d:58: 90:8f:90:6d:96:c9:30:f3:de:8a:ab:95:17:c3:7e: a8:11:b1:f8:af:a3:34:dc:cb:b3:bb:46:67:db:ef: a0:57:1b:08:f8:8e:74:6d:f7:25:f7:bc:5a:82:e9: b3:bb:19:cf:72:fe:9e:72:13:b4:15:07:8d:5b:57: 9f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E4:01:09:5B:67:A9:53:FB:72:F8:77:DB:1A:7D:21:3E:78:96:74 X509v3 Authority Key Identifier: keyid:F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:0f:90:98:81:7e:1e:cd:09:08:93:38:7c:ff:46:bd:91:ba: bd:52:d3:9e:18:1b:bb:53:45:16:ef:d7:bd:e2:48:47:f3:65: 86:3a:54:44:63:c0:17:ab:26:79:17:01:ed:29:d0:14:b7:54: 81:b0:76:f5:81:5e:7b:7f:1c:d9:66:38:af:c1:4e:d4:2c:70: b8:51:0e:83:a7:ce:1f:4e:f0:52:30:f3:48:10:8a:37:6c:79: b0:1d:ac:45:34:5f:bd:af:b0:5c:9e:77:43:9f:10:19:ac:65: e9:ea:f2:70:80:63:24:86:94:12:6b:53:31:7e:7b:74:89:f0: 70:de:b0:83:d7:be:df:bf:2e:d4:dd:43:9d:19:24:e6:b2:20: 77:4a:53:f1:a9:ac:31:97:4c:79:15:77:91:14:e5:a6:e0:a6: 38:d7:fc:84:f0:56:16:01:a8:21:d9:f3:96:49:e3:75:2b:08: 82:4e:cc:f9:43:98:d7:e8:b7:ec:69:61:da:fe:e9:dc:5f:81: fd:96:82:24:09:bc:2f:46:b2:18:36:a5:d8:31:fb:dd:81:ca: d1:18:88:50:cc:3f:00:da:e4:12:a2:8f:19:cc:b0:58:af:f1: 8c:81:8c:6b:cb:53:52:07:56:15:b1:b2:fe:4f:3c:92:0c:89: 07:2c:42:5e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc0L4QdhKKMN+SOEDxH8NrQ/BX2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2 MkY5RjQ4NTAeFw0yNjAzMDIxODAzMTdaFw0yNjAzMDMyMjA0MTdaMDMxMTAvBgNV BAMTKDdFRTQwMTA5NUI2N0E5NTNGQjcyRjg3N0RCMUE3RDIxM0U3ODk2NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRVu4Bv5xxI+GeRYmsU5SbdHKr FQPYznvP/DG6zYj+xIbcaDYHVfEJmdzKt9X4JtqciL5gKSX1dqPtc9wm/it5VOEJ Iw/S79tg1GboZd6pWtkxhFDFnJ7xIq38BGwaqCNGlvSdyqjNG/ofpVNy2J9zQWOa vqhPdZaplyCnAIO9quKFXrLQLvTZG0bPcer5IqNY8A5jHHhutQVM6h3AKPrpecOL xLinP4OYIbNgOTbFp5I4KXKyDEH1OhLGcyIkEi0dWJCPkG2WyTDz3oqrlRfDfqgR sfivozTcy7O7Rmfb76BXGwj4jnRt9yX3vFqC6bO7Gc9y/p5yE7QVB41bV58vAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfuQBCVtnqVP7cvh32xp9IT54lnQwHwYDVR0j BBgwFoAU8OK0VtTNcRMjJiHsv3kvSmL59IUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODc3ODQ5OC8wL0YwRTJCNDU2RDRDRDcxMTMyMzI2MjFFQ0JGNzky RjRBNjJGOUY0ODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2MkY5RjQ4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3Nzg0OTgvMC9GMEUyQjQ1NkQ0Q0Q3 MTEzMjMyNjIxRUNCRjc5MkY0QTYyRjlGNDg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQ+QmIF+Hs0J CJM4fP9GvZG6vVLTnhgbu1NFFu/XveJIR/NlhjpURGPAF6smeRcB7SnQFLdUgbB2 9YFee38c2WY4r8FO1CxwuFEOg6fOH07wUjDzSBCKN2x5sB2sRTRfva+wXJ53Q58Q Gaxl6erycIBjJIaUEmtTMX57dInwcN6wg9e+378u1N1DnRkk5rIgd0pT8amsMZdM eRV3kRTlpuCmONf8hPBWFgGoIdnzlknjdSsIgk7M+UOY1+i37Glh2v7p3F+B/ZaC JAm8L0ayGDal2DH73YHK0RiIUMw/ANrkEqKPGcywWK/xjIGMa8tTUgdWFbGy/k88 kgyJByxCXg== -----END CERTIFICATE-----Generated at Mon Mar 2 23:05:27 2026 by rpki-client