$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft File: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft (raw, json) Hash identifier: y7WEWEe81qdOCRe1XlgojOX+OQlRXc+z0WRSjTC1bJ4= Subject key identifier: DA:B3:97:46:91:5E:6A:E4:93:FC:21:39:A0:75:9A:79:D8:71:A3:89 Authority key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 Certificate issuer: /CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Certificate serial: 2C91DFC6EBAC78D5755639E639A4D882BDF9FC8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft Manifest number: 2D Signing time: Mon 02 Mar 2026 01:13:16 +0000 Manifest this update: Mon 02 Mar 2026 01:08:16 +0000 Manifest next update: Tue 03 Mar 2026 01:57:16 +0000 Files and hashes: 1: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl (hash: MLOGlLyqE4/0Kf7Ox3AI15FdOP965dnQAg+LbS+/SsE=) 2: 3130332e36312e3137362e302f32322d3234203d3e20333939313338.roa (hash: lfso3iitwNXOWpDhN+K/LYRuYJB9b0kiLHNKSA+teTM=) 3: 34352e3132312e39362e302f32322d3234203d3e20333939313338.roa (hash: gYT3dtPIakPTs4f1hCUuM5xGvtdVmK2naUkADh3L9I8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 01:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:91:df:c6:eb:ac:78:d5:75:56:39:e6:39:a4:d8:82:bd:f9:fc:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Validity Not Before: Mar 2 01:08:16 2026 GMT Not After : Mar 3 01:57:16 2026 GMT Subject: CN=DAB39746915E6AE493FC2139A0759A79D871A389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:86:20:e7:0d:61:05:d0:92:57:79:c5:46:08: 98:12:a8:a3:08:b9:ca:ea:9b:9e:09:5a:cc:97:66: a2:e8:32:84:fe:45:28:e3:e6:a6:4e:bd:40:1d:05: c4:77:03:7b:f2:17:5e:7c:82:e6:25:af:c0:92:a0: 4b:84:50:d6:d8:48:a1:01:5b:cb:fd:b9:3c:fe:1c: 42:fa:77:33:28:aa:4d:9c:64:77:bf:ff:97:a9:3c: 96:2a:05:b1:e9:2f:4c:3f:fb:9f:fb:19:d0:2c:fa: 75:04:b9:1f:8b:d6:48:1f:18:a7:91:be:b6:26:ae: f3:1b:73:79:aa:60:08:f0:4e:6b:44:eb:14:34:93: e7:d4:4d:dc:1f:19:d1:e6:d9:74:58:b6:2f:df:4a: d2:54:ee:98:d3:c1:6c:94:92:42:0b:d5:20:ed:9a: 41:bf:99:e0:19:e7:3a:64:c9:0f:00:e6:9d:a8:91: e7:ca:ef:dd:f9:26:ed:5b:ae:9a:ae:4d:ec:1f:76: d7:83:b0:bf:c3:05:42:45:40:24:e8:c4:38:91:d4: 7a:88:27:7d:fc:2d:e9:82:f2:fd:92:eb:58:8f:e7: e6:b7:dd:24:b0:bb:b0:98:8f:3f:f8:3d:ca:f7:d3: 0b:05:b6:ed:8b:d6:64:27:2d:ce:e5:91:79:28:44: 6e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B3:97:46:91:5E:6A:E4:93:FC:21:39:A0:75:9A:79:D8:71:A3:89 X509v3 Authority Key Identifier: keyid:AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:67:3f:7e:ef:64:0f:dd:8c:08:c9:1a:d9:1a:93:c0:c2:53: 55:dd:ea:2c:d6:c0:14:32:3f:92:94:75:dd:b7:58:c0:61:d6: b0:fe:19:9d:7d:1f:a3:f7:c4:34:1f:68:c2:84:5d:de:7f:36: 41:9e:ba:79:b2:3a:87:ef:76:d4:9e:3c:56:29:b9:ab:a9:6d: 57:f9:21:5f:9d:f4:c6:85:68:44:5f:fe:72:9f:8d:62:7e:f3: d3:80:ae:7d:af:23:a8:09:50:68:7d:ee:bc:38:68:dc:87:77: ba:06:eb:a2:61:bf:57:66:f3:2f:74:fe:8e:b0:6b:94:9d:92: 4a:d3:2a:2a:83:dc:19:6c:a9:32:c6:4d:20:d5:71:50:06:6f: 98:7f:1a:6d:a9:1a:58:c2:8b:7f:ae:db:11:3c:80:60:68:c8: 75:8a:85:7f:5f:e3:e0:ee:3e:80:74:8b:f8:5b:d2:bb:aa:59: a6:6a:7e:f5:a7:70:40:98:3f:2b:33:7b:bb:10:ca:5a:be:10: c6:d0:e8:d4:18:9a:9b:9a:1b:02:45:bf:24:30:12:89:8b:2b: 23:63:d6:ca:ab:c1:10:7e:bc:8a:27:8f:0b:d3:10:81:42:53: 21:46:d4:64:2c:03:37:2c:a5:20:61:01:13:22:e4:8a:e4:b2: 60:a9:06:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULJHfxuuseNV1VjnmOaTYgr35/I4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJD QUI5QTM0MTAeFw0yNjAzMDIwMTA4MTZaFw0yNjAzMDMwMTU3MTZaMDMxMTAvBgNV BAMTKERBQjM5NzQ2OTE1RTZBRTQ5M0ZDMjEzOUEwNzU5QTc5RDg3MUEzODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChiDnDWEF0JJXecVGCJgSqKMI ucrqm54JWsyXZqLoMoT+RSjj5qZOvUAdBcR3A3vyF158guYlr8CSoEuEUNbYSKEB W8v9uTz+HEL6dzMoqk2cZHe//5epPJYqBbHpL0w/+5/7GdAs+nUEuR+L1kgfGKeR vrYmrvMbc3mqYAjwTmtE6xQ0k+fUTdwfGdHm2XRYti/fStJU7pjTwWyUkkIL1SDt mkG/meAZ5zpkyQ8A5p2okefK7935Ju1brpquTewfdteDsL/DBUJFQCToxDiR1HqI J338LemC8v2S61iP5+a33SSwu7CYjz/4Pcr30wsFtu2L1mQnLc7lkXkoRG4dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2rOXRpFeauST/CE5oHWaedhxo4kwHwYDVR0j BBgwFoAUq0qsgEm/oPTyeKwiOFypq8q5o0EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE5NTcwMDExOTUzNTYxOC8wL0FCNEFBQzgwNDlCRkEwRjRGMjc4QUMyMjM4NUNB OUFCQ0FCOUEzNDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJDQUI5QTM0MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxOTU3MDAxMTk1MzU2MTgvMC9BQjRBQUM4MDQ5QkZB MEY0RjI3OEFDMjIzODVDQTlBQkNBQjlBMzQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2c/fu9kD92M CMka2RqTwMJTVd3qLNbAFDI/kpR13bdYwGHWsP4ZnX0fo/fENB9owoRd3n82QZ66 ebI6h+921J48Vim5q6ltV/khX530xoVoRF/+cp+NYn7z04Cufa8jqAlQaH3uvDho 3Id3ugbromG/V2bzL3T+jrBrlJ2SStMqKoPcGWypMsZNINVxUAZvmH8abakaWMKL f67bETyAYGjIdYqFf1/j4O4+gHSL+FvSu6pZpmp+9adwQJg/KzN7uxDKWr4QxtDo 1Biam5obAkW/JDASiYsrI2PWyqvBEH68iiePC9MQgUJTIUbUZCwDNyylIGEBEyLk iuSyYKkGXw== -----END CERTIFICATE-----Generated at Mon Mar 2 12:55:31 2026 by rpki-client