$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft File: F3D2189E79D8CABAA6E636A706E38827E75A574A.mft (raw, json) Hash identifier: YjzXuQ6ElMK+eK0scZq3gF4D1dEangNjZWJ8My4QKO4= Subject key identifier: 48:04:6B:19:47:A6:F6:0C:9F:C7:55:4B:05:FA:79:B8:EE:E9:12:7A Authority key identifier: F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A Certificate issuer: /CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Certificate serial: 215CF980A28E560234F343F73ED1CF1FB04FBDAB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft Manifest number: 25 Signing time: Sun 01 Mar 2026 23:03:16 +0000 Manifest this update: Sun 01 Mar 2026 22:58:16 +0000 Manifest next update: Tue 03 Mar 2026 02:28:16 +0000 Files and hashes: 1: F3D2189E79D8CABAA6E636A706E38827E75A574A.crl (hash: 2fzny7PaCAK8InvAF0TUvNdyLRaNewFYEEsfMW1tG+U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5c:f9:80:a2:8e:56:02:34:f3:43:f7:3e:d1:cf:1f:b0:4f:bd:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Validity Not Before: Mar 1 22:58:16 2026 GMT Not After : Mar 3 02:28:16 2026 GMT Subject: CN=48046B1947A6F60C9FC7554B05FA79B8EEE9127A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:0a:d1:19:b3:ef:ac:33:27:ff:1c:99:51: 8f:f5:21:fd:56:07:e1:dc:0d:09:8d:d2:a9:a0:fd: c8:9b:78:56:40:0a:cf:de:91:fd:26:d7:ce:da:e3: 24:7c:10:72:03:57:01:e0:65:18:66:0f:33:91:1b: 10:7b:40:ec:71:4a:2f:cc:c9:d5:f0:74:93:f9:f8: bd:42:9a:a2:4c:b3:cb:dd:5c:ca:2c:73:9b:0a:37: 87:65:83:0c:9a:eb:85:ac:b5:ac:77:69:3d:28:c3: 0f:f8:35:8d:18:91:86:b0:8d:55:f5:a3:4b:1d:43: 75:e0:da:aa:36:a2:8e:f5:12:9b:63:52:14:8b:bb: dd:49:4e:a5:c3:e7:a7:b5:2c:da:78:f9:e6:3e:0f: d6:fc:3c:c7:f6:d9:78:d0:c8:cc:ff:58:43:2e:f3: 38:49:5c:d2:80:bb:9f:d3:c5:9b:01:9c:24:73:1b: ea:96:92:cc:42:d9:2e:45:d0:24:b4:0b:f2:c3:ba: 34:2d:6a:be:97:f1:07:3a:2f:89:6f:ab:56:31:e1: 06:78:34:25:5c:11:b2:16:01:87:8c:b2:8c:16:40: bf:f0:47:a7:9e:fc:2a:72:dd:2f:13:87:28:6d:76: 39:83:36:0e:7c:42:ff:77:19:fd:f1:0d:fc:6f:7b: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:04:6B:19:47:A6:F6:0C:9F:C7:55:4B:05:FA:79:B8:EE:E9:12:7A X509v3 Authority Key Identifier: keyid:F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:69:88:ad:c2:64:13:e4:b3:f6:46:7b:66:24:fb:58:f7:ec: d2:6d:c9:49:32:9f:23:b8:68:48:b5:78:4b:b9:c6:89:ca:80: 3e:e8:1a:fc:29:2b:ca:c6:c4:95:39:3e:bb:7d:26:cf:56:b8: 98:8a:ef:22:fc:30:fc:e5:f6:12:1b:9b:c0:d7:53:30:4b:07: db:f5:05:bb:61:91:e4:9a:4c:ff:03:30:ee:56:94:d8:a4:5d: 9f:d2:01:b4:5d:0d:c6:a9:19:94:e0:aa:d1:41:02:2c:0b:0c: 34:a6:9a:78:63:82:11:9a:94:3a:6c:1b:fe:ba:7c:04:c9:c8: b0:e6:cb:98:1f:5b:31:22:88:2d:0d:0e:49:34:96:4e:b8:39: 52:c1:1f:bc:a8:7c:52:ab:c1:ee:b3:0f:e3:5c:8d:0e:ad:aa: 28:47:00:50:38:ed:60:30:d3:6e:d9:59:31:fd:5f:15:bf:42: d2:69:03:3a:c6:c4:09:8c:a8:27:71:de:10:69:1e:c3:bb:43: af:89:25:82:2e:a5:64:8a:6a:44:5b:96:a9:33:7f:0f:df:45: d7:7c:78:98:91:79:d7:5d:0f:7c:f5:99:70:0d:ea:06:c9:f3: 37:e0:2e:01:16:ee:6c:13:a6:73:c2:0e:a9:8c:d6:5f:97:8f: 55:88:d8:9d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIVz5gKKOVgI080P3PtHPH7BPvaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdF NzVBNTc0QTAeFw0yNjAzMDEyMjU4MTZaFw0yNjAzMDMwMjI4MTZaMDMxMTAvBgNV BAMTKDQ4MDQ2QjE5NDdBNkY2MEM5RkM3NTU0QjA1RkE3OUI4RUVFOTEyN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGawrRGbPvrDMn/xyZUY/1If1W B+HcDQmN0qmg/cibeFZACs/ekf0m187a4yR8EHIDVwHgZRhmDzORGxB7QOxxSi/M ydXwdJP5+L1CmqJMs8vdXMosc5sKN4dlgwya64Wstax3aT0oww/4NY0YkYawjVX1 o0sdQ3Xg2qo2oo71EptjUhSLu91JTqXD56e1LNp4+eY+D9b8PMf22XjQyMz/WEMu 8zhJXNKAu5/TxZsBnCRzG+qWksxC2S5F0CS0C/LDujQtar6X8Qc6L4lvq1Yx4QZ4 NCVcEbIWAYeMsowWQL/wR6ee/Cpy3S8ThyhtdjmDNg58Qv93Gf3xDfxve90lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSARrGUem9gyfx1VLBfp5uO7pEnowHwYDVR0j BBgwFoAU89IYnnnYyrqm5janBuOIJ+daV0owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzQ4MDE5NS8wL0YzRDIxODlFNzlEOENBQkFBNkU2MzZBNzA2RTM4 ODI3RTc1QTU3NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdFNzVBNTc0QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM0ODAxOTUvMC9GM0QyMTg5RTc5RDhD QUJBQTZFNjM2QTcwNkUzODgyN0U3NUE1NzRBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGmIrcJkE+Sz 9kZ7ZiT7WPfs0m3JSTKfI7hoSLV4S7nGicqAPuga/CkrysbElTk+u30mz1a4mIrv Ivww/OX2EhubwNdTMEsH2/UFu2GR5JpM/wMw7laU2KRdn9IBtF0NxqkZlOCq0UEC LAsMNKaaeGOCEZqUOmwb/rp8BMnIsObLmB9bMSKILQ0OSTSWTrg5UsEfvKh8UqvB 7rMP41yNDq2qKEcAUDjtYDDTbtlZMf1fFb9C0mkDOsbECYyoJ3HeEGkew7tDr4kl gi6lZIpqRFuWqTN/D99F13x4mJF5110PfPWZcA3qBsnzN+AuARbubBOmc8IOqYzW X5ePVYjYnQ== -----END CERTIFICATE-----Generated at Mon Mar 2 16:04:24 2026 by rpki-client