$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft File: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft (raw, json) Hash identifier: SF1POmvhM0pgt9+XTkCo6tmM94qzfwXH7OnY2qtmaYk= Subject key identifier: 1E:BD:D1:5C:05:E4:4C:6C:C1:80:91:7F:7B:20:4C:6D:A9:23:FB:9E Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 1876EFB7C23D7E0EA138E33A498BC628A6F2CAF0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft Manifest number: 2A Signing time: Thu 19 Feb 2026 13:52:25 +0000 Manifest this update: Thu 19 Feb 2026 13:47:25 +0000 Manifest next update: Fri 20 Feb 2026 17:18:25 +0000 Files and hashes: 1: 3130332e3231392e38362e302f32332d3234203d3e20313532333230.roa (hash: y9Nb3BhAesAhC0Yz2nuugVvW5UakXURGQvAzLngRYos=) 2: 3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl (hash: uX1bzafbRs7lfnEqDoEl/c2Cx3G+t0uqA94F4D7IHqo=) 3: 3130332e3231392e38352e302f32342d3234203d3e20313532333230.roa (hash: m2V99zSF93yuAoBUSJ81tqRCkxDUa+Q9dv+b/3LsrzA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 10:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:76:ef:b7:c2:3d:7e:0e:a1:38:e3:3a:49:8b:c6:28:a6:f2:ca:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Feb 19 13:47:25 2026 GMT Not After : Feb 20 17:18:25 2026 GMT Subject: CN=1EBDD15C05E44C6CC180917F7B204C6DA923FB9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:41:22:99:d8:97:2f:6b:54:ff:52:ba:16:2d: e1:ce:71:67:93:9f:c7:a6:97:bd:7c:16:68:d0:eb: b0:d7:c1:a4:1b:6a:0d:3a:70:02:49:40:f3:77:95: 93:9b:18:55:46:9b:f1:1b:7a:80:ca:c9:5f:24:cd: a4:a2:5c:21:e6:4a:69:2e:62:cb:46:c7:11:29:24: b0:f1:c5:a2:b1:91:79:b7:ca:5a:0c:4d:96:1d:f0: c4:60:d3:83:8f:b9:15:f9:6c:52:6b:31:d6:b8:45: fc:c1:b3:72:d1:58:21:ba:7c:86:28:bf:49:40:9a: d7:7a:58:c7:fc:6d:be:7b:94:2d:7a:d2:21:63:34: 7f:c9:1a:44:ab:0d:3d:60:1b:6b:29:38:44:12:63: 8a:dd:6f:ea:61:58:c4:c6:35:62:68:91:6e:2e:c4: 8a:a0:be:be:3d:cc:c3:37:45:37:3f:26:54:f2:7d: 6b:48:37:da:d7:8a:93:1a:f3:e8:bc:f4:86:d0:8e: 00:73:a8:f0:75:7f:a9:c2:ee:83:f0:4f:84:c6:e3: bd:18:d5:7a:c9:85:51:ce:a7:98:d4:ea:2d:24:09: 70:3a:ee:05:55:49:06:40:5b:b3:8c:37:6c:91:f6: 69:48:46:ff:f2:27:69:de:3d:1e:e4:8e:14:68:ab: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BD:D1:5C:05:E4:4C:6C:C1:80:91:7F:7B:20:4C:6D:A9:23:FB:9E X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b6:78:0c:0a:c5:6b:11:f1:ec:02:1c:fb:7f:86:54:ef:0c: 2e:49:61:39:45:88:1e:34:4c:5b:01:b0:72:ee:74:0a:ad:94: 90:59:8a:36:78:af:77:1e:c2:51:e8:f9:ae:aa:61:b0:3b:52: 90:1a:38:3a:e3:c9:28:d8:a4:24:cd:51:f5:b6:9d:96:a3:20: a1:76:85:33:65:37:7a:7f:81:40:13:dd:a6:a2:49:36:4b:90: 80:d3:b7:6c:00:3c:13:6b:5f:74:79:6f:e4:96:1d:84:67:72: 54:9c:bb:96:cc:6a:c5:51:fd:47:32:64:26:39:6d:94:92:54: 8f:53:9b:1e:09:af:bf:34:3b:c3:13:47:e9:51:85:10:c5:8c: ac:be:32:97:92:22:07:e7:71:57:95:14:e6:16:d0:b6:a8:ca: ef:a7:8c:eb:ad:c5:05:ea:31:57:37:40:b2:df:98:38:17:0d: a0:9d:d3:98:9d:7d:2c:0f:15:de:a1:e7:ad:98:0e:73:5b:91: 1d:80:9d:55:16:15:fa:e3:91:7b:8c:0d:de:7b:ac:6c:c0:1b: fe:fd:ba:aa:62:30:03:38:14:56:8a:2f:61:f9:c8:6e:82:93: e4:64:57:6a:29:ae:5d:41:6b:a7:96:db:9c:31:36:d3:49:a1: b0:f5:2f:47 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGHbvt8I9fg6hOOM6SYvGKKbyyvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjAyMTkxMzQ3MjVaFw0yNjAyMjAxNzE4MjVaMDMxMTAvBgNV BAMTKDFFQkREMTVDMDVFNDRDNkNDMTgwOTE3RjdCMjA0QzZEQTkyM0ZCOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQSKZ2Jcva1T/UroWLeHOcWeT n8eml718FmjQ67DXwaQbag06cAJJQPN3lZObGFVGm/EbeoDKyV8kzaSiXCHmSmku YstGxxEpJLDxxaKxkXm3yloMTZYd8MRg04OPuRX5bFJrMda4RfzBs3LRWCG6fIYo v0lAmtd6WMf8bb57lC160iFjNH/JGkSrDT1gG2spOEQSY4rdb+phWMTGNWJokW4u xIqgvr49zMM3RTc/JlTyfWtIN9rXipMa8+i89IbQjgBzqPB1f6nC7oPwT4TG470Y 1XrJhVHOp5jU6i0kCXA67gVVSQZAW7OMN2yR9mlIRv/yJ2nePR7kjhRoq63RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHr3RXAXkTGzBgJF/eyBMbakj+54wHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zRDAxQ0Q2OTI4RERF OEQyNkFDOTYyNjVGMUY5MDRDNzJGMUExMkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALZ4DArFaxHx 7AIc+3+GVO8MLklhOUWIHjRMWwGwcu50Cq2UkFmKNnivdx7CUej5rqphsDtSkBo4 OuPJKNikJM1R9badlqMgoXaFM2U3en+BQBPdpqJJNkuQgNO3bAA8E2tfdHlv5JYd hGdyVJy7lsxqxVH9RzJkJjltlJJUj1ObHgmvvzQ7wxNH6VGFEMWMrL4yl5IiB+dx V5UU5hbQtqjK76eM663FBeoxVzdAst+YOBcNoJ3TmJ19LA8V3qHnrZgOc1uRHYCd VRYV+uORe4wN3nusbMAb/v26qmIwAzgUVoovYfnIboKT5GRXaimuXUFrp5bbnDE2 00mhsPUvRw== -----END CERTIFICATE-----Generated at Fri Feb 20 01:49:11 2026 by rpki-client