$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft File: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft (raw, json) Hash identifier: kqmuAoRTMDoxN7uHZAk5KwpKZBi7upVoi2wHo77QXm8= Subject key identifier: E6:76:F6:4B:16:69:D4:6D:66:D4:AF:97:57:06:BF:BC:00:28:30:F4 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: D86443EDE7EEB8A4FEBC3013F94AACED9C4BE1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft Manifest number: 2F Signing time: Sun 22 Feb 2026 12:07:30 +0000 Manifest this update: Sun 22 Feb 2026 12:02:30 +0000 Manifest next update: Mon 23 Feb 2026 12:11:30 +0000 Files and hashes: 1: 3130332e3233382e34382e302f32322d3234203d3e203137343239.roa (hash: rttDeHAFBcC/FYTbFPRn/BAotSmLlX3DE6v6zoY9hhg=) 2: 323430333a343330303a3a2f33322d3438203d3e203137343239.roa (hash: BxtN59vqgBZxPoERk/JYSA/midP2NXeRF93I1z+oqtg=) 3: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl (hash: Jc0BogQ5QURa3HDhePnuHYLf0uFTpEthmXZmuOW0o/U=) 4: 34332e3234372e3233362e302f32322d3234203d3e203137343239.roa (hash: OkspnUQvKjtS72CeXZeKKyXqfiA+KxT6HHhEv5NC4NQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d8:64:43:ed:e7:ee:b8:a4:fe:bc:30:13:f9:4a:ac:ed:9c:4b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Feb 22 12:02:30 2026 GMT Not After : Feb 23 12:11:30 2026 GMT Subject: CN=E676F64B1669D46D66D4AF975706BFBC002830F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:42:92:1e:87:0e:41:f7:61:dc:c3:c3:03: 91:13:94:26:a5:a6:74:ec:64:76:40:8f:3f:79:54: fb:b5:0c:85:09:35:8e:76:2b:c0:5a:e3:f7:84:c6: 55:69:72:f6:bc:89:ba:d6:79:d3:85:eb:f5:64:9d: 53:f9:03:10:ba:4f:7e:07:32:9f:7e:c5:9d:7f:af: 39:23:5e:68:a0:6f:bc:ce:e4:79:d1:78:b5:a4:87: 6d:96:cc:27:c9:b8:e3:1e:ae:52:5b:24:a9:e8:e0: cc:2a:92:aa:4a:90:a7:6b:42:22:02:d2:d8:68:da: a3:55:de:89:ce:bb:b8:2e:f4:ab:5c:8e:08:c9:42: aa:ad:80:ba:a2:43:f0:9f:72:d7:da:ce:78:3f:b5: 52:1b:0d:0e:2e:2b:0f:73:c5:c3:05:f5:68:ac:32: 4a:7d:cf:b2:8f:a1:10:b5:5b:42:f6:ec:33:cb:86: c0:30:6f:96:90:47:42:6d:61:77:d2:53:88:ce:7e: 6f:7d:c0:13:39:a4:91:48:03:69:57:d0:69:75:42: 3a:e6:2a:b9:b3:16:d2:63:ae:e1:2e:e2:d1:39:44: 4e:aa:ad:ef:da:4c:27:94:68:07:a7:51:5f:c1:bf: 4c:91:0f:9e:5c:32:2b:24:9e:80:13:0d:e8:27:f4: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:76:F6:4B:16:69:D4:6D:66:D4:AF:97:57:06:BF:BC:00:28:30:F4 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:49:eb:95:23:ab:aa:47:cd:90:96:f4:22:e1:01:dd:cb:03: c9:8a:09:39:ba:2c:a6:a6:7a:7c:44:0c:0a:e4:d0:42:52:f6: 85:21:10:53:2d:8a:86:a5:90:13:b3:cb:32:35:cf:ca:f4:a4: 14:c9:91:01:03:31:11:78:cb:fa:e1:e5:00:e7:f1:f9:f2:06: 6b:51:1c:af:a7:73:ba:cb:ea:80:4a:35:65:ca:8f:bb:ca:27: ab:0b:d4:2e:3e:93:8f:f8:70:16:20:45:97:90:68:3b:f5:ce: b7:08:c8:1e:3f:e5:9a:b7:c3:41:29:ce:2b:6c:00:ed:4f:23: 90:5e:3e:28:bf:de:d7:93:9d:9d:db:2f:e2:09:ea:e7:db:57: b9:4d:32:98:82:f2:eb:b4:49:6e:55:0e:f5:37:07:85:d0:54: f1:6e:e0:6d:90:b3:b3:5c:6c:e7:d0:d1:27:6d:0b:d9:3a:57: 91:21:9e:81:21:6a:9f:af:14:1d:24:8e:b5:47:58:08:c5:7d: 19:c1:a0:38:7c:d3:bf:8c:b9:14:f2:ba:e0:b9:67:e2:50:4b: fd:89:4f:86:ec:43:e9:1f:aa:9b:61:f5:e3:1e:50:28:c2:92: a5:74:96:7b:0e:a9:df:db:d5:9b:4d:a8:c1:b4:9c:4d:c9:6f: ae:33:c7:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUANhkQ+3n7rik/rwwE/lKrO2cS+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjAyMjIxMjAyMzBaFw0yNjAyMjMxMjExMzBaMDMxMTAvBgNV BAMTKEU2NzZGNjRCMTY2OUQ0NkQ2NkQ0QUY5NzU3MDZCRkJDMDAyODMwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83EKSHocOQfdh3MPDA5ETlCal pnTsZHZAjz95VPu1DIUJNY52K8Ba4/eExlVpcva8ibrWedOF6/VknVP5AxC6T34H Mp9+xZ1/rzkjXmigb7zO5HnReLWkh22WzCfJuOMerlJbJKno4MwqkqpKkKdrQiIC 0tho2qNV3onOu7gu9KtcjgjJQqqtgLqiQ/Cfctfazng/tVIbDQ4uKw9zxcMF9Wis Mkp9z7KPoRC1W0L27DPLhsAwb5aQR0JtYXfSU4jOfm99wBM5pJFIA2lX0Gl1Qjrm KrmzFtJjruEu4tE5RE6qre/aTCeUaAenUV/Bv0yRD55cMisknoATDegn9DHPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5nb2SxZp1G1m1K+XVwa/vAAoMPQwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC9DRjIxNENERURDNTg0 QjNCMDEwRkMzQTZEMEQzREI4OTcyMTlCNTk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0nrlSOrqkfN kJb0IuEB3csDyYoJObospqZ6fEQMCuTQQlL2hSEQUy2KhqWQE7PLMjXPyvSkFMmR AQMxEXjL+uHlAOfx+fIGa1Ecr6dzusvqgEo1ZcqPu8onqwvULj6Tj/hwFiBFl5Bo O/XOtwjIHj/lmrfDQSnOK2wA7U8jkF4+KL/e15Odndsv4gnq59tXuU0ymILy67RJ blUO9TcHhdBU8W7gbZCzs1xs59DRJ20L2TpXkSGegSFqn68UHSSOtUdYCMV9GcGg OHzTv4y5FPK64Lln4lBL/YlPhuxD6R+qm2H14x5QKMKSpXSWew6p39vVm02owbSc TclvrjPHWw== -----END CERTIFICATE-----Generated at Mon Feb 23 02:14:09 2026 by rpki-client