$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft File: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft (raw, json) Hash identifier: e0D7MQS3o+8rKeL99LRgijEkFLXVoRNcJaTkrMCSAHY= Subject key identifier: ED:DB:8E:0F:DE:95:8C:5A:C6:1F:B4:08:D8:BF:6F:D2:0E:72:D5:20 Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 Certificate issuer: /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Certificate serial: 7039FAC6E71330B5AF6941F9CD950D5EDAFDBBAA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft Manifest number: 3F Signing time: Fri 06 Mar 2026 22:08:22 +0000 Manifest this update: Fri 06 Mar 2026 22:03:22 +0000 Manifest next update: Sat 07 Mar 2026 23:19:22 +0000 Files and hashes: 1: 3230332e3230352e3135352e302f32342d3234203d3e20313332323033.roa (hash: x6F31DYBvz5A5hQozeg0Spg5N0VoLFM0D7Uq4YpU5sU=) 2: 3230332e3230352e3133362e302f32342d3234203d3e20313332323033.roa (hash: OfnF9Xhfcn05Z9Vv2YxArhdpQfnFDoeeAVwy6VGNRqY=) 3: 3230332e3230352e3135392e302f32342d3234203d3e20313332323033.roa (hash: bMdixgOplBdURY+Qu1EbPIFeV69TxZq/l4CfYtJ13zQ=) 4: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl (hash: C88hB95dW8WHEbKglCH9aZO8izM2W8s7bDI5uwq4lTg=) 5: 3230332e3230352e3133372e302f32342d3234203d3e20313332323033.roa (hash: Nclm7ktkTy+McaXaSR6ks6HcCvvsvvhBJnKPOTQah54=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 23:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:39:fa:c6:e7:13:30:b5:af:69:41:f9:cd:95:0d:5e:da:fd:bb:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Validity Not Before: Mar 6 22:03:22 2026 GMT Not After : Mar 7 23:19:22 2026 GMT Subject: CN=EDDB8E0FDE958C5AC61FB408D8BF6FD20E72D520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7c:bb:9e:3f:8b:09:de:4a:85:52:95:24:29: 8d:fe:be:9f:ba:23:8d:14:ef:7c:85:93:ce:10:35: 5f:7c:9c:be:d7:2e:e3:80:2a:de:f5:64:ff:dc:c7: 17:42:ac:f0:11:e8:52:c3:76:b5:ba:2a:2f:9c:6c: f1:94:3e:b2:19:47:7f:24:97:bc:60:8c:cc:f1:e3: c8:11:66:30:d1:ad:b6:86:b8:09:1a:c6:21:67:e0: ad:bd:55:c2:ec:cd:76:44:09:65:37:9b:e5:57:18: be:41:3b:00:c6:0c:1a:cc:90:d2:fd:f5:33:03:c8: 21:7a:e9:2c:a6:8b:8d:2a:03:14:00:e6:4a:b9:fc: 35:ec:23:a2:a7:67:9e:b2:c0:80:c3:1b:25:ea:e2: 1f:09:3d:b7:14:ad:28:51:7d:0c:e5:de:99:ca:9d: ab:1f:03:b4:93:3d:0e:ca:ba:49:17:39:6c:20:5d: 72:6e:62:4f:58:7b:ec:b2:d5:13:83:c5:06:e2:4a: 03:4d:02:99:c1:56:3b:1a:2b:a6:31:51:63:3b:0e: d0:0a:76:ab:ab:7c:e8:88:33:5f:1f:cf:3d:02:91: 6a:1b:7f:c3:8d:13:64:39:5d:5e:31:5c:57:d3:4f: c5:26:1c:74:c7:aa:d3:b5:70:d2:b7:f5:61:6c:0b: 30:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DB:8E:0F:DE:95:8C:5A:C6:1F:B4:08:D8:BF:6F:D2:0E:72:D5:20 X509v3 Authority Key Identifier: keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:27:7e:48:f8:11:6a:a3:a6:22:60:1a:f9:88:2f:93:d8:bf: ee:87:3f:ad:72:6b:c6:ad:31:1f:e8:6b:61:75:b9:ed:5f:8d: 21:14:e9:91:a9:6f:c9:b8:07:e8:ed:c9:fb:6f:d2:1b:e8:1d: a7:2f:91:65:20:3a:f1:f9:db:e2:6f:88:29:e8:be:c6:fd:7d: 77:9f:cd:35:46:0c:96:69:4c:65:d3:30:7e:42:17:88:64:ba: a4:82:7c:24:b3:c5:4c:ac:db:47:2a:3e:3c:48:c4:c8:c7:e9: 9e:63:56:b4:13:2d:be:cf:e1:06:64:ee:45:27:21:a7:66:5c: fe:c3:b8:34:c0:c5:37:26:e6:92:b8:4c:06:3d:34:93:ed:44: c2:1c:6d:c3:0f:15:20:a1:85:71:0b:ff:db:96:29:43:98:e2: cc:a8:11:5b:d1:2b:2e:1d:24:45:c6:af:79:81:08:dc:5c:14: d5:89:fa:9d:a2:86:e2:85:f4:59:ee:99:fd:a1:ad:41:3d:c5: 54:13:f1:70:24:52:df:e9:1c:13:68:b6:37:91:b0:d2:ac:88: 61:9d:75:d2:54:d7:8a:e2:ad:2c:e7:e8:ef:6e:bf:b9:a6:92: 8b:4e:77:8b:5c:ee:aa:db:08:d5:34:90:be:1e:26:0b:ca:99: 2d:35:2d:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcDn6xucTMLWvaUH5zZUNXtr9u6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRF RTQ2QUY2NDAeFw0yNjAzMDYyMjAzMjJaFw0yNjAzMDcyMzE5MjJaMDMxMTAvBgNV BAMTKEVEREI4RTBGREU5NThDNUFDNjFGQjQwOEQ4QkY2RkQyMEU3MkQ1MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDofLueP4sJ3kqFUpUkKY3+vp+6 I40U73yFk84QNV98nL7XLuOAKt71ZP/cxxdCrPAR6FLDdrW6Ki+cbPGUPrIZR38k l7xgjMzx48gRZjDRrbaGuAkaxiFn4K29VcLszXZECWU3m+VXGL5BOwDGDBrMkNL9 9TMDyCF66Symi40qAxQA5kq5/DXsI6KnZ56ywIDDGyXq4h8JPbcUrShRfQzl3pnK nasfA7STPQ7KukkXOWwgXXJuYk9Ye+yy1RODxQbiSgNNApnBVjsaK6YxUWM7DtAK dqurfOiIM18fzz0CkWobf8ONE2Q5XV4xXFfTT8UmHHTHqtO1cNK39WFsCzDhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7duOD96VjFrGH7QI2L9v0g5y1SAwHwYDVR0j BBgwFoAUqSuBmizVyxNZtwd2tY4s/e5Gr2QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjMxMDUzMC8wL0E5MkI4MTlBMkNENUNCMTM1OUI3MDc3NkI1OEUy Q0ZERUU0NkFGNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRFRTQ2QUY2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIzMTA1MzAvMC9BOTJCODE5QTJDRDVD QjEzNTlCNzA3NzZCNThFMkNGREVFNDZBRjY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayd+SPgRaqOm ImAa+Ygvk9i/7oc/rXJrxq0xH+hrYXW57V+NIRTpkalvybgH6O3J+2/SG+gdpy+R ZSA68fnb4m+IKei+xv19d5/NNUYMlmlMZdMwfkIXiGS6pIJ8JLPFTKzbRyo+PEjE yMfpnmNWtBMtvs/hBmTuRSchp2Zc/sO4NMDFNybmkrhMBj00k+1Ewhxtww8VIKGF cQv/25YpQ5jizKgRW9ErLh0kRcaveYEI3FwU1Yn6naKG4oX0We6Z/aGtQT3FVBPx cCRS3+kcE2i2N5Gw0qyIYZ110lTXiuKtLOfo726/uaaSi053i1zuqtsI1TSQvh4m C8qZLTUt6g== -----END CERTIFICATE-----Generated at Sat Mar 7 12:44:26 2026 by rpki-client