$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft File: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft (raw, json) Hash identifier: pBMTW/q9Jcm5q9RAtmzvXUnC0FjIjVwjG+Zy85HstwE= Subject key identifier: B0:A9:7C:90:B5:22:BF:12:74:19:5A:07:A9:23:2C:83:D4:6C:DD:B2 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 2FCD4346B991E62241946D2657AADD29D5477D94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft Manifest number: 2F Signing time: Sun 22 Feb 2026 22:37:30 +0000 Manifest this update: Sun 22 Feb 2026 22:32:30 +0000 Manifest next update: Tue 24 Feb 2026 00:10:30 +0000 Files and hashes: 1: 323430353a623330303a3a2f33322d3332203d3e203535393936.roa (hash: iOf9DQAa5NApqZitY/bueVMIFCSGyZ/pEKngCq23c8c=) 2: 5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl (hash: JN2mpwVGpM9B0TQZgtIh8+hf2UZj5x1vQDOr+7ehQa4=) 3: 3130332e34302e3137342e302f32332d3234203d3e203535393936.roa (hash: B9+LIF0F2jOmyBOP5MaMAIvmuw1Q1Po92LV0UMNnbWk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cd:43:46:b9:91:e6:22:41:94:6d:26:57:aa:dd:29:d5:47:7d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Feb 22 22:32:30 2026 GMT Not After : Feb 24 00:10:30 2026 GMT Subject: CN=B0A97C90B522BF1274195A07A9232C83D46CDDB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:60:6a:3e:cf:52:eb:8a:9c:7b:5a:e4:f4:61: 3a:a2:cc:d9:f6:81:56:ac:53:ad:d5:3b:0a:7a:6e: 3d:c0:79:86:e8:ae:7b:b7:30:f5:03:ec:19:80:d7: b7:32:9f:51:52:c2:35:38:6c:fa:18:3a:1f:28:6f: 7c:23:be:34:44:0f:0c:8e:6d:cf:e4:08:1f:4b:a8: 4f:24:a6:96:a2:8d:24:6c:51:b8:cd:71:87:2c:55: 5f:92:e4:a3:68:6f:81:5d:9b:3e:c4:e3:c1:96:8d: dc:e2:0b:66:9e:3d:3d:07:57:02:a4:e7:18:98:21: 38:ff:30:54:11:81:f3:93:6b:b1:42:bd:c5:07:24: 6c:d6:2f:a1:e2:8f:ac:75:cf:dd:d1:29:13:d1:1d: e7:31:39:03:a1:22:d1:26:18:15:f0:68:e6:48:9a: 27:28:70:54:01:61:15:d6:8c:21:22:63:2c:a4:63: f2:7c:30:77:21:87:cd:58:e9:f6:73:0c:86:71:a6: 9f:40:24:b8:5c:0a:7a:7f:10:c8:bc:88:ad:8f:79: 5a:a9:a6:06:10:f6:b1:cd:ab:1e:47:02:21:ae:08: 9d:0a:bb:4f:b8:27:23:71:58:86:28:7d:18:0e:b0: 1d:49:97:f2:8c:17:cb:99:dd:fe:ae:2b:05:64:e7: 54:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A9:7C:90:B5:22:BF:12:74:19:5A:07:A9:23:2C:83:D4:6C:DD:B2 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b2:56:9b:5f:f2:cb:c8:31:23:0a:5c:d0:22:d2:7d:ba:96: cb:87:42:be:0d:7b:66:cc:da:44:43:e6:42:ff:d2:4b:e4:80: 1d:f9:d1:97:ff:93:bb:4e:b5:f1:18:89:40:50:8f:f5:72:0e: 47:20:95:3b:18:9c:34:ce:13:c3:2d:08:da:19:1f:cd:11:56: 6b:2a:d3:89:73:a6:55:70:3a:50:ca:a7:67:79:a6:c3:5a:b3: 0e:b6:48:13:8f:62:1e:26:8c:f0:7a:8f:4d:e7:9e:7e:29:1d: ca:26:d3:20:ff:9f:c0:dc:a1:4d:0d:4d:f5:94:75:9d:4c:0b: cf:51:44:c3:2b:c6:bf:d5:4f:9b:af:3a:9f:51:f2:0a:a0:74: 0e:c2:d1:6c:8f:6b:1c:d0:c6:7a:1e:99:b7:40:44:73:ca:9e: ad:67:0c:92:53:a8:f2:95:ce:c5:d1:ef:d2:e5:44:1a:5e:a6: ef:4b:aa:80:1d:96:5e:33:3b:3b:6c:9b:18:42:59:72:5b:0b: da:63:eb:77:de:ab:4b:76:6d:7f:e5:4b:86:88:e9:7b:5f:2f: 48:d7:40:5c:14:c8:cb:71:c4:92:bf:41:ec:7b:02:27:26:12: 9a:b0:53:d2:e1:40:a0:4f:6a:72:51:6b:e1:f9:4e:37:21:16: d3:6b:82:a5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL81DRrmR5iJBlG0mV6rdKdVHfZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjAyMjIyMjMyMzBaFw0yNjAyMjQwMDEwMzBaMDMxMTAvBgNV BAMTKEIwQTk3QzkwQjUyMkJGMTI3NDE5NUEwN0E5MjMyQzgzRDQ2Q0REQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQYGo+z1Lripx7WuT0YTqizNn2 gVasU63VOwp6bj3AeYbornu3MPUD7BmA17cyn1FSwjU4bPoYOh8ob3wjvjREDwyO bc/kCB9LqE8kppaijSRsUbjNcYcsVV+S5KNob4Fdmz7E48GWjdziC2aePT0HVwKk 5xiYITj/MFQRgfOTa7FCvcUHJGzWL6Hij6x1z93RKRPRHecxOQOhItEmGBXwaOZI micocFQBYRXWjCEiYyykY/J8MHchh81Y6fZzDIZxpp9AJLhcCnp/EMi8iK2PeVqp pgYQ9rHNqx5HAiGuCJ0Ku0+4JyNxWIYofRgOsB1Jl/KMF8uZ3f6uKwVk51S7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsKl8kLUivxJ0GVoHqSMsg9Rs3bIwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMC81REY4MDg2RDNFRkEx NzY0ODdBMUMzNzZCN0JDQ0YzRTgzQUIyMzM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7JWm1/yy8gx Iwpc0CLSfbqWy4dCvg17ZszaREPmQv/SS+SAHfnRl/+Tu0618RiJQFCP9XIORyCV OxicNM4Twy0I2hkfzRFWayrTiXOmVXA6UMqnZ3mmw1qzDrZIE49iHiaM8HqPTeee fikdyibTIP+fwNyhTQ1N9ZR1nUwLz1FEwyvGv9VPm686n1HyCqB0DsLRbI9rHNDG eh6Zt0BEc8qerWcMklOo8pXOxdHv0uVEGl6m70uqgB2WXjM7O2ybGEJZclsL2mPr d96rS3Ztf+VLhojpe18vSNdAXBTIy3HEkr9B7HsCJyYSmrBT0uFAoE9qclFr4flO NyEW02uCpQ== -----END CERTIFICATE-----Generated at Mon Feb 23 02:06:14 2026 by rpki-client