$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft File: 3685DAC8828B3EB4989761422A77AA7B265F96CE.mft (raw, json) Hash identifier: /sGFYU57eEANuRF4x696fNSOFRyzn09ONUoAcFi/PZ4= Subject key identifier: 43:38:F8:47:16:51:E0:97:29:C9:98:BF:17:35:AF:D0:DE:EF:C4:A0 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 2C9B598F5EBC5C95A62CEF69460044B936A8BCCD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft Manifest number: 2F Signing time: Sun 22 Feb 2026 13:07:30 +0000 Manifest this update: Sun 22 Feb 2026 13:02:30 +0000 Manifest next update: Mon 23 Feb 2026 15:01:30 +0000 Files and hashes: 1: 3685DAC8828B3EB4989761422A77AA7B265F96CE.crl (hash: uDh7ImFsR9Lz8O1h9k4HrkgidUZBodAS7AKuRi852KQ=) 2: 3130312e34382e302e302f31362d3136203d3e203539303738.roa (hash: 00FMGQ4/kY+teFyOe+BH5ECydMOmFxw6v6DkIFxlY1M=) 3: 323430323a653763303a3a2f33322d3332203d3e203539303738.roa (hash: 8DvqcXIMsqOXKY4DJNa9spynpOB+bhyuf5gQzIl9czY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:9b:59:8f:5e:bc:5c:95:a6:2c:ef:69:46:00:44:b9:36:a8:bc:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Feb 22 13:02:30 2026 GMT Not After : Feb 23 15:01:30 2026 GMT Subject: CN=4338F8471651E09729C998BF1735AFD0DEEFC4A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:2e:84:60:d8:9d:d8:e1:76:6a:90:a0:e2: 78:d1:02:17:74:da:96:32:33:c4:e7:a8:40:c3:76: cd:10:5a:46:af:da:94:dc:7a:6b:8f:43:6c:5e:2e: 6a:84:ed:bf:99:b0:7a:d5:79:87:8b:09:b3:a7:9d: 94:25:65:b3:fc:ee:7e:a4:8c:94:f7:9a:19:6f:bf: 3f:f8:eb:13:c1:97:92:d8:a7:65:74:60:81:2f:1f: 98:19:8c:6f:d9:94:77:d5:63:30:4f:5a:be:52:94: ff:b9:17:a9:7d:a8:e8:88:56:61:96:9a:43:ba:cc: 09:bf:b3:1e:3b:95:de:de:eb:d4:4c:84:4a:36:76: 46:02:a8:3d:8e:63:a7:76:e9:a5:d6:24:71:d6:e8: 6e:13:d2:ff:5d:46:f4:fe:91:1d:c3:d6:1c:bd:c1: e7:7d:12:81:40:c5:57:34:1e:50:3a:f8:ea:6b:2d: 85:50:2a:21:e5:63:10:5f:25:4e:80:2e:c8:d4:e5: 1c:66:41:2f:6b:27:d2:1e:d3:7e:c5:1f:92:66:a8: 59:41:f1:ab:64:fa:68:5b:47:53:76:3a:0d:fb:94: 0c:43:8b:6b:73:53:95:88:55:38:6a:3c:e9:ac:bc: bb:a8:b4:74:34:da:56:06:d0:00:8d:69:8b:04:94: 8e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:38:F8:47:16:51:E0:97:29:C9:98:BF:17:35:AF:D0:DE:EF:C4:A0 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:10:9a:97:b6:02:45:bc:57:49:e1:50:8c:76:10:39:02:25: 5a:e0:ef:0d:8c:fa:e5:a5:df:2b:47:b4:d6:19:49:f9:34:68: 9e:32:0c:db:33:ce:2a:30:0e:d3:b7:71:31:61:2d:ee:be:e0: 27:8b:07:cd:39:6a:a9:81:a1:a0:05:d6:19:0c:94:6d:23:e6: 80:4f:08:25:4b:50:18:b6:38:99:0e:e7:c7:4f:53:21:86:2c: fc:47:71:3e:b0:6d:09:a8:0e:6d:bf:02:47:83:c7:a1:84:ca: 52:d4:10:35:4e:a4:53:7f:fe:b0:4c:0b:c0:fe:df:d1:2e:1f: da:a6:e3:c5:2d:ad:46:be:00:d2:95:92:cb:58:4e:68:5f:89: 9c:84:44:b9:18:a8:9a:5e:2f:6e:84:d3:c9:64:2e:4a:66:73: e4:7f:ae:d4:be:ab:6d:a8:fc:00:44:cc:9a:06:6a:34:d1:e7: d2:14:aa:63:47:fc:f0:0b:9e:03:a8:46:63:1f:32:75:96:41: f7:a6:38:da:7e:8e:2b:1b:3c:7a:88:bf:cf:ab:5d:3f:87:58: 8e:ea:4a:84:00:ab:4e:46:48:13:f9:a8:af:0e:b6:a3:c2:c9: 37:bd:a2:2c:13:3d:ed:a5:31:93:e4:57:40:23:74:e6:99:9b: a7:db:10:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULJtZj168XJWmLO9pRgBEuTaovM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjAyMjIxMzAyMzBaFw0yNjAyMjMxNTAxMzBaMDMxMTAvBgNV BAMTKDQzMzhGODQ3MTY1MUUwOTcyOUM5OThCRjE3MzVBRkQwREVFRkM0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Xy6EYNid2OF2apCg4njRAhd0 2pYyM8TnqEDDds0QWkav2pTcemuPQ2xeLmqE7b+ZsHrVeYeLCbOnnZQlZbP87n6k jJT3mhlvvz/46xPBl5LYp2V0YIEvH5gZjG/ZlHfVYzBPWr5SlP+5F6l9qOiIVmGW mkO6zAm/sx47ld7e69RMhEo2dkYCqD2OY6d26aXWJHHW6G4T0v9dRvT+kR3D1hy9 wed9EoFAxVc0HlA6+OprLYVQKiHlYxBfJU6ALsjU5RxmQS9rJ9Ie037FH5JmqFlB 8atk+mhbR1N2Og37lAxDi2tzU5WIVThqPOmsvLuotHQ02lYG0ACNaYsElI61AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQzj4RxZR4JcpyZi/FzWv0N7vxKAwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zNjg1REFDODgyOEIz RUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxCal7YCRbxX SeFQjHYQOQIlWuDvDYz65aXfK0e01hlJ+TRonjIM2zPOKjAO07dxMWEt7r7gJ4sH zTlqqYGhoAXWGQyUbSPmgE8IJUtQGLY4mQ7nx09TIYYs/EdxPrBtCagObb8CR4PH oYTKUtQQNU6kU3/+sEwLwP7f0S4f2qbjxS2tRr4A0pWSy1hOaF+JnIREuRioml4v boTTyWQuSmZz5H+u1L6rbaj8AETMmgZqNNHn0hSqY0f88AueA6hGYx8ydZZB96Y4 2n6OKxs8eoi/z6tdP4dYjupKhACrTkZIE/morw62o8LJN72iLBM97aUxk+RXQCN0 5pmbp9sQfA== -----END CERTIFICATE-----Generated at Mon Feb 23 02:27:16 2026 by rpki-client