$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft File: 2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft (raw, json) Hash identifier: nCUJHDrgHy6LLrwVKOHJP8ZSDEa3VsOCBLMcR2m3Qow= Subject key identifier: 34:E3:09:6E:FB:48:88:40:F2:68:CA:6C:1D:4B:2B:56:D6:6B:42:18 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 51E9662549C2C6AC5A5C95D908ABD5102B195967 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft Manifest number: 2F Signing time: Sun 22 Feb 2026 17:42:30 +0000 Manifest this update: Sun 22 Feb 2026 17:37:30 +0000 Manifest next update: Mon 23 Feb 2026 21:18:30 +0000 Files and hashes: 1: 3130332e35362e3138362e302f32342d3234203d3e203539303433.roa (hash: 185Jozw9t6OPsftx2I3cbH+cAXu8MqzSEVvP5Bvz/0w=) 2: 2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl (hash: N0g82oyuZo4nWqaazKerXy4x5wgmmP0Lz9HB0rMwkM4=) 3: 3130332e35362e3138342e302f32342d3234203d3e203539303433.roa (hash: hmhm/J6fR0cLjZz5lcB7aw6zPjy50dHaMavZ+vQXS/E=) 4: 3130332e35362e3138352e302f32342d3234203d3e203539303433.roa (hash: H/aYJEZDszUQqZEgBSI4KYTtHU/iCJRnmxQv5XXPkG0=) 5: 3130332e35362e3138372e302f32342d3234203d3e203539303433.roa (hash: b93qXeOKMOA0k1Tq0lEXe8AyLgDN80wyTvETkl87my8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e9:66:25:49:c2:c6:ac:5a:5c:95:d9:08:ab:d5:10:2b:19:59:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Feb 22 17:37:30 2026 GMT Not After : Feb 23 21:18:30 2026 GMT Subject: CN=34E3096EFB488840F268CA6C1D4B2B56D66B4218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:97:4f:44:68:cc:56:a7:8e:15:36:6e:e0: 79:7e:77:9d:95:35:4b:3a:99:3b:39:1f:8e:30:ae: a8:2c:f7:47:40:cb:d6:2f:0d:d8:3b:02:62:22:4b: 3b:21:85:d4:89:4b:0a:5d:04:f3:d0:35:d6:0d:2f: b1:6e:8d:3c:f4:a7:d7:5c:01:be:1d:aa:cf:d7:1f: f3:54:e6:c6:5f:4b:b6:5e:83:1f:47:76:c2:16:f7: 04:b6:c9:22:2d:06:61:0d:d0:5b:6a:9f:d1:1c:3a: 71:49:36:13:a0:c1:f9:00:d8:11:66:f3:4e:83:a7: 43:0e:0a:ee:ff:6d:58:6a:b4:81:af:b0:82:28:4a: e0:0f:60:bc:36:e7:e4:15:63:73:5a:12:39:df:11: 5d:a5:5e:51:0d:04:2a:65:bc:7f:25:35:b4:99:8a: e9:fd:c3:c0:b8:9f:cc:d3:86:48:e1:82:c1:92:d5: 35:73:2d:f9:45:3f:0a:1a:10:43:73:d4:98:2f:d1: 43:82:ba:1d:05:33:c5:26:8c:8e:f3:fe:30:ff:eb: 6a:bc:37:95:c6:05:87:55:55:3f:43:e4:c6:44:1e: 75:0f:e9:59:94:e8:78:ab:21:46:de:a3:ba:7b:5f: 4b:8d:de:3a:14:8f:6c:f4:6f:ec:3b:16:96:fa:01: 57:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E3:09:6E:FB:48:88:40:F2:68:CA:6C:1D:4B:2B:56:D6:6B:42:18 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:01:6d:a2:52:a6:d3:f9:d6:f4:d4:74:d6:48:8e:15:e3:2b: 35:7e:6e:65:d1:64:82:68:4c:89:cc:04:eb:8a:4f:ec:ac:bd: 90:ba:bb:7f:e2:73:8e:cc:54:cb:fb:f8:ef:70:37:9a:37:49: cb:e5:c6:4b:92:a3:65:05:54:43:fa:26:c0:92:db:50:c9:b5: 25:9d:57:37:4a:7e:b7:99:9f:9e:84:79:3c:ca:1f:bc:00:cd: 40:54:64:f8:b6:a6:87:9b:ef:53:a8:a1:0d:23:b8:2d:bc:82: a6:98:cf:b6:40:f5:e8:d4:ef:22:f5:92:a9:ee:c7:b8:0c:2d: e8:9d:1b:5f:f0:d1:fd:54:73:14:48:3e:76:20:76:3a:43:4c: 93:fb:4e:e4:fa:5f:53:4b:06:7c:1d:a9:73:0c:7d:33:e6:27: c1:55:e4:5e:2c:d7:f3:60:2f:0d:63:dd:8e:4a:e3:47:8f:10: f0:6a:aa:b5:41:7b:17:58:8f:c4:38:41:31:96:ba:7a:33:22: 3e:1d:e9:24:87:e9:33:ce:6e:90:e6:f5:9e:a9:b6:16:d6:05: a7:46:02:a3:67:39:d2:1e:21:24:13:bc:6b:84:ea:16:e1:e6: 28:a5:19:77:4b:7c:97:8a:56:2d:01:ed:7f:72:71:f3:28:c9: 25:eb:b4:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUelmJUnCxqxaXJXZCKvVECsZWWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjAyMjIxNzM3MzBaFw0yNjAyMjMyMTE4MzBaMDMxMTAvBgNV BAMTKDM0RTMwOTZFRkI0ODg4NDBGMjY4Q0E2QzFENEIyQjU2RDY2QjQyMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCpdPRGjMVqeOFTZu4Hl+d52V NUs6mTs5H44wrqgs90dAy9YvDdg7AmIiSzshhdSJSwpdBPPQNdYNL7FujTz0p9dc Ab4dqs/XH/NU5sZfS7Zegx9HdsIW9wS2ySItBmEN0Ftqn9EcOnFJNhOgwfkA2BFm 806Dp0MOCu7/bVhqtIGvsIIoSuAPYLw25+QVY3NaEjnfEV2lXlENBCplvH8lNbSZ iun9w8C4n8zThkjhgsGS1TVzLflFPwoaEENz1Jgv0UOCuh0FM8UmjI7z/jD/62q8 N5XGBYdVVT9D5MZEHnUP6VmU6HirIUbeo7p7X0uN3joUj2z0b+w7Fpb6AVeHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNOMJbvtIiEDyaMpsHUsrVtZrQhgwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3MjAyNTkvMC8yRDBCQzE2NTVEMTdB M0FCMDlDOTFFNDNBMzJERThEOEFCMjEzNTFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAFtolKm0/nW 9NR01kiOFeMrNX5uZdFkgmhMicwE64pP7Ky9kLq7f+JzjsxUy/v473A3mjdJy+XG S5KjZQVUQ/omwJLbUMm1JZ1XN0p+t5mfnoR5PMofvADNQFRk+Lamh5vvU6ihDSO4 LbyCppjPtkD16NTvIvWSqe7HuAwt6J0bX/DR/VRzFEg+diB2OkNMk/tO5PpfU0sG fB2pcwx9M+YnwVXkXizX82AvDWPdjkrjR48Q8GqqtUF7F1iPxDhBMZa6ejMiPh3p JIfpM85ukOb1nqm2FtYFp0YCo2c50h4hJBO8a4TqFuHmKKUZd0t8l4pWLQHtf3Jx 8yjJJeu0UQ== -----END CERTIFICATE-----Generated at Mon Feb 23 02:11:41 2026 by rpki-client