$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft File: 9B87DFEBDCCDA813116988D4421B088404578168.mft (raw, json) Hash identifier: Y2jJYKjR3QZcz9do6Qqdt0JuTRyna68FPXhR/kE8EDo= Subject key identifier: DD:FC:A8:8A:2A:9E:B8:F5:95:6C:5F:FE:FA:7F:FE:3E:FA:82:B1:4D Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168 Certificate serial: 4D4E2FB19998E929B97878E5E57450E227E26C3A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft Manifest number: 2E Signing time: Sun 22 Feb 2026 09:17:30 +0000 Manifest this update: Sun 22 Feb 2026 09:12:30 +0000 Manifest next update: Mon 23 Feb 2026 09:49:30 +0000 Files and hashes: 1: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (hash: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg=) 2: 9B87DFEBDCCDA813116988D4421B088404578168.crl (hash: n/OafYiUtBUoW0s0dNhh5+pWkMtEBsMHE+4vH3AB158=) 3: 34352e3131362e39362e302f32322d3232203d3e20313439363238.roa (hash: aWgeDjinqxghP2O9gm5Jstjm/o8V7VlFXar3hlRu/AE=) 4: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (hash: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4e:2f:b1:99:98:e9:29:b9:78:78:e5:e5:74:50:e2:27:e2:6c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168 Validity Not Before: Feb 22 09:12:30 2026 GMT Not After : Feb 23 09:49:30 2026 GMT Subject: CN=DDFCA88A2A9EB8F5956C5FFEFA7FFE3EFA82B14D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:e5:a6:7d:d8:f4:a0:af:19:27:5d:06:e4: b6:94:ba:ef:c2:f4:fe:60:89:3a:f9:a1:c6:54:3a: 48:c2:12:47:82:aa:c2:d4:4e:9d:ef:18:9d:60:7e: 79:c5:19:7e:76:3e:67:de:98:05:52:0d:f6:22:fd: 11:41:3d:1f:b3:04:a2:b8:5b:bb:f4:4e:81:c5:ac: 93:95:d9:f2:17:de:9d:0e:5e:c9:cc:25:7a:31:b0: 69:f9:4b:fe:7c:44:2e:54:e7:02:d2:29:d6:3e:48: aa:d2:ee:e9:b3:6f:fd:67:ec:93:87:f8:5a:67:27: da:ac:c4:61:43:bb:9d:4e:33:72:b7:60:67:e9:c0: 50:15:de:23:66:04:6b:82:af:50:d3:23:38:b9:15: 2c:9e:0c:cc:c9:c4:5a:76:c8:82:27:89:1e:d5:8d: a3:95:b7:c0:5f:16:8f:72:6a:3f:77:4c:c8:e8:4b: 7e:eb:48:51:a7:5f:b4:50:91:44:11:b8:8b:3a:fe: 84:51:ca:72:f2:83:2e:63:e2:40:12:e0:27:61:99: db:5c:91:55:30:9b:61:1f:f7:9e:b6:cf:a5:da:bf: 28:3a:f7:c5:f6:6e:b0:05:7d:9e:c3:5b:5d:5a:d5: 45:a4:2d:f9:ed:d8:fd:23:0a:85:dc:0c:49:1f:58: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FC:A8:8A:2A:9E:B8:F5:95:6C:5F:FE:FA:7F:FE:3E:FA:82:B1:4D X509v3 Authority Key Identifier: keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:16:bb:14:0d:3f:ed:92:c1:5a:0a:31:b8:e3:bf:d0:c8:df: c0:de:78:fc:27:ba:eb:e3:72:75:3d:2f:b3:97:8a:28:10:a9: 58:95:cd:2a:85:cc:8e:0e:87:4d:41:bb:51:db:37:d8:d7:13: 7e:0e:a8:fa:43:a0:65:0b:04:94:b9:ae:88:4c:9f:3d:78:7f: ee:4d:af:f7:3a:0c:bd:dc:12:26:e4:9e:9d:05:33:74:37:20: eb:73:08:92:82:25:54:f0:e1:24:53:23:9a:ef:b5:9a:91:2f: f3:53:f5:63:f2:2d:16:90:17:a6:8c:fe:65:b8:8b:83:ff:27: 3b:7c:64:9d:06:53:dd:da:1c:58:e4:05:43:0a:36:0d:63:67: 26:02:2e:d0:30:c3:75:dd:33:77:d0:f3:02:48:c1:30:5b:79: cf:bb:01:1f:54:b7:3a:1e:ad:fa:a8:f3:0e:e5:1c:cd:3e:e2: 1a:59:71:c5:ea:7f:8c:89:00:c5:75:5d:6d:50:41:b5:e0:53: 52:47:e7:24:22:50:b4:65:18:e7:08:c6:77:f5:c4:65:b6:22: b5:ad:91:2d:56:6d:6e:bd:0a:5a:c6:18:1c:19:b4:2c:55:ec: b5:b2:53:95:83:6a:c7:b7:86:8a:c3:5d:0c:dc:4b:75:ea:49: 43:17:ad:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTU4vsZmY6Sm5eHjl5XRQ4ifibDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQw NDU3ODE2ODAeFw0yNjAyMjIwOTEyMzBaFw0yNjAyMjMwOTQ5MzBaMDMxMTAvBgNV BAMTKERERkNBODhBMkE5RUI4RjU5NTZDNUZGRUZBN0ZGRTNFRkE4MkIxNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0FOWmfdj0oK8ZJ10G5LaUuu/C 9P5giTr5ocZUOkjCEkeCqsLUTp3vGJ1gfnnFGX52PmfemAVSDfYi/RFBPR+zBKK4 W7v0ToHFrJOV2fIX3p0OXsnMJXoxsGn5S/58RC5U5wLSKdY+SKrS7umzb/1n7JOH +FpnJ9qsxGFDu51OM3K3YGfpwFAV3iNmBGuCr1DTIzi5FSyeDMzJxFp2yIIniR7V jaOVt8BfFo9yaj93TMjoS37rSFGnX7RQkUQRuIs6/oRRynLygy5j4kAS4Cdhmdtc kVUwm2Ef9562z6Xavyg698X2brAFfZ7DW11a1UWkLfnt2P0jCoXcDEkfWCPfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3fyoiiqeuPWVbF/++n/+PvqCsU0wHwYDVR0j BBgwFoAUm4ff69zNqBMRaYjUQhsIhARXgWgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDc0OTk1My8wLzlCODdERkVCRENDREE4MTMxMTY5ODhENDQyMUIw ODg0MDQ1NzgxNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ3NDk5NTMvMC85Qjg3REZFQkRDQ0RB ODEzMTE2OTg4RDQ0MjFCMDg4NDA0NTc4MTY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBa7FA0/7ZLB WgoxuOO/0MjfwN54/Ce66+NydT0vs5eKKBCpWJXNKoXMjg6HTUG7Uds32NcTfg6o +kOgZQsElLmuiEyfPXh/7k2v9zoMvdwSJuSenQUzdDcg63MIkoIlVPDhJFMjmu+1 mpEv81P1Y/ItFpAXpoz+ZbiLg/8nO3xknQZT3docWOQFQwo2DWNnJgIu0DDDdd0z d9DzAkjBMFt5z7sBH1S3Oh6t+qjzDuUczT7iGllxxep/jIkAxXVdbVBBteBTUkfn JCJQtGUY5wjGd/XEZbYita2RLVZtbr0KWsYYHBm0LFXstbJTlYNqx7eGisNdDNxL depJQxet4A== -----END CERTIFICATE-----Generated at Mon Feb 23 02:09:42 2026 by rpki-client