
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft
File: 335692178DD0300DC3B374F86B473CB008656DCF.mft (raw, json)
Hash identifier: OmI3MxxuHweRvT8A2pgoln6A+K2pgg5hLcWOgxgUv0E=
Subject key identifier: D3:7D:C0:30:8C:25:D0:D4:0F:35:BB:B5:3A:EE:60:FF:36:28:3A:A8
Authority key identifier: 33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF
Certificate issuer: /CN=335692178DD0300DC3B374F86B473CB008656DCF
Certificate serial: 5D83F9948C70D0E11805F0C0563DFFCEC912AFE3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 18:57:30 +0000
Manifest this update: Sun 22 Feb 2026 18:52:30 +0000
Manifest next update: Mon 23 Feb 2026 19:29:30 +0000
Files and hashes: 1: 3130332e3133312e33362e302f32342d3234203d3e20313337373638.roa (hash: /2j657ZNKnXylTL0BBEZpQWo5lSSz8aNTtJ94OfC7Eg=)
2: 335692178DD0300DC3B374F86B473CB008656DCF.crl (hash: 04Euz5O9+URGbWdCmOaTfmr8Own+fLXcEH4omDKe4/o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:83:f9:94:8c:70:d0:e1:18:05:f0:c0:56:3d:ff:ce:c9:12:af:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335692178DD0300DC3B374F86B473CB008656DCF
Validity
Not Before: Feb 22 18:52:30 2026 GMT
Not After : Feb 23 19:29:30 2026 GMT
Subject: CN=D37DC0308C25D0D40F35BBB53AEE60FF36283AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:bd:0c:9a:97:d0:05:fb:0f:a6:6e:00:b8:
2c:2f:63:b2:b3:71:b7:73:11:d1:00:1f:35:17:4a:
d1:f4:77:6a:d4:5b:18:dc:87:ac:8b:c4:f7:a8:8c:
9f:ef:6c:37:a1:cd:e4:c9:7d:28:90:63:09:3a:f8:
2c:52:73:f2:95:74:4d:aa:95:b6:63:41:49:e3:48:
28:49:05:55:66:02:e3:c6:ab:1d:81:f0:06:1a:cd:
6b:ff:34:4c:59:37:95:24:e0:7b:af:fa:c9:99:65:
a7:ac:6f:f8:e1:14:0b:06:22:2b:47:b7:bf:1d:dc:
c2:3d:21:73:ff:8f:34:0f:a5:45:13:e7:63:8a:6c:
18:1b:64:9d:c1:a2:fd:29:53:96:ff:9b:40:c2:3e:
99:ee:8b:80:39:40:6b:dd:9a:93:48:7f:1c:d6:12:
63:9e:e1:de:f0:6f:9f:5a:d8:94:4d:e4:ae:7c:d2:
46:b8:3e:9a:59:c6:5c:90:7b:da:66:c0:4e:be:8c:
62:f4:e8:48:64:28:61:77:49:ee:a8:1a:54:e7:db:
f3:4a:33:fe:fc:63:a7:97:34:89:5c:01:e5:83:0a:
4b:cf:06:04:f9:a8:ab:4e:3c:b6:72:cf:b0:7c:78:
12:c9:11:7b:d7:c0:83:f6:d6:40:35:ad:fb:26:11:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7D:C0:30:8C:25:D0:D4:0F:35:BB:B5:3A:EE:60:FF:36:28:3A:A8
X509v3 Authority Key Identifier:
keyid:33:56:92:17:8D:D0:30:0D:C3:B3:74:F8:6B:47:3C:B0:08:65:6D:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/335692178DD0300DC3B374F86B473CB008656DCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347257857/0/335692178DD0300DC3B374F86B473CB008656DCF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:63:09:ff:76:67:67:f4:69:19:97:a5:56:9f:06:d5:f3:2f:
fb:3a:7c:1b:b9:61:a9:f7:c6:62:d7:d1:5b:13:53:20:9e:d4:
03:dc:cd:27:ae:f3:72:cf:59:3f:8a:54:c8:68:7b:1d:9f:a2:
bd:03:a6:10:e0:6f:b4:2a:65:2d:df:6c:ee:f2:af:6e:44:b7:
df:ec:de:8e:09:31:80:23:34:ef:ad:2a:d2:30:43:9b:34:18:
f4:56:cf:c8:8e:bc:25:95:fe:0d:71:ab:0d:fc:90:6e:4e:f1:
45:5e:03:c9:c6:96:af:44:11:9a:a9:e4:76:e3:08:ae:5f:db:
6b:fc:d4:cb:b0:c0:ba:49:b7:59:82:68:95:7c:3e:fb:32:b6:
72:ea:9d:61:c9:04:de:13:90:b4:9e:3b:80:af:1a:56:59:4e:
f1:c7:a9:43:6a:5c:7e:d6:8b:23:f1:0e:13:be:c9:d8:e1:ce:
45:7d:21:7e:eb:9e:1c:15:65:da:e3:99:49:bf:08:3b:7c:72:
45:3f:3e:40:ad:98:b9:a0:e9:c5:ac:1c:5b:fd:ce:d4:dc:3c:
12:df:8c:61:81:db:f3:d8:14:f3:1f:98:15:18:46:2d:a1:15:
50:17:4b:63:21:eb:90:4d:5e:7a:87:b6:99:59:b4:4e:8f:ac:
26:37:d2:9b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUXYP5lIxw0OEYBfDAVj3/zskSr+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAw
ODY1NkRDRjAeFw0yNjAyMjIxODUyMzBaFw0yNjAyMjMxOTI5MzBaMDMxMTAvBgNV
BAMTKEQzN0RDMDMwOEMyNUQwRDQwRjM1QkJCNTNBRUU2MEZGMzYyODNBQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYY70MmpfQBfsPpm4AuCwvY7Kz
cbdzEdEAHzUXStH0d2rUWxjch6yLxPeojJ/vbDehzeTJfSiQYwk6+CxSc/KVdE2q
lbZjQUnjSChJBVVmAuPGqx2B8AYazWv/NExZN5Uk4Huv+smZZaesb/jhFAsGIitH
t78d3MI9IXP/jzQPpUUT52OKbBgbZJ3Bov0pU5b/m0DCPpnui4A5QGvdmpNIfxzW
EmOe4d7wb59a2JRN5K580ka4PppZxlyQe9pmwE6+jGL06EhkKGF3Se6oGlTn2/NK
M/78Y6eXNIlcAeWDCkvPBgT5qKtOPLZyz7B8eBLJEXvXwIP21kA1rfsmEZm7AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU033AMIwl0NQPNbu1Ou5g/zYoOqgwHwYDVR0j
BBgwFoAUM1aSF43QMA3Ds3T4a0c8sAhlbc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MjMzMDM0NzI1Nzg1Ny8wLzMzNTY5MjE3OEREMDMwMERDM0IzNzRGODZCNDcz
Q0IwMDg2NTZEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzM1NjkyMTc4REQwMzAwREMzQjM3NEY4NkI0NzNDQjAwODY1NkRDRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcyNTc4NTcvMC8zMzU2OTIxNzhERDAz
MDBEQzNCMzc0Rjg2QjQ3M0NCMDA4NjU2RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGMJ/3ZnZ/Rp
GZelVp8G1fMv+zp8G7lhqffGYtfRWxNTIJ7UA9zNJ67zcs9ZP4pUyGh7HZ+ivQOm
EOBvtCplLd9s7vKvbkS33+zejgkxgCM0760q0jBDmzQY9FbPyI68JZX+DXGrDfyQ
bk7xRV4DycaWr0QRmqnkduMIrl/ba/zUy7DAukm3WYJolXw++zK2cuqdYckE3hOQ
tJ47gK8aVllO8cepQ2pcftaLI/EOE77J2OHORX0hfuueHBVl2uOZSb8IO3xyRT8+
QK2YuaDpxawcW/3O1Nw8Et+MYYHb89gU8x+YFRhGLaEVUBdLYyHrkE1eeoe2mVm0
To+sJjfSmw==
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:06:13 2026 by rpki-client