$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft File: E23C4800CA452B1A8E6214923C01540E30830232.mft (raw, json) Hash identifier: xjTzZmKVilgdqieSxMLhJ71V2NnwtrMKvz7QLRQejG4= Subject key identifier: CD:0A:B8:9D:72:79:F5:53:01:41:FD:93:2C:17:05:47:66:B0:67:3F Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232 Certificate serial: 139CDFCD34FCA18AE76D907DE8C1A8FF52F66B19 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft Manifest number: 31 Signing time: Sun 22 Feb 2026 21:22:30 +0000 Manifest this update: Sun 22 Feb 2026 21:17:30 +0000 Manifest next update: Tue 24 Feb 2026 00:27:30 +0000 Files and hashes: 1: 3130332e3133392e3133372e302f32342d3234203d3e20313436383334.roa (hash: LrRpjWZzrOElW3AFffRxW3QgmCwzFNCvuZIShbSs/mg=) 2: 3130332e3135362e37382e302f32332d3234203d3e203231383539.roa (hash: Nc3wGfCMThvQd+bqUSNmuME0vCXe9XwNOalM21iiOq4=) 3: 323430343a653563303a3a2f33322d3438203d3e20313436383334.roa (hash: +K+PDGyMwxVeMVxooqsXEg7LdsFUzTnh9+o/S9VPvc0=) 4: E23C4800CA452B1A8E6214923C01540E30830232.crl (hash: tEGeJ+rFrWTf90v8Ne8uzmy+iJ20skFSrkHtUcnSpLE=) 5: 3131362e3139392e3135322e302f32322d3234203d3e203231383539.roa (hash: QOyMyxL3BQmztpsRoWy1C75w1RphCCZxpH/MhVpOHKQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9c:df:cd:34:fc:a1:8a:e7:6d:90:7d:e8:c1:a8:ff:52:f6:6b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232 Validity Not Before: Feb 22 21:17:30 2026 GMT Not After : Feb 24 00:27:30 2026 GMT Subject: CN=CD0AB89D7279F5530141FD932C17054766B0673F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:03:6b:1a:f2:94:a9:87:ff:61:3d:04:6b:b5: 75:d2:20:73:3a:2d:23:6b:15:6b:e8:67:d4:b0:e2: ff:7e:04:6f:24:65:72:81:79:38:41:7e:2a:aa:fb: 4c:7d:c0:e7:5c:66:61:33:18:cf:04:b3:ad:54:b0: ce:9f:b0:33:f4:20:a1:aa:fd:19:b8:eb:1c:32:55: 6d:47:74:58:b8:c6:ad:55:dd:02:a4:a1:6b:4f:78: 9b:de:10:0a:ed:b7:63:5c:1f:8e:88:40:42:da:38: 9d:e6:be:f3:7c:92:34:90:b3:c0:d6:96:99:d6:32: dc:58:3f:de:8b:a4:6b:02:da:7f:92:7e:c7:b9:28: 3f:94:2a:11:e0:84:86:85:0a:e2:5e:9a:ad:77:e6: 65:45:5d:cb:f3:b8:33:25:69:ac:1d:df:b8:96:a9: 5e:14:b1:f8:e6:66:d1:d9:b6:5c:58:6e:78:e9:04: ab:39:27:b6:61:19:aa:d4:78:56:07:29:ec:f4:46: dd:cc:97:ec:55:3c:0a:0f:a1:7b:00:f6:d5:84:c2: f0:da:c2:32:fb:57:36:1b:ff:a8:7e:38:cb:0f:d2: d8:95:5c:d2:b3:ff:80:52:17:36:5c:3e:44:38:4d: 52:2c:16:58:6d:86:0d:27:d2:0a:e2:ff:54:f8:00: 19:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0A:B8:9D:72:79:F5:53:01:41:FD:93:2C:17:05:47:66:B0:67:3F X509v3 Authority Key Identifier: keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:88:74:cd:87:1d:56:47:cb:af:39:5a:2a:bf:95:55:24:bc: 3c:1a:97:56:1e:c8:76:c5:e5:d8:3b:2d:96:c1:a5:fc:43:e8: 24:2b:73:13:ab:09:34:eb:b8:16:13:d8:a9:6e:a3:10:40:7b: aa:09:6d:7a:2e:73:91:a0:1e:5f:d1:a8:24:70:fd:a9:95:7a: 9f:d1:2a:30:d2:ce:4e:d9:2c:d1:2c:5c:09:de:2d:83:50:a2: 3f:fa:90:13:68:54:d1:ac:2c:04:43:e6:6d:b7:c2:10:06:bd: 4e:8c:71:2f:39:91:f3:40:05:7c:be:df:b8:0e:54:31:a1:71: 0a:8d:de:90:31:79:4c:b4:90:53:0b:65:d8:3b:c7:ef:94:f0: a4:94:d1:08:89:bf:69:87:12:c7:60:75:1b:82:bf:c2:52:fc: 08:3f:9d:30:94:17:9c:83:34:e2:e0:95:fb:74:d6:d2:4f:bf: 3b:97:0e:98:7d:22:8e:3c:db:32:63:3e:42:20:53:7f:59:e1: 82:c0:e2:d2:cb:c7:e0:44:7a:a3:22:81:e2:06:f3:d0:d7:a1: 2e:fa:05:e0:bb:26:6b:1c:a5:10:60:62:ad:26:3f:9d:8c:6c: 3a:fc:5a:c1:10:cf:2f:50:d0:90:81:48:1d:15:24:89:c7:a0: 93:9b:e0:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE5zfzTT8oYrnbZB96MGo/1L2axkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUz MDgzMDIzMjAeFw0yNjAyMjIyMTE3MzBaFw0yNjAyMjQwMDI3MzBaMDMxMTAvBgNV BAMTKENEMEFCODlENzI3OUY1NTMwMTQxRkQ5MzJDMTcwNTQ3NjZCMDY3M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcA2sa8pSph/9hPQRrtXXSIHM6 LSNrFWvoZ9Sw4v9+BG8kZXKBeThBfiqq+0x9wOdcZmEzGM8Es61UsM6fsDP0IKGq /Rm46xwyVW1HdFi4xq1V3QKkoWtPeJveEArtt2NcH46IQELaOJ3mvvN8kjSQs8DW lpnWMtxYP96LpGsC2n+Sfse5KD+UKhHghIaFCuJemq135mVFXcvzuDMlaawd37iW qV4UsfjmZtHZtlxYbnjpBKs5J7ZhGarUeFYHKez0Rt3Ml+xVPAoPoXsA9tWEwvDa wjL7VzYb/6h+OMsP0tiVXNKz/4BSFzZcPkQ4TVIsFlhthg0n0gri/1T4ABk5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzQq4nXJ59VMBQf2TLBcFR2awZz8wHwYDVR0j BBgwFoAU4jxIAMpFKxqOYhSSPAFUDjCDAjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzM4ODkyOS8wL0UyM0M0ODAwQ0E0NTJCMUE4RTYyMTQ5MjNDMDE1 NDBFMzA4MzAyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUzMDgzMDIzMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczODg5MjkvMC9FMjNDNDgwMENBNDUy QjFBOEU2MjE0OTIzQzAxNTQwRTMwODMwMjMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoh0zYcdVkfL rzlaKr+VVSS8PBqXVh7IdsXl2DstlsGl/EPoJCtzE6sJNOu4FhPYqW6jEEB7qglt ei5zkaAeX9GoJHD9qZV6n9EqMNLOTtks0SxcCd4tg1CiP/qQE2hU0awsBEPmbbfC EAa9ToxxLzmR80AFfL7fuA5UMaFxCo3ekDF5TLSQUwtl2DvH75TwpJTRCIm/aYcS x2B1G4K/wlL8CD+dMJQXnIM04uCV+3TW0k+/O5cOmH0ijjzbMmM+QiBTf1nhgsDi 0svH4ER6oyKB4gbz0NehLvoF4LsmaxylEGBirSY/nYxsOvxawRDPL1DQkIFIHRUk icegk5vgkw== -----END CERTIFICATE-----Generated at Sun Feb 22 23:24:45 2026 by rpki-client