$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft File: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft (raw, json) Hash identifier: S3cwIb7LDsY1iW6mc5KxbcY5mB0cFhk4dFjtzlACx40= Subject key identifier: FA:A9:5E:DF:E6:A5:27:50:91:A3:AE:F9:54:3C:C7:87:B7:3C:30:D4 Authority key identifier: 42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 Certificate issuer: /CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Certificate serial: 6E1FDCB88B68A94C1552A99865AF1C215ECE81ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft Manifest number: 2F Signing time: Mon 23 Feb 2026 00:32:30 +0000 Manifest this update: Mon 23 Feb 2026 00:27:30 +0000 Manifest next update: Tue 24 Feb 2026 02:51:30 +0000 Files and hashes: 1: 3135372e31302e33342e302f32332d3332203d3e203633353338.roa (hash: aP+1ToLmALkuhC+gf6dqhZ0yNj2zGwnTsrgDpX2zz7U=) 2: 42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl (hash: uLdzy8iFYGAZpfsErvSKbO79D5JkruhjleQBBW9y9jM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:1f:dc:b8:8b:68:a9:4c:15:52:a9:98:65:af:1c:21:5e:ce:81:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42EFD1D00C09B99E5E9DBCDD0E590421661D6558 Validity Not Before: Feb 23 00:27:30 2026 GMT Not After : Feb 24 02:51:30 2026 GMT Subject: CN=FAA95EDFE6A5275091A3AEF9543CC787B73C30D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:3b:0b:03:0c:17:dc:3b:83:2e:ee:62:9e: 17:f7:7b:d9:d5:96:57:80:db:b8:0d:39:6f:cb:ca: 25:f8:ff:49:ca:3a:16:24:35:4e:fb:7a:0e:b2:45: b4:c4:e8:e5:47:21:01:7a:04:f4:5f:f2:12:06:13: 02:94:04:39:f2:5c:e1:c1:9a:f3:5b:3e:7c:1f:51: 8d:ad:06:b2:62:c7:1a:79:0a:38:06:2f:6d:53:89: b0:62:be:90:b2:44:5c:fe:75:4c:60:37:ed:00:83: d8:f5:89:e0:22:bb:7a:4e:a1:df:f9:8e:c4:7c:1f: 86:93:7c:7c:52:de:80:26:85:c8:c4:ce:18:07:66: cd:d1:5d:bf:da:ee:8f:b9:8d:00:07:ea:14:17:fc: a0:f1:eb:bd:ac:a9:b5:33:be:f8:d1:66:82:80:a4: 67:68:bb:ca:65:2b:d2:7f:5f:57:8a:08:b5:11:4d: c5:8b:57:df:9f:a5:f7:b4:9f:8c:eb:7c:f6:23:07: dd:a2:dd:a3:2a:74:4f:3b:f7:00:1d:c9:bc:fd:8e: 24:22:77:d2:f3:8d:75:5c:68:18:76:4d:e8:8d:c2: 53:54:6c:00:29:5a:45:51:ca:65:ca:78:8f:a2:4e: 5f:d8:4c:20:15:35:89:24:9c:c5:53:08:cf:f6:69: c6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A9:5E:DF:E6:A5:27:50:91:A3:AE:F9:54:3C:C7:87:B7:3C:30:D4 X509v3 Authority Key Identifier: keyid:42:EF:D1:D0:0C:09:B9:9E:5E:9D:BC:DD:0E:59:04:21:66:1D:65:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265616897/1/42EFD1D00C09B99E5E9DBCDD0E590421661D6558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:cb:1b:23:31:e3:ba:0d:53:f0:6f:cc:2f:82:05:c5:1e:40: cc:56:b5:e7:19:43:99:06:b2:a6:80:b3:55:4a:5d:e1:8e:36: 38:0e:31:64:00:78:f0:92:9c:ce:be:75:07:d7:91:67:6e:69: 2d:d2:45:d3:19:ca:f1:e0:3e:97:cc:97:84:ad:96:87:7f:4e: c3:5e:26:6b:e7:e3:76:15:11:6e:ea:6c:8e:91:1c:35:09:be: d2:a1:8c:98:ca:5d:47:4d:e9:ac:c1:3f:86:af:db:cc:7a:2c: 36:a3:96:fd:0b:12:57:5c:fd:49:44:34:a5:1d:73:cc:68:a6: eb:85:78:50:d9:52:5c:be:ee:2c:46:34:ed:eb:d5:82:52:3d: 15:c7:ca:83:8f:82:62:a2:59:6f:c3:5b:4d:af:1e:e2:af:b6: 64:78:1b:3e:b1:f4:6f:5c:e0:05:db:ff:08:b8:f4:bf:79:d6: 4a:6c:0f:e1:6e:35:1f:eb:62:86:0d:44:80:bb:4c:cd:21:72: ad:d2:01:72:84:7d:6e:fa:7c:2f:22:8c:e3:97:82:ac:df:6a: c5:95:d2:0a:bc:d4:ef:23:33:16:8d:ca:7c:6b:2c:fc:6c:54: 6c:07:f0:f5:50:87:ca:93:2f:0a:de:20:9b:86:cf:e3:f0:fb: 4f:46:f8:80 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbh/cuItoqUwVUqmYZa8cIV7Oge0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2 NjFENjU1ODAeFw0yNjAyMjMwMDI3MzBaFw0yNjAyMjQwMjUxMzBaMDMxMTAvBgNV BAMTKEZBQTk1RURGRTZBNTI3NTA5MUEzQUVGOTU0M0NDNzg3QjczQzMwRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY2zsLAwwX3DuDLu5inhf3e9nV lleA27gNOW/LyiX4/0nKOhYkNU77eg6yRbTE6OVHIQF6BPRf8hIGEwKUBDnyXOHB mvNbPnwfUY2tBrJixxp5CjgGL21TibBivpCyRFz+dUxgN+0Ag9j1ieAiu3pOod/5 jsR8H4aTfHxS3oAmhcjEzhgHZs3RXb/a7o+5jQAH6hQX/KDx672sqbUzvvjRZoKA pGdou8plK9J/X1eKCLURTcWLV9+fpfe0n4zrfPYjB92i3aMqdE879wAdybz9jiQi d9LzjXVcaBh2TeiNwlNUbAApWkVRymXKeI+iTl/YTCAVNYkknMVTCM/2acZLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+qle3+alJ1CRo675VDzHh7c8MNQwHwYDVR0j BBgwFoAUQu/R0AwJuZ5enbzdDlkEIWYdZVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTYxNjg5Ny8xLzQyRUZEMUQwMEMwOUI5OUU1RTlEQkNERDBFNTkw NDIxNjYxRDY1NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNDJFRkQxRDAwQzA5Qjk5RTVFOURCQ0REMEU1OTA0MjE2NjFENjU1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU2MTY4OTcvMS80MkVGRDFEMDBDMDlC OTlFNUU5REJDREQwRTU5MDQyMTY2MUQ2NTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScsbIzHjug1T 8G/ML4IFxR5AzFa15xlDmQaypoCzVUpd4Y42OA4xZAB48JKczr51B9eRZ25pLdJF 0xnK8eA+l8yXhK2Wh39Ow14ma+fjdhURbupsjpEcNQm+0qGMmMpdR03prME/hq/b zHosNqOW/QsSV1z9SUQ0pR1zzGim64V4UNlSXL7uLEY07evVglI9FcfKg4+CYqJZ b8NbTa8e4q+2ZHgbPrH0b1zgBdv/CLj0v3nWSmwP4W41H+tihg1EgLtMzSFyrdIB coR9bvp8LyKM45eCrN9qxZXSCrzU7yMzFo3KfGss/GxUbAfw9VCHypMvCt4gm4bP 4/D7T0b4gA== -----END CERTIFICATE-----Generated at Mon Feb 23 07:35:05 2026 by rpki-client