$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json) Hash identifier: jtqOOsodHU+U9Si7oWYLli3j3jVl90D8ywdJROKGkD8= Subject key identifier: DE:23:49:3B:EF:B8:3A:81:E5:61:36:8E:5E:69:C7:5C:AA:8B:C6:C6 Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Certificate serial: 3D9AAD8BCC274E733070A3F16D4A523065459BFD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft Manifest number: 2F Signing time: Sun 22 Feb 2026 20:22:30 +0000 Manifest this update: Sun 22 Feb 2026 20:17:30 +0000 Manifest next update: Mon 23 Feb 2026 21:03:30 +0000 Files and hashes: 1: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=) 2: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=) 3: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: /8L6BTuKLPQS3tjigDtjINK31/xygOzNAR5zBcjOUJk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:9a:ad:8b:cc:27:4e:73:30:70:a3:f1:6d:4a:52:30:65:45:9b:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Validity Not Before: Feb 22 20:17:30 2026 GMT Not After : Feb 23 21:03:30 2026 GMT Subject: CN=DE23493BEFB83A81E561368E5E69C75CAA8BC6C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:c1:5f:88:23:3b:65:21:59:0b:6a:8b:ba: 24:69:dc:48:52:66:60:75:92:c0:67:34:5c:b4:b8: 55:28:1a:74:02:ca:c3:07:1f:d0:ec:3a:d6:1e:87: 7c:48:a3:83:de:21:e0:ae:58:8e:1c:62:e1:2d:20: 49:71:7c:c2:5b:da:a1:39:82:79:4b:bf:dd:4a:87: 14:f1:29:95:46:9d:17:f7:ce:07:cf:9c:5e:3c:0e: bc:7d:e2:1c:c0:65:2b:b7:5e:59:c9:c5:6d:80:28: 03:0e:83:e9:5a:51:17:24:98:17:47:40:a8:e7:ee: e7:40:d4:d4:0d:9a:9b:ec:9a:92:3f:24:b4:82:db: de:cc:3a:e5:60:18:3a:5f:68:77:e1:6e:5d:07:8c: 94:93:34:7a:3a:58:41:90:b0:f0:85:e2:3e:25:ae: f6:64:fe:e7:51:a3:20:85:01:ae:f8:b9:7d:a8:a5: ec:b7:bc:8e:8f:f9:02:6b:aa:b6:c5:24:bd:1f:56: 34:6f:f4:c8:07:8b:91:c2:34:bd:27:ac:25:87:67: 34:f9:91:07:e0:05:e6:06:5c:11:35:e5:19:91:16: 42:d7:fa:59:1e:b7:73:13:a4:99:55:e5:8d:dc:2e: 0c:ab:21:7d:1c:fe:3f:ad:c1:33:41:2f:1d:44:9f: 04:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:23:49:3B:EF:B8:3A:81:E5:61:36:8E:5E:69:C7:5C:AA:8B:C6:C6 X509v3 Authority Key Identifier: keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:5b:16:45:d9:0b:6c:36:73:54:c4:e0:2e:c5:31:a2:14:4d: 7c:05:65:8b:a2:a5:f4:b0:70:c3:55:ce:92:73:57:c0:c0:ec: 58:f5:99:13:cc:10:83:cb:ba:23:15:0d:c2:b7:8f:fb:2a:93: 2f:f5:cd:e2:8d:4e:b3:3a:b6:93:04:d0:22:9e:09:4f:17:b9: eb:ef:3a:03:e3:59:a4:57:71:64:88:df:ff:62:f5:18:35:e0: bd:04:87:00:39:31:83:3f:61:cc:42:d8:61:e7:e7:4e:0c:52: 14:81:94:a4:8d:e2:47:69:71:ee:58:95:28:3d:14:c8:d9:cb: b4:78:b3:e6:b2:58:75:8c:45:55:df:77:bb:ad:d1:38:d1:42: b1:a7:f0:23:a3:2b:5b:89:5a:82:17:37:81:87:cc:d5:ec:e0: 42:37:df:13:cc:07:e4:c6:4b:fb:48:2f:75:03:5b:47:d9:4a: 2c:39:d7:8b:24:84:a8:5e:ac:cb:16:b1:82:d8:00:7c:18:1a: 16:16:65:2c:c5:c4:1d:20:9b:1b:96:eb:de:dd:d3:ea:e5:42: ce:d7:dd:62:6c:81:b1:b1:72:a4:3e:38:b9:70:e7:41:52:11: 97:a4:da:1a:42:c4:37:eb:e7:3f:da:0c:e2:b6:aa:78:a9:19: 54:c0:77:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPZqti8wnTnMwcKPxbUpSMGVFm/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2 QThDQTY2MTAeFw0yNjAyMjIyMDE3MzBaFw0yNjAyMjMyMTAzMzBaMDMxMTAvBgNV BAMTKERFMjM0OTNCRUZCODNBODFFNTYxMzY4RTVFNjlDNzVDQUE4QkM2QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5csFfiCM7ZSFZC2qLuiRp3EhS ZmB1ksBnNFy0uFUoGnQCysMHH9DsOtYeh3xIo4PeIeCuWI4cYuEtIElxfMJb2qE5 gnlLv91KhxTxKZVGnRf3zgfPnF48Drx94hzAZSu3XlnJxW2AKAMOg+laURckmBdH QKjn7udA1NQNmpvsmpI/JLSC297MOuVgGDpfaHfhbl0HjJSTNHo6WEGQsPCF4j4l rvZk/udRoyCFAa74uX2opey3vI6P+QJrqrbFJL0fVjRv9MgHi5HCNL0nrCWHZzT5 kQfgBeYGXBE15RmRFkLX+lket3MTpJlV5Y3cLgyrIX0c/j+twTNBLx1EnwRtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3iNJO++4OoHlYTaOXmnHXKqLxsYwHwYDVR0j BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0 NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVsWRdkLbDZz VMTgLsUxohRNfAVli6Kl9LBww1XOknNXwMDsWPWZE8wQg8u6IxUNwreP+yqTL/XN 4o1Oszq2kwTQIp4JTxe56+86A+NZpFdxZIjf/2L1GDXgvQSHADkxgz9hzELYYefn TgxSFIGUpI3iR2lx7liVKD0UyNnLtHiz5rJYdYxFVd93u63RONFCsafwI6MrW4la ghc3gYfM1ezgQjffE8wH5MZL+0gvdQNbR9lKLDnXiySEqF6syxaxgtgAfBgaFhZl LMXEHSCbG5br3t3T6uVCztfdYmyBsbFypD44uXDnQVIRl6TaGkLEN+vnP9oM4raq eKkZVMB3uA== -----END CERTIFICATE-----Generated at Sun Feb 22 23:25:31 2026 by rpki-client