$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft File: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft (raw, json) Hash identifier: 0Q49CLKkB7Dz90oMXRjxebpJ2RBdQXxmedU+0aVIl+k= Subject key identifier: D5:C4:46:24:6E:86:C5:A2:1A:11:93:46:FE:0B:93:5B:67:47:3A:9C Authority key identifier: 8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 Certificate issuer: /CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Certificate serial: 0CE78C4904600A2D85F31294E4BB63045F7F9675 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft Manifest number: 2E Signing time: Sun 22 Feb 2026 06:52:30 +0000 Manifest this update: Sun 22 Feb 2026 06:47:30 +0000 Manifest next update: Mon 23 Feb 2026 10:34:30 +0000 Files and hashes: 1: 34352e3131352e31382e302f32332d3234203d3e20313531323330.roa (hash: KFwVFV9XIdASmiH55Vrp/a+LAUtb9TpqJV9SvrwxSRc=) 2: 8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl (hash: uG0d/1vqdF+QQRGYxvoJgaZet4rVkFaFQ1N0r4pOGCw=) 3: 323430323a323065303a3a2f33322d3438203d3e20313531323330.roa (hash: QWUb0DzubEfKqwW//PTcn/ZJK/ak3Shs1IT7p6JBGPc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e7:8c:49:04:60:0a:2d:85:f3:12:94:e4:bb:63:04:5f:7f:96:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D406BEC452CB074D630ABDBD6275BC5445DC3A1 Validity Not Before: Feb 22 06:47:30 2026 GMT Not After : Feb 23 10:34:30 2026 GMT Subject: CN=D5C446246E86C5A21A119346FE0B935B67473A9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f2:26:72:74:cd:5b:27:97:c9:64:8f:66:6c: 5b:54:3f:0b:5b:79:50:0b:3d:f1:c1:12:a9:3f:27: 4f:ff:40:c9:38:c8:de:b8:38:ea:05:3a:75:70:b2: e2:ff:01:1a:a2:03:92:77:4d:cf:34:cc:5c:4b:ac: db:1b:5c:43:ce:63:f2:8e:eb:0a:54:c1:22:10:fc: 6a:98:74:67:0b:4a:76:20:b7:ea:ea:a5:3c:f3:78: 69:a7:63:60:36:3e:e2:35:ef:e4:c4:05:f8:c1:5d: 18:73:fb:e1:bc:79:36:8e:bb:a0:37:6f:15:4e:f9: d7:19:99:96:e0:41:18:70:7f:c0:d4:a3:3d:20:99: 05:eb:5b:c8:7d:f1:50:b9:a4:b2:46:40:ef:5a:4a: 29:c7:18:ee:60:40:1f:1e:a3:82:5a:a7:bd:57:9f: 03:b7:95:ae:a0:ae:2e:56:7c:68:f9:65:52:e7:76: 89:8c:ce:9f:bd:b6:ab:b8:d2:70:c7:bc:fe:00:0b: 91:bf:e6:17:85:3d:c3:d1:d1:88:92:ea:ed:06:1d: 65:09:a5:87:ed:cd:ed:de:4d:f2:10:28:00:b2:66: 5a:88:18:37:24:64:39:53:18:55:3d:1a:9b:35:a4: aa:36:fc:c0:45:e7:18:48:fd:c9:ce:33:5d:9a:9d: b6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C4:46:24:6E:86:C5:A2:1A:11:93:46:FE:0B:93:5B:67:47:3A:9C X509v3 Authority Key Identifier: keyid:8D:40:6B:EC:45:2C:B0:74:D6:30:AB:DB:D6:27:5B:C5:44:5D:C3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217717251/0/8D406BEC452CB074D630ABDBD6275BC5445DC3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:20:56:be:5d:cd:1e:ce:da:f0:61:ef:7b:6a:cb:9f:dc:86: 43:ed:46:33:f5:cc:91:f9:c1:8f:a8:2b:0a:b0:01:fa:1f:bf: 83:6f:6b:6e:de:24:9b:ff:42:34:45:d3:10:9e:23:c3:7c:f8: f4:44:eb:4c:62:6e:c5:49:7c:70:9b:0c:39:e0:2e:93:60:02: 26:12:e7:32:a1:cc:6e:8b:ff:32:28:dd:85:f8:86:c2:26:61: b9:35:c0:66:5e:8f:eb:bc:a0:40:d3:79:fd:d4:fe:75:b4:02: 76:63:91:3d:c5:31:bd:8c:6c:cd:df:a9:d5:9d:56:2d:15:d4: ee:ed:94:cb:ed:1e:56:93:22:53:fd:c6:8d:b2:e7:d8:f7:a2: 57:91:01:73:bf:81:77:f5:ea:47:5a:82:e1:b1:4d:e9:d0:b3: 92:37:51:cf:57:b1:58:cc:c8:bf:49:54:b8:d9:b9:aa:16:f3: 8b:81:7c:59:34:6a:25:06:66:fe:bd:e3:af:4a:c1:40:20:2d: 21:39:7a:c1:17:46:be:a9:d9:6f:1c:f8:2a:77:6f:a1:86:b3: bd:cc:79:db:80:9b:a7:47:cd:7b:51:c3:1a:d5:fd:6e:fe:34: 48:59:82:15:71:c3:c7:4a:60:80:9d:ec:47:93:1d:b2:93:7b: 0c:ed:cd:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDOeMSQRgCi2F8xKU5LtjBF9/lnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0 NDVEQzNBMTAeFw0yNjAyMjIwNjQ3MzBaFw0yNjAyMjMxMDM0MzBaMDMxMTAvBgNV BAMTKEQ1QzQ0NjI0NkU4NkM1QTIxQTExOTM0NkZFMEI5MzVCNjc0NzNBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8iZydM1bJ5fJZI9mbFtUPwtb eVALPfHBEqk/J0//QMk4yN64OOoFOnVwsuL/ARqiA5J3Tc80zFxLrNsbXEPOY/KO 6wpUwSIQ/GqYdGcLSnYgt+rqpTzzeGmnY2A2PuI17+TEBfjBXRhz++G8eTaOu6A3 bxVO+dcZmZbgQRhwf8DUoz0gmQXrW8h98VC5pLJGQO9aSinHGO5gQB8eo4Jap71X nwO3la6gri5WfGj5ZVLndomMzp+9tqu40nDHvP4AC5G/5heFPcPR0YiS6u0GHWUJ pYftze3eTfIQKACyZlqIGDckZDlTGFU9Gps1pKo2/MBF5xhI/cnOM12anbbtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1cRGJG6GxaIaEZNG/guTW2dHOpwwHwYDVR0j BBgwFoAUjUBr7EUssHTWMKvb1idbxURdw6EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzcxNzI1MS8wLzhENDA2QkVDNDUyQ0IwNzRENjMwQUJEQkQ2Mjc1 QkM1NDQ1REMzQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0MDZCRUM0NTJDQjA3NEQ2MzBBQkRCRDYyNzVCQzU0NDVEQzNBMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc3MTcyNTEvMC84RDQwNkJFQzQ1MkNC MDc0RDYzMEFCREJENjI3NUJDNTQ0NURDM0ExLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyBWvl3NHs7a 8GHve2rLn9yGQ+1GM/XMkfnBj6grCrAB+h+/g29rbt4km/9CNEXTEJ4jw3z49ETr TGJuxUl8cJsMOeAuk2ACJhLnMqHMbov/MijdhfiGwiZhuTXAZl6P67ygQNN5/dT+ dbQCdmORPcUxvYxszd+p1Z1WLRXU7u2Uy+0eVpMiU/3GjbLn2PeiV5EBc7+Bd/Xq R1qC4bFN6dCzkjdRz1exWMzIv0lUuNm5qhbzi4F8WTRqJQZm/r3jr0rBQCAtITl6 wRdGvqnZbxz4KndvoYazvcx524Cbp0fNe1HDGtX9bv40SFmCFXHDx0pggJ3sR5Md spN7DO3NZQ== -----END CERTIFICATE-----Generated at Mon Feb 23 02:06:14 2026 by rpki-client