
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
File: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft (raw, json)
Hash identifier: 48ClOJiEUQD7njosXLgpZdKJbJlf1Eiqm3HuYcwJrFE=
Subject key identifier: 83:3E:3A:B6:68:FC:00:C1:31:3B:5D:36:07:ED:80:85:6A:75:4A:E3
Authority key identifier: 39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5
Certificate issuer: /CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5
Certificate serial: 7E2775E58010EDC5355B3EEFD05549FFA423AD2B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 15:57:30 +0000
Manifest this update: Sun 22 Feb 2026 15:52:30 +0000
Manifest next update: Mon 23 Feb 2026 16:33:30 +0000
Files and hashes: 1: 323430323a323632303a3a2f33322d3332203d3e20313331353131.roa (hash: QId4aS71+qx1TdphNuAsX2ch4TXYnsIco/I+te5mv30=)
2: 39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl (hash: sbMeBtiSJWJE2sSs07oOCj1bNysIaMBsN+6Le+9FgfU=)
3: 3135372e3131392e3235322e302f32322d3234203d3e20313331353131.roa (hash: PVTcDM5Dkigb4Wx1L+7IbNiMOXMcia5iVfd7slM22AE=)
4: 3230322e362e3230322e302f32332d3234203d3e20313331353131.roa (hash: l/mSQ2co+ZxncSxgoZMZ7pZjBgnvViCwzXpTh1xbBEQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:27:75:e5:80:10:ed:c5:35:5b:3e:ef:d0:55:49:ff:a4:23:ad:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5
Validity
Not Before: Feb 22 15:52:30 2026 GMT
Not After : Feb 23 16:33:30 2026 GMT
Subject: CN=833E3AB668FC00C1313B5D3607ED80856A754AE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:fa:ef:2f:b1:01:18:e8:2f:ec:32:34:e0:
22:f1:4a:af:53:24:b2:d3:e0:36:31:37:96:76:79:
a4:15:85:c6:bc:a3:13:be:9f:9e:ae:6c:cc:fc:ef:
43:db:00:80:74:d6:39:4c:58:89:3b:8a:24:9d:00:
bc:77:e8:14:dc:93:dc:ec:1f:fb:ef:a5:e9:0c:e8:
64:24:4e:28:c8:51:a3:05:5b:64:29:f9:22:8f:a0:
3f:d9:03:92:0b:1a:96:5f:c8:9c:64:d1:0c:e1:4c:
a7:4f:c7:6b:8a:7d:d5:8e:c2:8b:a6:fe:55:e9:8a:
87:db:78:c8:b9:87:1f:95:57:c4:8f:6d:bf:e5:bb:
87:28:0d:33:d4:79:47:6b:f7:3f:1f:4d:ba:5a:a5:
a4:d5:11:cc:f1:63:d1:cc:81:99:60:71:50:9c:7e:
9d:6c:2c:a1:c0:f2:da:42:b1:47:97:42:b1:b6:8b:
0f:e7:57:20:81:7e:42:bb:8f:89:df:c4:7e:26:7c:
58:9c:80:85:f1:aa:1f:9d:08:b1:34:b2:0b:3a:9d:
1e:b7:33:79:34:d5:78:79:5e:ea:ec:d1:8b:a8:0c:
3d:52:23:24:d7:46:38:90:36:a2:7b:8b:d6:15:6a:
e5:b2:c9:38:48:1d:4a:c9:0d:32:00:fe:0a:5e:3c:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3E:3A:B6:68:FC:00:C1:31:3B:5D:36:07:ED:80:85:6A:75:4A:E3
X509v3 Authority Key Identifier:
keyid:39:87:26:73:DC:CD:C8:67:20:A2:E1:C2:4F:3D:CF:26:B4:DA:B8:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/0/39872673DCCDC86720A2E1C24F3DCF26B4DAB8F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:63:a3:f6:2c:64:90:91:75:a5:64:a9:7e:ee:1d:3f:41:f2:
c3:e0:98:3f:2f:81:63:89:b8:68:9f:70:cf:a2:ee:d6:a8:a8:
a2:4a:7e:3e:a5:57:3f:2f:fd:50:79:ea:ae:f1:e1:ed:50:4b:
87:52:4c:7c:e7:ee:cd:ac:a3:66:92:04:d4:46:61:a0:00:11:
ca:3d:21:a3:e6:65:4f:4d:52:42:89:83:da:d2:47:35:74:c3:
be:21:9f:b3:fa:df:3d:f1:06:39:46:e5:07:86:e7:6f:c0:b1:
25:7f:a4:4c:b9:9c:9b:b2:60:41:76:11:77:96:10:9d:bb:70:
13:9a:f3:53:c1:08:94:07:54:4a:9f:3b:d7:5b:5e:77:53:e2:
d2:54:4b:07:2d:1e:85:ad:de:05:f3:78:e6:32:d4:4f:63:1a:
f8:b5:ad:29:d9:ba:0c:d5:c3:2e:fc:5b:df:7a:cc:8c:41:31:
54:da:ea:64:fd:89:ab:6a:b4:36:64:48:4e:ea:2b:37:d5:59:
1e:a5:0c:50:ff:78:e0:83:f7:eb:e1:2c:3c:33:24:80:56:df:
5f:db:8a:ee:5d:62:dc:9f:f8:8a:7a:de:82:ab:ff:5d:c5:c0:
41:64:eb:a9:37:c7:b1:0f:49:79:99:bc:ff:f1:ab:9f:ed:ea:
13:5b:b7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:06:07 2026 by rpki-client