$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: NbnLlb0ebZOQ7D0Jz9DgtTdGCWu++V08Bx2mnWaWLfA= Subject key identifier: 3D:03:7E:A4:5F:F1:3D:30:3C:D0:D2:1A:20:AE:1A:7E:1A:C4:B5:FF Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 1C73E1CDEF491B9000E873C6D9ED1A5255829B30 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: 3B Signing time: Tue 03 Mar 2026 22:38:20 +0000 Manifest this update: Tue 03 Mar 2026 22:33:20 +0000 Manifest next update: Thu 05 Mar 2026 00:50:20 +0000 Files and hashes: 1: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: bH7/B6d6zBA0qSVn+QNLQqreaxDIZWcIj0sUNnK0iFM=) 2: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:73:e1:cd:ef:49:1b:90:00:e8:73:c6:d9:ed:1a:52:55:82:9b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Mar 3 22:33:20 2026 GMT Not After : Mar 5 00:50:20 2026 GMT Subject: CN=3D037EA45FF13D303CD0D21A20AE1A7E1AC4B5FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:96:ad:f4:bd:30:5e:a8:a4:ee:84:9a:55:f5: 40:b9:d4:d2:7c:82:a9:f6:bf:24:6f:21:41:7c:b8: 14:03:bc:8a:89:cb:8a:20:e2:36:d3:f7:87:eb:d0: d6:1f:b4:ba:10:98:cd:81:d9:93:d3:45:2d:8f:b4: 09:09:b4:d9:96:ee:58:b0:f0:df:f4:50:91:cf:f5: 46:be:36:b5:7c:26:3c:b1:e1:65:24:8f:ec:c9:0f: 4e:d8:3f:0b:fd:dd:d0:a1:eb:ad:b7:3d:5e:c6:99: f7:be:e1:ee:c6:3d:e2:16:ce:67:37:f0:32:6a:c1: ad:a6:37:4d:ac:ce:e2:19:47:99:5b:3d:a3:e6:1d: 13:00:09:8a:68:e2:2e:78:31:bf:b4:8d:dd:9c:fb: 02:c6:18:e9:69:d0:da:6a:d4:ef:47:fa:a2:fc:b2: 7a:00:ff:70:2a:9a:9f:f1:7b:7e:7d:3e:e7:b3:9d: dd:97:ff:5d:2e:c1:4b:d5:c0:0f:64:d3:a2:87:6b: 1f:59:c3:89:e6:89:cd:12:93:50:8e:36:f0:75:07: 61:d0:e7:02:5f:fe:9b:8a:25:84:97:81:e7:0a:d7: b7:06:a8:d0:14:6e:9c:10:de:68:33:cf:d2:f3:f0: 4f:84:99:82:39:46:b9:4f:c8:c7:cb:1d:58:8c:db: f2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:03:7E:A4:5F:F1:3D:30:3C:D0:D2:1A:20:AE:1A:7E:1A:C4:B5:FF X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:85:09:ef:3b:8b:97:8b:03:ed:cb:f4:39:95:2d:11:c1:9d: 4a:4b:28:e0:0b:25:90:f5:9e:53:e2:e6:40:25:ee:15:92:4a: a9:e8:a8:c9:2f:b7:f3:9a:58:8a:14:3d:3e:b4:09:b1:b6:a7: a5:29:3e:90:f5:b8:26:1a:94:f0:ac:07:32:e2:e4:86:4e:99: 65:c2:36:d7:f5:06:94:fa:f3:7f:35:b3:d8:9e:db:8d:7a:d4: ef:e8:8d:ad:9b:7e:88:a0:be:b2:d8:9e:d4:5c:01:d1:0c:2e: 33:a4:32:30:aa:6f:d6:84:c9:d6:08:60:fa:44:26:f4:6b:f5: c3:a2:2d:1e:01:aa:e8:52:95:3f:24:c6:57:ee:ed:dc:21:65: 27:41:d2:32:ad:0e:d6:fb:94:9c:79:e5:a0:04:76:8f:e0:0a: 2d:ce:fb:0b:e6:da:eb:b7:ec:c1:47:57:5b:71:0b:e7:c8:b5: 46:3d:06:ac:56:cf:08:df:d0:f0:35:f3:27:d7:72:b9:c3:a9: f4:40:61:4c:50:e0:80:49:f8:e4:31:8b:ee:91:8a:66:52:46: 2f:b6:26:0f:0e:cb:9d:24:16:7c:88:ea:fe:f3:70:69:78:87: 91:9c:98:20:c7:88:8f:2d:66:c8:68:5a:57:7e:6a:b6:80:bd: fb:6c:72:e2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHHPhze9JG5AA6HPG2e0aUlWCmzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjAzMDMyMjMzMjBaFw0yNjAzMDUwMDUwMjBaMDMxMTAvBgNV BAMTKDNEMDM3RUE0NUZGMTNEMzAzQ0QwRDIxQTIwQUUxQTdFMUFDNEI1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVlq30vTBeqKTuhJpV9UC51NJ8 gqn2vyRvIUF8uBQDvIqJy4og4jbT94fr0NYftLoQmM2B2ZPTRS2PtAkJtNmW7liw 8N/0UJHP9Ua+NrV8Jjyx4WUkj+zJD07YPwv93dCh6623PV7Gmfe+4e7GPeIWzmc3 8DJqwa2mN02szuIZR5lbPaPmHRMACYpo4i54Mb+0jd2c+wLGGOlp0Npq1O9H+qL8 snoA/3Aqmp/xe359Pueznd2X/10uwUvVwA9k06KHax9Zw4nmic0Sk1CONvB1B2HQ 5wJf/puKJYSXgecK17cGqNAUbpwQ3mgzz9Lz8E+EmYI5RrlPyMfLHViM2/KxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPQN+pF/xPTA80NIaIK4afhrEtf8wHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYUJ7zuLl4sD 7cv0OZUtEcGdSkso4AslkPWeU+LmQCXuFZJKqeioyS+385pYihQ9PrQJsbanpSk+ kPW4JhqU8KwHMuLkhk6ZZcI21/UGlPrzfzWz2J7bjXrU7+iNrZt+iKC+stie1FwB 0QwuM6QyMKpv1oTJ1ghg+kQm9Gv1w6ItHgGq6FKVPyTGV+7t3CFlJ0HSMq0O1vuU nHnloAR2j+AKLc77C+ba67fswUdXW3EL58i1Rj0GrFbPCN/Q8DXzJ9dyucOp9EBh TFDggEn45DGL7pGKZlJGL7YmDw7LnSQWfIjq/vNwaXiHkZyYIMeIjy1myGhaV35q toC9+2xy4g== -----END CERTIFICATE-----Generated at Wed Mar 4 13:09:30 2026 by rpki-client