$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft File: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft (raw, json) Hash identifier: HQzUGRVv3WaNewZ0W0S9hwE+rzJXdv2omCYmZFeqq74= Subject key identifier: 6A:02:21:B6:B6:B2:F6:AA:22:E5:F5:47:38:08:5A:97:D2:1D:DC:7C Authority key identifier: 3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 Certificate issuer: /CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Certificate serial: 107DADD6A7B61FE24A902571BCB5C9D6DF5850EA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft Manifest number: 2F Signing time: Sun 22 Feb 2026 06:42:30 +0000 Manifest this update: Sun 22 Feb 2026 06:37:30 +0000 Manifest next update: Mon 23 Feb 2026 10:36:30 +0000 Files and hashes: 1: 3230322e35382e3132322e302f32332d3234203d3e20313531323332.roa (hash: DtGsKM7YVwB2ljMgaxfxo89TvuUMHo28wHAhKKqnXbE=) 2: 3130332e3231332e3134342e302f32332d3234203d3e20313531323332.roa (hash: pj2MdN2yJRyp3twcP5p1g5g2CCAhE24yt0WoZ4ahFkQ=) 3: 3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl (hash: hio76ZmofrsnG80tYeJyueYrMlvhupd/mQSw+HC8GOA=) 4: 3230322e35382e3132322e302f32332d3234203d3e20323031373730.roa (hash: 5NGoXcmWBSZlt4orHbWrVsP+901E+bfp7xhJL2KYqes=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:7d:ad:d6:a7:b6:1f:e2:4a:90:25:71:bc:b5:c9:d6:df:58:50:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBBE29A78A758AE284D0D641BCDBB0756033CC9 Validity Not Before: Feb 22 06:37:30 2026 GMT Not After : Feb 23 10:36:30 2026 GMT Subject: CN=6A0221B6B6B2F6AA22E5F54738085A97D21DDC7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:33:11:9c:fb:8c:e1:8e:be:53:3a:16:d3: ad:46:90:84:2c:5e:5b:56:a5:20:cc:ea:ca:ea:c0: da:e3:cb:24:88:71:1c:62:63:49:8f:0e:27:d4:b0: b4:7c:64:68:56:e2:37:2e:46:aa:06:09:3d:ba:b8: 20:ac:94:74:83:d5:96:51:74:b8:11:6a:a1:17:44: b5:4e:61:b4:a4:5e:0d:44:83:db:a4:ee:42:83:0a: 20:52:2d:82:cf:da:6a:aa:c6:d4:c2:bc:44:13:cd: d1:4d:23:7a:b0:e7:d3:a1:8b:10:e8:e4:33:2a:99: 92:c8:cb:ff:cf:45:54:94:30:17:57:c4:5e:5e:eb: de:62:4c:46:6d:95:77:87:44:cc:68:c7:8c:e5:76: 3c:86:cc:4c:08:3b:c2:b3:98:fc:f7:75:01:58:d6: fc:c8:66:10:5e:8a:f0:04:fb:61:15:a3:0a:f4:29: c6:2b:6e:4e:01:10:d5:d8:83:57:83:ba:d5:93:de: f0:6d:58:75:b8:84:34:f9:b7:c6:f4:28:ef:34:3e: 95:c0:13:38:5f:9a:7f:a5:fe:3b:b6:18:c8:59:95: 5d:07:49:68:39:04:e8:07:e8:f9:bf:c5:07:b3:ac: 68:ca:4d:a7:5c:e3:fb:26:0d:c9:5c:b0:ed:fc:73: 86:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:02:21:B6:B6:B2:F6:AA:22:E5:F5:47:38:08:5A:97:D2:1D:DC:7C X509v3 Authority Key Identifier: keyid:3F:BB:E2:9A:78:A7:58:AE:28:4D:0D:64:1B:CD:BB:07:56:03:3C:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/0/3FBBE29A78A758AE284D0D641BCDBB0756033CC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:25:4b:19:77:8a:ba:5c:11:bc:05:53:f2:9e:cd:34:5a:be: 5b:23:4d:0a:f5:34:05:cb:b8:b5:00:b6:43:0e:81:b4:90:33: b3:92:1e:e0:60:a9:9f:c2:70:b6:7a:2f:13:36:da:71:5c:44: 73:c7:d3:17:6f:86:58:de:cc:77:47:4f:d4:00:d3:2c:85:73: 15:c9:58:28:6a:f3:9e:3b:67:12:73:a6:df:5a:ca:5b:7b:f8: 75:7f:ed:fe:ca:fd:bd:d0:5a:06:05:b7:be:75:a9:b2:b5:7a: 84:aa:df:db:53:e8:4d:fe:1a:e0:5a:c9:08:5c:ee:1c:89:cb: d6:b4:cd:02:4e:4c:df:83:ae:14:8d:66:e5:3c:dd:b1:6c:78: 17:f1:0c:af:fc:ca:ac:34:3b:6a:50:ef:b1:1d:d6:96:e2:55: c5:c0:50:75:05:d5:fe:c2:88:a2:e5:a7:65:b7:30:09:d0:d3: 8f:87:f0:b2:cb:13:1e:8c:6e:66:9e:e9:d5:3b:e5:45:9e:15: dd:61:8c:94:d6:1d:a5:a1:c9:44:18:50:6b:a0:39:d5:9f:91: ed:b5:07:c4:d6:ff:2e:60:9f:0a:eb:55:0d:9a:a3:ab:c2:e2: 6c:9a:70:8f:a1:fa:5c:38:39:17:09:41:6e:af:c0:af:f3:48: 25:91:b4:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEH2t1qe2H+JKkCVxvLXJ1t9YUOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1 NjAzM0NDOTAeFw0yNjAyMjIwNjM3MzBaFw0yNjAyMjMxMDM2MzBaMDMxMTAvBgNV BAMTKDZBMDIyMUI2QjZCMkY2QUEyMkU1RjU0NzM4MDg1QTk3RDIxRERDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCraDMRnPuM4Y6+UzoW061GkIQs XltWpSDM6srqwNrjyySIcRxiY0mPDifUsLR8ZGhW4jcuRqoGCT26uCCslHSD1ZZR dLgRaqEXRLVOYbSkXg1Eg9uk7kKDCiBSLYLP2mqqxtTCvEQTzdFNI3qw59OhixDo 5DMqmZLIy//PRVSUMBdXxF5e695iTEZtlXeHRMxox4zldjyGzEwIO8KzmPz3dQFY 1vzIZhBeivAE+2EVowr0KcYrbk4BENXYg1eDutWT3vBtWHW4hDT5t8b0KO80PpXA Ezhfmn+l/ju2GMhZlV0HSWg5BOgH6Pm/xQezrGjKTadc4/smDclcsO38c4ZJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUagIhtray9qoi5fVHOAhal9Id3HwwHwYDVR0j BBgwFoAUP7vimninWK4oTQ1kG827B1YDPMkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8wLzNGQkJFMjlBNzhBNzU4QUUyODREMEQ2NDFCQ0RC QjA3NTYwMzNDQzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0ZCQkUyOUE3OEE3NThBRTI4NEQwRDY0MUJDREJCMDc1NjAzM0NDOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMC8zRkJCRTI5QTc4QTc1 OEFFMjg0RDBENjQxQkNEQkIwNzU2MDMzQ0M5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyVLGXeKulwR vAVT8p7NNFq+WyNNCvU0Bcu4tQC2Qw6BtJAzs5Ie4GCpn8JwtnovEzbacVxEc8fT F2+GWN7Md0dP1ADTLIVzFclYKGrznjtnEnOm31rKW3v4dX/t/sr9vdBaBgW3vnWp srV6hKrf21PoTf4a4FrJCFzuHInL1rTNAk5M34OuFI1m5TzdsWx4F/EMr/zKrDQ7 alDvsR3WluJVxcBQdQXV/sKIouWnZbcwCdDTj4fwsssTHoxuZp7p1TvlRZ4V3WGM lNYdpaHJRBhQa6A51Z+R7bUHxNb/LmCfCutVDZqjq8LibJpwj6H6XDg5FwlBbq/A r/NIJZG0wQ== -----END CERTIFICATE-----Generated at Mon Feb 23 02:27:09 2026 by rpki-client