$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft File: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft (raw, json) Hash identifier: 1LmUKNSrx+NJQQMbeA656vUtLuR2JLCgNaI1WNzbuBw= Subject key identifier: 47:31:11:60:AF:25:1E:B2:55:21:8E:5F:06:F5:40:49:AC:5B:84:FC Authority key identifier: 80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 Certificate issuer: /CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Certificate serial: 76718AA658512C6A1FA168F848F4A0047907E5A9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft Manifest number: 3B Signing time: Tue 03 Mar 2026 18:13:20 +0000 Manifest this update: Tue 03 Mar 2026 18:08:20 +0000 Manifest next update: Wed 04 Mar 2026 22:10:20 +0000 Files and hashes: 1: 8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl (hash: ErVFx/6HDq8vu0aE2qhlSLenibQ7v1gisCSvN0CZzss=) 2: 3134302e3231302e302e302f32322d3234203d3e20313531323332.roa (hash: /CEV50uKSA8t4vUJn4iuZuu4DI9s5CpeqMgXUGQHvKw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:71:8a:a6:58:51:2c:6a:1f:a1:68:f8:48:f4:a0:04:79:07:e5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76 Validity Not Before: Mar 3 18:08:20 2026 GMT Not After : Mar 4 22:10:20 2026 GMT Subject: CN=47311160AF251EB255218E5F06F54049AC5B84FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8b:12:8c:2a:74:4b:bb:56:a8:d6:6e:b0:64: 0a:d3:71:49:3f:80:0f:16:0e:43:db:7c:a5:3a:86: 3a:0c:77:67:98:4d:76:27:42:9b:c7:1c:3c:57:ea: b1:07:56:35:43:24:f9:09:e9:72:6c:f7:b3:55:4e: 48:63:03:54:42:3a:7f:0a:91:f3:39:7c:c2:30:f1: 38:c7:8a:53:6e:f1:bd:ea:c0:d4:70:bf:36:f6:b7: 44:aa:f5:10:e4:c6:51:33:42:9f:0f:42:3b:22:eb: 42:f1:4c:aa:6a:66:4d:41:f6:c1:8e:69:19:63:57: 11:48:05:c9:96:05:10:5a:37:97:43:96:0c:9b:93: 3f:b2:e3:7f:34:e3:57:10:75:fe:52:5c:2e:97:2e: ee:1f:dd:b0:11:98:41:a4:1a:29:bf:a5:8b:2f:60: 8f:4b:60:65:be:24:fd:ca:19:2d:b4:8f:1b:75:fd: ac:80:18:4b:8c:84:5c:9d:c4:26:8c:47:b6:24:b5: d9:cc:62:44:32:39:f3:3f:82:59:84:14:8c:d2:b8: 8d:52:01:9c:7f:95:1f:7d:81:6e:a7:cc:cf:69:8d: be:d9:2a:33:1e:d8:55:38:1d:9b:f6:10:7e:22:ad: 12:d5:de:14:47:dd:b9:52:6a:94:77:06:d3:98:0b: e8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:31:11:60:AF:25:1E:B2:55:21:8E:5F:06:F5:40:49:AC:5B:84:FC X509v3 Authority Key Identifier: keyid:80:46:42:3A:C6:A5:B7:D6:D1:1E:9B:CB:97:8A:C4:06:5E:E9:CA:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524773889/1/8046423AC6A5B7D6D11E9BCB978AC4065EE9CA76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9d:87:b2:fd:5e:b3:0b:49:db:a3:11:b4:e7:ac:a0:c9:6b: c4:f8:47:d6:13:92:e5:cf:dc:84:94:58:96:42:69:c5:b6:71: a7:8b:7e:bf:46:1e:87:e0:36:bd:02:c4:dc:b9:3c:89:2a:04: c2:7f:e4:87:1a:d1:f9:9b:62:0c:88:04:21:02:70:02:e6:26: c0:b0:2a:be:04:d4:84:a2:17:e9:9a:78:7c:29:a7:aa:af:67: e2:1f:2a:95:44:ea:df:85:ca:de:a1:c2:13:7d:4c:65:77:53: 77:d0:57:9f:06:87:04:6b:a5:3e:0f:7b:e9:d7:83:23:79:56: 2a:85:4b:51:8d:db:3a:2c:56:9a:f4:46:fb:9b:a7:80:ce:7f: d1:eb:6f:d1:17:13:9b:a1:43:d7:54:ea:98:cf:d4:6a:74:33: ce:56:ba:20:66:a5:be:b8:27:42:2d:0a:f2:15:d9:76:eb:52: 15:ec:f5:23:ce:f3:12:ad:59:df:81:5e:e2:4b:6c:7f:00:cb: 89:d4:6a:44:f6:2b:81:94:4a:07:68:86:f8:c5:76:30:70:3c: a0:a2:ce:48:f1:89:fd:f3:17:9d:79:9a:67:73:7c:65:2b:70: 9d:d5:a2:cf:93:ad:a6:43:3f:81:78:9f:02:1e:ec:ca:c8:72: ba:28:7c:fd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdnGKplhRLGofoWj4SPSgBHkH5akwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1 RUU5Q0E3NjAeFw0yNjAzMDMxODA4MjBaFw0yNjAzMDQyMjEwMjBaMDMxMTAvBgNV BAMTKDQ3MzExMTYwQUYyNTFFQjI1NTIxOEU1RjA2RjU0MDQ5QUM1Qjg0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgixKMKnRLu1ao1m6wZArTcUk/ gA8WDkPbfKU6hjoMd2eYTXYnQpvHHDxX6rEHVjVDJPkJ6XJs97NVTkhjA1RCOn8K kfM5fMIw8TjHilNu8b3qwNRwvzb2t0Sq9RDkxlEzQp8PQjsi60LxTKpqZk1B9sGO aRljVxFIBcmWBRBaN5dDlgybkz+y438041cQdf5SXC6XLu4f3bARmEGkGim/pYsv YI9LYGW+JP3KGS20jxt1/ayAGEuMhFydxCaMR7YktdnMYkQyOfM/glmEFIzSuI1S AZx/lR99gW6nzM9pjb7ZKjMe2FU4HZv2EH4irRLV3hRH3blSapR3BtOYC+ihAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURzERYK8lHrJVIY5fBvVASaxbhPwwHwYDVR0j BBgwFoAUgEZCOsalt9bRHpvLl4rEBl7pynYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDc3Mzg4OS8xLzgwNDY0MjNBQzZBNUI3RDZEMTFFOUJDQjk3OEFD NDA2NUVFOUNBNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODA0NjQyM0FDNkE1QjdENkQxMUU5QkNCOTc4QUM0MDY1RUU5Q0E3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3NzM4ODkvMS84MDQ2NDIzQUM2QTVC N0Q2RDExRTlCQ0I5NzhBQzQwNjVFRTlDQTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO52Hsv1eswtJ 26MRtOesoMlrxPhH1hOS5c/chJRYlkJpxbZxp4t+v0Yeh+A2vQLE3Lk8iSoEwn/k hxrR+ZtiDIgEIQJwAuYmwLAqvgTUhKIX6Zp4fCmnqq9n4h8qlUTq34XK3qHCE31M ZXdTd9BXnwaHBGulPg976deDI3lWKoVLUY3bOixWmvRG+5ungM5/0etv0RcTm6FD 11TqmM/UanQzzla6IGalvrgnQi0K8hXZdutSFez1I87zEq1Z34Fe4ktsfwDLidRq RPYrgZRKB2iG+MV2MHA8oKLOSPGJ/fMXnXmaZ3N8ZStwndWiz5OtpkM/gXifAh7s yshyuih8/Q== -----END CERTIFICATE-----Generated at Wed Mar 4 13:09:30 2026 by rpki-client