$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json) Hash identifier: bs9JCf05hgxyXkaqpMdifSb/OmLNB3e80Fwah7lqKus= Subject key identifier: 9B:1C:F5:AD:1B:26:F1:9D:94:5A:92:20:E1:0B:03:5D:62:34:B8:9B Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 09C60EA2E0CBC9FB56202B3EBC7D0A12A62B3B7B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft Manifest number: 2A Signing time: Thu 19 Feb 2026 15:47:25 +0000 Manifest this update: Thu 19 Feb 2026 15:42:25 +0000 Manifest next update: Fri 20 Feb 2026 19:22:25 +0000 Files and hashes: 1: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=) 2: 3130332e32302e34362e302f32342d3234203d3e203137343038.roa (hash: Cqxt0WZEcv/CrX8zUgyTIyMtPh2X566qKRuS9+MgsQI=) 3: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: Hx6o2MscuP+80wjjFr8m8IoSXKVoWfl26jBnDmG1SZc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 10:18:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c6:0e:a2:e0:cb:c9:fb:56:20:2b:3e:bc:7d:0a:12:a6:2b:3b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Feb 19 15:42:25 2026 GMT Not After : Feb 20 19:22:25 2026 GMT Subject: CN=9B1CF5AD1B26F19D945A9220E10B035D6234B89B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:8b:be:63:91:7a:df:f6:5b:d6:80:4d:6a: 59:fc:19:20:99:1f:ab:20:9a:4d:9e:d2:80:e0:52: 61:60:3e:c7:fa:64:ab:15:c9:9e:a6:e0:69:e9:89: 64:08:19:52:89:f3:38:2c:c8:36:84:14:90:9a:47: e6:38:07:08:dc:8b:96:82:26:fa:eb:0c:77:df:c6: 25:46:00:9f:aa:29:42:27:9a:d2:84:1a:9f:ee:c9: d9:9d:c9:ea:ee:e5:77:71:9a:57:47:13:f9:90:b7: 0f:86:ce:a3:d8:44:a2:77:49:72:f7:f6:43:e5:f6: 9a:54:1b:d9:05:97:df:7c:22:6c:0f:dc:b1:0b:c9: 61:f0:2a:3f:ac:e6:47:d5:78:33:21:ea:cf:7a:27: 02:6d:ee:85:c5:97:22:4e:a7:a9:fc:9b:e3:6c:98: d1:9e:1a:11:28:52:7c:f2:63:d8:b0:a4:81:9a:32: fb:49:ff:37:bd:6d:84:f2:3a:18:2f:cc:7f:ae:94: 41:ea:0b:29:0e:95:46:a8:e5:ab:6f:fa:40:84:af: ab:46:bd:fc:ba:c8:12:5a:7f:8c:75:cb:e0:77:54: 70:01:1b:06:b2:2f:9a:b0:d5:bf:b7:e4:16:70:82: fd:0f:ec:15:e2:82:c3:4c:29:e9:72:c4:40:3f:29: c5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1C:F5:AD:1B:26:F1:9D:94:5A:92:20:E1:0B:03:5D:62:34:B8:9B X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:6e:56:23:3e:5e:4f:74:00:cc:43:f8:7d:0e:d7:43:75:e6: 47:8b:05:96:91:28:f4:ca:77:c3:8f:30:3a:54:83:d0:93:ba: de:8c:26:db:ac:56:41:97:36:4f:f3:83:9e:39:68:a9:4f:b8: 48:b3:84:2c:8b:27:3b:4a:7f:91:27:33:b1:d6:5f:11:ec:f3: db:00:50:75:9b:f4:41:e2:c1:98:b3:39:dc:98:a5:49:34:11: 33:60:b9:c1:8d:06:bd:5f:72:63:f1:d4:2b:a9:57:ad:ba:f0: 15:a0:1a:9d:cb:60:20:ca:01:da:4f:12:f5:c5:c8:a1:d0:7b: 85:9c:64:69:55:b0:ce:40:61:ed:e5:67:2a:d9:32:3a:ff:58: 1e:f4:b1:42:12:e7:8f:7d:ad:0f:f8:d7:f2:bd:b1:e4:c2:c1: 43:1f:ae:b6:81:ee:1d:85:dd:cd:71:99:da:25:e4:90:60:2c: e6:23:f4:37:0a:84:f1:58:c6:4d:3d:75:fe:25:2d:4f:ee:bf: 27:c6:3d:50:a7:80:de:ba:80:bf:ae:5b:49:bc:b5:a4:75:bc: 40:7b:51:10:5a:73:4d:f9:d7:27:3b:d3:a0:0b:4b:9c:d1:07: 5f:4e:80:9c:00:32:13:97:e5:55:dc:33:08:d4:db:4a:b7:b8: 5a:fc:e2:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCcYOouDLyftWICs+vH0KEqYrO3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjAyMTkxNTQyMjVaFw0yNjAyMjAxOTIyMjVaMDMxMTAvBgNV BAMTKDlCMUNGNUFEMUIyNkYxOUQ5NDVBOTIyMEUxMEIwMzVENjIzNEI4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqT4u+Y5F63/Zb1oBNaln8GSCZ H6sgmk2e0oDgUmFgPsf6ZKsVyZ6m4GnpiWQIGVKJ8zgsyDaEFJCaR+Y4Bwjci5aC JvrrDHffxiVGAJ+qKUInmtKEGp/uydmdyeru5XdxmldHE/mQtw+GzqPYRKJ3SXL3 9kPl9ppUG9kFl998ImwP3LELyWHwKj+s5kfVeDMh6s96JwJt7oXFlyJOp6n8m+Ns mNGeGhEoUnzyY9iwpIGaMvtJ/ze9bYTyOhgvzH+ulEHqCykOlUao5atv+kCEr6tG vfy6yBJaf4x1y+B3VHABGwayL5qw1b+35BZwgv0P7BXigsNMKelyxEA/KcWfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmxz1rRsm8Z2UWpIg4QsDXWI0uJswHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1OTA3ODcvMC9GRjRFNjhFRDEwQUFC MDdEOEY0RUVDMDVGRDAzNDU3OTUzRjkzN0UxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaW5WIz5eT3QA zEP4fQ7XQ3XmR4sFlpEo9Mp3w48wOlSD0JO63owm26xWQZc2T/ODnjloqU+4SLOE LIsnO0p/kSczsdZfEezz2wBQdZv0QeLBmLM53JilSTQRM2C5wY0GvV9yY/HUK6lX rbrwFaAanctgIMoB2k8S9cXIodB7hZxkaVWwzkBh7eVnKtkyOv9YHvSxQhLnj32t D/jX8r2x5MLBQx+utoHuHYXdzXGZ2iXkkGAs5iP0NwqE8VjGTT11/iUtT+6/J8Y9 UKeA3rqAv65bSby1pHW8QHtREFpzTfnXJzvToAtLnNEHX06AnAAyE5flVdwzCNTb Sre4Wvzi8w== -----END CERTIFICATE-----Generated at Thu Feb 19 22:21:07 2026 by rpki-client