$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft File: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft (raw, json) Hash identifier: 8JXGtvaweZZKiKbY7FJ9grdN6+/gy8mBVXH8HnsYu9I= Subject key identifier: 03:63:96:C3:EC:10:76:5D:36:E4:9A:D7:32:5E:BE:35:E4:DF:15:03 Authority key identifier: A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB Certificate issuer: /CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Certificate serial: 48AD87E14934466BF02864FBDDF0F21F9942A2B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft Manifest number: 2E Signing time: Sun 22 Feb 2026 05:57:30 +0000 Manifest this update: Sun 22 Feb 2026 05:52:30 +0000 Manifest next update: Mon 23 Feb 2026 09:20:30 +0000 Files and hashes: 1: A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl (hash: cBLmcj5UayicInvrV2jnbWLZNLn/2fdWLz0O4MXiDSc=) 2: 3130332e3230332e3231322e302f32322d3234203d3e203234343234.roa (hash: N+f+06+n3D2PjMSw6OQKdYAvjUlOaqVGZtNKmDKzGRc=) 3: 323430343a3238303a3a2f33322d3438203d3e203234343234.roa (hash: Q7jTFRqeTV+I16t6qezcIwe/qQa9hw14sNk/ZcCAfQg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ad:87:e1:49:34:46:6b:f0:28:64:fb:dd:f0:f2:1f:99:42:a2:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A487EFD8173F6507202F8FDAB24DA77DB8429DAB Validity Not Before: Feb 22 05:52:30 2026 GMT Not After : Feb 23 09:20:30 2026 GMT Subject: CN=036396C3EC10765D36E49AD7325EBE35E4DF1503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:72:ca:c6:64:25:c3:44:ec:7f:65:7a:ec:f9: 11:51:4e:4e:f9:c6:f0:9c:3f:72:19:2e:11:6b:d0: 7f:e0:1e:37:9d:9c:5e:37:81:8b:03:43:48:7d:74: b2:64:c3:b2:72:4c:be:76:b5:a7:21:28:76:e4:ec: 82:6f:56:db:f0:c4:30:3e:17:4d:e4:66:2c:da:9d: 91:55:08:30:33:fe:be:c4:99:1c:2d:32:78:05:44: aa:05:7d:38:d4:7d:5b:7c:d3:c3:83:28:c1:9a:21: 4a:d5:9a:13:d9:7b:c1:9d:ba:82:17:32:c7:35:b9: fe:30:9b:05:a5:05:d1:93:2d:51:56:c4:49:cb:dd: fd:fd:f4:ef:af:4f:18:84:16:54:ea:38:83:ed:24: f9:22:7a:6b:68:6c:54:a0:62:2a:ca:93:cd:7b:88: 16:51:cc:20:31:12:d8:8f:2c:05:fd:22:a0:14:4a: 93:f2:5a:92:3e:41:c3:47:fb:b8:62:e5:dd:27:9a: a0:b7:3b:b0:ab:bc:40:33:d6:0d:26:f0:23:9b:71: 04:94:77:47:fa:7d:5e:17:c8:c0:ab:58:62:22:ed: 27:c6:b4:d4:4c:bc:fd:13:be:d5:27:7b:96:2f:d1: 48:55:03:5c:5c:78:5a:e1:33:ed:14:e4:ea:9c:44: e2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:63:96:C3:EC:10:76:5D:36:E4:9A:D7:32:5E:BE:35:E4:DF:15:03 X509v3 Authority Key Identifier: keyid:A4:87:EF:D8:17:3F:65:07:20:2F:8F:DA:B2:4D:A7:7D:B8:42:9D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129656323/0/A487EFD8173F6507202F8FDAB24DA77DB8429DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:4e:23:0d:ef:75:d7:df:65:b2:84:80:ca:e2:a2:09:02:7e: 03:18:ae:e5:3d:9d:cb:e8:6d:3a:a0:26:ca:f0:7a:c2:25:16: 68:a9:d0:cc:32:a7:2b:a7:16:ac:12:3c:5b:85:f2:da:37:c0: fc:fd:89:88:e9:b0:71:d7:db:65:3c:f7:56:24:ba:8b:5d:32: 5e:15:09:eb:0b:62:27:75:32:80:b4:26:24:3b:b3:1a:71:98: 82:d8:8b:a9:f8:9c:55:df:8c:9c:ad:d4:fb:3e:74:55:51:c3: 14:98:c4:e7:b8:7a:46:36:ad:16:be:1e:65:4c:a6:c8:17:5c: 8d:61:a7:ef:c2:c8:54:6f:1b:f6:5f:19:7e:14:11:cf:ac:33: 56:1b:e7:22:e8:3a:be:21:f3:52:da:97:32:1b:7c:49:87:02: fb:9e:ee:2e:1b:1b:2b:8a:80:56:95:3e:1a:07:2f:6f:03:c0: 7e:8f:41:13:46:c6:1a:13:e8:37:2e:25:ef:45:cb:cf:c4:d2: 75:d3:fe:bd:42:91:77:97:15:51:1d:2e:d7:65:8e:96:4a:7f: b0:ea:f6:d0:ea:1f:e3:4b:5c:7c:3d:a2:85:c6:0d:3a:92:50: 11:fa:1b:97:fd:d7:ca:06:0c:fa:6e:81:4c:f9:f9:ff:a8:66: b9:e0:04:67 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSK2H4Uk0RmvwKGT73fDyH5lCorcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RC ODQyOURBQjAeFw0yNjAyMjIwNTUyMzBaFw0yNjAyMjMwOTIwMzBaMDMxMTAvBgNV BAMTKDAzNjM5NkMzRUMxMDc2NUQzNkU0OUFENzMyNUVCRTM1RTRERjE1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCacsrGZCXDROx/ZXrs+RFRTk75 xvCcP3IZLhFr0H/gHjednF43gYsDQ0h9dLJkw7JyTL52tachKHbk7IJvVtvwxDA+ F03kZizanZFVCDAz/r7EmRwtMngFRKoFfTjUfVt808ODKMGaIUrVmhPZe8GduoIX Msc1uf4wmwWlBdGTLVFWxEnL3f399O+vTxiEFlTqOIPtJPkiemtobFSgYirKk817 iBZRzCAxEtiPLAX9IqAUSpPyWpI+QcNH+7hi5d0nmqC3O7CrvEAz1g0m8CObcQSU d0f6fV4XyMCrWGIi7SfGtNRMvP0TvtUne5Yv0UhVA1xceFrhM+0U5OqcROIhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUA2OWw+wQdl025JrXMl6+NeTfFQMwHwYDVR0j BBgwFoAUpIfv2Bc/ZQcgL4/ask2nfbhCnaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTY1NjMyMy8wL0E0ODdFRkQ4MTczRjY1MDcyMDJGOEZEQUIyNERB NzdEQjg0MjlEQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4N0VGRDgxNzNGNjUwNzIwMkY4RkRBQjI0REE3N0RCODQyOURBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk2NTYzMjMvMC9BNDg3RUZEODE3M0Y2 NTA3MjAyRjhGREFCMjREQTc3REI4NDI5REFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu04jDe91199l soSAyuKiCQJ+Axiu5T2dy+htOqAmyvB6wiUWaKnQzDKnK6cWrBI8W4Xy2jfA/P2J iOmwcdfbZTz3ViS6i10yXhUJ6wtiJ3UygLQmJDuzGnGYgtiLqficVd+MnK3U+z50 VVHDFJjE57h6RjatFr4eZUymyBdcjWGn78LIVG8b9l8ZfhQRz6wzVhvnIug6viHz UtqXMht8SYcC+57uLhsbK4qAVpU+GgcvbwPAfo9BE0bGGhPoNy4l70XLz8TSddP+ vUKRd5cVUR0u12WOlkp/sOr20Oof40tcfD2ihcYNOpJQEfobl/3XygYM+m6BTPn5 /6hmueAEZw== -----END CERTIFICATE-----Generated at Mon Feb 23 02:06:08 2026 by rpki-client