$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft File: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft (raw, json) Hash identifier: y51Ac3VC5O775z81zFLk786W0wZ5+OlcOWpB/l4zxfg= Subject key identifier: 62:9C:83:E2:54:23:1A:BA:39:8A:59:FA:0B:0E:C9:88:A0:66:3A:B5 Authority key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Certificate issuer: /CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Certificate serial: 340D6F4B6E1E0EA2A05FA32D0A3DF0789D853332 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft Manifest number: 2E Signing time: Sun 22 Feb 2026 14:32:30 +0000 Manifest this update: Sun 22 Feb 2026 14:27:30 +0000 Manifest next update: Mon 23 Feb 2026 14:45:30 +0000 Files and hashes: 1: 3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa (hash: TJ5xZ9TiOJJ1dCpAh7FBDEzLTP+zf3PlCGw0cOje3l8=) 2: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl (hash: ggPPFLZrCDHn4+vB8Ml2vvF4EuTldHm3v/ZYReEl5gw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0d:6f:4b:6e:1e:0e:a2:a0:5f:a3:2d:0a:3d:f0:78:9d:85:33:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Validity Not Before: Feb 22 14:27:30 2026 GMT Not After : Feb 23 14:45:30 2026 GMT Subject: CN=629C83E254231ABA398A59FA0B0EC988A0663AB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f3:a6:c4:5f:7c:ea:9d:36:4e:87:ed:9f:21: e1:21:1d:f3:98:da:38:33:05:93:0e:e4:44:aa:a6: cb:82:22:92:24:2b:e7:87:cd:e0:92:75:55:4b:5c: 90:14:90:8f:3f:08:0a:70:3d:39:d3:ed:91:d1:db: ea:5f:6e:fc:13:c4:81:ca:c9:82:47:6e:f2:3a:c8: 4a:8b:7f:33:9a:c4:17:0e:f1:36:23:12:3a:78:a4: 4f:c5:c4:30:cd:bb:89:b4:02:00:e8:14:e7:66:a4: f4:ec:18:58:85:ff:04:4a:9b:71:c8:ab:1d:21:c7: 0d:4e:e8:cd:c2:7d:bb:07:f0:81:d2:a5:ff:43:41: 4b:9f:9d:5d:e1:e9:68:db:83:66:49:d1:08:89:96: 57:e8:6d:fb:4f:5c:f0:a2:cb:0c:da:32:49:c1:b2: 68:76:03:01:fa:83:e2:01:6e:46:59:c2:b9:5c:9c: 8e:96:ad:3d:1e:43:ff:54:37:b9:e6:1c:38:19:b0: 84:37:99:06:51:8c:25:f8:a0:46:e7:d4:c6:00:4a: f0:03:33:82:8a:60:4d:ca:19:98:46:60:1f:f1:37: 28:9e:e1:1b:6d:16:04:99:08:3f:8c:b5:b7:49:6d: d3:0e:bb:66:91:8a:5a:bc:c0:bc:af:29:87:65:5a: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9C:83:E2:54:23:1A:BA:39:8A:59:FA:0B:0E:C9:88:A0:66:3A:B5 X509v3 Authority Key Identifier: keyid:D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a4:66:7a:a8:a6:d5:c4:e4:2f:6c:b5:1b:df:44:5b:b2:5f: 65:6c:97:ed:0b:db:8b:31:40:06:5b:d1:29:92:ea:ef:c8:f2: 67:aa:19:d3:b6:aa:1e:ad:6e:87:4d:5b:25:83:cb:3e:d6:14: 06:1e:10:8f:53:0b:e5:4c:e9:81:3b:f4:1e:e8:14:44:4a:99: 2e:49:41:9b:66:7e:f6:12:37:76:bd:a6:cc:13:05:97:4f:88: c8:0d:64:d7:66:ac:fa:ec:a4:9a:fa:e9:9f:97:3f:39:4d:9c: d1:e1:e6:2d:32:62:b4:ec:bf:41:19:ab:da:af:d2:94:72:ad: ab:33:2c:59:91:f2:40:68:95:1c:dd:a0:34:f4:3a:32:2d:7e: cf:5a:b4:a0:6a:92:bc:ce:a1:74:00:15:f1:f7:9f:f7:de:80: 45:18:b1:fc:70:54:83:1b:67:b6:64:c3:44:21:17:63:05:28: a3:eb:57:07:07:77:7d:66:57:ef:4b:61:78:a2:e5:ba:55:ce: e3:7b:3d:71:ef:93:94:06:b3:16:cf:44:4b:d1:07:8d:1f:4f: e4:6b:14:79:78:86:af:e8:14:de:82:58:82:8e:2b:b3:02:2b: fd:b7:48:c0:59:25:d3:96:ab:b8:e4:e1:cd:68:12:ce:26:9e: 67:5a:79:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNA1vS24eDqKgX6MtCj3weJ2FMzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENE OTFCOTNFNTAeFw0yNjAyMjIxNDI3MzBaFw0yNjAyMjMxNDQ1MzBaMDMxMTAvBgNV BAMTKDYyOUM4M0UyNTQyMzFBQkEzOThBNTlGQTBCMEVDOTg4QTA2NjNBQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU86bEX3zqnTZOh+2fIeEhHfOY 2jgzBZMO5ESqpsuCIpIkK+eHzeCSdVVLXJAUkI8/CApwPTnT7ZHR2+pfbvwTxIHK yYJHbvI6yEqLfzOaxBcO8TYjEjp4pE/FxDDNu4m0AgDoFOdmpPTsGFiF/wRKm3HI qx0hxw1O6M3CfbsH8IHSpf9DQUufnV3h6Wjbg2ZJ0QiJllfobftPXPCiywzaMknB smh2AwH6g+IBbkZZwrlcnI6WrT0eQ/9UN7nmHDgZsIQ3mQZRjCX4oEbn1MYASvAD M4KKYE3KGZhGYB/xNyie4RttFgSZCD+MtbdJbdMOu2aRilq8wLyvKYdlWlgpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYpyD4lQjGro5iln6Cw7JiKBmOrUwHwYDVR0j BBgwFoAU2Wkxtt+kXHCuT6V95t2W3Nkbk+UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEzMDA0OTUzOS8wL0Q5NjkzMUI2REZBNDVDNzBBRTRGQTU3REU2REQ5 NkRDRDkxQjkzRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMzAwNDk1MzkvMC9EOTY5MzFCNkRGQTQ1 QzcwQUU0RkE1N0RFNkREOTZEQ0Q5MUI5M0U1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKRmeqim1cTk L2y1G99EW7JfZWyX7QvbizFABlvRKZLq78jyZ6oZ07aqHq1uh01bJYPLPtYUBh4Q j1ML5UzpgTv0HugUREqZLklBm2Z+9hI3dr2mzBMFl0+IyA1k12as+uykmvrpn5c/ OU2c0eHmLTJitOy/QRmr2q/SlHKtqzMsWZHyQGiVHN2gNPQ6Mi1+z1q0oGqSvM6h dAAV8fef996ARRix/HBUgxtntmTDRCEXYwUoo+tXBwd3fWZX70theKLlulXO43s9 ce+TlAazFs9ES9EHjR9P5GsUeXiGr+gU3oJYgo4rswIr/bdIwFkl05aruOThzWgS ziaeZ1p5dA== -----END CERTIFICATE-----Generated at Mon Feb 23 02:07:38 2026 by rpki-client