$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: 4Mi25pLpyIyq8SSBfhNzYjhDJZigl/DB4W83sJaqheY= Subject key identifier: 1F:65:BF:4D:FA:DC:94:3B:29:25:FC:30:E1:B0:BD:92:58:AE:A4:43 Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 527989EB151E25762C9EA9E07490AC6C23AAD1F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: 2E Signing time: Sun 22 Feb 2026 08:12:30 +0000 Manifest this update: Sun 22 Feb 2026 08:07:30 +0000 Manifest next update: Mon 23 Feb 2026 10:46:30 +0000 Files and hashes: 1: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) 2: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) 3: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: sMQEv0FAM5Gf+T1c7Wauj0IP6piMd3ZHtHK0t/uIVM8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:79:89:eb:15:1e:25:76:2c:9e:a9:e0:74:90:ac:6c:23:aa:d1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: Feb 22 08:07:30 2026 GMT Not After : Feb 23 10:46:30 2026 GMT Subject: CN=1F65BF4DFADC943B2925FC30E1B0BD9258AEA443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:77:12:40:a3:00:51:19:27:55:c3:96:b9:d5: 2b:5b:86:54:58:1b:aa:28:85:ea:7f:96:16:62:73: c8:59:4b:52:ef:06:43:99:3b:13:8f:d0:9e:aa:d0: 08:39:36:89:d6:0c:49:b8:37:e4:7f:46:2c:72:78: 87:0b:b4:2d:6b:0f:a2:99:ae:79:e9:35:ed:9d:8b: 59:d7:35:b4:54:37:23:fe:30:35:f5:e3:a7:50:40: 98:47:c7:f1:e1:9c:6b:c6:84:ff:8d:18:d2:4e:62: b3:d8:9d:7d:d6:fa:5c:1d:2b:ce:16:ec:99:64:a1: 6f:98:dc:40:39:8d:39:74:5f:e1:19:9b:e2:82:18: 37:33:ae:6c:cc:79:20:20:39:b3:3e:fc:f1:c3:8e: 36:8e:5f:10:37:68:c0:42:e2:d8:8b:4d:ad:2b:81: e0:3c:f5:33:25:33:3f:40:73:bc:23:bb:ca:1a:ed: ac:98:d6:0a:01:09:70:3d:b2:a0:00:3e:fa:2c:ca: 55:05:58:53:d8:5e:ea:d4:bf:48:0f:4d:48:f8:6e: 7e:27:b4:32:67:1f:43:a1:f8:20:e6:75:d8:5d:4f: 46:11:c5:95:fc:3f:d1:69:89:b1:55:85:c7:86:e2: 87:c7:d4:3d:2c:29:ca:7b:72:dc:7b:89:0e:c1:ea: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:65:BF:4D:FA:DC:94:3B:29:25:FC:30:E1:B0:BD:92:58:AE:A4:43 X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d9:ed:8c:85:86:01:14:14:88:ea:1f:a8:54:70:78:3c:4c: e2:6e:85:06:4a:3a:6a:1e:ed:f3:5c:56:48:c4:eb:15:17:7a: eb:c3:36:03:cd:5b:b1:5b:18:17:e8:af:ed:71:c7:55:ce:51: bf:02:9b:e3:ab:60:51:0e:b7:bd:e3:98:8d:76:8f:d5:e2:5d: 72:b6:5e:5c:01:ff:ca:d8:da:1f:7c:35:3d:38:ae:21:7f:e6: ab:6b:29:13:e0:56:bf:6e:20:7a:af:67:6b:07:2e:29:c1:64: 95:51:f1:f0:0c:d9:18:7d:f0:7c:a6:87:3f:8c:be:35:fa:f8: 17:2f:62:18:3a:6b:1c:b7:23:af:1e:99:a4:7c:2e:4b:15:0c: 46:7c:0a:09:26:c9:46:d7:5a:7e:4a:71:f0:0f:d5:5f:26:d6: 92:5c:c8:51:3e:36:3b:8a:46:f5:5e:db:aa:4e:1d:83:28:34: 68:2c:ae:ba:6a:e6:f9:dd:28:44:25:4e:eb:58:cb:82:be:6c: 57:af:46:2b:d6:6c:05:bd:66:b7:5e:71:f6:c6:f1:50:6e:d2: 04:a4:35:19:27:83:f7:f4:d8:ab:8a:bd:9e:48:fb:1f:65:0f: 2f:73:43:8b:10:83:5b:11:4c:29:2c:46:1c:17:16:0b:a0:d0: 99:4d:9e:a7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUnmJ6xUeJXYsnqngdJCsbCOq0fgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjAyMjIwODA3MzBaFw0yNjAyMjMxMDQ2MzBaMDMxMTAvBgNV BAMTKDFGNjVCRjRERkFEQzk0M0IyOTI1RkMzMEUxQjBCRDkyNThBRUE0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTdxJAowBRGSdVw5a51StbhlRY G6oohep/lhZic8hZS1LvBkOZOxOP0J6q0Ag5NonWDEm4N+R/RixyeIcLtC1rD6KZ rnnpNe2di1nXNbRUNyP+MDX146dQQJhHx/HhnGvGhP+NGNJOYrPYnX3W+lwdK84W 7JlkoW+Y3EA5jTl0X+EZm+KCGDczrmzMeSAgObM+/PHDjjaOXxA3aMBC4tiLTa0r geA89TMlMz9Ac7wju8oa7ayY1goBCXA9sqAAPvosylUFWFPYXurUv0gPTUj4bn4n tDJnH0Oh+CDmddhdT0YRxZX8P9FpibFVhceG4ofH1D0sKcp7ctx7iQ7B6tf3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUH2W/TfrclDspJfww4bC9kliupEMwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9ntjIWGARQU iOofqFRweDxM4m6FBko6ah7t81xWSMTrFRd668M2A81bsVsYF+iv7XHHVc5RvwKb 46tgUQ63veOYjXaP1eJdcrZeXAH/ytjaH3w1PTiuIX/mq2spE+BWv24geq9nawcu KcFklVHx8AzZGH3wfKaHP4y+Nfr4Fy9iGDprHLcjrx6ZpHwuSxUMRnwKCSbJRtda fkpx8A/VXybWklzIUT42O4pG9V7bqk4dgyg0aCyuumrm+d0oRCVO61jLgr5sV69G K9ZsBb1mt15x9sbxUG7SBKQ1GSeD9/TYq4q9nkj7H2UPL3NDixCDWxFMKSxGHBcW C6DQmU2epw== -----END CERTIFICATE-----Generated at Mon Feb 23 02:08:40 2026 by rpki-client