$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft File: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft (raw, json) Hash identifier: IMSFE5volY+BPkq4EEUwQDl3G/o2YZvMzR6k3Ox1gZQ= Subject key identifier: 33:F7:34:DB:91:D2:B2:C1:C9:5E:9D:ED:F8:47:E1:90:8E:0C:98:39 Authority key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 Certificate issuer: /CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Certificate serial: 5CC5DF57D45051FAAC99499A630ACAFBAC12BFBF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft Manifest number: 23 Signing time: Sun 22 Feb 2026 09:17:30 +0000 Manifest this update: Sun 22 Feb 2026 09:12:30 +0000 Manifest next update: Mon 23 Feb 2026 11:02:30 +0000 Files and hashes: 1: 34352e3132312e39362e302f32322d3234203d3e20333939313338.roa (hash: gYT3dtPIakPTs4f1hCUuM5xGvtdVmK2naUkADh3L9I8=) 2: 3130332e36312e3137362e302f32322d3234203d3e20333939313338.roa (hash: lfso3iitwNXOWpDhN+K/LYRuYJB9b0kiLHNKSA+teTM=) 3: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl (hash: PQN1ODHf5x0JpTX5EFHXPl9LERbMLdmn8oGjnUJholw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c5:df:57:d4:50:51:fa:ac:99:49:9a:63:0a:ca:fb:ac:12:bf:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Validity Not Before: Feb 22 09:12:30 2026 GMT Not After : Feb 23 11:02:30 2026 GMT Subject: CN=33F734DB91D2B2C1C95E9DEDF847E1908E0C9839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:e4:af:06:a9:26:c2:12:6b:0d:87:19:e7: 2b:89:27:93:81:75:2a:1a:cc:31:70:39:70:bb:96: 7c:27:85:db:6a:67:97:74:0d:53:10:ff:56:dd:ee: b6:01:65:33:23:b7:6b:97:47:d6:23:b1:11:11:25: 2f:06:57:ea:89:4f:c7:b6:d5:5b:8b:f7:f9:ca:95: a6:86:46:41:0f:39:0a:77:11:5c:3d:25:a7:3f:fb: 8d:eb:ab:09:29:7b:2b:b7:97:e7:e5:a5:c3:4d:c1: d4:2b:f3:e3:20:a1:a5:81:97:0a:fc:e0:02:69:03: ac:f8:00:d6:a7:77:2e:da:ff:a5:bf:4e:4b:30:04: bb:0b:65:2e:71:d7:23:a1:94:1f:0a:ae:21:e2:29: 5c:ef:e9:d4:4b:2a:13:69:0d:1c:58:83:7a:bf:0e: f8:17:6a:d7:c2:d6:bd:d1:b0:83:7b:14:de:54:a5: 54:e5:7b:1f:61:c8:d3:5b:35:63:d0:01:8e:4f:4f: 4d:8f:42:ca:24:78:fb:9d:75:c7:6d:c2:d3:1e:b8: fc:b0:c3:d4:f5:3b:c0:fc:8b:8d:1d:f3:d7:12:76: bc:e2:73:0c:6d:2a:3e:2d:a8:04:3e:20:62:db:53: 71:29:bd:aa:89:cf:f9:27:de:e1:df:68:32:19:81: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F7:34:DB:91:D2:B2:C1:C9:5E:9D:ED:F8:47:E1:90:8E:0C:98:39 X509v3 Authority Key Identifier: keyid:AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:47:99:5a:d5:72:17:59:dc:96:a4:e7:43:00:91:7b:00:ed: 16:27:44:9f:af:d3:53:82:4a:ec:22:85:c6:64:81:26:26:6f: 99:e0:b4:8b:97:f9:28:40:bd:a8:60:47:e1:2b:e4:fd:b3:92: a7:76:e3:25:6e:f6:d5:f4:79:08:0d:7e:6f:f0:91:18:b8:68: 69:f2:91:7a:37:e6:d3:9f:80:1e:0d:34:a0:14:f8:71:e0:56: cb:1f:44:44:0b:1b:79:af:be:85:91:51:e3:45:30:dc:5a:2e: b2:13:fa:bf:bb:cb:b3:4b:47:87:b6:bf:11:53:79:26:b6:29: eb:08:bd:ab:05:c6:b5:06:41:56:60:87:69:67:24:9c:72:12: e7:62:32:cf:13:34:6c:4a:82:20:8a:40:66:47:1e:fd:fb:37: 31:79:c4:c7:8f:7d:b8:d0:6c:b9:51:58:b3:58:52:32:4b:ae: f4:13:51:de:d9:64:ff:6d:a5:f2:0a:db:03:c8:dd:06:bf:af: f3:2b:71:db:e2:5e:5c:ce:0e:17:0d:82:87:b5:08:43:a1:f0: 56:7c:43:8d:10:41:34:d0:ba:63:91:15:bb:f8:9b:ce:fa:e3: 2b:20:aa:b2:b7:9d:42:5a:30:4d:40:98:d6:3d:0c:1f:04:5e: e6:04:6e:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXMXfV9RQUfqsmUmaYwrK+6wSv78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJD QUI5QTM0MTAeFw0yNjAyMjIwOTEyMzBaFw0yNjAyMjMxMTAyMzBaMDMxMTAvBgNV BAMTKDMzRjczNERCOTFEMkIyQzFDOTVFOURFREY4NDdFMTkwOEUwQzk4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDME+SvBqkmwhJrDYcZ5yuJJ5OB dSoazDFwOXC7lnwnhdtqZ5d0DVMQ/1bd7rYBZTMjt2uXR9YjsRERJS8GV+qJT8e2 1VuL9/nKlaaGRkEPOQp3EVw9Jac/+43rqwkpeyu3l+flpcNNwdQr8+MgoaWBlwr8 4AJpA6z4ANandy7a/6W/TkswBLsLZS5x1yOhlB8KriHiKVzv6dRLKhNpDRxYg3q/ DvgXatfC1r3RsIN7FN5UpVTlex9hyNNbNWPQAY5PT02PQsokePuddcdtwtMeuPyw w9T1O8D8i40d89cSdrzicwxtKj4tqAQ+IGLbU3EpvaqJz/kn3uHfaDIZgd7tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUM/c025HSssHJXp3t+EfhkI4MmDkwHwYDVR0j BBgwFoAUq0qsgEm/oPTyeKwiOFypq8q5o0EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE5NTcwMDExOTUzNTYxOC8wL0FCNEFBQzgwNDlCRkEwRjRGMjc4QUMyMjM4NUNB OUFCQ0FCOUEzNDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJDQUI5QTM0MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxOTU3MDAxMTk1MzU2MTgvMC9BQjRBQUM4MDQ5QkZB MEY0RjI3OEFDMjIzODVDQTlBQkNBQjlBMzQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkeZWtVyF1nc lqTnQwCRewDtFidEn6/TU4JK7CKFxmSBJiZvmeC0i5f5KEC9qGBH4Svk/bOSp3bj JW721fR5CA1+b/CRGLhoafKRejfm05+AHg00oBT4ceBWyx9ERAsbea++hZFR40Uw 3FoushP6v7vLs0tHh7a/EVN5JrYp6wi9qwXGtQZBVmCHaWcknHIS52IyzxM0bEqC IIpAZkce/fs3MXnEx499uNBsuVFYs1hSMkuu9BNR3tlk/22l8grbA8jdBr+v8ytx 2+JeXM4OFw2Ch7UIQ6HwVnxDjRBBNNC6Y5EVu/ibzvrjKyCqsredQlowTUCY1j0M HwRe5gRuqQ== -----END CERTIFICATE-----Generated at Mon Feb 23 02:13:39 2026 by rpki-client