$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft File: 725E239772427EC7CCCA2C395A80836945A01BD5.mft (raw, json) Hash identifier: DgSYwPcB7sFLd6wk74n44jpo48Tc9T+VHAIuG3fvnXY= Subject key identifier: 3F:B7:4D:D7:B1:19:97:34:79:4F:EB:4D:38:1B:15:00:7D:07:D2:2F Authority key identifier: 72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 Certificate issuer: /CN=725E239772427EC7CCCA2C395A80836945A01BD5 Certificate serial: 018DAFBFF300B2EDB32D25CE16947BFBB25396E8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft Manifest number: 09 Signing time: Wed 04 Mar 2026 12:13:20 +0000 Manifest this update: Wed 04 Mar 2026 12:08:20 +0000 Manifest next update: Thu 05 Mar 2026 15:48:20 +0000 Files and hashes: 1: 323430323a343036303a3a2f33322d3438203d3e20313337373731.roa (hash: QjKlANhm0tw5r7xV3H/kvkMSIsu/YeG6xVH49RnDv8g=) 2: 725E239772427EC7CCCA2C395A80836945A01BD5.crl (hash: eoPEFDUUlGjmJGar5+8xe/70BLs0bFUz6iNRlxaMzPU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 08:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8d:af:bf:f3:00:b2:ed:b3:2d:25:ce:16:94:7b:fb:b2:53:96:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725E239772427EC7CCCA2C395A80836945A01BD5 Validity Not Before: Mar 4 12:08:20 2026 GMT Not After : Mar 5 15:48:20 2026 GMT Subject: CN=3FB74DD7B1199734794FEB4D381B15007D07D22F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:9c:d1:4a:79:1a:ee:8e:1d:14:40:2e:90: 48:b7:9d:3d:fd:71:a0:0d:0d:09:25:48:00:c4:b0: c7:2e:8c:cb:b9:53:b3:25:28:03:9e:07:b6:f8:0e: b9:35:92:7b:ee:17:a2:e8:e4:4a:c7:3c:85:cc:d0: 20:4b:a6:b2:ca:02:56:1a:a0:b8:cf:d0:4b:8c:6b: 69:ec:4d:97:9b:fb:8f:44:00:a7:a8:4d:44:93:63: f9:c8:7d:06:89:c9:ac:80:08:d7:59:df:1a:a3:15: cb:00:1d:57:22:f5:e7:bc:63:ad:bd:c5:c8:2b:81: c1:45:7b:68:a2:61:ac:e7:1e:35:27:89:75:12:7e: ba:c8:33:62:0e:f5:9e:f3:bf:c2:00:b3:3e:38:5d: 2a:12:16:52:1f:bd:2a:98:c3:1e:3a:74:dd:fd:0f: 05:e1:45:8c:3d:e0:c9:1a:54:b8:df:15:9f:c1:b7: f8:43:ed:4f:fa:cb:55:f3:4f:30:63:81:28:3a:f4: 89:2a:2b:53:b7:09:45:03:c4:2f:f8:45:78:a0:ac: b3:45:4b:71:ba:43:7c:02:6d:ac:8b:dc:e4:7d:12: 26:14:fb:1d:7b:d7:c9:ce:e0:5d:19:a1:b7:09:99: 05:93:68:af:66:6e:af:7a:b5:f9:62:85:89:be:20: 0a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B7:4D:D7:B1:19:97:34:79:4F:EB:4D:38:1B:15:00:7D:07:D2:2F X509v3 Authority Key Identifier: keyid:72:5E:23:97:72:42:7E:C7:CC:CA:2C:39:5A:80:83:69:45:A0:1B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/725E239772427EC7CCCA2C395A80836945A01BD5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/0/725E239772427EC7CCCA2C395A80836945A01BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:5d:b0:92:4f:3a:66:6a:52:7f:a5:b2:ce:66:4c:fb:c1:bd: 18:40:e6:cc:79:7d:ee:dd:b4:d1:b2:e7:9d:47:f0:e9:bb:0b: cb:71:99:c4:2b:2e:d2:0b:3c:e7:a1:3e:05:a8:6c:69:db:ad: ef:83:4d:3e:5a:8b:ca:5c:62:f9:57:d3:3e:31:80:84:b1:b4: 63:87:8b:08:bd:d5:62:33:55:3f:d3:a4:b4:40:97:76:37:a5: a6:bd:ad:02:b4:58:46:f2:f1:83:88:c3:9d:fc:00:03:59:73: b9:a7:34:8c:b6:48:38:dd:99:26:c0:70:d3:19:5e:a5:fb:d3: 63:c8:b3:41:64:9a:23:bc:f1:dd:db:dd:47:97:70:bc:db:66: 05:86:7e:35:42:af:75:c2:3f:a2:02:90:dc:00:b1:99:2b:cd: 37:68:73:9a:f7:ff:93:a3:e6:28:bf:38:33:77:6e:e1:32:db: 23:b5:ab:5b:67:b9:d5:1e:34:0d:aa:5a:54:ab:13:5d:da:2d: 93:2c:7b:55:ad:04:07:78:8d:d4:3b:0a:35:22:4d:11:7f:f7: 32:f7:c9:0f:62:19:00:1f:87:dc:fa:76:1a:9e:6d:b9:8c:a1: c4:c9:fa:14:64:e7:61:24:4f:09:bb:5b:80:ec:27:fe:53:f9: b3:07:58:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAY2vv/MAsu2zLSXOFpR7+7JTlugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0 NUEwMUJENTAeFw0yNjAzMDQxMjA4MjBaFw0yNjAzMDUxNTQ4MjBaMDMxMTAvBgNV BAMTKDNGQjc0REQ3QjExOTk3MzQ3OTRGRUI0RDM4MUIxNTAwN0QwN0QyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqq5zRSnka7o4dFEAukEi3nT39 caANDQklSADEsMcujMu5U7MlKAOeB7b4Drk1knvuF6Lo5ErHPIXM0CBLprLKAlYa oLjP0EuMa2nsTZeb+49EAKeoTUSTY/nIfQaJyayACNdZ3xqjFcsAHVci9ee8Y629 xcgrgcFFe2iiYaznHjUniXUSfrrIM2IO9Z7zv8IAsz44XSoSFlIfvSqYwx46dN39 DwXhRYw94MkaVLjfFZ/Bt/hD7U/6y1XzTzBjgSg69IkqK1O3CUUDxC/4RXigrLNF S3G6Q3wCbayL3OR9EiYU+x1718nO4F0ZobcJmQWTaK9mbq96tflihYm+IAoRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUP7dN17EZlzR5T+tNOBsVAH0H0i8wHwYDVR0j BBgwFoAUcl4jl3JCfsfMyiw5WoCDaUWgG9UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTYxNjIwMzA5OTQ3MTg3NC8wLzcyNUUyMzk3NzI0MjdFQzdDQ0NBMkMzOTVBODA4 MzY5NDVBMDFCRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI1RTIzOTc3MjQyN0VDN0NDQ0EyQzM5NUE4MDgzNjk0NUEwMUJENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzk2MTYyMDMwOTk0NzE4NzQvMC83MjVFMjM5NzcyNDI3 RUM3Q0NDQTJDMzk1QTgwODM2OTQ1QTAxQkQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARV2wkk86ZmpS f6WyzmZM+8G9GEDmzHl97t200bLnnUfw6bsLy3GZxCsu0gs856E+Bahsadut74NN PlqLylxi+VfTPjGAhLG0Y4eLCL3VYjNVP9OktECXdjelpr2tArRYRvLxg4jDnfwA A1lzuac0jLZION2ZJsBw0xlepfvTY8izQWSaI7zx3dvdR5dwvNtmBYZ+NUKvdcI/ ogKQ3ACxmSvNN2hzmvf/k6PmKL84M3du4TLbI7WrW2e51R40DapaVKsTXdotkyx7 Va0EB3iN1DsKNSJNEX/3MvfJD2IZAB+H3Pp2Gp5tuYyhxMn6FGTnYSRPCbtbgOwn /lP5swdYZQ== -----END CERTIFICATE-----Generated at Wed Mar 4 19:15:54 2026 by rpki-client