$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft File: -2U7JndQQWh9Ni1M73aOWPmewHU.mft (raw, json) Hash identifier: cnAuEixViyTIsE3tZCdsIe3wk4H2DMcqLRYBc7acJkg= Subject key identifier: 7A:18:78:49:D4:D3:D8:FB:1F:0A:30:2A:8D:92:86:83:25:7F:BD:48 Authority key identifier: FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 Certificate issuer: /CN=FB653B26775041687D362D4CEF768E58F99EC075 Certificate serial: 0F61 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft Manifest number: 0F44 Signing time: Thu 19 Feb 2026 23:58:46 +0000 Manifest this update: Thu 19 Feb 2026 23:58:46 +0000 Manifest next update: Fri 20 Feb 2026 05:58:46 +0000 Files and hashes: 1: -2U7JndQQWh9Ni1M73aOWPmewHU.crl (hash: buFMdHAyn3GyraTR2gJswyyl8o0YORWaf36fXlB8AAc=) 2: 3yimESiLtQka2lMiwqoyFKOTxMk.roa (hash: b5MumePz6dpZV/wDo4ougHaQ9UB/PgwFbcHPXE73tqs=) 3: E5rrpTcp4QpOr2uPHGEhn1Hlmbs.roa (hash: Y+H659Wn505VmvMUt+ex0RXKT191zw2X4BeCi4C38jo=) 4: Hej6-QkA0-Bc3AMZshH55XxLv5g.roa (hash: toY3udwdmFT7/lG+ovmT8LUgSdJFIVPtqGAure8mJls=) 5: J74ldNmvqRxQIMTZx3mbHDpgnIU.roa (hash: z9qRtGRNFpYYP5bZ63rGud5OxSDPD32UJ7z2JXOgqb4=) 6: Rt0v6zl0kzLCcol4ZR8v0LMCkno.roa (hash: PbkXFoHR+aS5YRRjAvu1t4Iy2C5pWM5kvwPlR8tBHUA=) 7: ZRUMq2XKB7l7ycDZxJnpbGaBp5U.roa (hash: f6CucrNgeu6+CB+Eesntki3GVQ2c4rgaIWV7h+kv8Uo=) 8: ZVKE3Uxg3bK7Gf6UpasZe7Fr2Sc.roa (hash: +dWkvqATq27PEleFxlDiO5RRLTFoyzZSDj6fv+cli/Q=) 9: avvWMYng5fTdfEgsiaIZn_e_yqk.roa (hash: FB+MJJkXBdkh4FY3vIAbyKd8mKFnr6wwpQuKP6RZHpg=) 10: oLL6KeWw16knhlj2YO0Nxb-9ygY.roa (hash: cAaBcqqgpqfxa+HfGQPjp+t0dxXxkD03jamgoC/gJ3g=) 11: slSQvZ_vT-7MFK6AEIdarZvldGQ.roa (hash: xyOMLIVs2Ycxh9N6HTJ12oK0Awee+5TbAbrH/ATVLko=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3937 (0xf61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB653B26775041687D362D4CEF768E58F99EC075 Validity Not Before: Feb 19 23:58:46 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=7A187849D4D3D8FB1F0A302A8D928683257FBD48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:90:5e:2e:ac:88:57:c7:1a:14:18:a5:65: 61:27:d4:ed:3e:c1:87:f4:b6:02:90:8a:c9:ce:e9: f8:dd:c2:8b:ae:b7:fd:1d:af:fe:d2:53:e9:0a:b7: 30:e5:df:e4:db:dd:97:80:5a:6e:68:d9:b6:57:75: d9:d3:04:45:3f:9e:81:31:1b:1b:15:70:a4:f0:01: 30:ee:62:02:d4:c6:51:9f:37:dd:22:65:33:43:4a: 36:14:7b:c9:4d:2f:04:da:5c:b7:ab:5e:66:e6:c5: 05:38:79:a0:3f:0f:ee:a5:86:34:a5:d1:65:57:f5: 76:e7:1a:6e:d5:a0:22:bc:5b:30:9d:f8:8a:44:78: 69:e5:61:b5:20:10:b0:e5:34:bf:54:12:7f:7c:ef: f8:53:50:96:d3:94:83:7f:28:02:5d:e9:a5:91:55: 3a:28:b0:79:7e:6a:2f:d6:c7:38:79:f5:c6:c3:fb: 86:17:d1:ad:73:a6:b9:e0:d4:9e:71:a0:12:2b:81: 95:0f:8b:14:f1:c4:b6:33:af:b1:a2:bc:b0:4f:d4: eb:0f:46:74:6b:78:7f:c3:22:44:6e:0e:a2:2a:d8: 77:6c:77:71:97:ab:22:43:1d:9f:c3:72:f4:95:30: e8:28:00:04:e5:1a:f9:80:97:f5:77:25:e1:9d:ac: 89:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:18:78:49:D4:D3:D8:FB:1F:0A:30:2A:8D:92:86:83:25:7F:BD:48 X509v3 Authority Key Identifier: keyid:FB:65:3B:26:77:50:41:68:7D:36:2D:4C:EF:76:8E:58:F9:9E:C0:75 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/-2U7JndQQWh9Ni1M73aOWPmewHU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2537/-2U7JndQQWh9Ni1M73aOWPmewHU.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:50:a7:8f:5a:79:86:0f:3b:45:fb:cf:cd:08:f3:44:7a:5a: 97:c6:3e:3b:27:c6:ee:61:a5:d0:cd:8c:98:55:34:25:02:2c: c6:1a:be:4e:00:7d:c1:de:f0:e5:dd:e3:b7:26:b6:cc:09:ee: 7d:ca:69:1a:25:4e:3d:2e:f8:3f:d4:cf:f7:2d:a5:0a:a7:eb: 61:19:7a:8d:66:4d:86:d4:f2:9a:27:c8:f0:8f:71:cd:e3:90: fe:7d:d3:ec:03:e7:05:0a:83:8e:36:9a:91:af:b9:2c:92:3f: 02:72:7d:70:dd:9e:63:fe:07:9e:b1:69:36:07:01:ae:19:7d: 2d:00:24:80:99:9d:aa:af:cf:c9:78:02:cc:e7:b5:a6:ee:ab: dd:bd:ff:f8:7e:5b:b4:7f:5d:85:ea:bf:96:02:25:a8:4b:41: f6:9e:7e:ee:eb:af:8a:57:3e:7c:86:73:49:09:c4:df:3d:3a: 06:d2:f4:77:98:5f:b4:a2:c8:f7:7b:11:7e:8e:db:db:50:76: 0b:7e:b1:88:af:c7:a0:09:05:cc:ff:95:c9:7a:bb:1d:52:a5: d3:24:b3:4c:81:0c:bf:48:92:ed:21:18:5e:6c:ac:ed:6f:03: 78:b4:25:11:25:f8:50:b8:bb:7f:7c:6e:d1:d9:55:e8:2d:9e: 02:71:38:7d -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICD2EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkI2 NTNCMjY3NzUwNDE2ODdEMzYyRDRDRUY3NjhFNThGOTlFQzA3NTAeFw0yNjAyMTky MzU4NDZaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKDdBMTg3ODQ5RDREM0Q4 RkIxRjBBMzAyQThEOTI4NjgzMjU3RkJENDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTI5BeLqyIV8caFBilZWEn1O0+wYf0tgKQisnO6fjdwouut/0d r/7SU+kKtzDl3+Tb3ZeAWm5o2bZXddnTBEU/noExGxsVcKTwATDuYgLUxlGfN90i ZTNDSjYUe8lNLwTaXLerXmbmxQU4eaA/D+6lhjSl0WVX9XbnGm7VoCK8WzCd+IpE eGnlYbUgELDlNL9UEn987/hTUJbTlIN/KAJd6aWRVToosHl+ai/Wxzh59cbD+4YX 0a1zprng1J5xoBIrgZUPixTxxLYzr7GivLBP1OsPRnRreH/DIkRuDqIq2Hdsd3GX qyJDHZ/DcvSVMOgoAATlGvmAl/V3JeGdrIlnAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUehh4SdTT2PsfCjAqjZKGgyV/vUgwHwYDVR0jBBgwFoAU+2U7JndQQWh9Ni1M 73aOWPmewHUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjUz Ny8tMlU3Sm5kUVFXaDlOaTFNNzNhT1dQbWV3SFUuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwLy0yVTdKbmRRUVdoOU5pMU03M2FPV1BtZXdIVS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI1MzcvLTJVN0puZFFRV2g5 TmkxTTczYU9XUG1ld0hVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIVQp49aeYYPO0X7z80I80R6WpfGPjsnxu5hpdDNjJhVNCUCLMYavk4AfcHe 8OXd47cmtswJ7n3KaRolTj0u+D/Uz/ctpQqn62EZeo1mTYbU8ponyPCPcc3jkP59 0+wD5wUKg442mpGvuSySPwJyfXDdnmP+B56xaTYHAa4ZfS0AJICZnaqvz8l4Aszn tabuq929//h+W7R/XYXqv5YCJahLQfaefu7rr4pXPnyGc0kJxN89OgbS9HeYX7Si yPd7EX6O29tQdgt+sYivx6AJBcz/lcl6ux1SpdMks0yBDL9Iku0hGF5srO1vA3i0 JREl+FC4u398btHZVegtngJxOH0= -----END CERTIFICATE-----Generated at Fri Feb 20 05:00:43 2026 by rpki-client