$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft File: tsENcoo4JDG6wfFJMND8HgdZU6Y.mft (raw, json) Hash identifier: CPt9mbZkmadPsImaquRnvR4VDncp7WR2NZmbfNNiRKI= Subject key identifier: BB:A6:12:91:64:41:8A:B3:43:C2:33:1C:CD:2D:9C:D8:22:2A:56:56 Authority key identifier: B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 Certificate issuer: /CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Certificate serial: 02F1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft Manifest number: 02EC Signing time: Mon 23 Feb 2026 04:29:37 +0000 Manifest this update: Mon 23 Feb 2026 04:29:37 +0000 Manifest next update: Mon 23 Feb 2026 10:29:37 +0000 Files and hashes: 1: 4nqQEbmG5-tk2PmgeC70UF2Ux80.roa (hash: grvjlGV4OM3wanOWcRcLJfzdxkeMU6EBUZZZ+Tz/55Y=) 2: nQce1nvUS3_KBtyqZS82clt4Qnw.roa (hash: jlOrCmAoz12G3LIGTw1U2/pi7zidJN5e0Tp74mbj6Aw=) 3: tsENcoo4JDG6wfFJMND8HgdZU6Y.crl (hash: OZaGLBKni83JEZTOfQ4fEtWWltGmDwHVA44V497aGSo=) 4: xZ8xElgv1bgpiJw-nuR7s1iOgBI.roa (hash: K+sM/+rrSQS0X4vGh3Ql2cxPFoYrnh28YFqumpJmHEc=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 10:29:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6C10D728A382431BAC1F14930D0FC1E075953A6 Validity Not Before: Feb 23 04:29:37 2026 GMT Not After : Jan 9 08:23:18 2027 GMT Subject: CN=BBA6129164418AB343C2331CCD2D9CD8222A5656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:30:2d:a8:ac:f2:dc:74:58:28:b1:59:3a: 73:e2:3b:c4:29:cf:f1:f6:a2:13:4b:62:e7:e8:af: 8a:dc:d8:b8:f7:92:87:ba:52:76:46:82:19:8e:fe: 61:f7:14:cc:d4:c4:ad:85:99:0f:51:5a:5c:d3:49: 2e:86:62:8e:2d:a5:78:f6:e5:c0:d1:c9:8d:d3:8c: f1:91:f5:2b:f1:ac:b2:79:c1:5f:4f:a9:8d:2e:b4: 6f:a4:cf:32:ec:eb:db:40:7f:6d:f8:06:b3:31:ec: 92:27:80:ff:2f:c4:87:fc:a7:12:f5:32:23:a4:ec: bd:8f:56:8e:20:59:b0:76:47:14:33:65:2c:c0:e9: 6d:54:72:d9:a8:63:d5:ca:bd:d9:57:de:55:f3:e0: 3f:bd:4e:c8:86:e1:d7:07:59:84:2b:18:4d:b2:d3: fc:20:9b:64:ac:49:53:98:c7:37:fe:bf:f7:f9:76: 4d:af:b6:b2:fc:10:c1:e3:18:d0:7d:62:68:ca:d7: 6b:e4:e4:1b:35:85:de:98:cd:65:ce:45:05:9f:74: 9d:c4:65:70:4a:57:65:16:fc:f4:77:75:74:8a:fc: d2:19:1d:50:59:2e:59:2f:10:eb:b0:ca:c2:46:63: d0:fd:9f:6b:75:69:4b:21:eb:d8:50:ae:6e:97:de: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A6:12:91:64:41:8A:B3:43:C2:33:1C:CD:2D:9C:D8:22:2A:56:56 X509v3 Authority Key Identifier: keyid:B6:C1:0D:72:8A:38:24:31:BA:C1:F1:49:30:D0:FC:1E:07:59:53:A6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/tsENcoo4JDG6wfFJMND8HgdZU6Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3396/tsENcoo4JDG6wfFJMND8HgdZU6Y.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1b:b2:a5:38:77:51:3d:8f:a4:e7:9b:53:db:5f:77:ec:16: ad:e1:ec:2c:c9:06:6b:53:8a:be:64:a1:f6:ce:4f:b8:69:b7: 80:5b:98:45:65:60:b0:85:47:a7:b5:6c:47:a4:70:52:d4:2f: 84:aa:44:20:bd:ab:0c:96:67:6a:f0:1b:db:89:a3:df:e8:89: 14:c7:b2:4e:8f:21:6d:f5:39:68:5e:2f:e8:e3:9d:9e:69:ca: f3:47:68:7d:7d:d7:65:aa:ba:2f:0c:30:6a:ef:f7:5a:58:bf: 89:3d:44:57:6a:3e:2f:8f:ca:a9:0a:72:e5:45:9d:f5:a8:ff: 4c:40:68:2c:e7:eb:5c:22:8c:4a:99:f3:67:24:dd:0c:1f:90: ff:fd:fa:47:28:08:aa:60:22:cb:59:78:0f:b1:6d:9c:fc:c5: 3a:9b:af:04:f6:46:00:e1:5f:15:26:f1:cb:b3:59:52:87:8c: c8:52:20:f2:af:15:bc:50:a1:4f:c7:da:5b:e6:c8:6e:32:a2: f5:a2:20:29:60:94:6e:6e:b7:37:d0:e4:fe:2d:ff:1d:28:cd: 4f:aa:5e:d1:b3:7f:e0:71:06:39:c2:4d:a8:46:e0:b0:04:c4: cc:6e:a9:e9:7e:e9:8c:c9:cb:12:87:fa:d9:8c:40:e1:ba:ab: 9d:c9:6a:d8 -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjZD MTBENzI4QTM4MjQzMUJBQzFGMTQ5MzBEMEZDMUUwNzU5NTNBNjAeFw0yNjAyMjMw NDI5MzdaFw0yNzAxMDkwODIzMThaMDMxMTAvBgNVBAMTKEJCQTYxMjkxNjQ0MThB QjM0M0MyMzMxQ0NEMkQ5Q0Q4MjIyQTU2NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiMTAtqKzy3HRYKLFZOnPiO8Qpz/H2ohNLYufor4rc2Lj3koe6 UnZGghmO/mH3FMzUxK2FmQ9RWlzTSS6GYo4tpXj25cDRyY3TjPGR9SvxrLJ5wV9P qY0utG+kzzLs69tAf234BrMx7JIngP8vxIf8pxL1MiOk7L2PVo4gWbB2RxQzZSzA 6W1UctmoY9XKvdlX3lXz4D+9TsiG4dcHWYQrGE2y0/wgm2SsSVOYxzf+v/f5dk2v trL8EMHjGNB9YmjK12vk5Bs1hd6YzWXORQWfdJ3EZXBKV2UW/PR3dXSK/NIZHVBZ LlkvEOuwysJGY9D9n2t1aUsh69hQrm6X3tnzAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUu6YSkWRBirNDwjMczS2c2CIqVlYwHwYDVR0jBBgwFoAUtsENcoo4JDG6wfFJ MND8HgdZU6YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzM5 Ni90c0VOY29vNEpERzZ3ZkZKTU5EOEhnZFpVNlkuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL3RzRU5jb280SkRHNndmRkpNTkQ4SGdkWlU2WS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMzOTYvdHNFTmNvbzRKREc2 d2ZGSk1ORDhIZ2RaVTZZLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI0bsqU4d1E9j6Tnm1PbX3fsFq3h7CzJBmtTir5kofbOT7hpt4BbmEVlYLCF R6e1bEekcFLUL4SqRCC9qwyWZ2rwG9uJo9/oiRTHsk6PIW31OWheL+jjnZ5pyvNH aH1912Wqui8MMGrv91pYv4k9RFdqPi+PyqkKcuVFnfWo/0xAaCzn61wijEqZ82ck 3QwfkP/9+kcoCKpgIstZeA+xbZz8xTqbrwT2RgDhXxUm8cuzWVKHjMhSIPKvFbxQ oU/H2lvmyG4yovWiIClglG5utzfQ5P4t/x0ozU+qXtGzf+BxBjnCTahG4LAExMxu qel+6YzJyxKH+tmMQOG6q53Jatg= -----END CERTIFICATE-----Generated at Mon Feb 23 07:58:08 2026 by rpki-client