$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft File: 2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft (raw, json) Hash identifier: mlYyEvuxoW92cDQwlbIh72Htyo8HXIT/TJDJK/xeAJI= Subject key identifier: DB:95:FB:87:37:A8:81:A6:96:B5:CD:C7:2C:C2:88:90:8B:E4:1D:50 Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 084B Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft Manifest number: 0834 Signing time: Mon 23 Feb 2026 05:58:50 +0000 Manifest this update: Mon 23 Feb 2026 05:58:50 +0000 Manifest next update: Mon 23 Feb 2026 11:58:50 +0000 Files and hashes: 1: 0ER4jMdxaZc8TtHdyMtb0Tt8wH4.roa (hash: OyqTw7UdQe7wf3n+Uzbs30m7FnEu/Oyfl7FMQebch84=) 2: 1QD9kVjRPFCJatRIwWROIBy8kVA.roa (hash: 8yUL/WPq3yLWhpQ6U2I4iSZV3rfZD+tNqromWAbFU2A=) 3: 2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl (hash: Y8Y4c2D6Yt5jL5iyTJCvPrmJ70A2GPyTc4TlL1bOCkE=) 4: 4h8nPy8hJOHOAa-6OIJFbGy0Y3s.roa (hash: DB7h2YUI+Oio0qI5Nqa3BL07cl+qYyI5JCXOvTAAIKA=) 5: C6K3jC5XM9ASI6FKufijhi7adTg.roa (hash: u3XsDQJkYk2HyM52oU60Q0OQDYgDvEqy89GCu9/wm1o=) 6: DJTGjsyfob-daem2cuBLKXMPXu4.roa (hash: M4E1GeUXPpycDhV5NP95GP5xj7vcM1t0QAwwd9IHOtA=) 7: F9-agplvYbReLwEVvLXqsxs3-aE.roa (hash: wWH2qISgzTmkfxLxaoXYzF2y6aKSWvCtcm+iTvXKCgI=) 8: FsNjJzs1Yu8J3RzTy5_mOby8TFw.roa (hash: 6r4baApbFlPunzlUjPwIrxGY8Ee79UnFpHBGgAOA+To=) 9: HRTwxgISQAmHmdsgldlFy9VsDfE.roa (hash: g6WGfqvUj1zzde8Rhwh8PepCNVDdY2F4smGEucl/PgY=) 10: HVWLPpvTveXfFw_tmXwJ2SYZ4Y4.roa (hash: qdU4Yq4NVuIp5c9Pca8DjLQ7oTJyTbwH9SDB0ouV5VU=) 11: I2TJPU72SpSJBAm_wQfPP-piEeg.roa (hash: 6pXkzBsFD6PhVp7wOtmgLqSyacRrKRLWCWMnHXBLGW8=) 12: UgW99oa8FvERx8BX7lrm-6FWEOE.roa (hash: w1HTgwfnTWC81wVgKs+vXq8ga2BzDZ9rHWI5XJm9mvk=) 13: Y8kgU48kiNGqzq2nK5O5WiksDSk.roa (hash: 07wZbAajdfbJQDwAmVTQXXjUMgif2AwVmPfdEekWRyA=) 14: aV7Ri-lUYzB8dhFblTd71eGtEEg.roa (hash: CFuKIxDGpbjtt0HUmXbA/K6k/ZpYa3Z3aMgKu5AtAPY=) 15: ckh1WTl4f1_gVSLhSUBk8RsfFi4.roa (hash: 5queQWpVBXn7exbHvpky1MLt+h9a11+sZq2dFGFxGkw=) 16: nbePnKzqWYXckdwHzmenc50MYCw.roa (hash: C7r8zvcAPxto9wXb2DRqahJYPDZzJ5zBLJ1sGPIzvcA=) 17: qW6Bv7uoL_195H1MB_jChMWMSvo.roa (hash: AnbkRBuOTQcpm4hcUi0EemyrsDvNd2UATJd1hS1A14Q=) 18: tKqDxDPGtgTgElv65DlcSr-X_T4.roa (hash: cHCd9pprNMNd8KhcFuXBWl+YG4k0Bv7a9xzKCVTOqlg=) 19: wAnT0H3Exwuh0puPOa84PkUo7jw.roa (hash: 9bqRSUm0pia4VbU9iB77Hvh6P5hej4AYTWlO3ngwdEw=) 20: zCAu8bQkxhNq1UyLI-UHPkMUgi0.roa (hash: rkNIbIaIMcy8iXZo7RC1Aj8Owgsiv0QiyLgPgoyEC/k=) 21: zDsF_ocr-Vhn7g0PuK3Nfa0PpnQ.roa (hash: ACjLAHtSQnr5lM2TkMPAk5riK/6jJk80g1efX+v02Dw=) 22: zr0OFwbZ2F5cmZc-6VFRH2avvFg.roa (hash: PVklNp9GSoeIuS+Ad4ZbIw0p9RPoglbHk2bAgL58PbU=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 11:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Feb 23 05:58:50 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=DB95FB8737A881A696B5CDC72CC288908BE41D50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:7d:c0:59:21:5f:82:8b:b4:e8:c7:3a:d8: ad:f4:27:ab:b2:5e:43:7d:45:18:3d:70:51:e1:fc: 6c:0e:7d:48:91:30:42:39:d5:ce:a6:ff:f9:8f:60: b1:49:8d:39:1e:f1:4e:54:f5:2c:ee:3c:bb:8d:11: 17:af:8f:ce:09:4c:47:59:d5:a6:35:73:48:c7:5e: 33:39:dc:c0:64:58:a1:eb:5f:d5:67:6a:58:9e:37: 34:57:4d:d8:ec:a3:a4:51:85:f4:ba:18:f6:0d:98: bf:0e:d3:2a:22:ed:ce:5d:ee:71:18:80:ae:9d:a2: 9c:dc:58:bc:a9:2f:83:e5:b6:b7:3e:aa:ad:db:85: 2a:c2:f6:a6:b7:98:11:91:e4:6e:9b:ea:02:52:10: e7:f8:4a:cd:91:9b:47:0f:3c:aa:88:25:be:d2:12: 90:3f:ce:f8:a1:cd:d4:0c:a0:54:0b:71:59:1b:88: b3:91:84:2c:2a:67:68:5d:7b:4f:dd:5f:05:bc:74: 42:b9:73:00:90:c5:44:0e:c9:66:4b:90:75:50:6c: d2:29:c5:48:85:ff:bf:87:81:fb:6f:ac:61:cc:e1: b4:5e:a4:1d:a4:d6:57:55:9b:68:0b:67:8a:05:e6: ac:19:ec:7d:9b:51:c9:52:1d:aa:e3:54:71:23:61: 49:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:95:FB:87:37:A8:81:A6:96:B5:CD:C7:2C:C2:88:90:8B:E4:1D:50 X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:64:a7:48:f8:33:43:7b:29:ca:5d:da:90:3e:c3:cb:f5:f2: 03:19:f5:ab:c4:7f:67:a3:f5:86:ac:25:4d:d1:0f:6b:20:91: 1b:2d:b0:40:dc:95:0d:aa:7f:ee:ca:c9:d8:50:18:4c:c5:d4: 30:66:3b:f0:ac:6d:7f:8a:78:02:04:64:ff:b0:7e:a2:9a:b4: 27:b7:8a:9b:66:9a:e3:5f:2a:b1:ca:07:5c:5a:5f:28:dd:a4: a2:ba:f5:01:e7:4b:d1:12:3c:0d:09:39:9f:61:c0:a3:a1:29: db:71:80:14:fa:e0:5c:d4:20:b1:9b:7b:aa:2b:50:ed:3a:bc: 5e:bd:b8:91:3b:d4:d0:1b:da:f7:ef:fc:7f:fd:9e:6e:ec:9a: d3:78:8b:89:63:2d:ee:d1:48:97:59:3a:4a:ed:20:36:6f:ee: 98:54:6a:57:42:7d:1c:da:32:79:0f:c8:17:05:04:87:3d:09: f5:1e:f1:95:cf:0a:83:ce:d9:89:91:3c:57:02:48:ee:e5:8c: 7a:e2:42:bf:1b:01:83:36:62:0a:2e:26:33:0b:a8:97:46:a5: ba:f0:76:e3:21:0a:22:d2:1a:0b:fd:dc:99:99:8b:48:dd:ce: 9d:ad:39:b3:c6:b1:05:0b:49:a9:40:a4:2d:bb:76:6f:d2:c5: a0:2b:e7:43 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgICCEswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNjAyMjMw NTU4NTBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKERCOTVGQjg3MzdBODgx QTY5NkI1Q0RDNzJDQzI4ODkwOEJFNDFENTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH6X3AWSFfgou06Mc62K30J6uyXkN9RRg9cFHh/GwOfUiRMEI5 1c6m//mPYLFJjTke8U5U9SzuPLuNERevj84JTEdZ1aY1c0jHXjM53MBkWKHrX9Vn alieNzRXTdjso6RRhfS6GPYNmL8O0yoi7c5d7nEYgK6dopzcWLypL4Pltrc+qq3b hSrC9qa3mBGR5G6b6gJSEOf4Ss2Rm0cPPKqIJb7SEpA/zvihzdQMoFQLcVkbiLOR hCwqZ2hde0/dXwW8dEK5cwCQxUQOyWZLkHVQbNIpxUiF/7+HgftvrGHM4bRepB2k 1ldVm2gLZ4oF5qwZ7H2bUclSHarjVHEjYUm7AgMBAAGjggIIMIICBDAdBgNVHQ4E FgQU25X7hzeogaaWtc3HLMKIkIvkHVAwHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi8yaDJyN1BHVVhmOVR0aURn dHNRUTZSNUVjYkUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA VmSnSPgzQ3spyl3akD7Dy/XyAxn1q8R/Z6P1hqwlTdEPayCRGy2wQNyVDap/7srJ 2FAYTMXUMGY78Kxtf4p4AgRk/7B+opq0J7eKm2aa418qscoHXFpfKN2korr1AedL 0RI8DQk5n2HAo6Ep23GAFPrgXNQgsZt7qitQ7Tq8Xr24kTvU0Bva9+/8f/2ebuya 03iLiWMt7tFIl1k6Su0gNm/umFRqV0J9HNoyeQ/IFwUEhz0J9R7xlc8Kg87ZiZE8 VwJI7uWMeuJCvxsBgzZiCi4mMwuol0aluvB24yEKItIaC/3cmZmLSN3Ona05s8ax BQtJqUCkLbt2b9LFoCvnQw== -----END CERTIFICATE-----Generated at Mon Feb 23 07:35:15 2026 by rpki-client