$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft File: ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft (raw, json) Hash identifier: CwKUr9oF4N9U4eNHJEQhSaeq/cHp0YBe+glKoyiLvLY= Subject key identifier: C2:62:07:12:EA:68:D0:4F:2F:40:4C:DB:B8:7C:4F:92:01:5E:19:7F Authority key identifier: 64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47 Certificate issuer: /CN=64DC20D9612C5B77499A6D223A652B2E38B11647 Certificate serial: 1F3E Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft Manifest number: 1F21 Signing time: Thu 19 Feb 2026 23:57:48 +0000 Manifest this update: Thu 19 Feb 2026 23:57:48 +0000 Manifest next update: Fri 20 Feb 2026 05:57:48 +0000 Files and hashes: 1: 0E6YaX_ZkTmxIXxwXk9sk4XYcyc.roa (hash: 0pwk7GmuIrzOhoExjRaHCjzlQqHhy6sVyXdbKEPnOXU=) 2: 0dJuQ0720iCZ7J7kK0Nn7RYa_aQ.roa (hash: 38fMSWbprrZRki9ZcLsACTU/WQBQnbHHgKHheoQ0WAA=) 3: EL5ErkN0P007DJzgCx9G2DYusKE.roa (hash: ReDL0dSdv5KJmhvt7BUcP3v3HEljsWajNtiin6ipjcQ=) 4: L3xVvqbp8qrdaKJa1Ao7L3kD-X8.roa (hash: wfD3oXUcbB1mCNSSuVuArK+5sRdLnl367eN5RJXt0ag=) 5: Li1GXlVR7-1WtyizCkq10XCmBxk.roa (hash: hChzpDRcCbmmCClO6Yuwe2IizHjT2Rh8SWFUC+QrzEc=) 6: ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl (hash: smVUi9iB4e9W84TRKUJqKEVTXiROj7k6VL7t7Fo7cZg=) 7: iyCtgLATBr-8gEhFHD1b0vfv7t4.roa (hash: YaX4PtckpLCUwZm5/XbE9HZsB8cS4SKoWtvEWpN5Z7w=) 8: vLg3zOHflDe4QUHgAxPEsIx-nDg.roa (hash: uZEnQ6vF9Q8uyg0uWCWLlEtTXosUMr5/EYWvCjXmQFA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Feb 2026 05:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7998 (0x1f3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64DC20D9612C5B77499A6D223A652B2E38B11647 Validity Not Before: Feb 19 23:57:48 2026 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=C2620712EA68D04F2F404CDBB87C4F92015E197F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:a8:f5:db:b9:d6:e7:7c:3c:6f:c8:56:6f: c7:98:59:47:31:de:84:11:2c:12:57:78:1b:e2:dd: 59:0e:2f:24:2b:93:84:f8:ff:d6:6f:b1:fb:3d:e3: a6:f1:73:de:68:f6:c0:0b:0c:7c:2f:c4:25:03:e4: 35:ae:fb:26:d9:14:aa:7d:4c:ae:63:8f:91:67:06: b4:8d:84:34:3c:fc:f6:18:38:b6:51:03:94:34:af: e5:d7:20:66:05:38:17:b8:c7:fa:c8:3c:7e:cc:e6: 97:0b:14:f4:29:3c:60:a2:17:4e:f7:67:2f:b9:4b: 13:5b:4b:b5:be:51:dc:50:77:7f:b9:7e:2a:26:ff: 93:84:79:2b:0b:b0:38:95:9d:4a:5b:e0:66:0a:83: ad:fa:e8:36:dd:ef:80:9f:f7:33:db:5d:13:10:f6: d6:dc:63:a2:9b:3f:42:c2:c6:89:79:7d:7e:a4:26: b8:41:2a:22:13:81:60:07:aa:a6:f0:8d:ee:17:40: 91:16:2c:d6:9b:0b:ab:60:6f:af:81:52:45:f8:39: da:e7:c6:1a:24:44:0c:18:ce:a0:e7:1d:0e:db:f6: 7c:45:91:40:3d:b0:55:81:43:9b:a6:ff:b2:07:0e: 7e:16:b4:56:f5:c8:63:46:a9:20:1d:4d:e7:fc:09: 99:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:62:07:12:EA:68:D0:4F:2F:40:4C:DB:B8:7C:4F:92:01:5E:19:7F X509v3 Authority Key Identifier: keyid:64:DC:20:D9:61:2C:5B:77:49:9A:6D:22:3A:65:2B:2E:38:B1:16:47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZNwg2WEsW3dJmm0iOmUrLjixFkc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/656/ZNwg2WEsW3dJmm0iOmUrLjixFkc.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:b9:a0:e8:5d:44:28:d5:8c:8f:c1:f9:07:d3:74:45:7f:f6: 38:01:2b:c2:73:27:ea:16:15:ab:9f:5e:e9:d1:a5:98:28:d1: 05:83:23:99:af:15:1d:7d:0d:ed:a6:e1:41:1d:05:8c:c2:b0: 53:a0:a8:09:bc:91:19:a5:0b:08:21:44:b3:10:12:d4:35:0b: 35:6e:0c:be:db:dc:72:49:78:fe:5e:18:3c:ad:a3:07:e1:23: dd:6b:ff:21:ed:b7:01:cc:26:07:9e:cb:86:31:c3:30:65:13: cb:cc:53:f4:9f:56:07:1b:b4:8d:61:e8:64:25:ab:27:2c:d3: ef:5a:b7:8a:54:7f:35:f0:4e:0c:7f:7f:4b:73:f2:8a:55:08: 75:63:27:96:18:72:64:49:1a:21:e1:86:f0:dd:93:e9:41:d4: 3b:61:00:d9:ae:da:8c:91:45:5f:e4:63:36:a4:b6:d4:9a:ef: 1f:13:40:c6:8b:3e:2a:f1:eb:af:b2:a0:aa:fc:73:4a:c6:cd: 26:1d:83:45:d5:50:17:bd:95:ed:63:bc:ce:4a:66:8c:b3:9b: ef:58:71:ef:ea:7c:20:d9:7a:31:fc:8a:c6:e2:fd:40:b3:d5: 62:45:8b:c8:4c:48:de:64:c5:11:fd:b6:0f:fb:12:dc:44:64: ac:2d:77:d6 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgICHz4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjRE QzIwRDk2MTJDNUI3NzQ5OUE2RDIyM0E2NTJCMkUzOEIxMTY0NzAeFw0yNjAyMTky MzU3NDhaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKEMyNjIwNzEyRUE2OEQw NEYyRjQwNENEQkI4N0M0RjkyMDE1RTE5N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGYKj127nW53w8b8hWb8eYWUcx3oQRLBJXeBvi3VkOLyQrk4T4 /9Zvsfs946bxc95o9sALDHwvxCUD5DWu+ybZFKp9TK5jj5FnBrSNhDQ8/PYYOLZR A5Q0r+XXIGYFOBe4x/rIPH7M5pcLFPQpPGCiF073Zy+5SxNbS7W+UdxQd3+5fiom /5OEeSsLsDiVnUpb4GYKg6366Dbd74Cf9zPbXRMQ9tbcY6KbP0LCxol5fX6kJrhB KiITgWAHqqbwje4XQJEWLNabC6tgb6+BUkX4OdrnxhokRAwYzqDnHQ7b9nxFkUA9 sFWBQ5um/7IHDn4WtFb1yGNGqSAdTef8CZkFAgMBAAGjggIKMIICBjAdBgNVHQ4E FgQUwmIHEupo0E8vQEzbuHxPkgFeGX8wHwYDVR0jBBgwFoAUZNwg2WEsW3dJmm0i OmUrLjixFkcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2 L1pOd2cyV0VzVzNkSm1tMGlPbVVyTGppeEZrYy5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvWk53ZzJXRXNXM2RKbW0waU9tVXJMaml4RmtjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNjU2L1pOd2cyV0VzVzNkSm1t MGlPbVVyTGppeEZrYy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBMuaDoXUQo1YyPwfkH03RFf/Y4ASvCcyfqFhWrn17p0aWYKNEFgyOZrxUdfQ3t puFBHQWMwrBToKgJvJEZpQsIIUSzEBLUNQs1bgy+29xySXj+Xhg8raMH4SPda/8h 7bcBzCYHnsuGMcMwZRPLzFP0n1YHG7SNYehkJasnLNPvWreKVH818E4Mf39Lc/KK VQh1YyeWGHJkSRoh4Ybw3ZPpQdQ7YQDZrtqMkUVf5GM2pLbUmu8fE0DGiz4q8euv sqCq/HNKxs0mHYNF1VAXvZXtY7zOSmaMs5vvWHHv6nwg2Xox/IrG4v1As9ViRYvI TEjeZMUR/bYP+xLcRGSsLXfW -----END CERTIFICATE-----Generated at Fri Feb 20 02:43:19 2026 by rpki-client