$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft File: C2DA49E3A7421A170AB2589567E7C29841F7D385.mft (raw, json) Hash identifier: dpS4QooNpLJrvycVrDIAa2DKbNFlgrPcrwzWmDoDOrs= Subject key identifier: 4F:F8:52:27:0C:A8:00:4E:B1:CE:AC:87:6B:52:E2:6E:C5:88:5D:EA Authority key identifier: C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 Certificate issuer: /CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Certificate serial: 5C170B85DE642959521E9D75A16984BA12EE5431 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft Manifest number: 8E Signing time: Tue 21 Jul 2026 15:18:58 +0000 Manifest this update: Tue 21 Jul 2026 15:13:58 +0000 Manifest next update: Wed 22 Jul 2026 17:30:58 +0000 Files and hashes: 1: 3136302e3235302e39312e302f32342d3234203d3e2030.roa (hash: I01ky8XkMCzc3U3eB94acbcUgoqzrThF0fyrFH1PSns=) 2: C2DA49E3A7421A170AB2589567E7C29841F7D385.crl (hash: sGwresFWKSLdhNTwyVo9A0f2073/BihqfjojUfwtibk=) 3: 3136302e3235302e39302e302f32342d3234203d3e2030.roa (hash: K1QDkUk1IphA/GflzuMhC8hun3fH4ROmohlTCdV9p9U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 17:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:17:0b:85:de:64:29:59:52:1e:9d:75:a1:69:84:ba:12:ee:54:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Validity Not Before: Jul 21 15:13:58 2026 GMT Not After : Jul 22 17:30:58 2026 GMT Subject: CN=4FF852270CA8004EB1CEAC876B52E26EC5885DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e3:7c:8b:58:93:dd:f7:f1:08:94:ac:33:3a: 0d:2a:8f:06:08:48:39:e4:9e:5a:7a:bf:d6:3b:3d: 0f:cc:d7:b3:98:7e:ad:9c:82:92:69:38:93:94:32: 0f:25:ec:c8:56:f9:05:75:78:c0:28:c8:e4:63:eb: ef:b1:15:b3:86:b6:98:8e:93:9b:6c:11:7d:ed:d9: c1:6f:38:18:83:e1:85:8f:82:54:f3:3b:06:1d:f8: 1a:a8:ad:b6:3e:ce:8a:4f:aa:98:0c:10:b9:b0:9b: 08:c7:79:ad:50:d8:58:7c:82:0f:95:14:52:6c:8f: c7:94:99:ce:52:29:63:19:eb:d8:dc:bb:ec:0e:4b: 08:84:41:9b:3c:e1:9c:59:53:dd:47:28:e8:68:d7: 9b:1e:a7:4c:29:f2:a9:49:c6:b0:26:d6:24:43:9d: 49:bf:ad:7a:07:f7:b3:1b:d4:9b:cd:88:b3:17:bf: 54:9d:b3:bc:b9:47:27:a9:20:20:04:11:05:57:06: 4e:cc:bb:72:a2:97:1b:a3:36:d5:e7:ce:63:08:06: c3:2c:c3:4e:00:ce:85:ba:8d:e1:ca:51:5b:ec:50: 23:d6:cd:ed:5a:fa:5a:62:50:54:9e:10:f0:44:32: f6:1e:6a:10:39:c2:42:b3:db:b8:0e:dc:d4:a6:55: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F8:52:27:0C:A8:00:4E:B1:CE:AC:87:6B:52:E2:6E:C5:88:5D:EA X509v3 Authority Key Identifier: keyid:C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e3:5a:40:4e:13:6c:52:07:23:75:07:38:54:2e:18:47:79: 2d:c9:83:db:d0:1a:23:6e:c9:24:7d:16:b7:f7:e9:af:45:31: 16:25:f3:46:ce:83:ae:bd:9c:91:94:a6:a3:03:78:8e:e1:0e: 33:7d:25:79:19:eb:09:5b:00:72:74:40:8c:7c:ac:63:d3:cb: 1a:09:64:09:79:bf:0a:1e:51:f9:93:e4:da:e9:55:41:b6:d3: 04:8d:ce:6c:1a:a2:c8:b5:40:92:e4:24:1e:99:84:db:b5:39: 25:c2:fd:f2:88:34:06:cd:e4:36:4e:85:b7:c0:c5:20:a6:ac: 32:16:38:f0:42:5d:f2:90:5f:83:45:c1:b6:86:17:b3:76:7d: 84:09:93:28:33:22:45:e1:ff:80:22:62:e7:a1:b1:3e:7a:89: 01:34:82:9e:39:d9:67:09:1f:1c:cd:20:ac:8e:32:59:ce:c3: b7:a7:c0:0b:5d:48:e1:f6:c9:12:f9:bd:d4:02:91:ce:2a:69: f4:a9:1b:4d:cc:71:48:6b:22:37:31:e2:b2:b5:10:db:41:6c: 1c:51:d0:60:52:51:8c:af:79:c9:cb:f9:63:cd:6b:c6:51:5a: 57:b8:00:0b:60:d8:ff:ca:27:97:25:bc:68:78:d6:bd:d5:3d: a7:82:89:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXBcLhd5kKVlSHp11oWmEuhLuVDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0 MUY3RDM4NTAeFw0yNjA3MjExNTEzNThaFw0yNjA3MjIxNzMwNThaMDMxMTAvBgNV BAMTKDRGRjg1MjI3MENBODAwNEVCMUNFQUM4NzZCNTJFMjZFQzU4ODVERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg43yLWJPd9/EIlKwzOg0qjwYI SDnknlp6v9Y7PQ/M17OYfq2cgpJpOJOUMg8l7MhW+QV1eMAoyORj6++xFbOGtpiO k5tsEX3t2cFvOBiD4YWPglTzOwYd+BqorbY+zopPqpgMELmwmwjHea1Q2Fh8gg+V FFJsj8eUmc5SKWMZ69jcu+wOSwiEQZs84ZxZU91HKOho15sep0wp8qlJxrAm1iRD nUm/rXoH97Mb1JvNiLMXv1Sds7y5RyepICAEEQVXBk7Mu3KilxujNtXnzmMIBsMs w04AzoW6jeHKUVvsUCPWze1a+lpiUFSeEPBEMvYeahA5wkKz27gO3NSmVRvFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUT/hSJwyoAE6xzqyHa1LibsWIXeowHwYDVR0j BBgwFoAUwtpJ46dCGhcKsliVZ+fCmEH304UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8wL0MyREE0OUUzQTc0MjFBMTcwQUIyNTg5NTY3RTdD Mjk4NDFGN0QzODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0MUY3RDM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMC9DMkRBNDlFM0E3NDIx QTE3MEFCMjU4OTU2N0U3QzI5ODQxRjdEMzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeNaQE4TbFIH I3UHOFQuGEd5LcmD29AaI27JJH0Wt/fpr0UxFiXzRs6Drr2ckZSmowN4juEOM30l eRnrCVsAcnRAjHysY9PLGglkCXm/Ch5R+ZPk2ulVQbbTBI3ObBqiyLVAkuQkHpmE 27U5JcL98og0Bs3kNk6Ft8DFIKasMhY48EJd8pBfg0XBtoYXs3Z9hAmTKDMiReH/ gCJi56GxPnqJATSCnjnZZwkfHM0grI4yWc7Dt6fAC11I4fbJEvm91AKRzipp9Kkb TcxxSGsiNzHisrUQ20FsHFHQYFJRjK95ycv5Y81rxlFaV7gAC2DY/8onlyW8aHjW vdU9p4KJ9Q== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:59 2026 by rpki-client