$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft (raw, json) Hash identifier: J0bMPz+kDHTR4fAy4olqATQe2HfkQizQ52eLmP3aHXc= Subject key identifier: 6A:E9:33:84:26:9C:A4:EF:35:83:8E:B4:1B:AC:90:A0:62:CC:9A:63 Authority key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Certificate issuer: /CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Certificate serial: 0C5A2373C81639690307C315494FC1E7E4DDC2D0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft Manifest number: EC Signing time: Sun 18 Oct 2026 18:00:07 +0000 Manifest this update: Sun 18 Oct 2026 17:55:07 +0000 Manifest next update: Wed 21 Oct 2026 21:51:07 +0000 Files and hashes: 1: 3136332e35332e35322e302f32322d3234203d3e20313439303537.roa (hash: uICx57p5+jtBkGMOR0tDJ+Anre9HEKQERsFBp0N7f88=) 2: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl (hash: us6Tv2g5VmV45y4/0RH/AWOsJ6mTiv7R5agrLq6iH2U=) 3: 3136332e35332e35322e302f32322d3234203d3e203531383437.roa (hash: QuYF2uZ6IZ+l3FPWrOqcXWtoS7S46LuH4kJESx2x1Qs=) 4: 3130332e3137372e3136322e302f32332d3234203d3e20313439303537.roa (hash: jgtfx24D6pLUOGIrP0FsDFNvF8xIgwwrZ2kQ0C7L36A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 21:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:5a:23:73:c8:16:39:69:03:07:c3:15:49:4f:c1:e7:e4:dd:c2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Validity Not Before: Oct 18 17:55:07 2026 GMT Not After : Oct 21 21:51:07 2026 GMT Subject: CN=6AE93384269CA4EF35838EB41BAC90A062CC9A63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:11:b2:ac:9d:21:ac:17:59:4e:d9:12:e4:c1: 51:0d:d4:64:05:92:24:96:8c:3d:ca:af:39:f9:4e: 47:24:66:85:8e:98:9b:1d:c2:a0:0b:dd:5f:02:d3: 5c:2c:4f:c7:51:7d:84:e0:55:a8:0c:8b:b9:85:4c: 50:f3:60:fc:0e:56:bb:fb:e5:cd:a8:0d:15:8c:be: 42:8d:9e:1c:c7:bb:77:8f:c5:d2:2a:51:6e:b9:2c: 56:05:61:b7:d3:4d:b6:48:e0:cd:5b:4b:ca:a7:c2: 2e:1d:85:a9:f3:27:8e:b5:c5:06:fe:61:c8:2f:8d: 33:b5:c2:f6:f1:dc:d3:1c:8d:7d:35:7d:8e:db:42: de:5d:be:da:95:ff:2a:48:16:fc:e7:10:c9:f9:21: 39:c3:fd:69:89:5b:8f:8b:42:15:55:f3:7f:69:74: 54:65:fd:97:42:87:fe:6b:80:41:8c:5d:1d:ff:33: 29:48:38:21:31:65:6d:f4:b2:7b:b8:5e:56:b0:d9: e1:64:f7:29:0c:d7:a3:7f:c4:e5:2c:f0:3f:c8:20: b0:46:da:2e:2b:14:71:cc:12:2c:7f:07:c2:7d:08: b1:11:ce:28:8b:f1:e5:a7:16:f7:b3:66:d6:3a:9a: 0c:0f:d6:e8:dd:24:e7:e2:c4:7a:0d:f0:56:f6:0a: 9a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E9:33:84:26:9C:A4:EF:35:83:8E:B4:1B:AC:90:A0:62:CC:9A:63 X509v3 Authority Key Identifier: keyid:CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b3:1a:f5:10:c1:1e:3f:4f:42:e8:4f:e8:86:41:6e:8a:a7: 62:25:24:81:4c:90:30:52:99:15:67:dd:ad:20:54:75:72:3d: 0b:0f:96:ee:fd:a6:17:5d:6b:d6:73:27:f1:70:31:8c:c4:bd: da:13:61:94:4a:9e:b4:eb:17:c6:6d:7a:c9:04:fa:87:cb:fc: b2:a5:72:f8:d0:2d:e0:c9:e4:93:ed:a6:ec:c0:ce:fd:74:f3: eb:d7:11:e3:1c:be:86:4b:9d:cc:53:5b:e3:03:2c:b4:99:ab: a0:8d:71:99:c2:b4:d4:af:51:69:c7:0f:f0:6a:b8:58:de:f3: dd:80:eb:bf:31:16:b3:07:b4:21:71:74:cf:35:e2:01:af:d0: 9b:9d:b1:be:1b:6a:e7:12:9f:d5:06:1a:99:28:b7:ae:11:c1: f3:79:4a:99:73:57:5f:80:87:2e:62:43:82:de:60:fd:2d:8e: df:f0:4b:1d:12:06:99:c1:30:b3:90:62:02:11:a2:b7:92:16: af:26:23:89:ca:ab:16:81:a8:a6:5f:c0:71:2d:ae:51:bb:33: 66:78:7d:73:19:67:ed:f8:01:15:26:87:bf:10:65:78:8d:cc: ae:fd:74:38:8a:37:fb:70:1a:d0:2b:fd:a6:cb:9f:25:05:b7: d0:73:37:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDFojc8gWOWkDB8MVSU/B5+TdwtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5 NEQ2OUJCOTAeFw0yNjEwMTgxNzU1MDdaFw0yNjEwMjEyMTUxMDdaMDMxMTAvBgNV BAMTKDZBRTkzMzg0MjY5Q0E0RUYzNTgzOEVCNDFCQUM5MEEwNjJDQzlBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChEbKsnSGsF1lO2RLkwVEN1GQF kiSWjD3Krzn5TkckZoWOmJsdwqAL3V8C01wsT8dRfYTgVagMi7mFTFDzYPwOVrv7 5c2oDRWMvkKNnhzHu3ePxdIqUW65LFYFYbfTTbZI4M1bS8qnwi4dhanzJ461xQb+ YcgvjTO1wvbx3NMcjX01fY7bQt5dvtqV/ypIFvznEMn5ITnD/WmJW4+LQhVV839p dFRl/ZdCh/5rgEGMXR3/MylIOCExZW30snu4Xlaw2eFk9ykM16N/xOUs8D/IILBG 2i4rFHHMEix/B8J9CLERziiL8eWnFvezZtY6mgwP1ujdJOfixHoN8Fb2Cpr7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaukzhCacpO81g460G6yQoGLMmmMwHwYDVR0j BBgwFoAUzKO7c4mfeDNMoD1tpNj9P5TWm7kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODM4NTQ1NTU1ODIzMDAxNy8wL0NDQTNCQjczODk5Rjc4MzM0Q0EwM0Q2REE0RDhG RDNGOTRENjlCQjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODgzODU0NTU1NTgyMzAwMTcvMC9DQ0EzQkI3Mzg5OUY3 ODMzNENBMDNENkRBNEQ4RkQzRjk0RDY5QkI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLMa9RDBHj9P QuhP6IZBboqnYiUkgUyQMFKZFWfdrSBUdXI9Cw+W7v2mF11r1nMn8XAxjMS92hNh lEqetOsXxm16yQT6h8v8sqVy+NAt4Mnkk+2m7MDO/XTz69cR4xy+hkudzFNb4wMs tJmroI1xmcK01K9RaccP8Gq4WN7z3YDrvzEWswe0IXF0zzXiAa/Qm52xvhtq5xKf 1QYamSi3rhHB83lKmXNXX4CHLmJDgt5g/S2O3/BLHRIGmcEws5BiAhGit5IWryYj icqrFoGopl/AcS2uUbszZnh9cxln7fgBFSaHvxBleI3Mrv10OIo3+3Aa0Cv9psuf JQW30HM3Nw== -----END CERTIFICATE-----Generated at Tue Oct 20 20:27:15 2026 by rpki-client