$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft (raw, json) Hash identifier: uIE58LOCGRkZkWivvcCwCwIibXsHYGth1+qdiqpQUtg= Subject key identifier: AE:FB:BF:A9:29:D5:6B:B7:8E:C0:17:EB:0A:D2:CB:F8:5E:5C:2E:9A Authority key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Certificate issuer: /CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Certificate serial: 5C55ADDA3771068B022002B24AB41F7259FE82ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft Manifest number: D5 Signing time: Fri 28 Aug 2026 06:48:16 +0000 Manifest this update: Fri 28 Aug 2026 06:43:16 +0000 Manifest next update: Mon 31 Aug 2026 18:38:16 +0000 Files and hashes: 1: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl (hash: gENUfAiIrxyHFpHuW24rLL6nAwo2pWQ0OT56SX6SCYI=) 2: 3136332e35332e35322e302f32322d3234203d3e203531383437.roa (hash: QuYF2uZ6IZ+l3FPWrOqcXWtoS7S46LuH4kJESx2x1Qs=) 3: 3130332e3137372e3136322e302f32332d3234203d3e20313439303537.roa (hash: jgtfx24D6pLUOGIrP0FsDFNvF8xIgwwrZ2kQ0C7L36A=) 4: 3136332e35332e35322e302f32322d3234203d3e20313439303537.roa (hash: uICx57p5+jtBkGMOR0tDJ+Anre9HEKQERsFBp0N7f88=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:55:ad:da:37:71:06:8b:02:20:02:b2:4a:b4:1f:72:59:fe:82:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Validity Not Before: Aug 28 06:43:16 2026 GMT Not After : Aug 31 18:38:16 2026 GMT Subject: CN=AEFBBFA929D56BB78EC017EB0AD2CBF85E5C2E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:66:7a:23:dc:d3:30:93:0f:d1:7b:11:52: 4f:8f:b1:5a:7b:fb:fe:cb:ca:7e:98:10:94:f1:25: 97:ef:c1:c5:23:5f:84:ba:5e:5c:b2:02:7f:43:53: 1a:e1:73:44:94:a6:42:77:94:8e:23:e3:62:19:a2: 14:e2:c4:3a:f5:3e:49:36:5c:0d:90:5d:4c:34:81: 6b:a8:55:fe:a1:67:5c:25:e6:f2:d4:03:fa:19:74: d6:cd:c5:27:95:d3:b2:8c:f8:47:aa:15:c4:79:48: 00:e6:36:84:e8:7c:d2:32:69:7f:b9:44:32:30:47: 1d:a3:3b:96:b0:d3:81:8e:d9:23:b8:8f:d7:6c:66: c8:2f:fd:fb:d6:74:04:f1:dd:81:5b:a8:28:36:b8: 45:c0:f5:f9:90:65:a6:ee:bb:f8:0f:78:ae:0f:58: 7f:ea:75:4c:d6:b5:0c:b2:b9:18:45:7e:45:37:be: e4:4e:2f:59:ac:f9:40:4f:59:77:a9:c6:9f:87:02: 54:2e:dc:0c:0c:53:f0:6f:aa:1c:9d:41:28:8b:1b: 55:d1:ed:af:b0:9d:03:a1:00:e3:f3:b2:7a:17:b5: f7:e6:1a:45:56:6f:ee:85:7b:69:9e:d1:2f:fb:5f: 2c:21:a3:4b:4c:0d:fb:b5:5d:4a:c0:9c:ca:a8:9e: 61:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FB:BF:A9:29:D5:6B:B7:8E:C0:17:EB:0A:D2:CB:F8:5E:5C:2E:9A X509v3 Authority Key Identifier: keyid:CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5c:82:e2:ae:f8:b9:d2:96:3d:98:10:88:50:66:a7:52:97: 02:bb:40:94:3d:39:5d:76:f0:dd:5a:8c:88:c1:53:c2:7e:d1: 6b:72:18:71:23:9e:61:d0:13:c7:bb:65:8d:ef:62:7a:8d:32: 5a:d9:b3:54:89:ec:2b:1d:44:7e:be:1a:24:8f:71:a8:49:d8: 07:3a:6b:fc:4d:73:37:81:b2:5c:47:0c:59:ac:c8:08:03:ca: 07:3d:af:9c:ee:91:04:1a:8e:8f:1c:a7:e5:42:b1:5a:65:86: 57:67:2a:5d:29:32:6e:2a:7e:32:9f:f0:69:b8:d2:e3:52:5d: aa:ef:f1:46:dd:32:87:1b:27:03:9f:d3:97:a7:b7:b3:b3:dd: b3:f3:66:50:2d:4b:69:50:f8:67:05:8b:b3:29:94:3a:fc:da: 91:9c:cf:aa:54:ca:f7:2d:cc:fc:53:31:19:1d:c1:1e:aa:54: ac:24:3e:64:18:4c:54:8d:55:70:e4:2e:9b:48:1d:c7:6b:a8: fe:df:f0:04:4d:f4:88:c2:36:f0:f8:d3:f5:54:0b:ce:4a:5a: 8d:22:41:81:67:b6:d4:d5:5c:95:86:ed:4e:c3:5f:51:4b:7b: 19:e2:c6:ed:b8:a5:fc:4d:7c:a2:d1:93:28:43:c5:05:c0:f5: 1e:70:00:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXFWt2jdxBosCIAKySrQfcln+gu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5 NEQ2OUJCOTAeFw0yNjA4MjgwNjQzMTZaFw0yNjA4MzExODM4MTZaMDMxMTAvBgNV BAMTKEFFRkJCRkE5MjlENTZCQjc4RUMwMTdFQjBBRDJDQkY4NUU1QzJFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2o2Z6I9zTMJMP0XsRUk+PsVp7 +/7Lyn6YEJTxJZfvwcUjX4S6XlyyAn9DUxrhc0SUpkJ3lI4j42IZohTixDr1Pkk2 XA2QXUw0gWuoVf6hZ1wl5vLUA/oZdNbNxSeV07KM+EeqFcR5SADmNoTofNIyaX+5 RDIwRx2jO5aw04GO2SO4j9dsZsgv/fvWdATx3YFbqCg2uEXA9fmQZabuu/gPeK4P WH/qdUzWtQyyuRhFfkU3vuROL1ms+UBPWXepxp+HAlQu3AwMU/BvqhydQSiLG1XR 7a+wnQOhAOPzsnoXtffmGkVWb+6Fe2me0S/7Xywho0tMDfu1XUrAnMqonmGhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrvu/qSnVa7eOwBfrCtLL+F5cLpowHwYDVR0j BBgwFoAUzKO7c4mfeDNMoD1tpNj9P5TWm7kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODM4NTQ1NTU1ODIzMDAxNy8wL0NDQTNCQjczODk5Rjc4MzM0Q0EwM0Q2REE0RDhG RDNGOTRENjlCQjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODgzODU0NTU1NTgyMzAwMTcvMC9DQ0EzQkI3Mzg5OUY3 ODMzNENBMDNENkRBNEQ4RkQzRjk0RDY5QkI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFyC4q74udKW PZgQiFBmp1KXArtAlD05XXbw3VqMiMFTwn7Ra3IYcSOeYdATx7tlje9ieo0yWtmz VInsKx1Efr4aJI9xqEnYBzpr/E1zN4GyXEcMWazICAPKBz2vnO6RBBqOjxyn5UKx WmWGV2cqXSkybip+Mp/wabjS41Jdqu/xRt0yhxsnA5/Tl6e3s7Pds/NmUC1LaVD4 ZwWLsymUOvzakZzPqlTK9y3M/FMxGR3BHqpUrCQ+ZBhMVI1VcOQum0gdx2uo/t/w BE30iMI28PjT9VQLzkpajSJBgWe21NVclYbtTsNfUUt7GeLG7bil/E18otGTKEPF BcD1HnAASA== -----END CERTIFICATE-----Generated at Sat Aug 29 07:02:53 2026 by rpki-client