$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft (raw, json) Hash identifier: ihyfMHvXoDrWyFUp57qKJOShoi9jJTaFFSh0JEKcQPQ= Subject key identifier: 86:2C:38:30:3A:EF:F2:91:30:F2:1F:7B:28:41:8A:A6:25:4B:68:35 Authority key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Certificate issuer: /CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Certificate serial: 3435DBD76FEC7FFB12B218C3CDDC132948403AAA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft Manifest number: 98 Signing time: Tue 14 Jul 2026 02:50:15 +0000 Manifest this update: Tue 14 Jul 2026 02:45:15 +0000 Manifest next update: Wed 15 Jul 2026 03:07:15 +0000 Files and hashes: 1: 3130332e3137372e3136322e302f32332d3234203d3e20313439303537.roa (hash: jgtfx24D6pLUOGIrP0FsDFNvF8xIgwwrZ2kQ0C7L36A=) 2: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl (hash: 3Dw6fvXm5BHcv8+Uz/DOcwQfKEdRBnX8y/dQ5gjQ+VA=) 3: 3136332e35332e35322e302f32322d3234203d3e20313439303537.roa (hash: uICx57p5+jtBkGMOR0tDJ+Anre9HEKQERsFBp0N7f88=) 4: 3136332e35332e35322e302f32322d3234203d3e203531383437.roa (hash: QuYF2uZ6IZ+l3FPWrOqcXWtoS7S46LuH4kJESx2x1Qs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 03:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:35:db:d7:6f:ec:7f:fb:12:b2:18:c3:cd:dc:13:29:48:40:3a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Validity Not Before: Jul 14 02:45:15 2026 GMT Not After : Jul 15 03:07:15 2026 GMT Subject: CN=862C38303AEFF29130F21F7B28418AA6254B6835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ef:b4:a0:78:ac:40:58:20:a2:40:7b:9a:1d: 63:5a:3b:dd:34:3f:e2:3e:55:2e:4e:d2:ab:2c:cd: 8a:78:ae:fe:33:12:1f:d7:f6:0d:ec:f1:69:5b:b0: 8f:89:10:88:1c:d5:67:23:ef:1e:82:40:90:b4:fd: c3:d2:43:e7:f4:e3:98:5d:db:18:13:d1:f6:5e:d7: 57:4e:e3:a7:9a:dc:ef:71:22:3b:6f:db:6b:ac:14: 52:47:50:43:a8:07:49:e7:62:58:1f:b1:f6:6b:dd: ae:37:05:d6:3e:2b:e5:82:62:23:81:37:5f:66:ca: fe:52:35:ab:1d:c6:59:3e:bd:b5:cf:eb:14:03:48: ec:87:ff:f2:e3:1c:aa:4a:e8:9a:a4:7e:c1:66:2f: 04:80:20:5f:92:77:d4:6d:03:70:f9:b8:39:21:ff: d2:f7:42:14:25:02:24:78:c3:30:95:5d:fe:03:d4: fd:20:12:5a:42:67:26:bd:e5:78:e3:59:44:21:02: 14:b1:11:6d:21:16:8f:1d:00:c0:5e:63:6c:5a:94: 57:79:9b:66:e3:6c:96:c1:1b:b7:62:d5:61:8f:30: 7e:ac:7b:48:34:21:ff:a7:bc:c7:56:5c:39:4c:f5: 6f:51:38:98:5c:0f:4f:14:6a:8d:7a:60:54:9d:8b: 8c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2C:38:30:3A:EF:F2:91:30:F2:1F:7B:28:41:8A:A6:25:4B:68:35 X509v3 Authority Key Identifier: keyid:CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:12:a6:5c:51:99:5b:0c:33:2d:a6:df:e5:dc:e5:ab:12:9b: 31:2b:a0:4c:a8:d3:46:f5:3a:7b:fe:5b:18:8f:18:f8:7f:4d: 51:48:b6:c8:3c:60:99:24:40:24:fd:00:ec:3d:3d:1e:e3:f0: c2:2b:bd:a7:16:0b:4f:ce:cd:8c:09:18:76:66:24:35:a9:6e: 9d:84:4b:c4:3e:9b:f9:23:a6:a3:f3:32:45:fc:a9:93:3a:0d: df:50:d2:b4:ab:00:75:95:6a:cb:83:88:eb:eb:76:bf:4b:02: 9c:7f:4f:59:bc:3e:10:5e:0b:ac:67:12:b8:be:9f:ef:82:33: 60:6b:94:a2:f7:a5:3b:32:10:3f:a8:1a:82:a8:ac:45:68:71: c3:70:09:26:a2:4e:3d:84:14:1f:8a:b6:dc:98:a9:24:5a:ac: f3:d8:4d:ee:8b:85:2a:7b:69:23:b0:26:46:5b:b2:08:59:2c: fa:94:f0:59:4f:da:dc:5f:45:3f:c0:04:6b:8e:ca:7b:17:e5: 97:59:08:ac:5f:ed:79:05:f2:47:a3:f0:0d:d0:e4:8b:c4:95: 3a:c6:33:47:f5:a4:d6:5f:5e:af:0b:b7:cd:35:7e:6e:81:14: 62:51:d7:b7:37:d0:3e:cc:06:31:77:1d:02:1b:71:41:e1:19: 93:36:a5:47 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNDXb12/sf/sSshjDzdwTKUhAOqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5 NEQ2OUJCOTAeFw0yNjA3MTQwMjQ1MTVaFw0yNjA3MTUwMzA3MTVaMDMxMTAvBgNV BAMTKDg2MkMzODMwM0FFRkYyOTEzMEYyMUY3QjI4NDE4QUE2MjU0QjY4MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz77SgeKxAWCCiQHuaHWNaO900 P+I+VS5O0qsszYp4rv4zEh/X9g3s8WlbsI+JEIgc1Wcj7x6CQJC0/cPSQ+f045hd 2xgT0fZe11dO46ea3O9xIjtv22usFFJHUEOoB0nnYlgfsfZr3a43BdY+K+WCYiOB N19myv5SNasdxlk+vbXP6xQDSOyH//LjHKpK6JqkfsFmLwSAIF+Sd9RtA3D5uDkh /9L3QhQlAiR4wzCVXf4D1P0gElpCZya95XjjWUQhAhSxEW0hFo8dAMBeY2xalFd5 m2bjbJbBG7di1WGPMH6se0g0If+nvMdWXDlM9W9ROJhcD08Uao16YFSdi4zNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhiw4MDrv8pEw8h97KEGKpiVLaDUwHwYDVR0j BBgwFoAUzKO7c4mfeDNMoD1tpNj9P5TWm7kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODM4NTQ1NTU1ODIzMDAxNy8wL0NDQTNCQjczODk5Rjc4MzM0Q0EwM0Q2REE0RDhG RDNGOTRENjlCQjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODgzODU0NTU1NTgyMzAwMTcvMC9DQ0EzQkI3Mzg5OUY3 ODMzNENBMDNENkRBNEQ4RkQzRjk0RDY5QkI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhKmXFGZWwwz Labf5dzlqxKbMSugTKjTRvU6e/5bGI8Y+H9NUUi2yDxgmSRAJP0A7D09HuPwwiu9 pxYLT87NjAkYdmYkNalunYRLxD6b+SOmo/MyRfypkzoN31DStKsAdZVqy4OI6+t2 v0sCnH9PWbw+EF4LrGcSuL6f74IzYGuUovelOzIQP6gagqisRWhxw3AJJqJOPYQU H4q23JipJFqs89hN7ouFKntpI7AmRluyCFks+pTwWU/a3F9FP8AEa47Kexfll1kI rF/teQXyR6PwDdDki8SVOsYzR/Wk1l9erwu3zTV+boEUYlHXtzfQPswGMXcdAhtx QeEZkzalRw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:54 2026 by rpki-client