$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft (raw, json) Hash identifier: /ZnkgkqdJCsrTBUgB/GMVsI1moQP8nP8bbMsRyvqCXc= Subject key identifier: 94:5C:9B:13:CD:6A:7A:7D:7C:A6:46:7E:34:BE:39:88:DF:A9:C8:28 Authority key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Certificate issuer: /CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Certificate serial: 1689A60E6B8CCBC7838F4EB30B1696D108FDA7DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft Manifest number: 1E Signing time: Mon 13 Apr 2026 07:24:17 +0000 Manifest this update: Mon 13 Apr 2026 07:19:17 +0000 Manifest next update: Tue 14 Apr 2026 08:47:17 +0000 Files and hashes: 1: 3136332e35332e35322e302f32322d3234203d3e20313439303537.roa (hash: uICx57p5+jtBkGMOR0tDJ+Anre9HEKQERsFBp0N7f88=) 2: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl (hash: XuldgedgAfN2s4JLoGpx5eDpFL5wawYrXnINIIcoJ40=) 3: 3136332e35332e35322e302f32322d3234203d3e203531383437.roa (hash: QuYF2uZ6IZ+l3FPWrOqcXWtoS7S46LuH4kJESx2x1Qs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:89:a6:0e:6b:8c:cb:c7:83:8f:4e:b3:0b:16:96:d1:08:fd:a7:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Validity Not Before: Apr 13 07:19:17 2026 GMT Not After : Apr 14 08:47:17 2026 GMT Subject: CN=945C9B13CD6A7A7D7CA6467E34BE3988DFA9C828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a0:d3:2c:ed:06:90:a5:6e:a1:df:82:a3:c0: bc:a2:f7:8d:eb:bf:be:c5:81:12:35:b8:20:6e:c1: e5:af:87:1d:c6:1f:a5:ef:88:68:e9:61:4d:74:63: 6e:eb:1c:22:14:7f:c1:2b:0c:9e:43:aa:11:cd:50: 7f:a1:6b:89:e6:bd:2f:ca:c0:b5:34:6a:06:50:ae: 8f:e4:27:c8:dd:65:53:d0:a6:68:f7:2f:63:5e:c8: 36:8d:5d:e6:73:35:72:9c:03:b7:27:0d:e8:53:06: 3b:6c:42:7a:94:e5:52:ba:3f:ca:c2:ed:87:f8:72: ef:a1:84:8e:20:de:38:a4:46:5a:95:af:a5:00:7e: 08:ed:fa:7b:9c:fc:c8:e7:f9:9a:54:32:42:fa:84: b0:82:69:49:aa:d9:2b:6b:61:60:53:43:b6:4f:d2: e0:c8:15:31:aa:d3:2f:de:74:b8:64:b3:11:e0:52: 1f:22:c1:2c:12:50:f7:20:fd:25:b3:26:0c:6b:c8: b9:f5:d4:ca:9a:8c:bb:65:8f:59:99:bc:ec:ca:4a: dc:cd:c5:33:e3:f0:11:df:39:a5:a3:6b:9e:cb:43: 13:c7:6d:73:a8:de:c6:94:b3:81:38:91:b4:15:d5: 63:29:3c:3d:20:ae:4a:66:78:0e:67:9f:df:e7:dd: 1e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5C:9B:13:CD:6A:7A:7D:7C:A6:46:7E:34:BE:39:88:DF:A9:C8:28 X509v3 Authority Key Identifier: keyid:CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:87:58:c5:82:51:f9:e6:33:31:ae:2f:2e:eb:6b:6f:bf:81: da:e8:28:3c:96:15:1f:ff:6a:08:08:6b:59:8e:a1:1f:39:97: 4b:0c:99:80:0a:5d:24:0e:ca:64:4d:53:ad:cb:9a:10:7d:12: 91:52:35:1e:51:80:c7:e3:d8:48:19:82:b1:c7:58:c7:ed:e6: c9:8b:52:13:0f:4b:8f:b3:d5:30:46:a0:9f:fd:90:9c:b7:40: 32:31:06:79:d8:f7:39:ca:84:7e:a6:84:19:51:02:67:5f:a3: 2e:ce:0a:ab:3b:45:82:02:98:57:8c:c4:40:25:b4:8e:da:41: 79:26:8b:b4:cd:f6:b4:b4:57:39:97:6d:e6:13:9b:13:7d:cb: 2f:33:c0:22:f9:3b:a6:9c:c7:2a:46:38:4c:7e:2d:36:2f:e9: a7:d7:c9:fe:6e:9f:74:6a:60:cf:0d:ff:35:71:41:68:86:b1: c0:cb:e8:c4:f4:f8:23:64:48:08:a2:c6:14:b2:43:ba:c1:63: 75:89:dc:21:8a:16:61:e2:01:71:d9:88:f4:83:a7:0e:d7:d2: 2d:a9:a2:a7:7f:7e:6e:43:e4:a4:f8:70:62:e7:d7:41:50:6f: 7f:f7:37:9e:53:93:dc:53:4a:79:74:1b:d5:2e:f7:ee:59:8b: 3d:e9:a7:ca -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFommDmuMy8eDj06zCxaW0Qj9p90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5 NEQ2OUJCOTAeFw0yNjA0MTMwNzE5MTdaFw0yNjA0MTQwODQ3MTdaMDMxMTAvBgNV BAMTKDk0NUM5QjEzQ0Q2QTdBN0Q3Q0E2NDY3RTM0QkUzOTg4REZBOUM4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWoNMs7QaQpW6h34KjwLyi943r v77FgRI1uCBuweWvhx3GH6XviGjpYU10Y27rHCIUf8ErDJ5DqhHNUH+ha4nmvS/K wLU0agZQro/kJ8jdZVPQpmj3L2NeyDaNXeZzNXKcA7cnDehTBjtsQnqU5VK6P8rC 7Yf4cu+hhI4g3jikRlqVr6UAfgjt+nuc/Mjn+ZpUMkL6hLCCaUmq2StrYWBTQ7ZP 0uDIFTGq0y/edLhksxHgUh8iwSwSUPcg/SWzJgxryLn11MqajLtlj1mZvOzKStzN xTPj8BHfOaWja57LQxPHbXOo3saUs4E4kbQV1WMpPD0grkpmeA5nn9/n3R6LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlFybE81qen18pkZ+NL45iN+pyCgwHwYDVR0j BBgwFoAUzKO7c4mfeDNMoD1tpNj9P5TWm7kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODM4NTQ1NTU1ODIzMDAxNy8wL0NDQTNCQjczODk5Rjc4MzM0Q0EwM0Q2REE0RDhG RDNGOTRENjlCQjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODgzODU0NTU1NTgyMzAwMTcvMC9DQ0EzQkI3Mzg5OUY3 ODMzNENBMDNENkRBNEQ4RkQzRjk0RDY5QkI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlodYxYJR+eYz Ma4vLutrb7+B2ugoPJYVH/9qCAhrWY6hHzmXSwyZgApdJA7KZE1TrcuaEH0SkVI1 HlGAx+PYSBmCscdYx+3myYtSEw9Lj7PVMEagn/2QnLdAMjEGedj3OcqEfqaEGVEC Z1+jLs4KqztFggKYV4zEQCW0jtpBeSaLtM32tLRXOZdt5hObE33LLzPAIvk7ppzH KkY4TH4tNi/pp9fJ/m6fdGpgzw3/NXFBaIaxwMvoxPT4I2RICKLGFLJDusFjdYnc IYoWYeIBcdmI9IOnDtfSLamip39+bkPkpPhwYufXQVBvf/c3nlOT3FNKeXQb1S73 7lmLPemnyg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:09 2026 by rpki-client