$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft File: CD2AB13A444BFE19493186434EE872CEC8A1952E.mft (raw, json) Hash identifier: MHkqusJHH0Wwi1z5k/9D6odJ8YmW3QUltGmsfv+KmEM= Subject key identifier: 65:8E:E5:ED:D7:61:21:41:95:92:36:F0:10:64:2D:2D:9C:39:CE:1A Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Certificate serial: 0289AEBC088E3C7D20BAC34595A3D1C966C33BBE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft Manifest number: 8A Signing time: Sun 26 Jul 2026 18:27:17 +0000 Manifest this update: Sun 26 Jul 2026 18:22:17 +0000 Manifest next update: Mon 27 Jul 2026 20:09:17 +0000 Files and hashes: 1: 3130332e37382e3132362e302f32332d3233203d3e2034383437.roa (hash: X0iD6rj5LsFjlWutUYZ76kK04W1xa6nb2omOPTwXuf0=) 2: CD2AB13A444BFE19493186434EE872CEC8A1952E.crl (hash: 0uJKnwf5TvA4bValvXiGRCSs8Zbv/aI7H1vszLv7oM4=) 3: 3130332e37382e3132362e302f32332d3233203d3e203633363534.roa (hash: ZP+h20JkWqSxKh8vbW484Nj0Ejp6CZykPD9jcY7GQqk=) 4: 3130332e37382e3132342e302f32322d3232203d3e203633363534.roa (hash: uYs6fO1/g3sgQhRLmL6xn7AxEm3lgSIqHQsxteKIieA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 20:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:89:ae:bc:08:8e:3c:7d:20:ba:c3:45:95:a3:d1:c9:66:c3:3b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Validity Not Before: Jul 26 18:22:17 2026 GMT Not After : Jul 27 20:09:17 2026 GMT Subject: CN=658EE5EDD7612141959236F010642D2D9C39CE1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:65:47:13:a6:5d:0e:85:66:0c:90:b2:a8:2d: f2:77:d5:ac:40:f7:84:1c:3c:4a:8a:8c:0a:d2:ac: b0:ea:fc:80:a4:67:5a:32:93:07:7e:75:e1:37:03: 07:e5:3c:60:dc:c3:1c:15:d2:6d:73:c8:c4:d5:09: 66:44:98:ce:42:99:39:bf:e6:08:71:14:33:70:24: 2e:71:07:3c:a4:ad:d0:78:a8:87:4c:ab:da:a8:13: 57:a9:5f:d8:b2:ff:a8:c2:93:58:d6:8b:e1:65:6a: 96:35:6a:ab:de:0f:f3:44:ef:ca:97:26:bb:c1:01: 3b:d1:7f:de:e5:97:ab:c2:70:ad:13:df:2a:ca:10: 0c:ae:da:31:71:6a:3d:34:0d:02:f3:9e:c6:e5:e7: b5:2e:7d:5f:e3:5a:77:d9:c5:8b:7e:04:85:26:75: 0f:c0:4e:d8:00:3e:ed:74:11:a0:61:6c:be:a8:3a: e8:3b:b1:a4:e2:52:a4:27:a3:65:97:b0:52:26:21: 13:80:47:4e:e4:b7:9f:0d:de:b9:e2:72:49:ab:cf: 1f:73:ff:05:d3:55:7b:b2:58:77:01:35:6e:6a:ae: 69:f7:f0:53:c6:fd:cd:7b:ef:61:32:f3:04:a3:a3: 99:df:a7:d7:40:8c:e6:fe:8d:fd:03:4f:f0:52:2c: 5e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8E:E5:ED:D7:61:21:41:95:92:36:F0:10:64:2D:2D:9C:39:CE:1A X509v3 Authority Key Identifier: keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9f:2a:03:0c:dd:d6:63:7d:61:c3:fa:11:19:00:b3:03:6c: b7:8b:d2:d9:87:fb:95:7b:66:77:ed:07:40:89:bd:1d:4a:54: fe:82:e0:35:4d:66:17:cf:c2:ec:20:4e:b7:d6:72:f3:fb:e3: 44:26:19:2f:99:70:56:55:d6:00:bf:39:24:f6:ed:96:cb:ce: 23:3d:40:fa:5c:45:96:39:91:20:06:34:f6:88:18:b8:db:46: 89:5f:37:8b:d3:b8:26:43:97:20:73:f2:57:1f:33:3f:8a:08: ac:28:d2:d9:5f:5e:15:55:a8:0c:ab:ff:26:3a:5f:cb:f5:cd: ef:2d:ed:2e:78:72:a9:47:43:3f:4b:1d:4f:91:b4:30:43:e2: c3:c8:8f:a6:2a:9d:99:59:61:40:0e:26:02:59:61:2d:03:99: 63:4b:c5:6d:a4:e9:23:e4:ef:94:2e:55:df:97:8f:f0:92:c6: 78:85:c1:42:05:c0:60:a6:c7:f7:51:f7:99:c8:21:d3:fa:0c: e8:7e:b2:67:ed:2b:f8:8b:ee:49:12:0b:2a:3d:ab:bd:2b:4f: 90:67:7b:49:ad:6e:a4:b1:b2:d2:1c:33:3d:31:42:6e:a6:7e: 22:ee:58:56:b9:1c:31:cc:40:89:5b:43:e2:bf:ba:12:82:af: 73:52:e4:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAomuvAiOPH0gusNFlaPRyWbDO74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD OEExOTUyRTAeFw0yNjA3MjYxODIyMTdaFw0yNjA3MjcyMDA5MTdaMDMxMTAvBgNV BAMTKDY1OEVFNUVERDc2MTIxNDE5NTkyMzZGMDEwNjQyRDJEOUMzOUNFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGZUcTpl0OhWYMkLKoLfJ31axA 94QcPEqKjArSrLDq/ICkZ1oykwd+deE3AwflPGDcwxwV0m1zyMTVCWZEmM5CmTm/ 5ghxFDNwJC5xBzykrdB4qIdMq9qoE1epX9iy/6jCk1jWi+FlapY1aqveD/NE78qX JrvBATvRf97ll6vCcK0T3yrKEAyu2jFxaj00DQLznsbl57UufV/jWnfZxYt+BIUm dQ/ATtgAPu10EaBhbL6oOug7saTiUqQno2WXsFImIROAR07kt58N3rnickmrzx9z /wXTVXuyWHcBNW5qrmn38FPG/c1772Ey8wSjo5nfp9dAjOb+jf0DT/BSLF5bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZY7l7ddhIUGVkjbwEGQtLZw5zhowHwYDVR0j BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3 MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDE4MTU4NDU5OTQ0OTkvMC9DRDJBQjEzQTQ0NEJG RTE5NDkzMTg2NDM0RUU4NzJDRUM4QTE5NTJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU58qAwzd1mN9 YcP6ERkAswNst4vS2Yf7lXtmd+0HQIm9HUpU/oLgNU1mF8/C7CBOt9Zy8/vjRCYZ L5lwVlXWAL85JPbtlsvOIz1A+lxFljmRIAY09ogYuNtGiV83i9O4JkOXIHPyVx8z P4oIrCjS2V9eFVWoDKv/Jjpfy/XN7y3tLnhyqUdDP0sdT5G0MEPiw8iPpiqdmVlh QA4mAllhLQOZY0vFbaTpI+TvlC5V35eP8JLGeIXBQgXAYKbH91H3mcgh0/oM6H6y Z+0r+IvuSRILKj2rvStPkGd7Sa1upLGy0hwzPTFCbqZ+Iu5YVrkcMcxAiVtD4r+6 EoKvc1LkGA== -----END CERTIFICATE-----Generated at Mon Jul 27 11:35:57 2026 by rpki-client