$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft File: CD2AB13A444BFE19493186434EE872CEC8A1952E.mft (raw, json) Hash identifier: CeufzQ/egCvL7lCtonplEyx+dqozEKA8D+m5yHfEuI0= Subject key identifier: CA:70:15:9D:5B:F4:26:60:30:FC:85:51:69:AE:63:52:5B:61:C7:C1 Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Certificate serial: 3EC322CCC096AEFE02218FD9438E13C7CF2F7FA6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft Manifest number: BB Signing time: Thu 10 Sep 2026 22:17:22 +0000 Manifest this update: Thu 10 Sep 2026 22:12:22 +0000 Manifest next update: Mon 14 Sep 2026 05:58:22 +0000 Files and hashes: 1: 3130332e37382e3132362e302f32332d3233203d3e2034383437.roa (hash: X0iD6rj5LsFjlWutUYZ76kK04W1xa6nb2omOPTwXuf0=) 2: CD2AB13A444BFE19493186434EE872CEC8A1952E.crl (hash: eTUBcuPlnuzjpwWoWEjZs0QXmN8Ixnr+g90nIalC/PM=) 3: 3130332e37382e3132362e302f32332d3233203d3e203633363534.roa (hash: ZP+h20JkWqSxKh8vbW484Nj0Ejp6CZykPD9jcY7GQqk=) 4: 3130332e37382e3132342e302f32322d3232203d3e203633363534.roa (hash: uYs6fO1/g3sgQhRLmL6xn7AxEm3lgSIqHQsxteKIieA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c3:22:cc:c0:96:ae:fe:02:21:8f:d9:43:8e:13:c7:cf:2f:7f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Validity Not Before: Sep 10 22:12:22 2026 GMT Not After : Sep 14 05:58:22 2026 GMT Subject: CN=CA70159D5BF4266030FC855169AE63525B61C7C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:a5:d8:4f:73:7c:9e:06:8c:f5:85:70:5f: 5c:fb:e5:4b:39:ab:72:75:e2:e4:87:71:0d:9d:4d: 72:f7:40:14:f3:37:44:3f:37:a9:3c:54:47:07:47: 81:92:40:56:dc:ff:f3:d2:f1:bd:2f:d8:e1:78:3d: 93:76:29:36:82:3c:7c:c2:5e:35:9a:02:8f:9b:a6: 8c:fa:da:0a:93:51:f4:ec:ac:33:f8:a6:05:7a:10: 9d:ce:cc:28:28:4c:2b:00:0f:df:3d:92:fa:57:68: 45:7f:c5:bf:1b:3e:62:a0:9b:e8:3e:2c:36:5c:3e: cf:09:e3:34:fd:8c:c0:9a:31:a8:de:14:3f:64:b3: 49:83:2a:cb:cd:54:36:7f:86:b2:2c:6c:75:3f:19: ae:3a:3b:f1:d2:3c:23:08:93:24:a6:00:1e:0b:ad: bd:de:fe:2b:1c:e6:85:23:6e:78:22:ba:d5:5a:1a: 23:a4:2e:da:08:48:99:78:45:83:1e:ad:9a:02:f6: 23:a0:63:f6:ce:f4:9f:74:67:90:a4:96:a2:0f:cc: a5:39:28:f5:36:d3:d5:13:f7:03:8a:11:6a:56:e1: 81:02:9d:63:7e:90:c1:ea:d5:6f:2f:e5:b6:30:ea: 8d:bd:38:aa:9e:d9:1a:ac:21:5f:5d:3d:a4:0a:b2: d5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:70:15:9D:5B:F4:26:60:30:FC:85:51:69:AE:63:52:5B:61:C7:C1 X509v3 Authority Key Identifier: keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:6f:d0:c4:39:30:50:ca:da:54:05:ea:b6:eb:ca:70:5f:b3: 88:b0:77:91:f9:cc:5b:bd:f4:57:04:ae:fe:32:59:17:b6:93: a9:1f:50:73:1a:e2:92:22:23:a0:54:42:ae:dc:e1:3e:e8:7c: 12:a3:22:7c:01:6b:73:e6:8b:b8:6f:07:ff:bd:63:c6:0a:6f: 57:26:ab:21:b9:36:77:09:8b:57:f7:e4:d3:23:ee:3a:c2:17: 62:bf:69:fe:2e:2f:14:99:de:74:bf:46:fd:3e:96:fb:71:23: 74:77:17:69:20:a4:20:48:b3:b1:fe:57:e9:09:1c:c4:5f:54: 6c:60:e8:ab:51:56:75:7a:75:27:14:71:4f:ef:9d:b6:a5:f7: e8:bf:36:ac:ab:98:a2:10:f9:d6:6c:5c:43:f3:b9:04:e7:07: 91:af:1a:1b:17:18:5a:52:e6:6d:c0:ef:92:f7:6c:ba:83:e5: 7c:78:c6:75:1c:8c:8a:d3:8d:89:5f:50:1e:0f:d0:c5:51:bd: 76:f8:ca:89:2d:ec:00:2a:84:65:86:a6:95:67:da:d9:59:85: d5:90:f0:41:ff:63:82:14:21:ad:67:e0:55:8d:66:b9:e7:ec: ab:c0:9d:51:4f:e6:b5:f2:e2:0d:c5:32:ab:d5:0e:ab:21:0a: d3:97:10:d9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPsMizMCWrv4CIY/ZQ44Tx88vf6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD OEExOTUyRTAeFw0yNjA5MTAyMjEyMjJaFw0yNjA5MTQwNTU4MjJaMDMxMTAvBgNV BAMTKENBNzAxNTlENUJGNDI2NjAzMEZDODU1MTY5QUU2MzUyNUI2MUM3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEK6XYT3N8ngaM9YVwX1z75Us5 q3J14uSHcQ2dTXL3QBTzN0Q/N6k8VEcHR4GSQFbc//PS8b0v2OF4PZN2KTaCPHzC XjWaAo+bpoz62gqTUfTsrDP4pgV6EJ3OzCgoTCsAD989kvpXaEV/xb8bPmKgm+g+ LDZcPs8J4zT9jMCaMajeFD9ks0mDKsvNVDZ/hrIsbHU/Ga46O/HSPCMIkySmAB4L rb3e/isc5oUjbngiutVaGiOkLtoISJl4RYMerZoC9iOgY/bO9J90Z5CklqIPzKU5 KPU209UT9wOKEWpW4YECnWN+kMHq1W8v5bYw6o29OKqe2RqsIV9dPaQKstVZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUynAVnVv0JmAw/IVRaa5jUlthx8EwHwYDVR0j BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3 MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDE4MTU4NDU5OTQ0OTkvMC9DRDJBQjEzQTQ0NEJG RTE5NDkzMTg2NDM0RUU4NzJDRUM4QTE5NTJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2/QxDkwUMra VAXqtuvKcF+ziLB3kfnMW730VwSu/jJZF7aTqR9QcxrikiIjoFRCrtzhPuh8EqMi fAFrc+aLuG8H/71jxgpvVyarIbk2dwmLV/fk0yPuOsIXYr9p/i4vFJnedL9G/T6W +3EjdHcXaSCkIEizsf5X6QkcxF9UbGDoq1FWdXp1JxRxT++dtqX36L82rKuYohD5 1mxcQ/O5BOcHka8aGxcYWlLmbcDvkvdsuoPlfHjGdRyMitONiV9QHg/QxVG9dvjK iS3sACqEZYamlWfa2VmF1ZDwQf9jghQhrWfgVY1muefsq8CdUU/mtfLiDcUyq9UO qyEK05cQ2Q== -----END CERTIFICATE-----Generated at Fri Sep 11 00:24:07 2026 by rpki-client