$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft File: CD2AB13A444BFE19493186434EE872CEC8A1952E.mft (raw, json) Hash identifier: UUwHzCAVZ9CkDHl1Q8oxkD9yn8XDvqJoXt8awmtaUwo= Subject key identifier: 5B:2E:9C:23:D7:F6:29:54:16:20:42:90:0D:BC:74:47:9C:D3:59:3E Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Certificate serial: 0BD0E6187C69FAFC4D414901A689C2D18CA2AF56 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft Manifest number: CF Signing time: Mon 26 Oct 2026 06:13:28 +0000 Manifest this update: Mon 26 Oct 2026 06:08:28 +0000 Manifest next update: Thu 29 Oct 2026 13:05:28 +0000 Files and hashes: 1: 3130332e37382e3132362e302f32332d3233203d3e2034383437.roa (hash: X0iD6rj5LsFjlWutUYZ76kK04W1xa6nb2omOPTwXuf0=) 2: 3130332e37382e3132362e302f32332d3233203d3e203633363534.roa (hash: ZP+h20JkWqSxKh8vbW484Nj0Ejp6CZykPD9jcY7GQqk=) 3: CD2AB13A444BFE19493186434EE872CEC8A1952E.crl (hash: MdcLjxqyvHdIeVp4/sWMTE7RHIvYamui1S7wQH/OIko=) 4: 3130332e37382e3132342e302f32322d3232203d3e203633363534.roa (hash: uYs6fO1/g3sgQhRLmL6xn7AxEm3lgSIqHQsxteKIieA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 13:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d0:e6:18:7c:69:fa:fc:4d:41:49:01:a6:89:c2:d1:8c:a2:af:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Validity Not Before: Oct 26 06:08:28 2026 GMT Not After : Oct 29 13:05:28 2026 GMT Subject: CN=5B2E9C23D7F62954162042900DBC74479CD3593E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:c5:bb:60:a9:7c:38:6a:54:86:4b:93:49: 86:e7:a7:12:26:5c:b9:4a:4b:6a:df:d6:cd:82:fa: bf:41:b8:0b:b1:e7:c5:ee:d8:83:9f:cb:83:ac:fb: f2:b8:86:75:98:d1:59:25:54:7f:70:33:02:8d:54: e0:22:b0:3e:b9:e4:90:85:a2:ca:e6:45:ca:db:bb: 74:ec:d0:8b:cb:e5:c8:79:9d:22:6e:ce:39:50:b2: b0:aa:64:bb:46:b6:f9:91:05:0d:f5:b7:6a:2d:48: 48:5c:7e:14:12:aa:1c:1f:ba:88:de:54:a8:8e:5a: 32:70:1b:5a:5a:46:90:e1:e3:c4:7c:c3:4f:c7:aa: 4c:08:09:dd:f5:96:20:1a:82:5e:3f:ac:af:0a:32: d5:e6:b1:59:55:7f:5b:68:a5:fa:58:54:90:9e:45: 05:1e:e2:40:34:40:e0:77:3b:79:62:be:d7:8a:f7: a9:38:c5:6e:6c:2f:ff:26:e4:58:50:d1:1a:b1:bd: 7a:74:16:b1:4f:a3:a3:03:27:2a:38:25:db:87:24: 62:06:7a:11:4a:4c:d9:b3:47:31:d9:46:4f:d5:3f: a4:e6:fb:98:b9:63:ac:be:47:d4:34:79:66:5a:f2: 17:46:90:7b:b7:56:1c:f5:f0:cd:cc:37:5e:77:de: 3c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2E:9C:23:D7:F6:29:54:16:20:42:90:0D:BC:74:47:9C:D3:59:3E X509v3 Authority Key Identifier: keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:96:94:70:7c:3b:33:ec:32:7d:fe:e4:84:bc:e3:5c:25:b9: a6:d0:48:84:f1:57:a3:2a:1e:9e:5c:ca:61:63:a3:f5:10:ef: a2:09:62:e5:dd:dc:5e:ac:73:45:a1:59:07:42:9c:ab:88:7b: 2a:01:e0:d4:48:cf:56:aa:ca:6c:43:2e:10:7a:55:60:68:a0: 35:fc:73:4d:b2:52:b9:d8:b4:46:2e:e1:17:67:e1:0f:ba:f0: ea:2d:4e:2b:93:05:75:97:74:d6:07:fb:63:ed:f9:e5:c1:17: ce:c3:98:a8:09:79:85:95:27:b6:2a:5e:ac:fe:8d:3b:d6:8d: 98:fd:24:89:1c:53:ed:bd:ae:44:23:70:31:c8:55:87:b7:e8: 9c:67:bd:a7:15:8c:31:b8:86:e4:62:b7:a5:3d:fb:74:76:1e: e8:1a:bf:71:cb:47:3e:7f:dd:5c:ae:76:d1:fc:95:e0:54:a2: 7d:f2:b5:ef:ce:53:78:53:16:2c:12:d8:74:32:50:31:34:31: 8f:be:e7:59:c3:19:df:ba:e6:9c:45:fd:03:ff:e8:f3:7c:4f: 90:23:57:f2:c3:a9:ec:4c:54:b8:f0:1b:4b:cf:74:41:69:ca: 79:42:ff:7d:99:68:79:8b:5c:e2:c4:c3:21:88:f3:55:e9:dd: be:5d:08:6f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC9DmGHxp+vxNQUkBponC0Yyir1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD OEExOTUyRTAeFw0yNjEwMjYwNjA4MjhaFw0yNjEwMjkxMzA1MjhaMDMxMTAvBgNV BAMTKDVCMkU5QzIzRDdGNjI5NTQxNjIwNDI5MDBEQkM3NDQ3OUNEMzU5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHcW7YKl8OGpUhkuTSYbnpxIm XLlKS2rf1s2C+r9BuAux58Xu2IOfy4Os+/K4hnWY0VklVH9wMwKNVOAisD655JCF osrmRcrbu3Ts0IvL5ch5nSJuzjlQsrCqZLtGtvmRBQ31t2otSEhcfhQSqhwfuoje VKiOWjJwG1paRpDh48R8w0/HqkwICd31liAagl4/rK8KMtXmsVlVf1topfpYVJCe RQUe4kA0QOB3O3livteK96k4xW5sL/8m5FhQ0RqxvXp0FrFPo6MDJyo4JduHJGIG ehFKTNmzRzHZRk/VP6Tm+5i5Y6y+R9Q0eWZa8hdGkHu3Vhz18M3MN1533jwzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWy6cI9f2KVQWIEKQDbx0R5zTWT4wHwYDVR0j BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3 MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDE4MTU4NDU5OTQ0OTkvMC9DRDJBQjEzQTQ0NEJG RTE5NDkzMTg2NDM0RUU4NzJDRUM4QTE5NTJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZaUcHw7M+wy ff7khLzjXCW5ptBIhPFXoyoenlzKYWOj9RDvogli5d3cXqxzRaFZB0Kcq4h7KgHg 1EjPVqrKbEMuEHpVYGigNfxzTbJSudi0Ri7hF2fhD7rw6i1OK5MFdZd01gf7Y+35 5cEXzsOYqAl5hZUntiperP6NO9aNmP0kiRxT7b2uRCNwMchVh7fonGe9pxWMMbiG 5GK3pT37dHYe6Bq/cctHPn/dXK520fyV4FSiffK1785TeFMWLBLYdDJQMTQxj77n WcMZ37rmnEX9A//o83xPkCNX8sOp7ExUuPAbS890QWnKeUL/fZloeYtc4sTDIYjz Vendvl0Ibw== -----END CERTIFICATE-----Generated at Tue Oct 27 11:20:28 2026 by rpki-client