$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft File: CD2AB13A444BFE19493186434EE872CEC8A1952E.mft (raw, json) Hash identifier: YfA8/S9rGQaQBGvmoaA2kr2FziVX5reR1pXD8vtqI3M= Subject key identifier: 7F:7E:CB:8E:C6:56:72:AD:44:A3:12:4C:0F:3D:90:ED:AA:0C:EF:17 Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Certificate serial: 3E46E14FA2531764F21F9B165E4AD1B787C60BDA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft Manifest number: 4D Signing time: Thu 11 Jun 2026 11:33:44 +0000 Manifest this update: Thu 11 Jun 2026 11:28:44 +0000 Manifest next update: Fri 12 Jun 2026 15:32:44 +0000 Files and hashes: 1: 3130332e37382e3132362e302f32332d3233203d3e2034383437.roa (hash: X0iD6rj5LsFjlWutUYZ76kK04W1xa6nb2omOPTwXuf0=) 2: 3130332e37382e3132362e302f32332d3233203d3e203633363534.roa (hash: ZP+h20JkWqSxKh8vbW484Nj0Ejp6CZykPD9jcY7GQqk=) 3: CD2AB13A444BFE19493186434EE872CEC8A1952E.crl (hash: KWyCw5hWidXfzI+AtPzhTtxqxq3UeRGDCJ4wIgCr4O4=) 4: 3130332e37382e3132342e302f32322d3232203d3e203633363534.roa (hash: uYs6fO1/g3sgQhRLmL6xn7AxEm3lgSIqHQsxteKIieA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 15:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:46:e1:4f:a2:53:17:64:f2:1f:9b:16:5e:4a:d1:b7:87:c6:0b:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Validity Not Before: Jun 11 11:28:44 2026 GMT Not After : Jun 12 15:32:44 2026 GMT Subject: CN=7F7ECB8EC65672AD44A3124C0F3D90EDAA0CEF17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ba:38:d3:68:69:eb:79:2b:0a:1e:71:1b:e9: be:d8:1e:eb:36:6d:c6:46:b3:5b:70:53:5d:fe:90: ff:d3:4f:e1:a5:35:25:5c:39:85:81:c6:78:e9:b4: 31:87:3c:fc:38:bb:b8:19:77:ba:b5:96:3a:43:47: 31:83:61:e4:36:41:e7:98:de:d3:72:61:fb:19:63: 7d:df:12:6f:eb:b5:43:29:b4:a7:be:b9:db:19:e0: 0e:75:b8:55:a1:5f:34:d8:e9:eb:b5:1b:d0:20:40: c4:88:d9:1d:c4:89:23:52:1e:76:30:84:fb:b6:4b: a0:46:87:07:42:3a:87:25:88:60:cb:c4:47:ca:35: c9:8c:28:5e:1f:dc:b4:fc:67:98:43:48:54:31:eb: 8f:4d:1b:e4:5e:d3:8b:ce:16:61:7f:11:40:21:c5: 2b:75:48:50:af:13:0c:a5:5d:25:f1:cd:0f:b2:7b: 63:7f:48:cd:a2:3b:fe:17:da:91:fb:a3:bb:80:53: 4c:84:4b:ec:2c:a4:36:69:cf:b9:c4:ee:13:e1:01: de:ba:75:5a:d8:ce:cc:c3:4d:6f:6b:33:ee:05:fd: 94:08:f4:d2:ad:9a:b9:75:f7:e5:bc:ac:10:b2:f5: fe:a3:39:ad:53:96:6b:0e:72:d2:54:04:ae:25:44: 83:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7E:CB:8E:C6:56:72:AD:44:A3:12:4C:0F:3D:90:ED:AA:0C:EF:17 X509v3 Authority Key Identifier: keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f2:fb:f2:21:5a:21:76:15:c6:87:e5:f3:a6:e7:5e:d8:1d: 6b:d8:42:8b:95:2c:54:36:d5:c6:e0:7d:99:60:86:24:90:a3: 37:8e:d5:cf:23:db:9d:a1:3b:f8:9a:2e:ad:f3:c5:f9:dd:d6: ae:da:fc:59:9a:c6:93:85:f9:1f:47:fe:50:85:25:f2:64:4a: a8:92:e0:9c:e9:9e:ef:47:21:de:9f:82:94:cf:f1:f7:75:63: 65:53:20:09:ef:7e:41:fb:df:8f:4e:55:e1:33:20:69:f7:8f: 6b:6b:91:50:8a:96:22:93:a5:0c:35:87:3f:01:18:da:3e:7f: df:7f:92:ee:f9:d7:5b:65:f8:94:b0:05:1c:5e:b9:bb:a1:ee: 75:87:86:5c:db:9e:a3:bf:e7:fa:b1:58:90:b6:b8:ea:19:ce: 59:d3:54:4d:cf:c3:87:76:c0:53:b6:86:3c:54:da:ba:ed:bd: 9c:24:3c:f8:e6:44:88:74:f0:e7:7f:68:8f:c9:26:40:c3:d7: 58:1b:b8:1f:d2:99:dc:d4:ac:10:f2:dd:b8:34:45:6b:26:1a: 6b:e8:ef:ca:16:2c:25:ab:08:e6:d9:82:0a:e7:60:91:eb:1f: f0:4e:19:4e:32:47:a9:41:e5:4c:19:7e:51:0e:65:dd:88:21: 44:d8:4e:8e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPkbhT6JTF2TyH5sWXkrRt4fGC9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD OEExOTUyRTAeFw0yNjA2MTExMTI4NDRaFw0yNjA2MTIxNTMyNDRaMDMxMTAvBgNV BAMTKDdGN0VDQjhFQzY1NjcyQUQ0NEEzMTI0QzBGM0Q5MEVEQUEwQ0VGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrujjTaGnreSsKHnEb6b7YHus2 bcZGs1twU13+kP/TT+GlNSVcOYWBxnjptDGHPPw4u7gZd7q1ljpDRzGDYeQ2QeeY 3tNyYfsZY33fEm/rtUMptKe+udsZ4A51uFWhXzTY6eu1G9AgQMSI2R3EiSNSHnYw hPu2S6BGhwdCOocliGDLxEfKNcmMKF4f3LT8Z5hDSFQx649NG+Re04vOFmF/EUAh xSt1SFCvEwylXSXxzQ+ye2N/SM2iO/4X2pH7o7uAU0yES+wspDZpz7nE7hPhAd66 dVrYzszDTW9rM+4F/ZQI9NKtmrl19+W8rBCy9f6jOa1TlmsOctJUBK4lRIO3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf37LjsZWcq1EoxJMDz2Q7aoM7xcwHwYDVR0j BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3 MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDE4MTU4NDU5OTQ0OTkvMC9DRDJBQjEzQTQ0NEJG RTE5NDkzMTg2NDM0RUU4NzJDRUM4QTE5NTJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfL78iFaIXYV xofl86bnXtgda9hCi5UsVDbVxuB9mWCGJJCjN47VzyPbnaE7+JourfPF+d3Wrtr8 WZrGk4X5H0f+UIUl8mRKqJLgnOme70ch3p+ClM/x93VjZVMgCe9+Qfvfj05V4TMg afePa2uRUIqWIpOlDDWHPwEY2j5/33+S7vnXW2X4lLAFHF65u6HudYeGXNueo7/n +rFYkLa46hnOWdNUTc/Dh3bAU7aGPFTauu29nCQ8+OZEiHTw539oj8kmQMPXWBu4 H9KZ3NSsEPLduDRFayYaa+jvyhYsJasI5tmCCudgkesf8E4ZTjJHqUHlTBl+UQ5l 3YghRNhOjg== -----END CERTIFICATE-----Generated at Fri Jun 12 03:53:46 2026 by rpki-client