$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft File: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft (raw, json) Hash identifier: Xppz+tjOqDGnpXPuDk3M0133oDLWOkfp7Sf7PMMA0qU= Subject key identifier: 92:E4:C4:BE:0E:DA:C8:EA:4E:3F:EE:13:2B:42:D7:79:B1:AD:8D:79 Authority key identifier: CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 Certificate issuer: /CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Certificate serial: 42C90CE4E3E983940E02811AD21CB8FF5D34277D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft Manifest number: 12 Signing time: Fri 29 May 2026 18:03:04 +0000 Manifest this update: Fri 29 May 2026 17:58:04 +0000 Manifest next update: Sat 30 May 2026 21:26:04 +0000 Files and hashes: 1: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl (hash: XCZcOwDdx4JiK8C7czQ6Ma5T6p6j08WKwRwD4SMN08U=) 2: 3130332e3131382e35322e302f32322d3232203d3e2034383038.roa (hash: Xoed/rVl3qutv9Zq8jRPphX8ViBicQo/g46B0NkCxg4=) 3: 3130332e3131382e35342e302f32342d3234203d3e2034383038.roa (hash: QBdwKwmiJSDtwraFhZzAr79SFiWotZ4Xhn5ZCBGE5Fg=) 4: 3130332e3131382e35322e302f32342d3234203d3e2034383038.roa (hash: t+UcDtfuQc57H7Nf+QogZp2E/pRJKxaQ+uABOn1R814=) 5: 3130332e3131382e35322e302f32322d3232203d3e2034383437.roa (hash: xq72NdzM2QgKl+fSZk9EQ3yZcWKD6a9nLN9KDnpJwEU=) 6: 3130332e3131382e35352e302f32342d3234203d3e2034383038.roa (hash: OUMKjqnkkGp3PVwr7CXbPojjV56LxWcDa/5MEngiGbw=) 7: 3130332e3131382e35332e302f32342d3234203d3e2034383038.roa (hash: ZyH5igDdJdH1Qu3ydszfBwsotmmkbRAGBxTqOzB+BZ8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c9:0c:e4:e3:e9:83:94:0e:02:81:1a:d2:1c:b8:ff:5d:34:27:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Validity Not Before: May 29 17:58:04 2026 GMT Not After : May 30 21:26:04 2026 GMT Subject: CN=92E4C4BE0EDAC8EA4E3FEE132B42D779B1AD8D79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:7e:7d:3a:c5:10:2a:f6:32:18:b3:b8:de: 2a:9e:23:06:ce:61:8b:f9:5b:bf:fe:6a:12:e3:4d: cd:ca:ac:b9:a4:db:83:46:18:80:2b:32:46:0f:31: e0:8f:89:97:49:a4:40:5f:d4:1d:8b:ab:6a:40:f6: ca:ab:91:26:90:d6:16:5c:33:64:40:b3:e8:24:01: 4e:f4:ad:99:b2:2e:12:74:9d:e4:eb:d5:52:f8:05: 27:81:2f:09:ed:b3:25:41:ce:35:57:62:59:38:ea: bb:80:04:cc:4e:28:78:5c:c8:8a:d9:cb:37:3b:40: 3e:c1:e3:0f:44:a2:37:a8:34:95:ad:c2:fc:35:9a: b2:bf:b9:6a:43:01:f2:7d:fd:00:16:8a:87:1a:9c: de:bb:3f:40:ae:56:1e:08:10:1b:f0:ef:e4:49:02: 7f:f4:f1:db:89:15:56:cd:37:b9:4a:0b:55:ea:f2: 87:de:69:d9:71:08:2d:93:52:41:d8:4f:85:d7:30: 6e:d2:a3:86:e9:8b:3f:53:4c:8d:4e:d2:1b:a8:e2: d8:d7:d1:27:bd:d7:ca:76:3c:fa:66:95:e1:65:aa: 50:68:bc:3f:a0:39:95:e3:90:7b:fa:e5:74:2d:0c: b2:76:9c:f2:6d:9a:56:39:44:7d:fc:ad:67:20:11: a0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E4:C4:BE:0E:DA:C8:EA:4E:3F:EE:13:2B:42:D7:79:B1:AD:8D:79 X509v3 Authority Key Identifier: keyid:CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:22:c6:7f:72:d1:53:8f:64:a9:8a:67:e2:3f:2d:e1:18:3b: b6:3b:31:8f:07:95:9a:cb:fc:23:cc:b7:4c:3e:da:87:a6:bd: 7a:aa:c1:47:7e:bf:e0:0b:98:e4:58:30:04:27:92:65:30:b2: 56:0d:8e:26:57:d3:8c:f7:a5:27:15:c7:c1:1d:bf:22:0e:13: 0f:2e:c7:6b:4c:33:12:56:dc:a0:6f:08:b2:c0:30:9b:ab:38: c0:72:d5:ab:8a:98:e3:c3:1a:93:32:0e:65:8b:45:87:f2:5b: 54:c7:c0:1c:83:f0:97:63:8d:fd:f9:7e:89:06:79:79:29:4b: bc:5f:6a:c1:d3:7e:00:d5:fb:14:50:96:c0:96:83:47:93:dc: 80:2d:da:55:5d:6b:dc:00:c8:aa:9e:f9:4b:4e:7c:db:e0:63: b8:cc:77:d6:47:20:91:aa:df:fc:76:ee:18:f8:5a:b8:b1:fe: f6:38:4e:5e:c8:43:f7:72:fe:1e:45:65:bf:14:46:c0:39:fd: d7:fb:6c:5d:e3:93:85:31:b6:c9:0b:f2:65:22:03:84:ef:91: 56:ee:13:d2:92:68:b7:ff:70:5f:ec:0c:03:6a:db:7c:af:2e: 5e:27:c4:c3:2d:fd:da:c2:c8:1e:66:d7:80:ba:54:29:5c:44: ce:f9:5a:3a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQskM5OPpg5QOAoEa0hy4/100J30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgw RUNEQ0RGODAeFw0yNjA1MjkxNzU4MDRaFw0yNjA1MzAyMTI2MDRaMDMxMTAvBgNV BAMTKDkyRTRDNEJFMEVEQUM4RUE0RTNGRUUxMzJCNDJENzc5QjFBRDhENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzx359OsUQKvYyGLO43iqeIwbO YYv5W7/+ahLjTc3KrLmk24NGGIArMkYPMeCPiZdJpEBf1B2Lq2pA9sqrkSaQ1hZc M2RAs+gkAU70rZmyLhJ0neTr1VL4BSeBLwntsyVBzjVXYlk46ruABMxOKHhcyIrZ yzc7QD7B4w9EojeoNJWtwvw1mrK/uWpDAfJ9/QAWiocanN67P0CuVh4IEBvw7+RJ An/08duJFVbNN7lKC1Xq8ofeadlxCC2TUkHYT4XXMG7So4bpiz9TTI1O0huo4tjX 0Se918p2PPpmleFlqlBovD+gOZXjkHv65XQtDLJ2nPJtmlY5RH38rWcgEaAPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkuTEvg7ayOpOP+4TK0LXebGtjXkwHwYDVR0j BBgwFoAUzbsbPNe6o3iwGhXynzMvSA7NzfgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODU5NjEwOTE4MzI4NzMxNS8wL0NEQkIxQjNDRDdCQUEzNzhCMDFBMTVGMjlGMzMy RjQ4MEVDRENERjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgwRUNEQ0RGOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg1OTYxMDkxODMyODczMTUvMC9DREJCMUIzQ0Q3QkFB Mzc4QjAxQTE1RjI5RjMzMkY0ODBFQ0RDREY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSLGf3LRU49k qYpn4j8t4Rg7tjsxjweVmsv8I8y3TD7ah6a9eqrBR36/4AuY5FgwBCeSZTCyVg2O JlfTjPelJxXHwR2/Ig4TDy7Ha0wzElbcoG8IssAwm6s4wHLVq4qY48MakzIOZYtF h/JbVMfAHIPwl2ON/fl+iQZ5eSlLvF9qwdN+ANX7FFCWwJaDR5PcgC3aVV1r3ADI qp75S0582+BjuMx31kcgkarf/HbuGPhauLH+9jhOXshD93L+HkVlvxRGwDn91/ts XeOThTG2yQvyZSIDhO+RVu4T0pJot/9wX+wMA2rbfK8uXifEwy392sLIHmbXgLpU KVxEzvlaOg== -----END CERTIFICATE-----Generated at Fri May 29 22:02:49 2026 by rpki-client