$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft File: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft (raw, json) Hash identifier: kmnYefIe4GFfNRzluFYduzW1RxOGZvCgNBffOggEAag= Subject key identifier: 16:D4:7F:36:16:B1:62:27:5E:23:FC:06:C1:FF:11:29:ED:06:08:5D Authority key identifier: CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 Certificate issuer: /CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Certificate serial: 6C3E0E74836A6F2AB06367EFF2507DD3BDF51A1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft Manifest number: 4E Signing time: Tue 14 Jul 2026 04:25:25 +0000 Manifest this update: Tue 14 Jul 2026 04:20:25 +0000 Manifest next update: Wed 15 Jul 2026 05:06:25 +0000 Files and hashes: 1: 3130332e3131382e35322e302f32322d3232203d3e2034383038.roa (hash: Xoed/rVl3qutv9Zq8jRPphX8ViBicQo/g46B0NkCxg4=) 2: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl (hash: ODK4JMdy4lE3J+hhkQytjQB72iK79x86mTV7nnhMkdo=) 3: 3130332e3131382e35322e302f32322d3232203d3e2034383437.roa (hash: xq72NdzM2QgKl+fSZk9EQ3yZcWKD6a9nLN9KDnpJwEU=) 4: 3130332e3131382e35342e302f32342d3234203d3e2034383038.roa (hash: QBdwKwmiJSDtwraFhZzAr79SFiWotZ4Xhn5ZCBGE5Fg=) 5: 3130332e3131382e35352e302f32342d3234203d3e2034383038.roa (hash: OUMKjqnkkGp3PVwr7CXbPojjV56LxWcDa/5MEngiGbw=) 6: 3130332e3131382e35332e302f32342d3234203d3e2034383038.roa (hash: ZyH5igDdJdH1Qu3ydszfBwsotmmkbRAGBxTqOzB+BZ8=) 7: 3130332e3131382e35322e302f32342d3234203d3e2034383038.roa (hash: t+UcDtfuQc57H7Nf+QogZp2E/pRJKxaQ+uABOn1R814=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 05:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:3e:0e:74:83:6a:6f:2a:b0:63:67:ef:f2:50:7d:d3:bd:f5:1a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Validity Not Before: Jul 14 04:20:25 2026 GMT Not After : Jul 15 05:06:25 2026 GMT Subject: CN=16D47F3616B162275E23FC06C1FF1129ED06085D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:43:16:c0:08:c4:94:f3:e2:dc:19:56:01:35: 99:a7:4f:f6:df:3d:5a:ca:b2:6e:f2:a5:fe:dc:43: ec:74:d8:00:0f:3b:12:4a:45:9d:11:08:a3:44:09: f9:96:6c:b7:62:00:8c:5f:90:47:b3:e6:90:29:be: 52:22:3f:0c:36:6d:95:b4:ad:91:2d:47:74:63:0c: b0:40:f9:2d:85:88:f3:09:4c:14:b9:c4:f0:08:fc: 01:01:b8:ee:a6:de:13:d1:9a:72:d6:0f:1d:8a:e7: 26:2f:cb:e5:f4:ff:2f:20:c7:f8:33:ae:12:85:aa: fa:af:b4:b3:d7:03:d6:54:86:41:4e:cb:1e:8f:5b: b5:c6:74:03:d0:f3:2c:b0:d2:37:d6:1e:a8:6b:f7: d8:cd:c5:41:95:0f:3e:a4:5d:11:fb:d6:fb:cb:48: 02:2d:b9:30:89:f9:2c:36:dc:b0:d9:21:d7:ba:a3: 0c:39:2e:e1:be:69:bc:32:5c:55:4a:ed:b0:14:97: c8:ff:b9:8c:9b:ef:18:e7:73:4f:3f:ca:8a:0f:02: e9:86:67:2a:ba:af:56:1c:81:6d:5b:98:36:bd:0e: 23:ff:cc:76:07:bc:ea:85:f9:50:a2:f0:a7:fa:1a: 38:7c:1a:87:21:b6:00:38:a0:2f:8c:2e:00:d8:9c: 10:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D4:7F:36:16:B1:62:27:5E:23:FC:06:C1:FF:11:29:ED:06:08:5D X509v3 Authority Key Identifier: keyid:CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1e:41:db:0d:94:c8:7d:99:19:b0:f7:6e:d1:f6:a5:ac:4e: 63:26:a0:b4:76:69:22:b0:cc:30:88:4e:5f:48:ab:7a:5a:80: 3f:b0:6b:16:82:60:b2:54:db:aa:11:a7:88:29:b3:8b:dd:da: ff:30:f1:c1:95:34:d0:ff:1b:b7:35:43:3d:36:ca:a0:4e:ed: 9b:75:25:1d:07:0c:d2:ea:04:af:97:9f:be:1d:5a:15:fe:2a: a7:08:5b:5d:58:4e:52:16:1b:64:70:f7:1f:f4:13:82:58:ae: bd:2e:f1:5b:ef:77:74:70:d4:29:a7:2d:e3:6a:bf:46:ab:50: 4f:ea:37:47:cb:e4:ad:43:2a:fe:67:08:c7:d3:8f:de:e7:5e: 3f:b2:8b:f9:83:71:65:a5:0a:ea:68:83:29:2c:6c:9c:64:99: ba:44:6f:e6:71:ec:da:00:2b:22:d7:f3:0d:01:6d:9e:24:58: 4d:0f:ae:cc:20:b1:03:ad:89:2d:51:40:44:83:ac:83:cf:37: d6:71:88:a9:50:2f:f5:7d:ad:f2:a0:7e:b0:d0:b1:76:dd:9c: 2c:8a:a0:a8:96:d7:e3:e5:4d:bf:c8:76:be:cd:7f:42:7b:8e: 35:43:1b:3c:05:a6:eb:6d:99:48:c3:b4:f8:5b:f0:a1:69:6a: 8a:28:fa:17 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbD4OdINqbyqwY2fv8lB90731Gh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgw RUNEQ0RGODAeFw0yNjA3MTQwNDIwMjVaFw0yNjA3MTUwNTA2MjVaMDMxMTAvBgNV BAMTKDE2RDQ3RjM2MTZCMTYyMjc1RTIzRkMwNkMxRkYxMTI5RUQwNjA4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQxbACMSU8+LcGVYBNZmnT/bf PVrKsm7ypf7cQ+x02AAPOxJKRZ0RCKNECfmWbLdiAIxfkEez5pApvlIiPww2bZW0 rZEtR3RjDLBA+S2FiPMJTBS5xPAI/AEBuO6m3hPRmnLWDx2K5yYvy+X0/y8gx/gz rhKFqvqvtLPXA9ZUhkFOyx6PW7XGdAPQ8yyw0jfWHqhr99jNxUGVDz6kXRH71vvL SAItuTCJ+Sw23LDZIde6oww5LuG+abwyXFVK7bAUl8j/uYyb7xjnc08/yooPAumG Zyq6r1YcgW1bmDa9DiP/zHYHvOqF+VCi8Kf6Gjh8GochtgA4oC+MLgDYnBBjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFtR/NhaxYideI/wGwf8RKe0GCF0wHwYDVR0j BBgwFoAUzbsbPNe6o3iwGhXynzMvSA7NzfgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODU5NjEwOTE4MzI4NzMxNS8wL0NEQkIxQjNDRDdCQUEzNzhCMDFBMTVGMjlGMzMy RjQ4MEVDRENERjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgwRUNEQ0RGOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg1OTYxMDkxODMyODczMTUvMC9DREJCMUIzQ0Q3QkFB Mzc4QjAxQTE1RjI5RjMzMkY0ODBFQ0RDREY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeh5B2w2UyH2Z GbD3btH2paxOYyagtHZpIrDMMIhOX0irelqAP7BrFoJgslTbqhGniCmzi93a/zDx wZU00P8btzVDPTbKoE7tm3UlHQcM0uoEr5efvh1aFf4qpwhbXVhOUhYbZHD3H/QT gliuvS7xW+93dHDUKact42q/RqtQT+o3R8vkrUMq/mcIx9OP3udeP7KL+YNxZaUK 6miDKSxsnGSZukRv5nHs2gArItfzDQFtniRYTQ+uzCCxA62JLVFARIOsg8831nGI qVAv9X2t8qB+sNCxdt2cLIqgqJbX4+VNv8h2vs1/QnuONUMbPAWm622ZSMO0+Fvw oWlqiij6Fw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:03:40 2026 by rpki-client