$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft File: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft (raw, json) Hash identifier: Jylz0S5GeBWI0qfiiBXAidfRqJ9HzyucBfGz9ffXOcU= Subject key identifier: B5:1C:3C:49:DF:D4:D3:42:50:79:97:BE:97:2E:88:08:DC:17:79:72 Authority key identifier: CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 Certificate issuer: /CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Certificate serial: 0659DCC10499BE675C95E1A5E39E65018528600D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft Manifest number: 9F Signing time: Mon 12 Oct 2026 21:27:22 +0000 Manifest this update: Mon 12 Oct 2026 21:22:22 +0000 Manifest next update: Fri 16 Oct 2026 03:57:22 +0000 Files and hashes: 1: 3130332e3131382e35322e302f32322d3232203d3e2034383038.roa (hash: Xoed/rVl3qutv9Zq8jRPphX8ViBicQo/g46B0NkCxg4=) 2: 3130332e3131382e35342e302f32342d3234203d3e2034383038.roa (hash: QBdwKwmiJSDtwraFhZzAr79SFiWotZ4Xhn5ZCBGE5Fg=) 3: 3130332e3131382e35352e302f32342d3234203d3e2034383038.roa (hash: OUMKjqnkkGp3PVwr7CXbPojjV56LxWcDa/5MEngiGbw=) 4: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl (hash: f6Jl93RzDXkaaDk9hB4HZjLZNh0Q2iHt1YyNOSsAQw0=) 5: 3130332e3131382e35332e302f32342d3234203d3e2034383038.roa (hash: ZyH5igDdJdH1Qu3ydszfBwsotmmkbRAGBxTqOzB+BZ8=) 6: 3130332e3131382e35322e302f32342d3234203d3e2034383038.roa (hash: t+UcDtfuQc57H7Nf+QogZp2E/pRJKxaQ+uABOn1R814=) 7: 3130332e3131382e35322e302f32322d3232203d3e2034383437.roa (hash: xq72NdzM2QgKl+fSZk9EQ3yZcWKD6a9nLN9KDnpJwEU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 03:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:59:dc:c1:04:99:be:67:5c:95:e1:a5:e3:9e:65:01:85:28:60:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Validity Not Before: Oct 12 21:22:22 2026 GMT Not After : Oct 16 03:57:22 2026 GMT Subject: CN=B51C3C49DFD4D342507997BE972E8808DC177972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:bb:09:83:9f:60:32:14:38:5b:e1:a8:c0: d5:6f:92:e9:17:1e:e8:fb:2d:ca:c6:a6:0f:23:b1: c2:dd:37:0d:77:94:a2:ae:97:07:65:95:13:f0:fa: 92:03:93:b8:22:75:cc:71:3c:8a:2c:60:bb:6f:42: 72:41:92:de:26:e3:5e:7a:7e:da:e0:b8:8e:a7:d3: 9d:0f:29:20:b7:ac:9b:d0:a6:26:89:de:e2:45:70: 96:3f:73:93:32:4a:97:3d:61:b1:e9:c5:cf:eb:80: d6:87:2e:1a:b7:f4:b4:2f:f1:92:92:d4:ce:d5:7b: 79:ca:00:9e:a8:ed:db:d8:46:2a:cc:a4:92:d2:ac: 87:0e:38:ea:12:0e:6b:d7:c0:fe:94:47:d0:d0:14: 25:ba:37:6f:e9:8e:23:c8:f5:e9:b7:c0:66:0b:2b: 8a:70:f9:59:60:30:5f:5c:f8:13:8c:00:af:fa:19: 16:eb:ec:31:7e:34:81:2b:f0:15:a6:c1:75:e5:7f: 24:b8:a6:a9:3e:eb:ff:e5:7c:24:24:98:01:c2:89: 5a:38:51:a9:91:7e:c3:5f:b4:28:68:84:16:b9:ec: f9:94:43:92:e3:83:f9:f6:d0:24:95:37:7e:5d:88: 2a:09:58:cf:b8:5e:a5:c5:cc:cc:07:d1:d9:27:72: b2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1C:3C:49:DF:D4:D3:42:50:79:97:BE:97:2E:88:08:DC:17:79:72 X509v3 Authority Key Identifier: keyid:CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a1:0b:77:a6:6f:4c:2a:72:04:43:77:4c:04:e8:4a:e3:2f: 7e:1b:24:16:c9:36:a0:38:9c:db:44:1c:b2:ee:de:5e:98:db: 4b:4c:28:5a:ab:27:22:15:f6:bf:2d:d2:d5:3f:2e:14:82:54: 4d:de:1c:0d:d9:05:e0:4e:8b:36:49:7e:75:c4:51:93:c3:3f: b7:fa:67:e5:38:a0:fb:4b:d1:2e:29:e2:5a:05:c1:a1:2b:ef: f3:3f:0f:8a:c6:dc:d0:70:fa:fb:47:32:fb:95:bc:50:3e:76: b3:da:ec:1c:cf:75:67:61:f6:ed:3a:4a:33:6d:8c:9a:38:fe: 28:6c:bb:4e:f4:5e:8f:56:33:31:96:09:98:b2:86:88:a9:5c: 8d:35:35:71:16:49:c6:9f:a5:6a:c0:c3:0d:bc:20:34:b4:c4: 16:c2:4e:97:ea:4e:f6:72:b2:ac:15:de:07:eb:a7:e5:7f:54: 50:fa:b9:33:80:ee:b8:b4:6a:23:76:cf:cd:37:33:ad:f6:7c: 60:e7:e5:c6:a7:09:5b:88:12:d0:c2:c6:03:5a:7d:02:3e:48: 80:ee:08:d4:b4:98:92:05:f0:42:e9:ae:5e:54:92:4f:80:8d: f4:ce:44:d0:89:b1:df:93:ab:98:c3:54:c2:9d:9e:e5:ac:5a: 30:55:d0:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBlncwQSZvmdcleGl455lAYUoYA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgw RUNEQ0RGODAeFw0yNjEwMTIyMTIyMjJaFw0yNjEwMTYwMzU3MjJaMDMxMTAvBgNV BAMTKEI1MUMzQzQ5REZENEQzNDI1MDc5OTdCRTk3MkU4ODA4REMxNzc5NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuW7sJg59gMhQ4W+GowNVvkukX Huj7LcrGpg8jscLdNw13lKKulwdllRPw+pIDk7gidcxxPIosYLtvQnJBkt4m4156 ftrguI6n050PKSC3rJvQpiaJ3uJFcJY/c5MySpc9YbHpxc/rgNaHLhq39LQv8ZKS 1M7Ve3nKAJ6o7dvYRirMpJLSrIcOOOoSDmvXwP6UR9DQFCW6N2/pjiPI9em3wGYL K4pw+VlgMF9c+BOMAK/6GRbr7DF+NIEr8BWmwXXlfyS4pqk+6//lfCQkmAHCiVo4 UamRfsNftChohBa57PmUQ5Ljg/n20CSVN35diCoJWM+4XqXFzMwH0dkncrLHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtRw8Sd/U00JQeZe+ly6ICNwXeXIwHwYDVR0j BBgwFoAUzbsbPNe6o3iwGhXynzMvSA7NzfgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODU5NjEwOTE4MzI4NzMxNS8wL0NEQkIxQjNDRDdCQUEzNzhCMDFBMTVGMjlGMzMy RjQ4MEVDRENERjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgwRUNEQ0RGOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg1OTYxMDkxODMyODczMTUvMC9DREJCMUIzQ0Q3QkFB Mzc4QjAxQTE1RjI5RjMzMkY0ODBFQ0RDREY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKELd6ZvTCpy BEN3TAToSuMvfhskFsk2oDic20Qcsu7eXpjbS0woWqsnIhX2vy3S1T8uFIJUTd4c DdkF4E6LNkl+dcRRk8M/t/pn5Tig+0vRLiniWgXBoSvv8z8Pisbc0HD6+0cy+5W8 UD52s9rsHM91Z2H27TpKM22Mmjj+KGy7TvRej1YzMZYJmLKGiKlcjTU1cRZJxp+l asDDDbwgNLTEFsJOl+pO9nKyrBXeB+un5X9UUPq5M4DuuLRqI3bPzTczrfZ8YOfl xqcJW4gS0MLGA1p9Aj5IgO4I1LSYkgXwQumuXlSST4CN9M5E0Imx35OrmMNUwp2e 5axaMFXQzg== -----END CERTIFICATE-----Generated at Thu Oct 15 00:16:46 2026 by rpki-client