$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft File: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft (raw, json) Hash identifier: nIUjLk3EW555ryzHfb4P5GCMoA9EaAXfjHlV05sgfiY= Subject key identifier: 89:47:D6:7D:4D:9E:7A:35:1C:BA:64:98:A4:63:05:90:50:92:AF:CF Authority key identifier: CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 Certificate issuer: /CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Certificate serial: 6E5608A8DE0749014AAB016CADC0BCFDFB3A5347 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft Manifest number: 8A Signing time: Fri 28 Aug 2026 06:47:48 +0000 Manifest this update: Fri 28 Aug 2026 06:42:48 +0000 Manifest next update: Mon 31 Aug 2026 15:38:48 +0000 Files and hashes: 1: 3130332e3131382e35322e302f32342d3234203d3e2034383038.roa (hash: t+UcDtfuQc57H7Nf+QogZp2E/pRJKxaQ+uABOn1R814=) 2: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl (hash: I9xXSOIUXxz64seK5RmDxwnxHSfnhF2JtUfxCzLGy48=) 3: 3130332e3131382e35322e302f32322d3232203d3e2034383437.roa (hash: xq72NdzM2QgKl+fSZk9EQ3yZcWKD6a9nLN9KDnpJwEU=) 4: 3130332e3131382e35332e302f32342d3234203d3e2034383038.roa (hash: ZyH5igDdJdH1Qu3ydszfBwsotmmkbRAGBxTqOzB+BZ8=) 5: 3130332e3131382e35322e302f32322d3232203d3e2034383038.roa (hash: Xoed/rVl3qutv9Zq8jRPphX8ViBicQo/g46B0NkCxg4=) 6: 3130332e3131382e35342e302f32342d3234203d3e2034383038.roa (hash: QBdwKwmiJSDtwraFhZzAr79SFiWotZ4Xhn5ZCBGE5Fg=) 7: 3130332e3131382e35352e302f32342d3234203d3e2034383038.roa (hash: OUMKjqnkkGp3PVwr7CXbPojjV56LxWcDa/5MEngiGbw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:56:08:a8:de:07:49:01:4a:ab:01:6c:ad:c0:bc:fd:fb:3a:53:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Validity Not Before: Aug 28 06:42:48 2026 GMT Not After : Aug 31 15:38:48 2026 GMT Subject: CN=8947D67D4D9E7A351CBA6498A46305905092AFCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9c:5b:ee:7c:b1:99:38:7d:c7:8b:21:43:b3: f7:7f:36:f5:39:ec:e9:99:0e:07:a2:ac:0b:4c:63: a4:79:1c:b8:8a:c2:2a:70:18:f9:bd:07:86:58:c2: ec:78:64:d3:77:65:cc:33:f2:09:87:40:f3:a3:a5: 47:e8:5a:0d:6c:96:b3:5c:ed:66:8e:e1:8f:b7:3c: f2:be:65:ec:f2:25:36:d6:ea:5a:52:48:5f:00:98: 6e:d6:af:5c:8b:c9:cd:d7:cb:34:5e:f7:47:80:41: 0c:48:75:e0:18:23:8f:29:23:c3:73:6d:62:98:c6: f1:47:27:6e:27:86:91:27:fa:d9:1a:ce:00:f9:37: dc:50:c7:8f:13:4c:ad:70:3b:40:77:e4:98:25:77: c6:44:3a:61:80:a2:ff:c6:bd:f3:0e:c2:0e:97:7f: 36:49:01:80:3f:b9:04:7b:cb:5e:1e:a6:d7:b8:d0: b8:f9:13:c1:f8:6b:d3:59:14:a8:9a:e0:6e:62:c1: bf:4d:e2:56:c8:a0:4d:c1:13:d8:be:ba:36:7c:79: 05:0e:91:b4:79:d9:8b:77:21:28:f2:de:b4:6c:b4: 3e:7f:28:c0:dd:95:84:82:e3:3b:4b:08:b7:6b:fe: a9:32:f1:74:90:3a:7d:51:a2:30:0e:c4:45:53:69: 12:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:47:D6:7D:4D:9E:7A:35:1C:BA:64:98:A4:63:05:90:50:92:AF:CF X509v3 Authority Key Identifier: keyid:CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d9:1e:3b:59:4c:11:94:cf:46:78:e4:b0:0d:fc:e9:9f:c5: ba:c3:94:5e:84:a9:e1:f5:06:94:2b:b1:a9:f6:11:77:ca:60: 9b:16:6b:d9:04:b9:77:25:49:4b:60:b9:92:f6:f1:4b:24:07: a2:75:0a:16:2f:a5:b6:56:07:1d:d5:be:a9:7a:83:d1:a4:89: 43:16:76:a5:34:38:c1:7c:6a:1e:64:61:d0:82:19:d9:82:b5: 92:5e:a1:18:4d:ba:42:e4:f5:4d:17:f1:df:06:b6:c0:2f:4f: 87:a4:e5:ae:e3:30:1e:18:33:7a:87:e3:85:57:ec:96:8b:96: 8f:f3:9f:e6:da:2e:86:aa:3e:56:5e:07:ba:1c:2e:3a:23:e6: 7e:90:01:1a:ae:9d:df:7d:4d:d2:19:1c:e2:23:1e:15:f7:2a: df:a2:a1:3f:ce:04:81:64:ec:d1:88:9d:d1:ff:8b:8f:9a:a6: 2b:ad:0e:eb:db:30:ce:c6:84:2d:8d:0e:ae:fa:73:ce:47:df: aa:c4:37:fb:5e:3a:65:d3:c8:ae:dc:d2:10:c1:b0:64:0a:8c: 9f:78:67:5c:4b:86:54:17:19:ac:48:90:93:42:8f:c9:e6:92: bd:7e:39:1e:32:4b:39:0a:9c:92:7d:e9:71:1f:32:dc:1b:3f: 11:92:28:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUblYIqN4HSQFKqwFsrcC8/fs6U0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgw RUNEQ0RGODAeFw0yNjA4MjgwNjQyNDhaFw0yNjA4MzExNTM4NDhaMDMxMTAvBgNV BAMTKDg5NDdENjdENEQ5RTdBMzUxQ0JBNjQ5OEE0NjMwNTkwNTA5MkFGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUnFvufLGZOH3HiyFDs/d/NvU5 7OmZDgeirAtMY6R5HLiKwipwGPm9B4ZYwux4ZNN3Zcwz8gmHQPOjpUfoWg1slrNc 7WaO4Y+3PPK+ZezyJTbW6lpSSF8AmG7Wr1yLyc3XyzRe90eAQQxIdeAYI48pI8Nz bWKYxvFHJ24nhpEn+tkazgD5N9xQx48TTK1wO0B35Jgld8ZEOmGAov/GvfMOwg6X fzZJAYA/uQR7y14epte40Lj5E8H4a9NZFKia4G5iwb9N4lbIoE3BE9i+ujZ8eQUO kbR52Yt3ISjy3rRstD5/KMDdlYSC4ztLCLdr/qky8XSQOn1RojAOxEVTaRIVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiUfWfU2eejUcumSYpGMFkFCSr88wHwYDVR0j BBgwFoAUzbsbPNe6o3iwGhXynzMvSA7NzfgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODU5NjEwOTE4MzI4NzMxNS8wL0NEQkIxQjNDRDdCQUEzNzhCMDFBMTVGMjlGMzMy RjQ4MEVDRENERjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgwRUNEQ0RGOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg1OTYxMDkxODMyODczMTUvMC9DREJCMUIzQ0Q3QkFB Mzc4QjAxQTE1RjI5RjMzMkY0ODBFQ0RDREY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtkeO1lMEZTP RnjksA386Z/FusOUXoSp4fUGlCuxqfYRd8pgmxZr2QS5dyVJS2C5kvbxSyQHonUK Fi+ltlYHHdW+qXqD0aSJQxZ2pTQ4wXxqHmRh0IIZ2YK1kl6hGE26QuT1TRfx3wa2 wC9Ph6TlruMwHhgzeofjhVfslouWj/Of5touhqo+Vl4HuhwuOiPmfpABGq6d331N 0hkc4iMeFfcq36KhP84EgWTs0Yid0f+Lj5qmK60O69swzsaELY0OrvpzzkffqsQ3 +146ZdPIrtzSEMGwZAqMn3hnXEuGVBcZrEiQk0KPyeaSvX45HjJLOQqckn3pcR8y 3Bs/EZIolA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:40:00 2026 by rpki-client