$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft File: CCB400245E6C2E159A469D4699195E08ECCE5250.mft (raw, json) Hash identifier: hLswGw973Uiw2+Ch7iR20a6pB2RVHhHFOLbekY38RlA= Subject key identifier: 99:DB:21:93:74:6C:94:44:51:61:87:79:5D:A7:7F:82:C9:26:09:D2 Authority key identifier: CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 Certificate issuer: /CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Certificate serial: 7AE81CC222B249B1FD076CE32E35FD584BD07DDB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft Manifest number: 81 Signing time: Fri 28 Aug 2026 06:47:52 +0000 Manifest this update: Fri 28 Aug 2026 06:42:52 +0000 Manifest next update: Mon 31 Aug 2026 08:10:52 +0000 Files and hashes: 1: 3230332e37392e302e302f32302d3233203d3e2034383337.roa (hash: iZk0qBKAsJdjY7IihKFZpnUxC226AAiytnSm3L2t6F8=) 2: CCB400245E6C2E159A469D4699195E08ECCE5250.crl (hash: FmxoP22wyv/GGwDNKS7MGAJRsLBwySZFmYBPrVL0U7g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e8:1c:c2:22:b2:49:b1:fd:07:6c:e3:2e:35:fd:58:4b:d0:7d:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Validity Not Before: Aug 28 06:42:52 2026 GMT Not After : Aug 31 08:10:52 2026 GMT Subject: CN=99DB2193746C9444516187795DA77F82C92609D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:05:0a:7a:5a:0e:89:ff:f2:ba:43:af:8f:c6: d0:a3:3b:45:f8:d5:73:60:58:bc:b5:ae:94:70:0e: 7f:7f:f3:c2:24:2b:56:2a:07:9a:b0:7e:69:57:48: 35:3a:b1:d8:ab:0a:82:e6:84:c7:6e:b2:da:ca:6f: f0:bb:4c:59:d7:9e:b6:a1:2d:9a:c6:d2:f1:a9:bb: 7d:a6:46:19:e7:eb:bd:6b:51:8e:66:51:3d:05:dc: 7e:c6:ec:26:d3:69:02:77:58:91:89:2e:3e:0b:b5: 43:70:84:2b:7e:5a:36:68:79:ef:c9:36:c0:2b:91: 42:15:ce:8c:ad:76:46:44:92:b0:de:a3:11:87:8e: 66:42:32:ba:2c:da:ca:be:ec:ab:0d:73:dd:74:89: 6a:be:46:f0:8c:5e:94:a9:23:d1:f3:2a:83:16:97: 24:9c:bc:70:06:81:b7:da:f9:0e:84:89:03:e9:d6: f9:14:73:14:63:48:39:18:15:02:e7:15:07:16:e0: 53:54:2a:83:2e:d6:c1:02:c8:6c:ae:65:92:d8:a0: 2b:b5:a5:b1:b8:16:6f:3f:f0:19:e8:0e:eb:5c:bc: 5b:8c:3c:1d:c9:17:b3:1d:2d:22:5f:fa:36:91:d9: 1b:bb:12:c2:1d:fe:d1:a7:e0:33:6a:51:1d:06:fa: cf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DB:21:93:74:6C:94:44:51:61:87:79:5D:A7:7F:82:C9:26:09:D2 X509v3 Authority Key Identifier: keyid:CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:50:34:6e:04:fe:2b:00:dc:8b:9b:f4:1e:ed:fc:c6:bb:0c: 79:05:29:1a:b0:b7:c4:36:33:6e:89:3d:f2:fb:ac:87:b8:4a: be:69:c5:93:5b:c1:f6:62:64:fb:3e:c2:18:51:f2:21:31:57: 1b:23:3c:53:28:65:e6:7d:2f:f6:b3:d2:5f:8e:c6:02:c0:06: fe:55:69:a3:e1:60:dc:85:d6:81:26:cb:98:22:0e:65:26:ed: b1:14:b2:fe:12:a0:3e:8c:51:40:88:f7:8a:e1:d3:20:ee:f4: b2:d2:bd:98:3f:1f:36:a9:11:34:4f:3e:a6:ed:6a:2a:7c:01: 63:c7:35:2e:6d:21:5e:3e:92:2b:5a:20:94:fc:8b:bc:42:56: 89:a7:e5:67:bf:c2:6a:90:1c:58:91:1b:45:1f:bf:22:b2:73: 6d:af:ab:52:53:78:55:f2:21:43:ca:3b:f3:8d:0e:05:31:64: a5:44:ce:b1:0a:d3:23:53:d3:8e:b1:3f:65:e4:9d:60:4f:35: a5:bb:04:1d:d4:66:3b:27:8c:16:cb:5b:5a:69:c7:48:97:62: d9:83:3a:18:a2:06:1a:2e:6b:99:0b:10:c3:50:4b:08:79:5f: b2:9e:83:e6:44:5a:fa:ab:fe:3f:6e:a7:ee:8d:7f:e3:2d:46: 60:f7:c3:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeugcwiKySbH9B2zjLjX9WEvQfdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhF Q0NFNTI1MDAeFw0yNjA4MjgwNjQyNTJaFw0yNjA4MzEwODEwNTJaMDMxMTAvBgNV BAMTKDk5REIyMTkzNzQ2Qzk0NDQ1MTYxODc3OTVEQTc3RjgyQzkyNjA5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrBQp6Wg6J//K6Q6+PxtCjO0X4 1XNgWLy1rpRwDn9/88IkK1YqB5qwfmlXSDU6sdirCoLmhMdustrKb/C7TFnXnrah LZrG0vGpu32mRhnn671rUY5mUT0F3H7G7CbTaQJ3WJGJLj4LtUNwhCt+WjZoee/J NsArkUIVzoytdkZEkrDeoxGHjmZCMros2sq+7KsNc910iWq+RvCMXpSpI9HzKoMW lyScvHAGgbfa+Q6EiQPp1vkUcxRjSDkYFQLnFQcW4FNUKoMu1sECyGyuZZLYoCu1 pbG4Fm8/8BnoDutcvFuMPB3JF7MdLSJf+jaR2Ru7EsId/tGn4DNqUR0G+s87AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmdshk3RslERRYYd5Xad/gskmCdIwHwYDVR0j BBgwFoAUzLQAJF5sLhWaRp1GmRleCOzOUlAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg4MjkxNTgxOTU1Mjc4Ny8wL0NDQjQwMDI0NUU2QzJFMTU5QTQ2OUQ0Njk5MTk1 RTA4RUNDRTUyNTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhFQ0NFNTI1MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4ODI5MTU4MTk1NTI3ODcvMC9DQ0I0MDAyNDVFNkMy RTE1OUE0NjlENDY5OTE5NUUwOEVDQ0U1MjUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlA0bgT+KwDc i5v0Hu38xrsMeQUpGrC3xDYzbok98vush7hKvmnFk1vB9mJk+z7CGFHyITFXGyM8 Uyhl5n0v9rPSX47GAsAG/lVpo+Fg3IXWgSbLmCIOZSbtsRSy/hKgPoxRQIj3iuHT IO70stK9mD8fNqkRNE8+pu1qKnwBY8c1Lm0hXj6SK1oglPyLvEJWiaflZ7/CapAc WJEbRR+/IrJzba+rUlN4VfIhQ8o7840OBTFkpUTOsQrTI1PTjrE/ZeSdYE81pbsE HdRmOyeMFstbWmnHSJdi2YM6GKIGGi5rmQsQw1BLCHlfsp6D5kRa+qv+P26n7o1/ 4y1GYPfDMg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:50 2026 by rpki-client