$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft File: CCB400245E6C2E159A469D4699195E08ECCE5250.mft (raw, json) Hash identifier: 7odF0ZUkjDb5zzVR1/ZTTSz0Uc0P0V49go9XHAtYoWk= Subject key identifier: FA:6D:9A:98:4C:EC:DF:25:0D:E1:6A:9E:36:34:D0:87:01:A4:E9:1D Authority key identifier: CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 Certificate issuer: /CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Certificate serial: 259056B2F5D79EAE3A6E3FD6832712E56DD8C545 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft Manifest number: 44 Signing time: Tue 14 Jul 2026 10:06:01 +0000 Manifest this update: Tue 14 Jul 2026 10:01:01 +0000 Manifest next update: Wed 15 Jul 2026 10:32:01 +0000 Files and hashes: 1: 3230332e37392e302e302f32302d3233203d3e2034383337.roa (hash: iZk0qBKAsJdjY7IihKFZpnUxC226AAiytnSm3L2t6F8=) 2: CCB400245E6C2E159A469D4699195E08ECCE5250.crl (hash: dChf7KrZqJUWFml41DrZ8iP23FU4o+ujHlWQTwrGUtk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 10:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:90:56:b2:f5:d7:9e:ae:3a:6e:3f:d6:83:27:12:e5:6d:d8:c5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Validity Not Before: Jul 14 10:01:01 2026 GMT Not After : Jul 15 10:32:01 2026 GMT Subject: CN=FA6D9A984CECDF250DE16A9E3634D08701A4E91D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:10:33:2d:e9:1b:cb:7e:7b:69:88:d5:fa: 9e:48:9b:43:b3:8a:8a:44:ea:57:25:e3:23:ea:cd: 91:7d:4a:ab:f2:8d:d8:aa:ec:ba:2d:62:ca:05:ab: 84:c9:3d:82:71:4e:03:a0:47:0a:21:47:2b:68:62: f5:9b:68:0d:07:71:12:9f:2a:0b:3f:05:0f:00:09: e5:01:b8:6d:5b:a4:8b:19:8a:70:da:4e:b9:cc:72: 7b:1a:71:23:60:4d:f3:9e:fb:8f:9e:cc:31:77:a1: cf:32:55:a6:24:46:09:fb:2d:8e:e4:5b:09:d5:e6: f6:de:1b:33:ac:0d:a4:db:f1:af:28:3b:da:16:4a: e7:28:65:39:70:c6:b9:db:28:ad:2d:84:fd:c8:e7: 7d:6c:ab:22:44:19:df:84:b4:27:1d:53:13:9f:8d: 27:14:93:93:80:55:3e:6d:64:ed:a9:56:d3:3a:c2: e2:2c:12:4b:e0:1b:4f:28:66:29:86:21:53:96:7f: 35:18:eb:02:2b:77:53:1e:41:88:c3:f7:1f:bc:de: c4:a7:25:78:dd:aa:2c:5d:70:06:97:89:2d:e9:8b: 66:1f:7d:35:b6:87:af:28:d0:25:71:7b:28:e2:f8: 6d:7c:ba:55:65:92:47:c6:42:53:07:fb:c0:bd:cf: c4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6D:9A:98:4C:EC:DF:25:0D:E1:6A:9E:36:34:D0:87:01:A4:E9:1D X509v3 Authority Key Identifier: keyid:CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:7a:33:5c:10:0f:94:48:ae:8c:94:bb:2b:d2:24:45:f8:5b: f4:f0:c1:69:6a:b0:b9:53:b4:99:37:43:25:34:5b:66:9d:88: dc:92:94:fb:ce:41:6c:07:06:9a:9b:12:ee:2d:5c:0f:fc:b8: c0:49:0a:9b:e9:94:26:57:41:8c:84:83:9c:94:ec:5d:4b:87: ec:6a:37:1d:e8:39:79:ec:5c:12:41:f0:6c:0b:b5:46:84:e9: 6b:91:d2:57:97:fd:8d:68:1e:03:ab:e0:81:62:b4:4d:16:ba: 43:22:64:83:96:96:6b:39:83:77:2e:3b:3b:c8:42:84:94:19: 70:2a:79:b3:a6:7a:71:84:5a:dd:b6:f4:67:36:9a:11:b6:a7: 08:fd:1f:e8:34:38:d2:32:93:e5:5e:06:f1:ae:d5:0a:fe:2e: 19:83:52:00:2e:ef:8f:fe:05:cf:42:95:99:92:cb:72:27:91: f3:30:b3:41:12:98:1d:97:ca:f2:d2:2f:97:3d:66:ff:45:2e: b0:4b:b6:cd:24:9f:d4:cf:b5:06:06:fc:e4:fb:67:5b:64:4a: c0:58:82:f2:70:ae:f1:e9:f6:6d:88:2c:97:19:05:56:a2:dd: c3:55:17:e4:75:98:7f:ae:da:d4:aa:10:03:46:dc:ca:a0:72: c1:d6:b1:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJZBWsvXXnq46bj/WgycS5W3YxUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhF Q0NFNTI1MDAeFw0yNjA3MTQxMDAxMDFaFw0yNjA3MTUxMDMyMDFaMDMxMTAvBgNV BAMTKEZBNkQ5QTk4NENFQ0RGMjUwREUxNkE5RTM2MzREMDg3MDFBNEU5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6RAzLekby357aYjV+p5Im0Oz iopE6lcl4yPqzZF9Sqvyjdiq7LotYsoFq4TJPYJxTgOgRwohRytoYvWbaA0HcRKf Kgs/BQ8ACeUBuG1bpIsZinDaTrnMcnsacSNgTfOe+4+ezDF3oc8yVaYkRgn7LY7k WwnV5vbeGzOsDaTb8a8oO9oWSucoZTlwxrnbKK0thP3I531sqyJEGd+EtCcdUxOf jScUk5OAVT5tZO2pVtM6wuIsEkvgG08oZimGIVOWfzUY6wIrd1MeQYjD9x+83sSn JXjdqixdcAaXiS3pi2YffTW2h68o0CVxeyji+G18ulVlkkfGQlMH+8C9z8TXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+m2amEzs3yUN4WqeNjTQhwGk6R0wHwYDVR0j BBgwFoAUzLQAJF5sLhWaRp1GmRleCOzOUlAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg4MjkxNTgxOTU1Mjc4Ny8wL0NDQjQwMDI0NUU2QzJFMTU5QTQ2OUQ0Njk5MTk1 RTA4RUNDRTUyNTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhFQ0NFNTI1MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4ODI5MTU4MTk1NTI3ODcvMC9DQ0I0MDAyNDVFNkMy RTE1OUE0NjlENDY5OTE5NUUwOEVDQ0U1MjUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXozXBAPlEiu jJS7K9IkRfhb9PDBaWqwuVO0mTdDJTRbZp2I3JKU+85BbAcGmpsS7i1cD/y4wEkK m+mUJldBjISDnJTsXUuH7Go3Heg5eexcEkHwbAu1RoTpa5HSV5f9jWgeA6vggWK0 TRa6QyJkg5aWazmDdy47O8hChJQZcCp5s6Z6cYRa3bb0ZzaaEbanCP0f6DQ40jKT 5V4G8a7VCv4uGYNSAC7vj/4Fz0KVmZLLcieR8zCzQRKYHZfK8tIvlz1m/0UusEu2 zSSf1M+1Bgb85PtnW2RKwFiC8nCu8en2bYgslxkFVqLdw1UX5HWYf67a1KoQA0bc yqBywdaxjQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:09:32 2026 by rpki-client