$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft File: CCB400245E6C2E159A469D4699195E08ECCE5250.mft (raw, json) Hash identifier: +y2y21SD4Duspi2RZYsTLL/dkJDwRJFPrMgsRbr/85Q= Subject key identifier: 2C:0C:E2:F5:E5:BB:58:C0:82:16:D1:2F:3B:2B:11:5F:17:9F:87:E3 Authority key identifier: CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 Certificate issuer: /CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Certificate serial: 2DC39B40D2C2A270D75AF2727F72C3D36F48BBC1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft Manifest number: 04 Signing time: Fri 29 May 2026 13:52:55 +0000 Manifest this update: Fri 29 May 2026 13:47:55 +0000 Manifest next update: Sat 30 May 2026 16:54:55 +0000 Files and hashes: 1: CCB400245E6C2E159A469D4699195E08ECCE5250.crl (hash: 7agy9lypQQc/AaPiaZpbL+KdFcl/fYkZ82oD+AblULw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c3:9b:40:d2:c2:a2:70:d7:5a:f2:72:7f:72:c3:d3:6f:48:bb:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Validity Not Before: May 29 13:47:55 2026 GMT Not After : May 30 16:54:55 2026 GMT Subject: CN=2C0CE2F5E5BB58C08216D12F3B2B115F179F87E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:f2:1b:1a:2c:16:44:d8:e9:c3:ab:b5:fd: 4e:d9:8d:fb:e5:9a:ea:2f:52:3d:5f:93:6b:2d:ae: 81:5f:97:b7:23:45:97:59:c0:33:16:ca:10:f6:49: 85:2f:3d:18:fd:68:63:d4:13:b3:75:da:75:10:bb: dd:a9:16:10:05:65:55:1f:e6:16:7a:3e:70:67:09: 4a:9b:7a:38:5b:4e:bb:d6:39:4a:a6:a8:9d:38:f1: 85:49:c5:be:7b:f6:3b:dd:7e:73:38:c3:7b:6f:a8: fa:ae:3c:94:3a:62:70:9c:64:ee:4e:b4:9b:29:64: db:ee:e3:67:fd:29:41:7a:eb:19:8d:4d:07:9d:6f: 18:a1:ff:37:ae:48:56:00:ce:4a:a2:40:f8:1b:3d: e3:f3:6b:f7:24:2d:a8:7d:65:6e:e6:50:e7:7b:6a: a6:95:4f:a3:7d:36:ca:11:d9:15:b9:d8:5a:55:a7: 82:08:41:e7:0b:a9:b6:ff:ba:60:41:49:0a:43:d7: 52:82:ff:44:67:7b:2d:0d:84:80:51:5a:9e:db:1b: da:cd:f7:0a:c4:12:2e:aa:5f:48:1d:9d:7d:be:2c: 58:52:cf:52:93:f5:e3:c7:85:43:b6:fb:2e:26:49: 98:ef:d6:76:1f:72:2f:f3:78:4d:4b:f6:6a:da:e1: f8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0C:E2:F5:E5:BB:58:C0:82:16:D1:2F:3B:2B:11:5F:17:9F:87:E3 X509v3 Authority Key Identifier: keyid:CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b9:25:46:1c:95:ff:7b:15:e0:80:0c:99:27:eb:8a:ac:ff: 60:d8:cf:a5:f9:7e:f4:26:71:29:bd:08:70:be:cb:a8:12:c3: 0c:58:2a:aa:18:1c:c5:61:cf:90:e6:b7:03:f0:4d:c0:7f:58: 18:9a:93:7b:93:aa:ca:46:99:26:45:18:35:f3:13:53:b5:73: 90:9c:ac:8f:1d:92:2f:ae:11:ec:29:72:dd:07:73:62:56:e7: 59:c2:b4:69:53:49:ac:60:63:4e:ca:ad:f5:e5:dc:1d:cb:ec: 94:96:cd:1e:c6:c0:1b:72:a8:d7:48:fc:f2:d0:15:dd:e6:72: 4e:fb:43:87:25:fb:01:68:ec:cc:44:a1:b0:e3:24:4e:39:12: 76:1c:41:90:f0:ef:ca:d2:f7:07:d5:5a:3b:17:4a:02:4f:af: c0:72:02:fc:41:57:64:ba:41:b9:f9:b2:62:65:4e:77:ea:fd: e0:28:39:ed:d8:75:ba:b5:41:80:5b:08:35:34:b6:46:af:15: d8:cb:07:53:4e:88:7f:1f:ea:fa:7e:97:5d:eb:e2:15:76:a8: b8:97:05:a2:ed:72:f8:0d:17:fd:f4:69:d8:76:9a:22:f2:a4: 41:38:c1:51:1c:6e:ad:c6:df:16:92:e7:49:d8:6f:93:79:e6: ef:8d:8b:59 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULcObQNLConDXWvJyf3LD029Iu8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhF Q0NFNTI1MDAeFw0yNjA1MjkxMzQ3NTVaFw0yNjA1MzAxNjU0NTVaMDMxMTAvBgNV BAMTKDJDMENFMkY1RTVCQjU4QzA4MjE2RDEyRjNCMkIxMTVGMTc5Rjg3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdfIbGiwWRNjpw6u1/U7Zjfvl muovUj1fk2stroFfl7cjRZdZwDMWyhD2SYUvPRj9aGPUE7N12nUQu92pFhAFZVUf 5hZ6PnBnCUqbejhbTrvWOUqmqJ048YVJxb579jvdfnM4w3tvqPquPJQ6YnCcZO5O tJspZNvu42f9KUF66xmNTQedbxih/zeuSFYAzkqiQPgbPePza/ckLah9ZW7mUOd7 aqaVT6N9NsoR2RW52FpVp4IIQecLqbb/umBBSQpD11KC/0Rney0NhIBRWp7bG9rN 9wrEEi6qX0gdnX2+LFhSz1KT9ePHhUO2+y4mSZjv1nYfci/zeE1L9mra4fjfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULAzi9eW7WMCCFtEvOysRXxefh+MwHwYDVR0j BBgwFoAUzLQAJF5sLhWaRp1GmRleCOzOUlAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg4MjkxNTgxOTU1Mjc4Ny8wL0NDQjQwMDI0NUU2QzJFMTU5QTQ2OUQ0Njk5MTk1 RTA4RUNDRTUyNTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhFQ0NFNTI1MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4ODI5MTU4MTk1NTI3ODcvMC9DQ0I0MDAyNDVFNkMy RTE1OUE0NjlENDY5OTE5NUUwOEVDQ0U1MjUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7klRhyV/3sV 4IAMmSfriqz/YNjPpfl+9CZxKb0IcL7LqBLDDFgqqhgcxWHPkOa3A/BNwH9YGJqT e5OqykaZJkUYNfMTU7VzkJysjx2SL64R7Cly3QdzYlbnWcK0aVNJrGBjTsqt9eXc HcvslJbNHsbAG3Ko10j88tAV3eZyTvtDhyX7AWjszEShsOMkTjkSdhxBkPDvytL3 B9VaOxdKAk+vwHIC/EFXZLpBufmyYmVOd+r94Cg57dh1urVBgFsINTS2Rq8V2MsH U06Ifx/q+n6XXeviFXaouJcFou1y+A0X/fRp2HaaIvKkQTjBURxurcbfFpLnSdhv k3nm742LWQ== -----END CERTIFICATE-----Generated at Fri May 29 22:03:28 2026 by rpki-client