$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft File: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft (raw, json) Hash identifier: 3mkP+DVCVwesV2LaxZz0RVC0xXGsD5XRKWg/m0VaBJU= Subject key identifier: 5B:B3:6B:9E:E5:BB:9A:94:9D:DE:DB:8F:FB:B1:EF:EC:19:CB:99:6F Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E Certificate issuer: /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Certificate serial: 6246830F101760D340AE4CB0D95BC5052FF76F1E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft Manifest number: 4B Signing time: Sun 26 Jul 2026 18:12:14 +0000 Manifest this update: Sun 26 Jul 2026 18:07:14 +0000 Manifest next update: Mon 27 Jul 2026 18:16:14 +0000 Files and hashes: 1: 3130332e35372e3133362e302f32342d3234203d3e203539303634.roa (hash: 9xsJXOdXAuZCp2S7dPdlIF9LfPtLX/1I2u7JF+Qm/7s=) 2: 34352e3131372e37302e302f32342d3234203d3e203539303634.roa (hash: GolnmXyy2lhajh4DhEErHiZTYtdA+C7MnLTJ8QR+h00=) 3: 34352e3131372e37312e302f32342d3234203d3e203539303634.roa (hash: 1Y+Dh612RaqOJd6pDXHDbAj4lmDdl16U1NldnrDPKCw=) 4: 34352e3131372e36382e302f32342d3234203d3e203539303634.roa (hash: tYxUjp3xtdPTVjkycWWXB9adnoLWLKlyWFGDfc/+/pQ=) 5: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl (hash: UE5Xk849m5vpExz68jfPx894r0cKqZ7ZBzvsnaUVpFs=) 6: 3130332e35372e3133372e302f32342d3234203d3e203539303634.roa (hash: EhkLMd2zDyYJ51w/Sy0gxXGPOF2SNni4GumU+NZ9Ag0=) 7: 3130332e35372e3133392e302f32342d3234203d3e2034383437.roa (hash: cbxFaZtA0DoxRicp7QpsnTBUTzztA//mwgrvHEC1oqY=) 8: 34352e3131372e36392e302f32342d3234203d3e203539303634.roa (hash: KEOsUrMYTo7UB6tINn+uRJdhpQQWUcZgNgXhs7+3qhI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 18:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:46:83:0f:10:17:60:d3:40:ae:4c:b0:d9:5b:c5:05:2f:f7:6f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Validity Not Before: Jul 26 18:07:14 2026 GMT Not After : Jul 27 18:16:14 2026 GMT Subject: CN=5BB36B9EE5BB9A949DDEDB8FFBB1EFEC19CB996F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:da:8a:a5:3f:d4:37:4a:aa:8b:1a:f8:83: 4d:e9:41:d1:5d:61:c2:21:91:7b:fb:e1:d7:6a:55: 20:be:64:60:32:21:84:d1:3c:13:92:8a:d7:59:91: a7:51:19:95:a2:26:ee:db:e2:9e:fa:ce:53:69:69: 2e:55:aa:80:db:03:9e:ac:d7:3c:fe:85:eb:ae:4c: bb:eb:cf:ae:a1:91:4a:46:00:aa:8d:a1:21:6e:e8: 00:11:3d:b4:74:34:dc:f7:09:25:b5:df:29:41:b5: a1:e8:fb:93:df:9f:27:1c:45:b5:29:e0:eb:dd:45: af:a1:e1:08:75:4c:60:7f:0f:48:2d:ef:57:fa:eb: e5:48:5a:4d:7e:6b:18:ba:ab:f7:3d:c6:1c:2e:5a: 65:0b:26:45:97:a7:a5:e0:e0:03:d8:da:76:60:b4: 9a:45:80:f8:94:df:ac:de:31:20:ae:58:81:6e:27: 8a:f1:03:4a:14:62:92:28:03:34:f8:cb:8c:28:ba: d2:29:90:22:ab:f3:11:7f:54:02:c6:b4:b3:36:35: a5:76:00:4f:2b:e9:4e:b3:26:e5:49:78:0d:17:33: e7:85:23:ac:74:fd:60:7d:4a:c9:ef:6e:08:5d:df: 92:e0:07:ee:39:f5:9d:82:fb:1f:11:d0:c1:07:db: d5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B3:6B:9E:E5:BB:9A:94:9D:DE:DB:8F:FB:B1:EF:EC:19:CB:99:6F X509v3 Authority Key Identifier: keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ba:a5:0c:28:f8:8f:84:f6:30:04:40:b0:b8:d0:1a:83:a5: c6:e4:e6:af:76:31:73:6f:72:03:96:3b:e7:a2:71:2b:ab:04: f2:3e:fc:96:7f:eb:fa:89:cb:46:a3:bf:56:92:42:63:c7:0d: e7:c0:32:47:fa:e7:cd:35:3e:8a:bb:f1:3e:e6:d3:02:fd:cc: 72:78:8d:7b:6c:91:c1:3b:18:68:bd:ea:3d:f5:da:b3:4c:d9: 2b:0e:a3:42:66:57:e1:99:9e:a3:33:32:ef:e3:a2:4f:9d:70: 71:10:b8:d7:bb:63:af:a4:03:2b:14:f8:fa:d3:d8:5f:6f:90: 3c:86:84:a4:b5:b1:91:db:16:88:bf:a5:4e:8e:28:73:eb:e7: 09:6a:40:c3:c5:85:11:e8:8c:81:a6:b4:7c:bf:34:13:10:03: 31:de:39:00:4b:ac:52:ef:e1:cf:9f:bf:29:55:50:11:67:42: d9:9a:40:cf:fc:30:0d:a4:93:fb:08:62:81:f4:ff:85:3b:f3: 1b:4c:8f:14:15:97:1b:ef:27:3b:22:61:e5:47:c7:65:37:5c: d6:32:1b:be:44:60:fb:ce:c2:4e:c4:2c:13:13:04:5c:99:f1: 84:01:c5:90:4a:85:ad:9b:87:5f:9b:06:7e:f3:18:85:f0:17: bd:ba:91:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYkaDDxAXYNNArkyw2VvFBS/3bx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRB REU5MUUxRTAeFw0yNjA3MjYxODA3MTRaFw0yNjA3MjcxODE2MTRaMDMxMTAvBgNV BAMTKDVCQjM2QjlFRTVCQjlBOTQ5RERFREI4RkZCQjFFRkVDMTlDQjk5NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqtqKpT/UN0qqixr4g03pQdFd YcIhkXv74ddqVSC+ZGAyIYTRPBOSitdZkadRGZWiJu7b4p76zlNpaS5VqoDbA56s 1zz+heuuTLvrz66hkUpGAKqNoSFu6AARPbR0NNz3CSW13ylBtaHo+5PfnyccRbUp 4OvdRa+h4Qh1TGB/D0gt71f66+VIWk1+axi6q/c9xhwuWmULJkWXp6Xg4APY2nZg tJpFgPiU36zeMSCuWIFuJ4rxA0oUYpIoAzT4y4woutIpkCKr8xF/VALGtLM2NaV2 AE8r6U6zJuVJeA0XM+eFI6x0/WB9Ssnvbghd35LgB+459Z2C+x8R0MEH29XjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUW7NrnuW7mpSd3tuP+7Hv7BnLmW8wHwYDVR0j BBgwFoAUysQ+fdlksXIme9mLbYLVJK3pHh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDA5MjA4MTAyMzgxMTYwMy8wL0NBQzQzRTdERDk2NEIxNzIyNjdCRDk4QjZEODJE NTI0QURFOTFFMUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRBREU5MUUxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQwOTIwODEwMjM4MTE2MDMvMC9DQUM0M0U3REQ5NjRC MTcyMjY3QkQ5OEI2RDgyRDUyNEFERTkxRTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrqlDCj4j4T2 MARAsLjQGoOlxuTmr3Yxc29yA5Y756JxK6sE8j78ln/r+onLRqO/VpJCY8cN58Ay R/rnzTU+irvxPubTAv3McniNe2yRwTsYaL3qPfXas0zZKw6jQmZX4ZmeozMy7+Oi T51wcRC417tjr6QDKxT4+tPYX2+QPIaEpLWxkdsWiL+lTo4oc+vnCWpAw8WFEeiM gaa0fL80ExADMd45AEusUu/hz5+/KVVQEWdC2ZpAz/wwDaST+whigfT/hTvzG0yP FBWXG+8nOyJh5UfHZTdc1jIbvkRg+87CTsQsExMEXJnxhAHFkEqFrZuHX5sGfvMY hfAXvbqRqQ== -----END CERTIFICATE-----Generated at Mon Jul 27 11:36:04 2026 by rpki-client