$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft File: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft (raw, json) Hash identifier: AjLWWJFyAqAN7PwMXXoxXets3J/EgInznkqm9/BP3sM= Subject key identifier: 56:A3:3C:DB:FC:26:26:9E:DB:92:45:5E:85:04:64:E3:D5:4A:E0:2C Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Certificate serial: 0F433E3E34C77FB4D1139C32C3E69530B98D3FD2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft Manifest number: 4A Signing time: Mon 27 Jul 2026 08:43:44 +0000 Manifest this update: Mon 27 Jul 2026 08:38:44 +0000 Manifest next update: Tue 28 Jul 2026 09:02:44 +0000 Files and hashes: 1: 312e3131392e302e302f31372d3137203d3e203538383531.roa (hash: JS3bNo89jFxRPcoUjJ2KW3+dlS5F8ZfPoJOwJABerhE=) 2: 3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa (hash: iYYYGCpOqt0aQJSSD8PSpzbRMdT6sgK2gSOfuxf7KWY=) 3: 3131342e3131322e3133362e302f32312d3231203d3e203538383531.roa (hash: +jDDG9chHRqcyqWLGG+Yj0uT75vd7evZ1ioSDSj0JtM=) 4: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl (hash: Cx7Dlc9tsk8FEKNDluQDODsowNEDOa30lMvrtbsuZH8=) 5: 3130332e3234342e36342e302f32322d3232203d3e203538383531.roa (hash: bF8lXwImti0G2C5h9HUFWEwJAQE60tR62Vp1rdSFMcU=) 6: 312e3131392e3132342e302f32322d3232203d3e203538383531.roa (hash: cZFuiOH6cyFkDGUgid52B5+rCCUk1Je7maMmKWVlJrI=) 7: 3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa (hash: UzOtHYzkQbEQuGwE/udN6JYGU4x59h6zYKuWNYSyF5g=) 8: 3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa (hash: j5Rdo2Js55PNYoidEZ9f2WJvO7iSzLGP5wKzIv/CRG8=) 9: 3130332e31362e3132342e302f32322d3232203d3e203538383531.roa (hash: J03Bd745xFUmekCrtUpll59JIIiIgF2WNL6PFFMPGcc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:43:3e:3e:34:c7:7f:b4:d1:13:9c:32:c3:e6:95:30:b9:8d:3f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Validity Not Before: Jul 27 08:38:44 2026 GMT Not After : Jul 28 09:02:44 2026 GMT Subject: CN=56A33CDBFC26269EDB92455E850464E3D54AE02C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:81:b8:da:7c:92:31:4a:4f:99:49:b0:5f:9a: 0b:db:29:42:fb:e9:bf:fc:37:f7:0e:72:c1:fb:49: 79:bb:4f:e7:20:a3:9e:b8:75:b8:36:c1:87:aa:44: ec:ee:17:08:92:4d:22:15:2f:91:e9:9e:c6:0f:74: ce:b3:d3:36:c0:91:b9:52:75:41:62:6a:13:81:8e: 74:9b:fa:25:2c:56:c6:1c:71:85:ef:fc:d2:be:ff: bf:13:81:ad:2c:5f:ba:8b:a4:ae:04:fc:67:a5:4d: 4a:d1:ac:45:58:6e:c5:05:5e:2a:86:d0:de:f8:ef: 33:a3:84:a3:37:f0:fd:5b:8d:d6:c8:df:d3:0a:10: 51:3f:66:14:d2:a8:16:56:94:be:c7:13:8b:43:af: 7e:7b:9e:6e:34:8c:35:b3:6f:68:cf:25:42:65:3b: ca:9f:52:5d:83:87:c3:18:21:96:ad:1e:67:c2:30: ae:7c:af:00:f5:fa:13:81:c8:c9:fa:07:f8:23:aa: a6:cd:3c:e7:1a:cd:73:24:44:14:0b:ad:de:cf:87: 86:00:22:6e:6e:99:55:4e:f4:d5:af:5e:bc:a5:d7: 7e:b9:c9:a1:44:10:34:b7:e0:c8:18:9f:1e:83:97: 99:52:87:b7:84:00:7d:8c:d5:86:ab:cd:38:75:8e: 9d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A3:3C:DB:FC:26:26:9E:DB:92:45:5E:85:04:64:E3:D5:4A:E0:2C X509v3 Authority Key Identifier: keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:10:45:3a:8a:98:da:49:59:26:4c:d6:48:56:fc:da:36:69: 61:b4:b1:d3:15:ff:57:4f:07:0a:f6:2d:a2:b2:02:d8:3e:36: cb:1b:b7:15:45:ba:19:8f:bb:56:de:a9:d4:ad:6f:95:b8:e6: bc:d9:a0:66:b6:95:28:ad:86:ca:77:3c:2a:8d:3f:5f:65:73: 03:1b:fe:9b:a0:91:22:2e:b3:33:58:88:2f:32:ba:b1:00:21: e2:32:f9:a9:e2:fb:14:71:53:f0:3b:6e:d3:79:5e:6b:a1:7b: bd:1e:a8:67:0c:c7:37:d4:6b:34:32:5b:47:5a:e1:99:1b:a8: 2c:3c:2b:4e:32:b4:ac:b5:53:3e:54:db:8f:8d:e6:06:9a:68: 5d:97:72:3e:1f:78:fd:7b:6e:bd:30:42:76:ca:45:69:b6:c3: d6:43:37:b5:ff:98:a1:74:fc:07:5c:43:bc:a3:55:45:d2:40: e8:e2:81:8e:8c:03:00:64:b5:e1:aa:90:99:ef:b4:0e:e6:08: ef:c3:43:49:f4:6a:3a:80:4c:cc:2b:75:15:d8:4a:bb:f2:71: 6a:10:34:a9:c0:8c:da:1c:3f:c7:db:a4:0a:1a:b5:af:c1:36: f5:06:fd:3b:6e:97:4f:79:a1:a7:61:09:63:61:e3:7c:04:a7: d5:12:28:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD0M+PjTHf7TRE5wyw+aVMLmNP9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5 MDRDNUVDMjAeFw0yNjA3MjcwODM4NDRaFw0yNjA3MjgwOTAyNDRaMDMxMTAvBgNV BAMTKDU2QTMzQ0RCRkMyNjI2OUVEQjkyNDU1RTg1MDQ2NEUzRDU0QUUwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLgbjafJIxSk+ZSbBfmgvbKUL7 6b/8N/cOcsH7SXm7T+cgo564dbg2wYeqROzuFwiSTSIVL5HpnsYPdM6z0zbAkblS dUFiahOBjnSb+iUsVsYccYXv/NK+/78Tga0sX7qLpK4E/GelTUrRrEVYbsUFXiqG 0N747zOjhKM38P1bjdbI39MKEFE/ZhTSqBZWlL7HE4tDr357nm40jDWzb2jPJUJl O8qfUl2Dh8MYIZatHmfCMK58rwD1+hOByMn6B/gjqqbNPOcazXMkRBQLrd7Ph4YA Im5umVVO9NWvXryl1365yaFEEDS34MgYnx6Dl5lSh7eEAH2M1YarzTh1jp3RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVqM82/wmJp7bkkVehQRk49VK4CwwHwYDVR0j BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NjE5MDA4OTU2MTcwNTEvMC8yREU3OEM5NDVFMkI1 MzM3NEI4NkMwQTdCREU1QURFNjkwNEM1RUMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhBFOoqY2klZ JkzWSFb82jZpYbSx0xX/V08HCvYtorIC2D42yxu3FUW6GY+7Vt6p1K1vlbjmvNmg ZraVKK2Gync8Ko0/X2VzAxv+m6CRIi6zM1iILzK6sQAh4jL5qeL7FHFT8Dtu03le a6F7vR6oZwzHN9RrNDJbR1rhmRuoLDwrTjK0rLVTPlTbj43mBppoXZdyPh94/Xtu vTBCdspFabbD1kM3tf+YoXT8B1xDvKNVRdJA6OKBjowDAGS14aqQme+0DuYI78ND SfRqOoBMzCt1FdhKu/JxahA0qcCM2hw/x9ukChq1r8E29Qb9O26XT3mhp2EJY2Hj fASn1RIo3w== -----END CERTIFICATE-----Generated at Mon Jul 27 16:04:58 2026 by rpki-client