$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft File: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft (raw, json) Hash identifier: Bnn/HmZ7B1JW69t06Wz9+cTLgcDzcPhDA1KLwHr7siA= Subject key identifier: DA:52:2A:A5:DB:88:3E:07:E0:CC:B7:8C:D8:D5:B3:A1:B6:E8:B0:91 Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Certificate serial: 5F5C1B71E6BC5448BBCAC924230423546F80FF25 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft Manifest number: 7A Signing time: Wed 09 Sep 2026 03:20:22 +0000 Manifest this update: Wed 09 Sep 2026 03:15:22 +0000 Manifest next update: Sat 12 Sep 2026 07:33:22 +0000 Files and hashes: 1: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl (hash: j22u8fKEns2yxtGf85TrhWF8LDyhN0B9A1tpDFqwHaE=) 2: 312e3131392e302e302f31372d3137203d3e203538383531.roa (hash: JS3bNo89jFxRPcoUjJ2KW3+dlS5F8ZfPoJOwJABerhE=) 3: 3130332e3234342e36342e302f32322d3232203d3e203538383531.roa (hash: bF8lXwImti0G2C5h9HUFWEwJAQE60tR62Vp1rdSFMcU=) 4: 312e3131392e3132342e302f32322d3232203d3e203538383531.roa (hash: cZFuiOH6cyFkDGUgid52B5+rCCUk1Je7maMmKWVlJrI=) 5: 3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa (hash: UzOtHYzkQbEQuGwE/udN6JYGU4x59h6zYKuWNYSyF5g=) 6: 3130332e31362e3132342e302f32322d3232203d3e203538383531.roa (hash: J03Bd745xFUmekCrtUpll59JIIiIgF2WNL6PFFMPGcc=) 7: 3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa (hash: j5Rdo2Js55PNYoidEZ9f2WJvO7iSzLGP5wKzIv/CRG8=) 8: 3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa (hash: iYYYGCpOqt0aQJSSD8PSpzbRMdT6sgK2gSOfuxf7KWY=) 9: 3131342e3131322e3133362e302f32312d3231203d3e203538383531.roa (hash: +jDDG9chHRqcyqWLGG+Yj0uT75vd7evZ1ioSDSj0JtM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 07:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5c:1b:71:e6:bc:54:48:bb:ca:c9:24:23:04:23:54:6f:80:ff:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Validity Not Before: Sep 9 03:15:22 2026 GMT Not After : Sep 12 07:33:22 2026 GMT Subject: CN=DA522AA5DB883E07E0CCB78CD8D5B3A1B6E8B091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5c:60:5d:9b:8a:f1:18:46:f1:13:55:2c:14: ca:d1:be:a2:ce:99:31:9a:ce:96:2a:58:78:95:05: c1:55:d2:b6:23:13:68:35:5e:77:3e:68:e1:3c:9d: 1b:14:92:e7:92:7e:88:3b:aa:b4:78:09:99:eb:da: fd:80:51:60:3e:a2:81:09:ae:ae:fb:d7:d8:40:be: 0a:9a:bb:a3:a4:12:e6:cf:24:5a:41:a8:54:de:df: c7:3d:7c:a0:a9:8f:39:2f:06:0a:7f:3d:e5:e3:59: ed:7e:ae:c2:ed:cb:2c:1d:1b:34:e1:cc:ad:45:86: 27:71:c9:1f:0a:f6:b7:54:1f:f7:cd:00:82:85:db: d6:fe:6a:87:aa:a9:fb:01:b3:0b:47:8f:3c:af:40: d3:c4:50:2f:95:f0:49:77:b3:46:39:ab:20:db:b6: 0d:cc:2a:70:5e:50:45:00:fb:b0:4c:02:75:57:fe: 98:5c:6f:5b:61:7f:c4:2a:08:82:01:d5:d7:92:d2: f2:26:3a:69:87:ae:c5:3d:da:8d:5c:4c:6e:f3:5b: 29:a4:ef:45:c7:0a:f0:28:38:29:c0:5e:4c:8d:67: 06:59:a7:3d:fc:d2:2b:4e:82:9f:d7:6f:5b:25:16: ae:aa:ae:fd:10:f4:05:19:9d:9d:66:a5:4e:35:55: 7b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:52:2A:A5:DB:88:3E:07:E0:CC:B7:8C:D8:D5:B3:A1:B6:E8:B0:91 X509v3 Authority Key Identifier: keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:86:26:66:84:87:f6:5a:f1:de:9a:88:1b:43:b2:84:71:c0: 8e:f2:d2:32:ea:26:f3:39:68:db:e6:ea:e8:d0:7a:f7:eb:b8: 14:ee:6b:be:69:82:20:bd:e0:44:65:03:00:9c:1c:4d:fb:1d: 81:c0:6f:c4:fc:cf:57:6b:25:2b:d9:6f:63:04:3a:2c:18:7a: 98:a4:33:2a:8f:48:bc:51:7f:0b:10:68:f0:50:58:33:d0:8b: e6:fa:7b:05:fa:75:b3:f1:3b:2f:f2:b5:a9:94:3e:64:75:a0: c6:38:4b:be:92:9d:b7:58:ad:52:c3:56:94:ad:6f:40:09:b1: 03:66:6f:4e:49:62:0d:f5:77:3a:17:e5:20:9a:6d:58:15:e2: 2b:36:76:26:33:c7:93:72:0a:82:64:49:ec:eb:ac:d8:0b:8d: fe:e9:8d:94:3e:83:29:f8:48:2f:96:f6:bb:29:1a:5e:10:cb: b4:da:e4:4c:e9:96:18:e1:c2:f9:2f:4a:4f:bd:54:c0:d5:9d: df:65:33:12:a2:13:c9:44:de:c8:25:f3:cf:87:a6:c6:b6:6b: 09:3f:20:34:d4:1c:9b:2d:ff:66:12:7e:70:ed:31:b9:db:d5: 6a:06:23:3c:96:05:93:e6:a1:12:8d:81:1d:6d:4c:a1:02:f0: 5a:4d:14:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX1wbcea8VEi7yskkIwQjVG+A/yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5 MDRDNUVDMjAeFw0yNjA5MDkwMzE1MjJaFw0yNjA5MTIwNzMzMjJaMDMxMTAvBgNV BAMTKERBNTIyQUE1REI4ODNFMDdFMENDQjc4Q0Q4RDVCM0ExQjZFOEIwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQXGBdm4rxGEbxE1UsFMrRvqLO mTGazpYqWHiVBcFV0rYjE2g1Xnc+aOE8nRsUkueSfog7qrR4CZnr2v2AUWA+ooEJ rq7719hAvgqau6OkEubPJFpBqFTe38c9fKCpjzkvBgp/PeXjWe1+rsLtyywdGzTh zK1FhidxyR8K9rdUH/fNAIKF29b+aoeqqfsBswtHjzyvQNPEUC+V8El3s0Y5qyDb tg3MKnBeUEUA+7BMAnVX/phcb1thf8QqCIIB1deS0vImOmmHrsU92o1cTG7zWymk 70XHCvAoOCnAXkyNZwZZpz380itOgp/Xb1slFq6qrv0Q9AUZnZ1mpU41VXvvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2lIqpduIPgfgzLeM2NWzobbosJEwHwYDVR0j BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NjE5MDA4OTU2MTcwNTEvMC8yREU3OEM5NDVFMkI1 MzM3NEI4NkMwQTdCREU1QURFNjkwNEM1RUMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoYmZoSH9lrx 3pqIG0OyhHHAjvLSMuom8zlo2+bq6NB69+u4FO5rvmmCIL3gRGUDAJwcTfsdgcBv xPzPV2slK9lvYwQ6LBh6mKQzKo9IvFF/CxBo8FBYM9CL5vp7Bfp1s/E7L/K1qZQ+ ZHWgxjhLvpKdt1itUsNWlK1vQAmxA2ZvTkliDfV3OhflIJptWBXiKzZ2JjPHk3IK gmRJ7Ous2AuN/umNlD6DKfhIL5b2uykaXhDLtNrkTOmWGOHC+S9KT71UwNWd32Uz EqITyUTeyCXzz4emxrZrCT8gNNQcmy3/ZhJ+cO0xudvVagYjPJYFk+ahEo2BHW1M oQLwWk0UEg== -----END CERTIFICATE-----Generated at Thu Sep 10 20:41:35 2026 by rpki-client