$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft File: 0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft (raw, json) Hash identifier: WgtIWBiXk4ewLXOv0fbdwEmKBZRq8bXiaAp2ZS/H2jw= Subject key identifier: 23:36:22:19:C4:DA:39:01:A5:51:5A:27:EC:49:B8:6D:09:1A:BA:23 Authority key identifier: 0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC Certificate issuer: /CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC Certificate serial: 44FD9F8D9ADA783A947FBEFB9FF9505248CAC177 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft Manifest number: 37 Signing time: Tue 14 Jul 2026 01:15:04 +0000 Manifest this update: Tue 14 Jul 2026 01:10:04 +0000 Manifest next update: Wed 15 Jul 2026 04:15:04 +0000 Files and hashes: 1: 3130332e31322e39382e302f32342d3234203d3e20313436383032.roa (hash: uHCaaw9s8g63NiSSnL9QPEn47SUgnpGsYsdUuRJOHSk=) 2: 3130332e31322e39392e302f32342d3234203d3e20313436383032.roa (hash: tbUTFYMvu1gUlC2oFmjSZqAYOrU9u+JdPDJBttAzV/o=) 3: 0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl (hash: v1kAJPEOr0dTwu/Sgl1a3zysv5GdffRiL8HVX+25MY8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 04:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:fd:9f:8d:9a:da:78:3a:94:7f:be:fb:9f:f9:50:52:48:ca:c1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC Validity Not Before: Jul 14 01:10:04 2026 GMT Not After : Jul 15 04:15:04 2026 GMT Subject: CN=23362219C4DA3901A5515A27EC49B86D091ABA23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:32:60:15:f6:97:b3:e3:c2:ca:06:d2:fa: d6:45:09:42:d9:1e:28:37:af:20:78:54:08:e5:80: bb:a6:69:82:c2:c9:30:c2:e0:31:7a:5f:28:d8:e3: 5f:b7:7b:85:58:b3:ff:d2:65:6e:bf:70:af:1c:45: 0e:ef:be:cd:ed:34:ba:f5:e9:ca:85:81:f7:e9:a8: 3e:50:26:77:21:d7:2c:9b:c2:2a:f3:17:b0:d8:b9: 60:b4:ee:5b:ee:af:6e:c3:8e:c5:2a:0d:cc:4f:22: cb:6a:76:a9:6b:c3:17:bb:f3:e3:4b:cb:6c:66:8d: 43:df:1d:08:2c:c8:d3:c3:c9:d5:c1:69:26:20:fd: 83:cf:5b:ec:c0:cb:96:56:1c:61:c2:51:b4:6e:81: 87:cc:ae:8e:ab:54:83:a0:7f:fe:cf:69:2e:a0:12: 5b:f8:e2:f0:d5:06:93:57:c0:b8:35:d3:0b:d7:ea: 26:de:04:81:b1:77:6a:fd:d7:9f:9a:32:aa:bf:31: e4:d2:b3:90:5a:a9:ff:5b:8f:e1:51:50:96:cc:0b: ae:e7:81:92:e8:37:ba:83:d5:64:ea:93:fd:b5:2e: f9:2c:77:62:a1:d7:e3:75:9f:80:4a:51:42:4d:bb: a2:09:31:85:b1:d0:01:02:fc:9f:42:82:de:7f:2c: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:36:22:19:C4:DA:39:01:A5:51:5A:27:EC:49:B8:6D:09:1A:BA:23 X509v3 Authority Key Identifier: keyid:0D:AB:49:AD:13:77:D4:66:D1:D5:1E:FE:CA:F3:B2:2A:D7:D4:CF:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1115095607497719833/0/0DAB49AD1377D466D1D51EFECAF3B22AD7D4CFCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a4:ae:9e:12:85:33:37:c9:34:01:b8:33:08:87:84:97:91: d8:74:24:f4:b6:90:45:36:66:63:a0:42:50:2c:74:53:8c:bb: b6:45:d8:cc:b9:37:48:21:a2:a5:0f:9b:5b:d5:87:12:9c:88: 15:a2:8a:ed:d9:df:22:2d:8d:7e:71:bb:4a:16:45:0b:5e:2b: 7e:82:2e:e1:d2:77:49:6a:da:0e:b5:1e:15:a7:ea:cd:84:5a: fa:9a:ff:6a:f9:6c:da:a4:5b:7b:e6:2a:d6:f1:19:58:70:bc: a8:93:d1:bd:6d:fd:9d:70:03:8d:a4:1a:32:7f:bd:51:20:d2: 1f:72:9a:6d:08:8a:df:07:90:f7:7f:66:09:ac:81:5e:b7:b6: f6:e5:bf:39:4f:d8:25:51:ef:6d:94:02:5c:50:88:b9:97:5b: d9:13:fb:0c:ff:4d:e7:3b:22:29:63:08:00:1e:b3:ad:5b:26: 96:95:67:20:84:8a:2e:8c:d7:34:89:cb:95:5e:36:d5:66:29: f6:65:f7:82:c4:b3:e0:b5:9e:08:02:68:59:28:5f:7c:e0:d5: e9:51:27:35:58:dd:36:ab:97:0a:2e:4e:ea:cb:21:b8:5b:94: 9c:28:84:ab:20:d7:a5:2d:09:79:b2:b4:cb:66:cb:dd:d6:79: f5:1d:d6:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURP2fjZraeDqUf777n/lQUkjKwXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBQjQ5QUQxMzc3RDQ2NkQxRDUxRUZFQ0FGM0IyMkFE N0Q0Q0ZDQzAeFw0yNjA3MTQwMTEwMDRaFw0yNjA3MTUwNDE1MDRaMDMxMTAvBgNV BAMTKDIzMzYyMjE5QzREQTM5MDFBNTUxNUEyN0VDNDlCODZEMDkxQUJBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvzJgFfaXs+PCygbS+tZFCULZ Hig3ryB4VAjlgLumaYLCyTDC4DF6XyjY41+3e4VYs//SZW6/cK8cRQ7vvs3tNLr1 6cqFgffpqD5QJnch1yybwirzF7DYuWC07lvur27DjsUqDcxPIstqdqlrwxe78+NL y2xmjUPfHQgsyNPDydXBaSYg/YPPW+zAy5ZWHGHCUbRugYfMro6rVIOgf/7PaS6g Elv44vDVBpNXwLg10wvX6ibeBIGxd2r915+aMqq/MeTSs5Baqf9bj+FRUJbMC67n gZLoN7qD1WTqk/21Lvksd2Kh1+N1n4BKUUJNu6IJMYWx0AEC/J9Cgt5/LGKPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIzYiGcTaOQGlUVon7Em4bQkauiMwHwYDVR0j BBgwFoAUDatJrRN31GbR1R7+yvOyKtfUz8wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NTA5NTYwNzQ5NzcxOTgzMy8wLzBEQUI0OUFEMTM3N0Q0NjZEMUQ1MUVGRUNBRjNC MjJBRDdENENGQ0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMERBQjQ5QUQxMzc3RDQ2NkQxRDUxRUZFQ0FGM0IyMkFEN0Q0Q0ZDQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTUwOTU2MDc0OTc3MTk4MzMvMC8wREFCNDlBRDEzNzdE NDY2RDFENTFFRkVDQUYzQjIyQUQ3RDRDRkNDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6SunhKFMzfJ NAG4MwiHhJeR2HQk9LaQRTZmY6BCUCx0U4y7tkXYzLk3SCGipQ+bW9WHEpyIFaKK 7dnfIi2NfnG7ShZFC14rfoIu4dJ3SWraDrUeFafqzYRa+pr/avls2qRbe+Yq1vEZ WHC8qJPRvW39nXADjaQaMn+9USDSH3KabQiK3weQ939mCayBXre29uW/OU/YJVHv bZQCXFCIuZdb2RP7DP9N5zsiKWMIAB6zrVsmlpVnIISKLozXNInLlV421WYp9mX3 gsSz4LWeCAJoWShffODV6VEnNVjdNquXCi5O6sshuFuUnCiEqyDXpS0JebK0y2bL 3dZ59R3W4A== -----END CERTIFICATE-----Generated at Tue Jul 14 20:02:00 2026 by rpki-client