$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft File: C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft (raw, json) Hash identifier: XjT7FMnSWP17vuk9sYpANX9eqWDvMc+/4dI0HqZW+TE= Subject key identifier: E5:56:1A:8F:35:F6:15:EC:2F:C5:87:46:E0:1D:F5:C4:6E:1F:47:04 Authority key identifier: C3:AB:47:83:13:D3:11:3B:68:CB:CC:9A:DB:44:81:C1:CA:ED:D4:7B Certificate issuer: /CN=C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B Certificate serial: 043140CB5C9203B0DFC28875048CCBE178BDCDDA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft Manifest number: 2F Signing time: Tue 14 Jul 2026 18:26:51 +0000 Manifest this update: Tue 14 Jul 2026 18:21:51 +0000 Manifest next update: Wed 15 Jul 2026 21:03:51 +0000 Files and hashes: 1: C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl (hash: 5bY/EUtvd40xUP159TFAEmogtDU8C7HyVIWcjc7msiI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:31:40:cb:5c:92:03:b0:df:c2:88:75:04:8c:cb:e1:78:bd:cd:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B Validity Not Before: Jul 14 18:21:51 2026 GMT Not After : Jul 15 21:03:51 2026 GMT Subject: CN=E5561A8F35F615EC2FC58746E01DF5C46E1F4704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a7:a1:0c:39:a9:8b:62:7a:66:b7:58:73:fa: 9e:d9:7e:b9:b7:c4:ad:0f:70:a8:8c:94:e7:ed:27: 13:b0:ed:b9:a1:cb:16:b3:42:82:91:90:4c:a1:59: 53:38:74:8d:fe:fb:2f:f2:21:9f:e7:a3:02:eb:08: 77:5f:9b:62:9b:06:61:c0:9f:64:35:12:23:a8:be: 3c:4a:c1:c5:8a:52:d3:8c:17:a7:29:3c:5d:9f:9a: d0:d3:a4:f9:7f:17:ca:55:91:c0:d6:20:1c:28:c6: ad:d1:e4:23:29:18:f5:82:7f:98:b2:96:91:b5:30: 08:9a:05:58:59:be:3e:15:c7:e5:b5:bd:d1:07:d6: cb:26:76:bb:4f:10:2e:57:ec:77:2d:79:1c:4d:a5: e1:4a:fb:00:65:98:30:81:be:90:d6:28:24:41:db: d0:61:43:6f:a2:52:38:38:57:f7:de:73:e9:56:e2: 51:fb:43:32:80:cf:2c:e2:b1:2c:06:7f:87:da:96: ef:c2:11:f0:33:c7:60:46:35:0b:28:f9:08:0e:62: 56:2b:52:83:c3:ee:9d:2e:a4:ae:65:63:7e:fd:0c: 3d:eb:58:a8:3d:f0:48:60:0b:b3:37:b6:68:aa:66: 79:eb:c9:5c:b0:8b:08:ae:8b:20:4d:22:6a:43:12: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:56:1A:8F:35:F6:15:EC:2F:C5:87:46:E0:1D:F5:C4:6E:1F:47:04 X509v3 Authority Key Identifier: keyid:C3:AB:47:83:13:D3:11:3B:68:CB:CC:9A:DB:44:81:C1:CA:ED:D4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ba:af:e1:f1:04:87:99:59:3f:68:cb:10:32:35:f5:5f:d1: 16:5d:22:0e:2c:37:9a:79:7c:09:88:51:ef:ab:e4:52:d7:3d: 96:3d:83:7f:19:36:99:e2:d0:ba:13:0a:89:fe:85:1b:7f:16: 7e:63:9b:38:6a:7c:17:7d:10:b8:90:ae:5d:54:5f:fb:8b:17: 69:d2:8a:2f:62:af:e0:c9:bd:ea:71:a8:70:92:13:61:bf:65: 0f:36:cc:c4:46:41:0c:91:3a:da:8d:56:11:df:e4:65:f2:ec: 49:42:a8:69:61:7e:8d:74:0e:28:24:50:5e:37:48:15:fc:4c: 12:0e:e3:2f:e5:74:b5:c1:2d:a5:ed:ab:2c:01:b7:5c:a9:62: 14:dd:e9:6a:8c:b7:91:e3:93:53:74:1b:fc:e6:7c:c0:f3:2c: 6b:c5:4a:4f:7d:f9:32:31:6e:e6:ee:35:b6:96:c9:95:c7:04: 90:60:98:fe:5c:e2:61:8a:2a:53:02:07:55:70:04:4c:42:d6: 84:fd:92:c0:e0:33:14:89:f8:f9:50:aa:78:c6:51:de:f0:00: af:e4:6b:ac:6a:18:dc:ac:09:02:6d:26:e3:3f:65:ce:61:39: 8d:1b:ff:96:01:83:b9:9d:c7:ca:b8:99:93:c9:a8:d6:af:1e: f8:71:cc:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBDFAy1ySA7Dfwoh1BIzL4Xi9zdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNBQjQ3ODMxM0QzMTEzQjY4Q0JDQzlBREI0NDgxQzFD QUVERDQ3QjAeFw0yNjA3MTQxODIxNTFaFw0yNjA3MTUyMTAzNTFaMDMxMTAvBgNV BAMTKEU1NTYxQThGMzVGNjE1RUMyRkM1ODc0NkUwMURGNUM0NkUxRjQ3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAp6EMOamLYnpmt1hz+p7Zfrm3 xK0PcKiMlOftJxOw7bmhyxazQoKRkEyhWVM4dI3++y/yIZ/nowLrCHdfm2KbBmHA n2Q1EiOovjxKwcWKUtOMF6cpPF2fmtDTpPl/F8pVkcDWIBwoxq3R5CMpGPWCf5iy lpG1MAiaBVhZvj4Vx+W1vdEH1ssmdrtPEC5X7HcteRxNpeFK+wBlmDCBvpDWKCRB 29BhQ2+iUjg4V/fec+lW4lH7QzKAzyzisSwGf4falu/CEfAzx2BGNQso+QgOYlYr UoPD7p0upK5lY379DD3rWKg98EhgC7M3tmiqZnnryVywiwiuiyBNImpDEsVnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5VYajzX2FewvxYdG4B31xG4fRwQwHwYDVR0j BBgwFoAUw6tHgxPTETtoy8ya20SBwcrt1HswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx Njk5MjE1MTY5NjE3OTIyMy8wL0MzQUI0NzgzMTNEMzExM0I2OENCQ0M5QURCNDQ4 MUMxQ0FFREQ0N0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzNBQjQ3ODMxM0QzMTEzQjY4Q0JDQzlBREI0NDgxQzFDQUVERDQ3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTY5OTIxNTE2OTYxNzkyMjMvMC9DM0FCNDc4MzEzRDMx MTNCNjhDQkNDOUFEQjQ0ODFDMUNBRURENDdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7qv4fEEh5lZ P2jLEDI19V/RFl0iDiw3mnl8CYhR76vkUtc9lj2Dfxk2meLQuhMKif6FG38WfmOb OGp8F30QuJCuXVRf+4sXadKKL2Kv4Mm96nGocJITYb9lDzbMxEZBDJE62o1WEd/k ZfLsSUKoaWF+jXQOKCRQXjdIFfxMEg7jL+V0tcEtpe2rLAG3XKliFN3paoy3keOT U3Qb/OZ8wPMsa8VKT335MjFu5u41tpbJlccEkGCY/lziYYoqUwIHVXAETELWhP2S wOAzFIn4+VCqeMZR3vAAr+RrrGoY3KwJAm0m4z9lzmE5jRv/lgGDuZ3HyriZk8mo 1q8e+HHMjA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:01:56 2026 by rpki-client