$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft File: C2DA49E3A7421A170AB2589567E7C29841F7D385.mft (raw, json) Hash identifier: NcXZOcF0FzH/YuITkZuyO+qHh0zpdDUjbAnRfAyPgX4= Subject key identifier: 7E:12:30:7F:31:A4:A0:FE:AC:18:C6:8F:D0:54:B1:78:62:62:98:F7 Authority key identifier: C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 Certificate issuer: /CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Certificate serial: 79154062273441DE998316A26D61F110D97D2F8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft Manifest number: CC Signing time: Tue 22 Sep 2026 14:09:34 +0000 Manifest this update: Tue 22 Sep 2026 14:04:34 +0000 Manifest next update: Fri 25 Sep 2026 23:32:34 +0000 Files and hashes: 1: 3136302e3235302e39302e302f32342d3234203d3e2030.roa (hash: K1QDkUk1IphA/GflzuMhC8hun3fH4ROmohlTCdV9p9U=) 2: 3136302e3235302e39312e302f32342d3234203d3e2030.roa (hash: I01ky8XkMCzc3U3eB94acbcUgoqzrThF0fyrFH1PSns=) 3: C2DA49E3A7421A170AB2589567E7C29841F7D385.crl (hash: JhzQ6cIeR4U7rKHVvQJXzSi+7NnvD5KGEFpOHsay4mo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:15:40:62:27:34:41:de:99:83:16:a2:6d:61:f1:10:d9:7d:2f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Validity Not Before: Sep 22 14:04:34 2026 GMT Not After : Sep 25 23:32:34 2026 GMT Subject: CN=7E12307F31A4A0FEAC18C68FD054B178626298F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:32:49:7e:32:7b:2b:00:b9:84:38:27:f6:7f: a1:1d:8e:aa:eb:1d:ac:52:ac:c4:15:e3:9f:19:a0: 3c:ee:28:1a:57:20:ab:52:8c:14:6f:30:3d:eb:6c: 95:eb:c0:08:46:6e:b2:0d:6d:d7:51:61:e6:86:fe: 8e:00:fe:87:ef:15:58:87:c6:6a:8d:91:6c:c6:b3: 31:a3:47:c6:0d:a7:69:e2:47:d7:66:4e:a7:10:2f: a2:18:05:49:53:00:60:8b:3e:41:b8:68:6b:7e:d7: 72:24:30:ff:a6:30:fc:22:cc:f4:62:6b:49:f0:2e: 14:09:4e:0b:d8:1a:54:7f:cc:8b:c3:c8:40:9d:60: 35:98:c3:72:44:2e:a1:c4:93:a5:e1:de:a9:98:5d: e7:c1:24:04:9e:57:35:d8:e5:d8:6b:b1:a6:3c:c3: 21:50:16:b0:37:88:d3:74:cc:a1:9c:f8:0d:6f:18: d3:d3:e4:35:de:70:a8:08:e2:75:50:6e:3a:db:b0: 11:1a:82:78:6d:ed:58:ec:eb:70:c6:f8:15:04:13: 7a:aa:ea:cc:c3:8e:a8:0a:cc:db:d3:2f:f9:81:d1: a7:5d:ca:89:5f:c3:09:90:64:b2:64:71:7d:49:4f: 81:9a:67:ec:c3:bb:6f:21:af:97:9d:0c:d3:c8:7a: 01:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:12:30:7F:31:A4:A0:FE:AC:18:C6:8F:D0:54:B1:78:62:62:98:F7 X509v3 Authority Key Identifier: keyid:C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:48:78:48:ee:69:3b:5d:5c:02:f0:d1:c8:f8:4d:59:30:2b: c7:7b:b2:1b:77:90:4b:d6:5d:a9:c2:24:1d:8b:cf:8a:86:03: 25:8a:f8:d6:f7:92:a7:21:e1:96:8a:d5:42:3d:33:8f:92:6a: 7c:c4:3d:80:dc:af:06:ff:40:62:01:ee:71:70:66:c7:f8:d5: ab:d8:b6:8a:08:9d:67:65:60:3b:17:69:97:d2:a8:35:f5:b9: 65:0e:99:2e:58:9c:60:3a:92:a1:27:03:75:83:55:fb:b2:04: 11:8e:fd:e2:aa:ab:01:92:7c:58:32:10:e2:ca:8d:d8:98:ce: dc:23:14:e1:06:87:4b:60:d3:95:cf:63:cb:59:37:99:67:8b: 43:98:98:58:04:d9:9b:9a:5a:98:5d:76:41:0f:55:db:59:59: 0e:b6:a5:5b:6d:d5:12:29:43:87:d3:0c:de:a5:56:26:74:fe: 61:24:dc:ab:19:17:7e:96:35:b2:e1:5b:05:aa:65:ff:97:a0: 8d:ec:a8:84:40:c6:12:6e:ac:1f:4e:d8:43:29:e1:b0:8c:bd: a6:91:da:85:56:d8:22:31:bb:b4:88:56:23:da:d3:95:d6:6a: c4:97:4e:0b:87:f1:01:20:75:a2:e3:4f:a1:77:b7:f3:cf:98: 7a:37:c2:5c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeRVAYic0Qd6ZgxaibWHxENl9L48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0 MUY3RDM4NTAeFw0yNjA5MjIxNDA0MzRaFw0yNjA5MjUyMzMyMzRaMDMxMTAvBgNV BAMTKDdFMTIzMDdGMzFBNEEwRkVBQzE4QzY4RkQwNTRCMTc4NjI2Mjk4RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiMkl+MnsrALmEOCf2f6Edjqrr HaxSrMQV458ZoDzuKBpXIKtSjBRvMD3rbJXrwAhGbrINbddRYeaG/o4A/ofvFViH xmqNkWzGszGjR8YNp2niR9dmTqcQL6IYBUlTAGCLPkG4aGt+13IkMP+mMPwizPRi a0nwLhQJTgvYGlR/zIvDyECdYDWYw3JELqHEk6Xh3qmYXefBJASeVzXY5dhrsaY8 wyFQFrA3iNN0zKGc+A1vGNPT5DXecKgI4nVQbjrbsBEagnht7Vjs63DG+BUEE3qq 6szDjqgKzNvTL/mB0addyolfwwmQZLJkcX1JT4GaZ+zDu28hr5edDNPIegHvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfhIwfzGkoP6sGMaP0FSxeGJimPcwHwYDVR0j BBgwFoAUwtpJ46dCGhcKsliVZ+fCmEH304UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8wL0MyREE0OUUzQTc0MjFBMTcwQUIyNTg5NTY3RTdD Mjk4NDFGN0QzODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0MUY3RDM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMC9DMkRBNDlFM0E3NDIx QTE3MEFCMjU4OTU2N0U3QzI5ODQxRjdEMzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0h4SO5pO11c AvDRyPhNWTArx3uyG3eQS9ZdqcIkHYvPioYDJYr41veSpyHhlorVQj0zj5JqfMQ9 gNyvBv9AYgHucXBmx/jVq9i2igidZ2VgOxdpl9KoNfW5ZQ6ZLlicYDqSoScDdYNV +7IEEY794qqrAZJ8WDIQ4sqN2JjO3CMU4QaHS2DTlc9jy1k3mWeLQ5iYWATZm5pa mF12QQ9V21lZDralW23VEilDh9MM3qVWJnT+YSTcqxkXfpY1suFbBapl/5egjeyo hEDGEm6sH07YQynhsIy9ppHahVbYIjG7tIhWI9rTldZqxJdOC4fxASB1ouNPoXe3 88+YejfCXA== -----END CERTIFICATE-----Generated at Tue Sep 22 17:06:05 2026 by rpki-client