$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft File: CD2AB13A444BFE19493186434EE872CEC8A1952E.mft (raw, json) Hash identifier: f0/55Yx9ZucVR1LWkpK6P6pfGniQ7w6x7CeDhTo2ql8= Subject key identifier: B9:DD:C6:82:58:ED:BD:A5:8C:ED:BB:B0:F3:49:59:7D:23:45:06:4B Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Certificate serial: 4D9B819957217D027AC654C4BCCC396A1F17DB59 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft Manifest number: 50 Signing time: Sat 13 Jun 2026 20:52:13 +0000 Manifest this update: Sat 13 Jun 2026 20:47:13 +0000 Manifest next update: Sun 14 Jun 2026 22:03:13 +0000 Files and hashes: 1: 3130332e37382e3132362e302f32332d3233203d3e203633363534.roa (hash: ZP+h20JkWqSxKh8vbW484Nj0Ejp6CZykPD9jcY7GQqk=) 2: CD2AB13A444BFE19493186434EE872CEC8A1952E.crl (hash: YUIc5ID07d2SMtnnNn+sigLPXCfQD/1k/KxC4lu1gHU=) 3: 3130332e37382e3132342e302f32322d3232203d3e203633363534.roa (hash: uYs6fO1/g3sgQhRLmL6xn7AxEm3lgSIqHQsxteKIieA=) 4: 3130332e37382e3132362e302f32332d3233203d3e2034383437.roa (hash: X0iD6rj5LsFjlWutUYZ76kK04W1xa6nb2omOPTwXuf0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9b:81:99:57:21:7d:02:7a:c6:54:c4:bc:cc:39:6a:1f:17:db:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Validity Not Before: Jun 13 20:47:13 2026 GMT Not After : Jun 14 22:03:13 2026 GMT Subject: CN=B9DDC68258EDBDA58CEDBBB0F349597D2345064B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:5f:fc:00:70:94:19:85:50:16:a7:da:33: 57:49:a7:f4:97:58:62:01:b6:51:44:16:0a:17:4c: be:a7:d9:e4:21:c7:64:8e:19:e4:45:bc:27:ea:68: f1:66:ac:3c:6b:b1:89:80:38:1e:6e:23:cd:49:d9: 55:ca:f0:b6:07:e4:b6:2f:a5:aa:d9:73:0f:93:0f: 6f:6d:95:0e:9c:fe:a9:1d:79:e1:44:b2:62:db:29: d1:ff:de:21:c1:78:ed:27:e7:04:93:11:bf:23:4a: b2:d8:ec:39:75:5c:b5:0f:8e:28:eb:3d:af:00:5d: a3:38:76:e5:14:cb:dc:3c:cd:af:55:4d:86:3f:4b: 90:df:eb:b9:78:08:b4:53:f4:28:3a:34:b5:55:64: 5d:38:c1:f8:23:a6:3a:9d:71:a8:09:b2:fc:58:9e: 17:fe:a5:2b:7b:71:45:09:d2:49:e8:b0:a2:7a:ad: 82:07:6d:b3:ee:82:37:01:00:4e:8d:aa:bf:6b:e4: a0:27:23:83:1a:b2:d2:34:65:13:62:d3:b9:af:58: 64:3b:e3:df:5b:64:cb:ce:7c:6b:e8:9a:7a:db:4e: b6:22:b7:0c:29:c7:21:0d:e7:79:3b:23:03:5e:29: c3:58:85:07:f0:64:60:f6:a3:b4:35:77:c4:1b:a8: 7a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DD:C6:82:58:ED:BD:A5:8C:ED:BB:B0:F3:49:59:7D:23:45:06:4B X509v3 Authority Key Identifier: keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:35:44:a9:8a:67:29:02:86:33:2b:f9:c3:7a:cb:23:e0:2f: e6:15:f0:51:9c:8f:24:5b:06:18:99:a1:a7:e1:60:21:05:73: e0:33:4a:c4:9b:c1:be:4b:6e:e9:84:ad:51:3e:48:d8:e3:66: 81:2d:2c:e8:e2:6e:ee:39:a6:08:4a:b9:7e:b6:bc:ca:c2:0b: c5:9d:e8:da:7d:4c:45:ff:60:c3:39:d7:eb:95:1e:8f:f7:22: 63:a9:62:27:f7:4a:0d:60:ab:df:68:0e:fb:95:89:63:67:69: fa:c2:ae:28:ec:4b:8b:28:a9:f1:30:75:71:c1:19:59:2e:e0: 7e:95:f7:24:65:6c:0a:ea:a3:8b:68:37:b1:88:e2:8f:fd:9e: 73:1a:63:7c:d3:6b:dd:15:2c:55:77:62:c6:af:9a:d6:d2:58: 1a:f4:21:2a:3c:8f:93:3d:77:8c:2f:bd:56:60:3e:bf:e4:9e: 91:d2:fc:f9:80:d1:5a:b3:56:c8:d8:08:80:10:08:dd:cc:a4: f9:a4:d7:d2:51:37:fe:66:26:8e:06:51:88:8f:91:f5:e2:53: 3a:0e:a8:22:3a:9d:ff:f1:f9:91:41:46:1c:25:5f:2a:c3:3f: 46:42:15:83:ee:65:18:66:9f:ff:27:3e:45:55:34:b0:d8:c6: c6:6f:92:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTZuBmVchfQJ6xlTEvMw5ah8X21kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD OEExOTUyRTAeFw0yNjA2MTMyMDQ3MTNaFw0yNjA2MTQyMjAzMTNaMDMxMTAvBgNV BAMTKEI5RERDNjgyNThFREJEQTU4Q0VEQkJCMEYzNDk1OTdEMjM0NTA2NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YF/8AHCUGYVQFqfaM1dJp/SX WGIBtlFEFgoXTL6n2eQhx2SOGeRFvCfqaPFmrDxrsYmAOB5uI81J2VXK8LYH5LYv parZcw+TD29tlQ6c/qkdeeFEsmLbKdH/3iHBeO0n5wSTEb8jSrLY7Dl1XLUPjijr Pa8AXaM4duUUy9w8za9VTYY/S5Df67l4CLRT9Cg6NLVVZF04wfgjpjqdcagJsvxY nhf+pSt7cUUJ0knosKJ6rYIHbbPugjcBAE6Nqr9r5KAnI4MastI0ZRNi07mvWGQ7 499bZMvOfGvomnrbTrYitwwpxyEN53k7IwNeKcNYhQfwZGD2o7Q1d8QbqHqLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUud3GgljtvaWM7buw80lZfSNFBkswHwYDVR0j BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3 MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDE4MTU4NDU5OTQ0OTkvMC9DRDJBQjEzQTQ0NEJG RTE5NDkzMTg2NDM0RUU4NzJDRUM4QTE5NTJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDVEqYpnKQKG Myv5w3rLI+Av5hXwUZyPJFsGGJmhp+FgIQVz4DNKxJvBvktu6YStUT5I2ONmgS0s 6OJu7jmmCEq5fra8ysILxZ3o2n1MRf9gwznX65Uej/ciY6liJ/dKDWCr32gO+5WJ Y2dp+sKuKOxLiyip8TB1ccEZWS7gfpX3JGVsCuqji2g3sYjij/2ecxpjfNNr3RUs VXdixq+a1tJYGvQhKjyPkz13jC+9VmA+v+SekdL8+YDRWrNWyNgIgBAI3cyk+aTX 0lE3/mYmjgZRiI+R9eJTOg6oIjqd//H5kUFGHCVfKsM/RkIVg+5lGGaf/yc+RVU0 sNjGxm+Skw== -----END CERTIFICATE-----Generated at Sat Jun 13 22:30:55 2026 by rpki-client