$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft File: CD2AB13A444BFE19493186434EE872CEC8A1952E.mft (raw, json) Hash identifier: ntA43n97fnIa+QD8V7EvTwpa+0NM9TTjgUOizDgRsm4= Subject key identifier: D1:0E:C9:96:02:B0:73:C8:03:D8:91:2E:53:41:14:6E:71:B9:C6:31 Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Certificate serial: 3AB2E922CB46BD45A71A8FF6D4702ADD5CBCCBED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft Manifest number: C8 Signing time: Sat 10 Oct 2026 04:44:14 +0000 Manifest this update: Sat 10 Oct 2026 04:39:14 +0000 Manifest next update: Tue 13 Oct 2026 11:47:14 +0000 Files and hashes: 1: 3130332e37382e3132342e302f32322d3232203d3e203633363534.roa (hash: uYs6fO1/g3sgQhRLmL6xn7AxEm3lgSIqHQsxteKIieA=) 2: 3130332e37382e3132362e302f32332d3233203d3e2034383437.roa (hash: X0iD6rj5LsFjlWutUYZ76kK04W1xa6nb2omOPTwXuf0=) 3: CD2AB13A444BFE19493186434EE872CEC8A1952E.crl (hash: 615UjgFtsljeQ05k+TQG5EH/ejEcIHd3Fio2kZ2dHM0=) 4: 3130332e37382e3132362e302f32332d3233203d3e203633363534.roa (hash: ZP+h20JkWqSxKh8vbW484Nj0Ejp6CZykPD9jcY7GQqk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 11:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b2:e9:22:cb:46:bd:45:a7:1a:8f:f6:d4:70:2a:dd:5c:bc:cb:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Validity Not Before: Oct 10 04:39:14 2026 GMT Not After : Oct 13 11:47:14 2026 GMT Subject: CN=D10EC99602B073C803D8912E5341146E71B9C631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e7:61:41:f5:19:cb:6f:f9:07:8c:bd:87:2b: 98:0c:f2:4e:03:c0:77:5c:0e:df:b0:03:d4:ad:ff: 14:6c:4c:31:7a:10:b1:a3:e1:a4:a0:d8:28:56:09: ae:89:2b:29:11:b6:e7:b5:cb:5c:3c:07:67:f0:7b: 65:cd:a8:75:64:64:64:e1:3e:bd:2c:3e:97:49:81: 87:f5:76:1a:9a:6e:d8:b8:e8:4f:69:2c:bc:40:e7: 4e:a6:95:b1:ce:bc:22:50:43:44:45:02:be:9c:1c: 1a:f7:c9:de:bd:82:94:6f:46:06:0c:d5:50:f5:88: 89:81:b6:22:32:c0:c4:82:cf:fe:c6:95:7c:50:d8: 58:8b:b6:75:68:a2:d2:c4:71:48:b3:c4:0b:97:24: 40:d7:8c:49:2a:dd:a2:84:af:ed:b6:dd:5a:fd:32: 20:37:ca:ab:45:d1:5d:7f:cb:d5:79:65:96:92:f7: cc:1a:1f:43:f2:fe:e6:87:ab:22:cb:ab:f6:98:78: 43:b3:15:92:81:e1:3e:d9:bd:26:77:51:72:57:46: 1f:42:f2:b6:33:6f:1b:6f:92:f9:cc:d1:40:9e:5e: e2:b7:b3:0b:14:46:98:0f:ee:c2:b2:d9:cd:0c:6a: 3a:08:fe:fd:1a:39:64:dd:2e:45:2e:ed:93:46:c1: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0E:C9:96:02:B0:73:C8:03:D8:91:2E:53:41:14:6E:71:B9:C6:31 X509v3 Authority Key Identifier: keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:5b:97:c8:3b:2a:92:f9:66:06:78:e1:d2:8a:62:96:bc:82: 4d:9d:cc:2c:de:83:44:b4:43:a0:e7:cf:13:3a:ff:c7:fe:0b: a1:2b:53:04:36:14:45:54:c1:47:6e:25:35:a7:95:68:52:49: 07:bb:06:33:c1:ef:11:89:76:a6:9b:53:8c:eb:ed:9c:a7:4b: df:bf:1c:fb:22:d9:bc:e3:a7:47:1c:ee:f7:90:fe:d5:ba:82: d9:57:f2:a6:84:27:14:8b:00:df:ef:d1:c5:b3:15:73:1d:8e: 08:2b:7a:a9:d4:65:95:ab:ff:a4:75:bd:ce:5c:f0:71:18:47: 09:9b:78:6a:80:37:24:a2:1f:34:3a:cb:b1:9b:70:50:2e:83: 3f:21:97:fa:b1:51:f0:9b:46:bb:67:6e:76:ca:b9:9f:9f:39: 08:1f:41:54:38:0c:96:74:40:71:a7:69:5f:fd:f2:80:86:23: 6c:90:3a:88:4a:b9:18:aa:8d:ba:ce:28:bd:73:46:06:7a:c7: 93:4a:c4:15:12:11:ed:0c:dd:4c:75:b9:71:68:cf:82:05:ff: 76:68:fc:60:8e:85:3c:3b:2c:8e:6c:7e:6a:51:6e:d1:c2:92: 83:21:70:a5:28:66:f1:15:57:79:fe:4d:97:ce:b6:70:ae:94: 26:5e:6b:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOrLpIstGvUWnGo/21HAq3Vy8y+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD OEExOTUyRTAeFw0yNjEwMTAwNDM5MTRaFw0yNjEwMTMxMTQ3MTRaMDMxMTAvBgNV BAMTKEQxMEVDOTk2MDJCMDczQzgwM0Q4OTEyRTUzNDExNDZFNzFCOUM2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC952FB9RnLb/kHjL2HK5gM8k4D wHdcDt+wA9St/xRsTDF6ELGj4aSg2ChWCa6JKykRtue1y1w8B2fwe2XNqHVkZGTh Pr0sPpdJgYf1dhqabti46E9pLLxA506mlbHOvCJQQ0RFAr6cHBr3yd69gpRvRgYM 1VD1iImBtiIywMSCz/7GlXxQ2FiLtnVootLEcUizxAuXJEDXjEkq3aKEr+223Vr9 MiA3yqtF0V1/y9V5ZZaS98waH0Py/uaHqyLLq/aYeEOzFZKB4T7ZvSZ3UXJXRh9C 8rYzbxtvkvnM0UCeXuK3swsURpgP7sKy2c0MajoI/v0aOWTdLkUu7ZNGwTmJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0Q7JlgKwc8gD2JEuU0EUbnG5xjEwHwYDVR0j BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3 MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDE4MTU4NDU5OTQ0OTkvMC9DRDJBQjEzQTQ0NEJG RTE5NDkzMTg2NDM0RUU4NzJDRUM4QTE5NTJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVuXyDsqkvlm Bnjh0opilryCTZ3MLN6DRLRDoOfPEzr/x/4LoStTBDYURVTBR24lNaeVaFJJB7sG M8HvEYl2pptTjOvtnKdL378c+yLZvOOnRxzu95D+1bqC2VfypoQnFIsA3+/RxbMV cx2OCCt6qdRllav/pHW9zlzwcRhHCZt4aoA3JKIfNDrLsZtwUC6DPyGX+rFR8JtG u2dudsq5n585CB9BVDgMlnRAcadpX/3ygIYjbJA6iEq5GKqNus4ovXNGBnrHk0rE FRIR7QzdTHW5cWjPggX/dmj8YI6FPDssjmx+alFu0cKSgyFwpShm8RVXef5Nl862 cK6UJl5rSA== -----END CERTIFICATE-----Generated at Mon Oct 12 03:55:54 2026 by rpki-client