$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft File: CD2AB13A444BFE19493186434EE872CEC8A1952E.mft (raw, json) Hash identifier: U9fSyGjJ0UciK/j40EvPcmvwT2/JDuQJvt40itNZQWo= Subject key identifier: B0:C4:AD:FA:6F:59:7D:DD:51:79:1D:78:11:E0:21:3C:AA:9A:B8:63 Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Certificate serial: 44A8BD91C62EED7EF9A44B6056C1E154C68E0404 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft Manifest number: 8D Signing time: Tue 28 Jul 2026 23:12:55 +0000 Manifest this update: Tue 28 Jul 2026 23:07:55 +0000 Manifest next update: Thu 30 Jul 2026 01:34:55 +0000 Files and hashes: 1: 3130332e37382e3132362e302f32332d3233203d3e2034383437.roa (hash: X0iD6rj5LsFjlWutUYZ76kK04W1xa6nb2omOPTwXuf0=) 2: 3130332e37382e3132342e302f32322d3232203d3e203633363534.roa (hash: uYs6fO1/g3sgQhRLmL6xn7AxEm3lgSIqHQsxteKIieA=) 3: CD2AB13A444BFE19493186434EE872CEC8A1952E.crl (hash: 3hi/pmZO49GkHW0puD5QKXQb3X1o5RRfneQ6GPk6XjA=) 4: 3130332e37382e3132362e302f32332d3233203d3e203633363534.roa (hash: ZP+h20JkWqSxKh8vbW484Nj0Ejp6CZykPD9jcY7GQqk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a8:bd:91:c6:2e:ed:7e:f9:a4:4b:60:56:c1:e1:54:c6:8e:04:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Validity Not Before: Jul 28 23:07:55 2026 GMT Not After : Jul 30 01:34:55 2026 GMT Subject: CN=B0C4ADFA6F597DDD51791D7811E0213CAA9AB863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0f:95:a2:3d:a8:0f:83:57:f2:c3:9a:f7:74: 9b:fa:ee:43:2d:b4:84:e4:d4:3e:ca:c6:42:a1:ab: 53:2a:ae:28:1b:a0:b1:be:45:e0:3b:7b:5c:0f:d1: 8c:ed:00:47:5f:ca:c0:88:76:5c:92:8c:7e:27:35: f3:fd:71:9c:2f:54:3c:81:a9:49:25:a4:59:37:c9: 57:09:c7:53:18:41:0e:7d:06:b8:11:ed:2c:4c:08: 76:67:5e:e6:d2:c4:1f:29:9d:40:87:b1:e3:17:e9: bb:b9:be:a0:ca:4a:df:10:cd:d0:48:3b:ab:98:d9: 2f:76:ca:e6:e2:50:f8:9a:cc:54:90:45:90:7b:ad: 78:6b:0b:03:bc:86:a6:d9:09:3f:d4:37:94:b4:74: ff:31:ca:08:47:43:e4:23:ff:10:99:57:0a:a7:dd: 60:5c:02:b0:54:be:67:1c:42:05:da:93:80:12:11: 81:e2:b7:cb:66:cd:9e:e5:ad:3b:05:5d:31:b4:1f: 39:a2:18:72:6a:49:92:e5:82:62:fd:29:6f:8d:5d: d2:47:71:40:74:b7:ff:8e:d6:4b:3a:d1:b0:3a:2d: f1:76:18:e7:79:05:d8:e3:af:09:6f:5e:ed:8d:eb: 7c:f8:30:c2:54:f7:ab:80:dd:3c:9e:b6:e8:0d:0c: 41:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C4:AD:FA:6F:59:7D:DD:51:79:1D:78:11:E0:21:3C:AA:9A:B8:63 X509v3 Authority Key Identifier: keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:80:ba:2a:32:53:2a:30:ae:68:95:13:ba:1d:e5:8b:50:47: 67:9c:7b:31:c1:44:43:10:01:00:fa:16:68:de:cc:c5:38:27: d0:ce:ee:06:d9:a8:4b:5d:ed:76:2e:f4:2e:66:e7:ca:44:55: e7:f1:c1:6b:a0:24:2c:02:a3:db:83:3e:89:2c:3e:a9:55:51: 62:ba:01:9b:38:98:ad:e4:ce:f2:e3:82:38:7a:ec:84:1c:b0: dd:25:3d:ab:1a:96:bb:76:97:73:86:45:ea:5a:81:f6:01:2e: 15:69:cb:aa:b4:2a:9b:a1:c7:62:9d:83:00:7d:30:f2:8c:04: a4:fe:34:df:97:54:c4:33:95:6b:9a:cd:06:60:76:32:57:48: 8e:03:df:98:e9:15:4c:b6:60:05:39:ab:f8:c7:69:68:18:24: 95:16:61:44:2f:a8:81:3e:bd:5d:f6:e4:dc:d6:81:63:cc:71: 9a:4f:e9:15:3d:bd:1f:b8:e1:e3:22:39:1f:fb:9a:5c:2d:9e: 5d:5c:65:bd:f1:33:83:87:5e:92:73:34:f3:9d:8c:b2:16:ff: 15:ad:41:a9:0c:4f:80:fc:bc:5c:a8:7a:a1:f6:f3:22:cc:64: d5:a2:a2:a4:20:c4:fd:75:30:70:07:d0:a5:69:4e:cc:aa:09: 73:1f:1c:6c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURKi9kcYu7X75pEtgVsHhVMaOBAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD OEExOTUyRTAeFw0yNjA3MjgyMzA3NTVaFw0yNjA3MzAwMTM0NTVaMDMxMTAvBgNV BAMTKEIwQzRBREZBNkY1OTdEREQ1MTc5MUQ3ODExRTAyMTNDQUE5QUI4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpD5WiPagPg1fyw5r3dJv67kMt tITk1D7KxkKhq1MqrigboLG+ReA7e1wP0YztAEdfysCIdlySjH4nNfP9cZwvVDyB qUklpFk3yVcJx1MYQQ59BrgR7SxMCHZnXubSxB8pnUCHseMX6bu5vqDKSt8QzdBI O6uY2S92yubiUPiazFSQRZB7rXhrCwO8hqbZCT/UN5S0dP8xyghHQ+Qj/xCZVwqn 3WBcArBUvmccQgXak4ASEYHit8tmzZ7lrTsFXTG0HzmiGHJqSZLlgmL9KW+NXdJH cUB0t/+O1ks60bA6LfF2GOd5BdjjrwlvXu2N63z4MMJU96uA3TyetugNDEFTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsMSt+m9Zfd1ReR14EeAhPKqauGMwHwYDVR0j BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3 MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDE4MTU4NDU5OTQ0OTkvMC9DRDJBQjEzQTQ0NEJG RTE5NDkzMTg2NDM0RUU4NzJDRUM4QTE5NTJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYC6KjJTKjCu aJUTuh3li1BHZ5x7McFEQxABAPoWaN7MxTgn0M7uBtmoS13tdi70LmbnykRV5/HB a6AkLAKj24M+iSw+qVVRYroBmziYreTO8uOCOHrshByw3SU9qxqWu3aXc4ZF6lqB 9gEuFWnLqrQqm6HHYp2DAH0w8owEpP4035dUxDOVa5rNBmB2MldIjgPfmOkVTLZg BTmr+MdpaBgklRZhRC+ogT69Xfbk3NaBY8xxmk/pFT29H7jh4yI5H/uaXC2eXVxl vfEzg4deknM0852Mshb/Fa1BqQxPgPy8XKh6ofbzIsxk1aKipCDE/XUwcAfQpWlO zKoJcx8cbA== -----END CERTIFICATE-----Generated at Wed Jul 29 04:15:12 2026 by rpki-client