$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft File: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft (raw, json) Hash identifier: sZJpJ1Yehafd51TiX3AGaOiREzr75pSPKtvmvvXCJGk= Subject key identifier: DE:56:21:70:69:C9:9E:8C:55:13:A6:D5:E8:F0:D6:0C:FB:63:1A:6D Authority key identifier: CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 Certificate issuer: /CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Certificate serial: 2C0A9F2119039D2113D5F78D5D8BE03C4C297202 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft Manifest number: 25 Signing time: Sat 13 Jun 2026 08:51:36 +0000 Manifest this update: Sat 13 Jun 2026 08:46:36 +0000 Manifest next update: Sun 14 Jun 2026 09:57:36 +0000 Files and hashes: 1: 3130332e3131382e35322e302f32342d3234203d3e2034383038.roa (hash: t+UcDtfuQc57H7Nf+QogZp2E/pRJKxaQ+uABOn1R814=) 2: 3130332e3131382e35322e302f32322d3232203d3e2034383038.roa (hash: Xoed/rVl3qutv9Zq8jRPphX8ViBicQo/g46B0NkCxg4=) 3: 3130332e3131382e35352e302f32342d3234203d3e2034383038.roa (hash: OUMKjqnkkGp3PVwr7CXbPojjV56LxWcDa/5MEngiGbw=) 4: 3130332e3131382e35342e302f32342d3234203d3e2034383038.roa (hash: QBdwKwmiJSDtwraFhZzAr79SFiWotZ4Xhn5ZCBGE5Fg=) 5: 3130332e3131382e35332e302f32342d3234203d3e2034383038.roa (hash: ZyH5igDdJdH1Qu3ydszfBwsotmmkbRAGBxTqOzB+BZ8=) 6: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl (hash: AA/G73vrmGJBATGJ7urH5kuCfaYShpjKv3MkRsNihog=) 7: 3130332e3131382e35322e302f32322d3232203d3e2034383437.roa (hash: xq72NdzM2QgKl+fSZk9EQ3yZcWKD6a9nLN9KDnpJwEU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0a:9f:21:19:03:9d:21:13:d5:f7:8d:5d:8b:e0:3c:4c:29:72:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Validity Not Before: Jun 13 08:46:36 2026 GMT Not After : Jun 14 09:57:36 2026 GMT Subject: CN=DE56217069C99E8C5513A6D5E8F0D60CFB631A6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:65:24:5a:c1:16:97:a2:1f:86:3d:a9:27:0c: c3:98:86:1e:f7:40:33:6c:b6:8f:b1:33:36:33:9a: 6f:8d:ef:6c:16:e8:4c:d6:2d:e0:56:40:c0:74:21: 56:18:0e:a8:0c:b9:87:9c:8f:7d:c8:b7:7c:21:f4: d8:b7:13:e5:22:fb:7c:aa:6c:8f:88:2b:5f:ad:67: ed:ce:d0:85:ed:77:73:2a:7d:22:3c:3f:d4:77:22: 93:d4:1f:65:e6:cf:ef:b4:1c:5a:34:92:89:4a:e9: 17:00:a6:06:f5:e1:08:82:40:7c:17:bc:61:07:8e: f3:3b:5c:c6:0f:a6:3e:b0:00:fb:ee:6e:db:2b:db: bf:69:82:e6:1e:25:ca:88:17:50:75:42:bd:38:b3: e7:d8:6e:d9:a4:34:2e:30:3f:bd:93:38:65:28:b3: 23:45:dd:0e:67:43:dc:b0:cc:99:fb:dc:5f:fb:1d: 3e:55:d4:1e:1d:1a:25:5c:98:c3:a9:81:98:35:cf: 4c:ce:f9:12:56:f6:8d:13:74:41:13:38:8b:97:e1: 99:ff:d4:c7:d4:80:56:2b:3d:03:8d:61:3d:55:bf: 6a:c5:e0:67:24:e1:4b:5c:52:69:33:5f:2b:2b:cd: c6:de:0e:cc:8d:a9:44:12:16:51:de:e4:b5:52:d3: ef:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:56:21:70:69:C9:9E:8C:55:13:A6:D5:E8:F0:D6:0C:FB:63:1A:6D X509v3 Authority Key Identifier: keyid:CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3f:b5:6e:fd:cc:b8:81:00:90:49:46:f1:44:31:ca:a0:29: c9:2c:ab:83:c6:3a:37:37:81:45:aa:1b:51:5c:de:ce:70:95: 89:ce:a0:b2:ea:94:ed:e4:ee:8f:fd:5e:52:90:f6:29:2d:53: c7:8d:83:8b:53:d0:93:5c:da:cd:e9:07:a3:08:0c:c7:ce:48: 12:87:9f:c2:c1:a8:13:ee:71:8d:f0:51:2c:aa:a7:e7:1d:a5: 80:2e:64:03:08:65:e8:16:06:2c:75:9f:21:1e:d7:d8:c4:64: be:7f:1e:38:79:01:4a:af:02:6e:5e:5c:6e:a9:96:ea:5f:55: 45:5d:58:c5:dd:be:3a:f5:d3:c8:b7:2c:cf:31:d1:61:f2:76: 84:6e:be:79:f9:45:a8:b6:e9:c5:ac:f7:bf:63:70:d9:15:34: ed:e7:f2:4e:63:8e:27:c2:3f:7f:ae:ac:a6:23:ed:70:27:50: cd:2d:8a:1f:ba:c2:17:d7:12:56:eb:c8:c0:33:0b:4e:8e:e2: f1:89:a3:27:78:0c:c4:00:1b:d2:2c:83:cb:76:59:49:eb:c6: 13:b0:55:49:02:5f:8a:64:34:5b:e8:db:d9:63:fd:7e:d0:a3: 69:8d:25:95:4e:8d:d8:ea:bc:dd:d2:d4:26:16:68:df:9a:00: 22:30:64:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULAqfIRkDnSET1feNXYvgPEwpcgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgw RUNEQ0RGODAeFw0yNjA2MTMwODQ2MzZaFw0yNjA2MTQwOTU3MzZaMDMxMTAvBgNV BAMTKERFNTYyMTcwNjlDOTlFOEM1NTEzQTZENUU4RjBENjBDRkI2MzFBNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2ZSRawRaXoh+GPaknDMOYhh73 QDNsto+xMzYzmm+N72wW6EzWLeBWQMB0IVYYDqgMuYecj33It3wh9Ni3E+Ui+3yq bI+IK1+tZ+3O0IXtd3MqfSI8P9R3IpPUH2Xmz++0HFo0kolK6RcApgb14QiCQHwX vGEHjvM7XMYPpj6wAPvubtsr279pguYeJcqIF1B1Qr04s+fYbtmkNC4wP72TOGUo syNF3Q5nQ9ywzJn73F/7HT5V1B4dGiVcmMOpgZg1z0zO+RJW9o0TdEETOIuX4Zn/ 1MfUgFYrPQONYT1Vv2rF4Gck4UtcUmkzXysrzcbeDsyNqUQSFlHe5LVS0+8BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3lYhcGnJnoxVE6bV6PDWDPtjGm0wHwYDVR0j BBgwFoAUzbsbPNe6o3iwGhXynzMvSA7NzfgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODU5NjEwOTE4MzI4NzMxNS8wL0NEQkIxQjNDRDdCQUEzNzhCMDFBMTVGMjlGMzMy RjQ4MEVDRENERjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgwRUNEQ0RGOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg1OTYxMDkxODMyODczMTUvMC9DREJCMUIzQ0Q3QkFB Mzc4QjAxQTE1RjI5RjMzMkY0ODBFQ0RDREY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARz+1bv3MuIEA kElG8UQxyqApySyrg8Y6NzeBRaobUVzeznCVic6gsuqU7eTuj/1eUpD2KS1Tx42D i1PQk1zazekHowgMx85IEoefwsGoE+5xjfBRLKqn5x2lgC5kAwhl6BYGLHWfIR7X 2MRkvn8eOHkBSq8Cbl5cbqmW6l9VRV1Yxd2+OvXTyLcszzHRYfJ2hG6+eflFqLbp xaz3v2Nw2RU07efyTmOOJ8I/f66spiPtcCdQzS2KH7rCF9cSVuvIwDMLTo7i8Ymj J3gMxAAb0iyDy3ZZSevGE7BVSQJfimQ0W+jb2WP9ftCjaY0llU6N2Oq83dLUJhZo 35oAIjBkBw== -----END CERTIFICATE-----Generated at Sat Jun 13 20:05:54 2026 by rpki-client