$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft File: CCB400245E6C2E159A469D4699195E08ECCE5250.mft (raw, json) Hash identifier: A5SVrV9Vc2dqIukOWuMWPS6FxilhXkwBiKuV9DbqjSk= Subject key identifier: 02:C7:9F:41:69:65:02:58:C6:50:D1:E3:75:0B:32:F1:58:C1:83:83 Authority key identifier: CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 Certificate issuer: /CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Certificate serial: 6AC2BAB5F5F27C52F6614014D7106AF341F801BA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft Manifest number: 58 Signing time: Wed 29 Jul 2026 07:58:51 +0000 Manifest this update: Wed 29 Jul 2026 07:53:51 +0000 Manifest next update: Thu 30 Jul 2026 09:15:51 +0000 Files and hashes: 1: 3230332e37392e302e302f32302d3233203d3e2034383337.roa (hash: iZk0qBKAsJdjY7IihKFZpnUxC226AAiytnSm3L2t6F8=) 2: CCB400245E6C2E159A469D4699195E08ECCE5250.crl (hash: JznCLAG8opXFSMg10M96Hpi4KhD24G8wTeshiLCctLI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c2:ba:b5:f5:f2:7c:52:f6:61:40:14:d7:10:6a:f3:41:f8:01:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Validity Not Before: Jul 29 07:53:51 2026 GMT Not After : Jul 30 09:15:51 2026 GMT Subject: CN=02C79F4169650258C650D1E3750B32F158C18383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:56:b3:ab:eb:22:cc:98:9a:52:50:e6:b8:ed: 97:9f:c1:ba:49:1c:fe:2a:72:24:c7:ac:ec:53:8b: 39:e4:9a:fe:f9:f7:61:de:82:cd:aa:7b:c0:20:03: bc:7b:5b:93:76:c1:1a:66:47:33:a8:e2:0f:ae:2e: 25:3e:84:4d:33:5d:4c:3d:05:36:90:9b:e5:32:1e: 3b:8d:22:54:e3:4c:4d:d9:1b:d8:04:34:ba:5f:8a: f0:d2:8d:5d:3d:6f:21:b1:41:7a:84:f5:3f:d3:61: f4:3a:af:b3:69:ae:30:fc:dd:3f:06:37:1e:b9:57: 05:3c:6e:b2:c6:16:4d:75:df:bc:18:4c:44:60:3c: 99:67:79:70:f9:57:62:87:1b:de:6e:60:30:2b:00: f8:10:3a:a4:21:70:40:5b:e7:bf:c4:ce:fd:6d:f6: f2:92:da:35:1c:f5:60:e1:2f:1e:5b:48:89:d9:59: 3b:3b:0d:10:3e:58:f0:39:ab:e9:69:45:28:6c:a5: 9e:a2:78:c1:4e:17:70:54:69:4e:2c:08:13:ca:b4: 63:a2:d6:89:f7:20:3a:78:10:ec:36:f6:06:dd:cc: f4:49:e4:a0:c2:83:51:4b:7d:67:cb:14:1f:71:24: 13:70:2f:c4:cf:96:d9:ec:eb:3d:61:66:c8:89:18: 6e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C7:9F:41:69:65:02:58:C6:50:D1:E3:75:0B:32:F1:58:C1:83:83 X509v3 Authority Key Identifier: keyid:CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:43:75:6a:c1:d6:27:b1:15:c5:8e:66:f3:c2:e7:d5:24:33: 00:a0:ce:5f:4f:a7:3e:ae:68:9c:c8:2d:43:f3:27:05:8b:0a: a9:8f:76:52:f1:22:f2:81:83:44:21:56:b3:b4:01:55:ee:d5: 91:55:32:c7:06:08:45:ab:69:30:cd:3d:5f:76:6a:4e:e4:44: 89:d8:f8:a0:56:09:25:8b:77:20:d6:8d:2a:74:08:5e:77:65: 49:a1:a5:f2:54:ff:ee:de:70:ff:45:72:a0:2c:b8:21:e9:bc: 45:f3:f5:67:e9:99:2e:f3:5c:3b:0f:67:42:fb:88:09:83:4c: 9a:2a:ef:1a:34:32:65:44:21:4f:6f:c6:bf:c3:fa:65:49:e7: e3:d2:00:f4:fe:08:e2:4d:d2:16:c4:7f:ee:17:7e:6f:60:13: 95:14:9e:26:d8:52:67:4f:4a:17:92:62:94:1e:6d:30:8e:70: 6e:2d:d7:a6:76:b2:66:4d:4e:9b:84:c2:8f:30:b7:94:ee:91: b1:01:e9:cb:9e:fc:35:0f:3d:1d:64:5f:07:f4:11:29:50:66: 54:a9:52:05:5a:0d:7c:fa:7e:28:aa:44:62:13:9b:44:78:d7: 86:18:e8:b4:75:21:34:7d:b7:d4:47:21:e4:b4:b5:3e:91:2d: fd:0d:c8:29 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUasK6tfXyfFL2YUAU1xBq80H4AbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhF Q0NFNTI1MDAeFw0yNjA3MjkwNzUzNTFaFw0yNjA3MzAwOTE1NTFaMDMxMTAvBgNV BAMTKDAyQzc5RjQxNjk2NTAyNThDNjUwRDFFMzc1MEIzMkYxNThDMTgzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRVrOr6yLMmJpSUOa47ZefwbpJ HP4qciTHrOxTiznkmv7592Hegs2qe8AgA7x7W5N2wRpmRzOo4g+uLiU+hE0zXUw9 BTaQm+UyHjuNIlTjTE3ZG9gENLpfivDSjV09byGxQXqE9T/TYfQ6r7NprjD83T8G Nx65VwU8brLGFk1137wYTERgPJlneXD5V2KHG95uYDArAPgQOqQhcEBb57/Ezv1t 9vKS2jUc9WDhLx5bSInZWTs7DRA+WPA5q+lpRShspZ6ieMFOF3BUaU4sCBPKtGOi 1on3IDp4EOw29gbdzPRJ5KDCg1FLfWfLFB9xJBNwL8TPltns6z1hZsiJGG4bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAsefQWllAljGUNHjdQsy8VjBg4MwHwYDVR0j BBgwFoAUzLQAJF5sLhWaRp1GmRleCOzOUlAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg4MjkxNTgxOTU1Mjc4Ny8wL0NDQjQwMDI0NUU2QzJFMTU5QTQ2OUQ0Njk5MTk1 RTA4RUNDRTUyNTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhFQ0NFNTI1MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4ODI5MTU4MTk1NTI3ODcvMC9DQ0I0MDAyNDVFNkMy RTE1OUE0NjlENDY5OTE5NUUwOEVDQ0U1MjUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEN1asHWJ7EV xY5m88Ln1SQzAKDOX0+nPq5onMgtQ/MnBYsKqY92UvEi8oGDRCFWs7QBVe7VkVUy xwYIRatpMM09X3ZqTuREidj4oFYJJYt3INaNKnQIXndlSaGl8lT/7t5w/0VyoCy4 Iem8RfP1Z+mZLvNcOw9nQvuICYNMmirvGjQyZUQhT2/Gv8P6ZUnn49IA9P4I4k3S FsR/7hd+b2ATlRSeJthSZ09KF5JilB5tMI5wbi3XpnayZk1Om4TCjzC3lO6RsQHp y578NQ89HWRfB/QRKVBmVKlSBVoNfPp+KKpEYhObRHjXhhjotHUhNH231Ech5LS1 PpEt/Q3IKQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:13:38 2026 by rpki-client