$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft File: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft (raw, json) Hash identifier: PVf3oGp8SgvaLbwsU7Ztzcg/eE+iNgUldehiDMqxWxs= Subject key identifier: AD:21:76:60:81:EC:32:69:DC:0E:B2:6E:82:17:53:BB:A1:32:D5:8E Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E Certificate issuer: /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Certificate serial: 3DDEE15FB04D750EE50D9EF7A9EBF549AE3857C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft Manifest number: 4F Signing time: Wed 29 Jul 2026 15:39:43 +0000 Manifest this update: Wed 29 Jul 2026 15:34:43 +0000 Manifest next update: Thu 30 Jul 2026 19:19:43 +0000 Files and hashes: 1: 3130332e35372e3133362e302f32342d3234203d3e203539303634.roa (hash: 9xsJXOdXAuZCp2S7dPdlIF9LfPtLX/1I2u7JF+Qm/7s=) 2: 34352e3131372e36392e302f32342d3234203d3e203539303634.roa (hash: KEOsUrMYTo7UB6tINn+uRJdhpQQWUcZgNgXhs7+3qhI=) 3: 34352e3131372e37312e302f32342d3234203d3e203539303634.roa (hash: 1Y+Dh612RaqOJd6pDXHDbAj4lmDdl16U1NldnrDPKCw=) 4: 3130332e35372e3133372e302f32342d3234203d3e203539303634.roa (hash: EhkLMd2zDyYJ51w/Sy0gxXGPOF2SNni4GumU+NZ9Ag0=) 5: 34352e3131372e37302e302f32342d3234203d3e203539303634.roa (hash: GolnmXyy2lhajh4DhEErHiZTYtdA+C7MnLTJ8QR+h00=) 6: 34352e3131372e36382e302f32342d3234203d3e203539303634.roa (hash: tYxUjp3xtdPTVjkycWWXB9adnoLWLKlyWFGDfc/+/pQ=) 7: 3130332e35372e3133392e302f32342d3234203d3e2034383437.roa (hash: cbxFaZtA0DoxRicp7QpsnTBUTzztA//mwgrvHEC1oqY=) 8: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl (hash: zPrW1ECX4hnArB7vBQvnCBMRuotGdMhaUZ0ML/AR/iY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 19:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:de:e1:5f:b0:4d:75:0e:e5:0d:9e:f7:a9:eb:f5:49:ae:38:57:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Validity Not Before: Jul 29 15:34:43 2026 GMT Not After : Jul 30 19:19:43 2026 GMT Subject: CN=AD21766081EC3269DC0EB26E821753BBA132D58E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b4:0e:f0:b6:be:ce:7d:40:fe:05:61:8f:d8: f5:f1:85:04:9a:1a:03:84:9b:eb:a2:cd:16:1c:69: 5d:59:18:42:08:74:30:cd:64:ce:1f:30:62:2f:c4: ac:ec:87:b7:c1:c7:2e:f1:70:63:9f:81:35:7b:cc: eb:67:5d:9b:86:be:63:66:7c:ac:9c:03:13:3c:d4: a4:77:c2:42:87:d1:a7:de:f8:39:fa:44:cf:f4:1b: b0:9b:5e:9b:f6:d5:10:2a:fe:21:03:af:35:20:70: ef:48:49:24:d2:3d:e6:31:eb:31:22:1b:e2:00:24: b0:de:aa:ba:7a:c7:ed:6e:13:5d:06:83:eb:0d:43: ef:73:2a:7e:a9:b9:d3:24:18:c3:d4:53:e7:c4:bd: 7b:fe:7a:54:e3:6c:c3:ef:fc:cd:e4:c7:8f:b3:8d: 52:71:08:2f:bb:aa:24:9f:dc:06:0b:bb:54:b9:3e: af:e8:85:ae:3f:87:46:11:12:6d:b4:25:79:92:9d: 2a:80:50:ca:51:1c:17:bd:fb:c7:33:da:0f:96:45: 2a:05:38:4f:2c:9c:c7:0f:1c:ec:6e:ac:8f:0a:ce: bb:c2:3d:e0:3e:a1:f1:4b:c5:f1:82:be:fd:44:a6: 50:e4:6c:5c:86:84:89:fc:7c:f6:3b:ce:c6:c6:c5: 89:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:21:76:60:81:EC:32:69:DC:0E:B2:6E:82:17:53:BB:A1:32:D5:8E X509v3 Authority Key Identifier: keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a5:f4:c2:73:e9:4e:5e:36:13:ac:a3:0e:de:54:3a:e9:c4: 75:8a:8a:48:56:44:6b:d5:dd:76:f6:96:0f:4b:03:32:f6:88: bd:a0:67:d0:01:00:8c:e8:21:a8:6f:23:ce:ac:65:4b:13:98: 3b:aa:2c:4a:97:d1:8d:28:8b:2e:06:9d:fd:df:a2:cc:9e:47: e9:95:a1:ee:3f:68:21:2b:e9:c5:f9:b4:72:b3:dd:ce:75:84: 5f:f8:fc:d8:47:e8:ba:ca:91:19:6c:97:1a:35:26:20:2d:d3: 31:f0:db:74:00:e1:c9:5f:df:bf:f9:52:e5:d7:82:4c:40:94: 9b:26:12:24:8c:f0:25:76:c9:41:84:eb:89:a3:79:d9:89:b4: 80:a6:d9:40:89:13:b0:d5:8b:67:4b:e8:e4:37:76:81:13:3a: 11:b9:72:d1:e2:76:76:07:5a:27:09:52:17:62:a9:91:90:ce: 0b:1d:d7:a7:e1:94:70:16:70:ce:ad:f1:bd:82:1a:4b:99:6e: db:d5:2b:ce:a5:35:69:9a:e7:46:35:a2:96:56:0e:2b:97:01: 49:d6:46:a6:e6:cd:79:aa:32:63:a1:1f:13:eb:fa:df:fe:08: d7:5a:fc:27:f1:e7:3c:2c:88:95:f0:cf:22:cd:a9:0a:b5:c5: 92:fb:70:20 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPd7hX7BNdQ7lDZ73qev1Sa44V8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRB REU5MUUxRTAeFw0yNjA3MjkxNTM0NDNaFw0yNjA3MzAxOTE5NDNaMDMxMTAvBgNV BAMTKEFEMjE3NjYwODFFQzMyNjlEQzBFQjI2RTgyMTc1M0JCQTEzMkQ1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCftA7wtr7OfUD+BWGP2PXxhQSa GgOEm+uizRYcaV1ZGEIIdDDNZM4fMGIvxKzsh7fBxy7xcGOfgTV7zOtnXZuGvmNm fKycAxM81KR3wkKH0afe+Dn6RM/0G7CbXpv21RAq/iEDrzUgcO9ISSTSPeYx6zEi G+IAJLDeqrp6x+1uE10Gg+sNQ+9zKn6pudMkGMPUU+fEvXv+elTjbMPv/M3kx4+z jVJxCC+7qiSf3AYLu1S5Pq/oha4/h0YREm20JXmSnSqAUMpRHBe9+8cz2g+WRSoF OE8snMcPHOxurI8KzrvCPeA+ofFLxfGCvv1EplDkbFyGhIn8fPY7zsbGxYnFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrSF2YIHsMmncDrJughdTu6Ey1Y4wHwYDVR0j BBgwFoAUysQ+fdlksXIme9mLbYLVJK3pHh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDA5MjA4MTAyMzgxMTYwMy8wL0NBQzQzRTdERDk2NEIxNzIyNjdCRDk4QjZEODJE NTI0QURFOTFFMUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRBREU5MUUxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQwOTIwODEwMjM4MTE2MDMvMC9DQUM0M0U3REQ5NjRC MTcyMjY3QkQ5OEI2RDgyRDUyNEFERTkxRTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqX0wnPpTl42 E6yjDt5UOunEdYqKSFZEa9XddvaWD0sDMvaIvaBn0AEAjOghqG8jzqxlSxOYO6os SpfRjSiLLgad/d+izJ5H6ZWh7j9oISvpxfm0crPdznWEX/j82EfousqRGWyXGjUm IC3TMfDbdADhyV/fv/lS5deCTECUmyYSJIzwJXbJQYTriaN52Ym0gKbZQIkTsNWL Z0vo5Dd2gRM6Ebly0eJ2dgdaJwlSF2KpkZDOCx3Xp+GUcBZwzq3xvYIaS5lu29Ur zqU1aZrnRjWillYOK5cBSdZGpubNeaoyY6EfE+v63/4I11r8J/HnPCyIlfDPIs2p CrXFkvtwIA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:07:34 2026 by rpki-client