$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft File: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft (raw, json) Hash identifier: 7K+Yf71oMEvsBehHVlDZ6iGttng2O//CHRb0jEfkTm8= Subject key identifier: 62:0A:53:75:98:43:D2:C7:BC:E6:61:7B:7E:EC:7E:8C:27:44:C6:7C Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Certificate serial: 617961812E332CA4E7DCE124A8D863A1183BAFA4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft Manifest number: 4D Signing time: Wed 29 Jul 2026 11:19:16 +0000 Manifest this update: Wed 29 Jul 2026 11:14:16 +0000 Manifest next update: Thu 30 Jul 2026 14:45:16 +0000 Files and hashes: 1: 3131342e3131322e3133362e302f32312d3231203d3e203538383531.roa (hash: +jDDG9chHRqcyqWLGG+Yj0uT75vd7evZ1ioSDSj0JtM=) 2: 3130332e3234342e36342e302f32322d3232203d3e203538383531.roa (hash: bF8lXwImti0G2C5h9HUFWEwJAQE60tR62Vp1rdSFMcU=) 3: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl (hash: HD3MFWbGguUPHLc1bK7a/TyPuODTcvIKhBebO6KTGYw=) 4: 3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa (hash: iYYYGCpOqt0aQJSSD8PSpzbRMdT6sgK2gSOfuxf7KWY=) 5: 3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa (hash: j5Rdo2Js55PNYoidEZ9f2WJvO7iSzLGP5wKzIv/CRG8=) 6: 3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa (hash: UzOtHYzkQbEQuGwE/udN6JYGU4x59h6zYKuWNYSyF5g=) 7: 3130332e31362e3132342e302f32322d3232203d3e203538383531.roa (hash: J03Bd745xFUmekCrtUpll59JIIiIgF2WNL6PFFMPGcc=) 8: 312e3131392e3132342e302f32322d3232203d3e203538383531.roa (hash: cZFuiOH6cyFkDGUgid52B5+rCCUk1Je7maMmKWVlJrI=) 9: 312e3131392e302e302f31372d3137203d3e203538383531.roa (hash: JS3bNo89jFxRPcoUjJ2KW3+dlS5F8ZfPoJOwJABerhE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:79:61:81:2e:33:2c:a4:e7:dc:e1:24:a8:d8:63:a1:18:3b:af:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Validity Not Before: Jul 29 11:14:16 2026 GMT Not After : Jul 30 14:45:16 2026 GMT Subject: CN=620A53759843D2C7BCE6617B7EEC7E8C2744C67C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:62:33:00:fb:71:08:5d:03:a3:e8:3a:46:fe: cd:c7:fa:9b:ec:e2:9b:07:53:14:6a:95:4f:3d:25: ad:2b:7e:94:71:84:94:70:59:5f:5b:3c:3a:b5:d9: ff:41:62:02:89:db:1b:0e:3d:d2:8d:c7:59:d2:11: 79:1d:9d:d8:a9:71:ff:54:8b:02:4f:a7:b1:07:6b: 3a:dd:e4:ec:8b:1a:0a:a6:5e:85:8e:b0:23:c7:97: 82:11:ee:7f:d4:bf:8b:69:b2:0f:07:63:0c:cc:d8: 6c:4e:74:11:9f:32:66:c2:9b:37:70:17:02:9a:4a: 47:59:0a:11:44:7b:ac:0d:49:2c:f5:4b:79:64:63: 83:e3:a9:84:4d:71:d3:4c:d4:5b:5a:d4:17:22:fd: e6:e7:d1:10:3f:58:54:d8:69:dd:80:a0:b3:82:e8: 90:bb:a9:f6:80:f9:c1:5b:ea:6f:18:79:11:2d:e0: 9e:87:8d:8b:21:b1:31:16:08:f0:a3:a3:80:b1:4c: 53:ed:b5:a5:c4:a1:16:c6:bd:5c:47:95:65:89:8d: 34:b7:66:c4:c8:f2:7e:a6:93:c8:7e:61:2d:58:c8: fb:71:63:c7:f2:8e:08:70:a0:81:45:b1:c9:7c:4c: 45:8a:7b:bb:05:f8:72:eb:2b:98:fe:9e:dd:54:3d: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0A:53:75:98:43:D2:C7:BC:E6:61:7B:7E:EC:7E:8C:27:44:C6:7C X509v3 Authority Key Identifier: keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bc:d7:45:23:81:47:91:82:2c:a7:66:2c:3f:0c:44:63:8d: 62:77:6f:a0:a3:3b:a1:1c:e7:57:38:ab:96:c5:de:36:10:59: 38:a2:78:33:ce:7e:41:fc:b8:12:89:7d:be:cd:cd:2d:a6:9e: 08:85:d3:25:1c:9f:c9:ca:70:4f:c5:d2:8e:72:06:1e:11:76: f1:43:d5:f0:bd:31:98:1b:0b:46:37:0e:4d:68:b9:40:e2:d7: 65:86:2a:b9:de:91:d4:bd:4d:98:1a:06:7c:73:e2:97:f7:f7: 73:40:3b:40:82:30:18:17:67:f0:17:38:09:94:23:de:40:51: 15:78:ab:e7:38:7d:d1:e3:e7:e8:81:b1:b1:ee:83:b5:c3:bd: 4d:b5:db:33:f8:db:ff:fb:0f:59:67:a6:54:23:79:44:22:56: 0d:08:e7:f2:7d:6e:2c:13:dd:fe:42:77:8d:f3:5e:cf:aa:c5: ab:e0:e6:39:8d:be:16:aa:f4:e7:05:2a:01:db:a7:7c:2d:62: e1:05:2e:1e:b6:b8:20:4b:3d:0c:04:a2:7f:44:be:0b:47:be: 1d:24:2f:bd:97:02:bd:2f:bb:b7:7e:86:4a:84:b5:65:33:af: 3c:c3:28:1e:24:e2:9b:75:ce:d4:93:f2:19:7c:be:e7:84:fc: 44:13:ec:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYXlhgS4zLKTn3OEkqNhjoRg7r6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5 MDRDNUVDMjAeFw0yNjA3MjkxMTE0MTZaFw0yNjA3MzAxNDQ1MTZaMDMxMTAvBgNV BAMTKDYyMEE1Mzc1OTg0M0QyQzdCQ0U2NjE3QjdFRUM3RThDMjc0NEM2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSYjMA+3EIXQOj6DpG/s3H+pvs 4psHUxRqlU89Ja0rfpRxhJRwWV9bPDq12f9BYgKJ2xsOPdKNx1nSEXkdndipcf9U iwJPp7EHazrd5OyLGgqmXoWOsCPHl4IR7n/Uv4tpsg8HYwzM2GxOdBGfMmbCmzdw FwKaSkdZChFEe6wNSSz1S3lkY4PjqYRNcdNM1Fta1Bci/ebn0RA/WFTYad2AoLOC 6JC7qfaA+cFb6m8YeREt4J6HjYshsTEWCPCjo4CxTFPttaXEoRbGvVxHlWWJjTS3 ZsTI8n6mk8h+YS1YyPtxY8fyjghwoIFFscl8TEWKe7sF+HLrK5j+nt1UPYXXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYgpTdZhD0se85mF7fux+jCdExnwwHwYDVR0j BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NjE5MDA4OTU2MTcwNTEvMC8yREU3OEM5NDVFMkI1 MzM3NEI4NkMwQTdCREU1QURFNjkwNEM1RUMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7zXRSOBR5GC LKdmLD8MRGONYndvoKM7oRznVzirlsXeNhBZOKJ4M85+Qfy4Eol9vs3NLaaeCIXT JRyfycpwT8XSjnIGHhF28UPV8L0xmBsLRjcOTWi5QOLXZYYqud6R1L1NmBoGfHPi l/f3c0A7QIIwGBdn8Bc4CZQj3kBRFXir5zh90ePn6IGxse6DtcO9TbXbM/jb//sP WWemVCN5RCJWDQjn8n1uLBPd/kJ3jfNez6rFq+DmOY2+Fqr05wUqAdunfC1i4QUu Hra4IEs9DASif0S+C0e+HSQvvZcCvS+7t36GSoS1ZTOvPMMoHiTim3XO1JPyGXy+ 54T8RBPsoQ== -----END CERTIFICATE-----Generated at Wed Jul 29 13:31:31 2026 by rpki-client