$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft File: C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft (raw, json) Hash identifier: vIvUI/pRwja/a+rg25yiAo9EmWDhUyzh6cTz78pDR/U= Subject key identifier: 39:40:DC:10:09:86:3D:B9:FA:44:01:8A:12:5F:26:5C:3E:83:53:F6 Authority key identifier: C3:AB:47:83:13:D3:11:3B:68:CB:CC:9A:DB:44:81:C1:CA:ED:D4:7B Certificate issuer: /CN=C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B Certificate serial: 03CBA30CBA180E6CF68765CC35868702D739379B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft Manifest number: 43 Signing time: Wed 29 Jul 2026 16:54:49 +0000 Manifest this update: Wed 29 Jul 2026 16:49:49 +0000 Manifest next update: Thu 30 Jul 2026 20:22:49 +0000 Files and hashes: 1: C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl (hash: NIQACG3byutQlgRVyPCeI93N2gElDwGvkh+7KIym+G0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 20:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cb:a3:0c:ba:18:0e:6c:f6:87:65:cc:35:86:87:02:d7:39:37:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B Validity Not Before: Jul 29 16:49:49 2026 GMT Not After : Jul 30 20:22:49 2026 GMT Subject: CN=3940DC1009863DB9FA44018A125F265C3E8353F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:a2:a8:5f:00:89:30:9d:0b:04:b7:16:0d: 9e:10:15:23:1d:bf:dc:65:f3:d6:c1:e2:25:d7:6f: a2:56:92:8d:d4:64:62:25:62:c4:60:27:56:c6:da: 63:95:b6:ae:ee:71:c8:56:f5:88:1b:b8:2f:ce:05: 63:13:51:24:d7:1b:b3:a9:f8:f1:96:c2:de:d1:3e: c8:1c:f5:b4:91:d3:53:5c:69:8f:2a:c5:5c:78:06: 79:cb:2c:11:a9:4d:e8:8c:b4:4e:9e:df:80:83:3d: 64:88:e2:77:b1:ed:2d:b0:6c:99:db:d0:30:52:da: 85:91:2b:61:be:63:06:7f:1c:1d:e6:0b:6c:29:7a: fa:fc:3d:02:83:8e:0e:ef:91:86:29:47:83:f8:ce: 86:a9:5c:65:42:4b:f2:53:45:18:1f:0d:61:2f:95: b1:d5:16:46:2c:04:4a:e2:19:7f:68:ee:83:3f:6b: 28:44:2a:fd:9c:6b:0b:5c:83:f7:7b:ae:27:e3:7f: 6f:ae:4c:8f:77:b6:45:02:1f:01:9a:a2:d2:ac:0e: 30:49:45:23:2a:52:f6:5f:44:c7:42:97:3a:29:f1: 93:9f:00:cc:5c:ed:04:b3:e9:e9:ea:ae:79:f3:fa: ab:4d:1d:c5:f1:ab:10:2d:cd:e9:34:83:19:b8:e7: 49:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:40:DC:10:09:86:3D:B9:FA:44:01:8A:12:5F:26:5C:3E:83:53:F6 X509v3 Authority Key Identifier: keyid:C3:AB:47:83:13:D3:11:3B:68:CB:CC:9A:DB:44:81:C1:CA:ED:D4:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/0/C3AB478313D3113B68CBCC9ADB4481C1CAEDD47B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:1d:da:4f:ff:3a:dd:97:6d:00:2c:5c:a4:e9:5c:e7:ad:7e: 11:26:40:72:0f:9f:72:95:8f:bb:91:a3:bb:f1:8c:5e:b3:a2: bf:58:27:79:6b:ef:12:5a:bd:26:15:5d:e4:09:42:43:5a:19: cf:5f:90:fd:24:8a:b2:c2:70:75:23:46:4f:d8:62:fb:82:e8: 8b:d8:de:91:38:3a:e5:60:37:14:11:bf:bc:ed:ac:77:51:b7: 40:c1:30:41:42:97:9c:f2:4d:78:25:22:bf:66:03:3e:82:5a: 54:30:61:e9:ea:d3:19:b5:b6:9c:dc:b9:56:f5:30:46:50:8b: 2a:f4:c1:29:c2:e1:9f:7c:28:67:b8:6c:2b:ea:77:3d:af:db: f9:e2:7a:95:87:d0:a4:e3:54:d6:41:17:11:c5:cf:ee:bc:c6: 92:e8:1c:42:9d:d7:fd:f0:e8:84:5e:ce:a5:f2:92:74:90:78: 95:8d:3b:ef:62:3c:ee:c1:1f:e4:a5:d3:f2:45:5a:15:fa:1d: 46:9b:79:0d:7b:9d:81:4b:24:88:fa:91:1b:cc:dc:24:07:d3: 2a:80:aa:4d:de:70:63:9a:e1:64:4a:02:03:1b:ea:0c:23:78: 29:44:c4:01:a8:cf:a4:c0:3c:6f:df:b3:1a:fe:51:f6:f4:35: 2d:3f:cf:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA8ujDLoYDmz2h2XMNYaHAtc5N5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNBQjQ3ODMxM0QzMTEzQjY4Q0JDQzlBREI0NDgxQzFD QUVERDQ3QjAeFw0yNjA3MjkxNjQ5NDlaFw0yNjA3MzAyMDIyNDlaMDMxMTAvBgNV BAMTKDM5NDBEQzEwMDk4NjNEQjlGQTQ0MDE4QTEyNUYyNjVDM0U4MzUzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MaKoXwCJMJ0LBLcWDZ4QFSMd v9xl89bB4iXXb6JWko3UZGIlYsRgJ1bG2mOVtq7ucchW9YgbuC/OBWMTUSTXG7Op +PGWwt7RPsgc9bSR01NcaY8qxVx4BnnLLBGpTeiMtE6e34CDPWSI4nex7S2wbJnb 0DBS2oWRK2G+YwZ/HB3mC2wpevr8PQKDjg7vkYYpR4P4zoapXGVCS/JTRRgfDWEv lbHVFkYsBEriGX9o7oM/ayhEKv2cawtcg/d7rifjf2+uTI93tkUCHwGaotKsDjBJ RSMqUvZfRMdClzop8ZOfAMxc7QSz6enqrnnz+qtNHcXxqxAtzek0gxm450nnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOUDcEAmGPbn6RAGKEl8mXD6DU/YwHwYDVR0j BBgwFoAUw6tHgxPTETtoy8ya20SBwcrt1HswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx Njk5MjE1MTY5NjE3OTIyMy8wL0MzQUI0NzgzMTNEMzExM0I2OENCQ0M5QURCNDQ4 MUMxQ0FFREQ0N0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzNBQjQ3ODMxM0QzMTEzQjY4Q0JDQzlBREI0NDgxQzFDQUVERDQ3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTY5OTIxNTE2OTYxNzkyMjMvMC9DM0FCNDc4MzEzRDMx MTNCNjhDQkNDOUFEQjQ0ODFDMUNBRURENDdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACx3aT/863Zdt ACxcpOlc561+ESZAcg+fcpWPu5Gju/GMXrOiv1gneWvvElq9JhVd5AlCQ1oZz1+Q /SSKssJwdSNGT9hi+4Loi9jekTg65WA3FBG/vO2sd1G3QMEwQUKXnPJNeCUiv2YD PoJaVDBh6erTGbW2nNy5VvUwRlCLKvTBKcLhn3woZ7hsK+p3Pa/b+eJ6lYfQpONU 1kEXEcXP7rzGkugcQp3X/fDohF7OpfKSdJB4lY0772I87sEf5KXT8kVaFfodRpt5 DXudgUskiPqRG8zcJAfTKoCqTd5wY5rhZEoCAxvqDCN4KUTEAajPpMA8b9+zGv5R 9vQ1LT/PqQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:23 2026 by rpki-client