$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft (raw, json) Hash identifier: 5PLu7dwlpkpKBH3REoIojsrRAigYT8CQcA6rcP8FEyM= Subject key identifier: 4E:58:AA:6B:08:44:B4:2D:3D:7C:FB:B8:89:E4:D9:12:BB:E6:BF:F6 Authority key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Certificate issuer: /CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Certificate serial: 7EF1F77B2EB978F738BD5251F4C104E4024BD6BA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft Manifest number: A6 Signing time: Fri 24 Jul 2026 14:16:24 +0000 Manifest this update: Fri 24 Jul 2026 14:11:24 +0000 Manifest next update: Sat 25 Jul 2026 17:08:24 +0000 Files and hashes: 1: 3130332e3137372e3136322e302f32332d3234203d3e20313439303537.roa (hash: jgtfx24D6pLUOGIrP0FsDFNvF8xIgwwrZ2kQ0C7L36A=) 2: 3136332e35332e35322e302f32322d3234203d3e20313439303537.roa (hash: uICx57p5+jtBkGMOR0tDJ+Anre9HEKQERsFBp0N7f88=) 3: 3136332e35332e35322e302f32322d3234203d3e203531383437.roa (hash: QuYF2uZ6IZ+l3FPWrOqcXWtoS7S46LuH4kJESx2x1Qs=) 4: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl (hash: i2J6+7WyYi3o68M672AHRaunCjVIxtV5JwFt3DxjEPI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f1:f7:7b:2e:b9:78:f7:38:bd:52:51:f4:c1:04:e4:02:4b:d6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Validity Not Before: Jul 24 14:11:24 2026 GMT Not After : Jul 25 17:08:24 2026 GMT Subject: CN=4E58AA6B0844B42D3D7CFBB889E4D912BBE6BFF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:f0:bf:49:e9:59:e8:9b:96:47:9a:c7:d0: 5d:c6:04:b4:c7:f3:69:bb:88:a9:03:b7:a4:1e:69: 9d:f9:f5:bb:a9:8b:12:2c:27:7f:58:57:66:d1:49: c9:75:9d:53:9e:ab:59:48:d9:66:78:66:43:2d:e0: 08:f0:6c:58:6b:b7:c5:79:aa:9c:ec:c1:dc:b6:2c: b0:42:b4:1c:fb:36:0b:fa:8a:a8:b1:29:78:fb:0c: 62:71:ea:d5:82:c1:60:26:8d:ea:14:a9:86:41:52: 7d:0c:ed:73:12:b7:a5:3e:a9:63:fb:d6:f4:19:41: 58:b8:02:36:0e:46:57:b0:4d:62:f1:4c:c3:0a:cf: 03:70:87:91:dc:67:c8:b5:15:dc:4c:20:a4:32:a7: 00:1c:0b:23:53:81:5a:93:44:8a:3e:44:59:1d:6d: a7:f8:3b:96:ca:38:51:b1:31:eb:95:5b:6d:fe:c4: 69:7f:d8:be:28:e3:22:8b:01:03:b1:2f:d7:2c:04: d2:2d:fa:cf:80:ec:90:a0:67:21:cc:df:e0:46:6f: 13:d1:3b:81:00:b7:8c:67:50:98:98:9d:d5:18:ab: 56:06:5d:f1:2a:42:6d:d5:1c:0f:e5:5a:c7:db:cc: 92:dc:33:8d:76:9e:ea:48:67:21:e2:91:00:ba:5f: 24:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:58:AA:6B:08:44:B4:2D:3D:7C:FB:B8:89:E4:D9:12:BB:E6:BF:F6 X509v3 Authority Key Identifier: keyid:CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:55:5f:87:a1:30:38:2a:b9:57:8d:40:bb:10:28:4c:cf:0d: 81:b8:89:f8:23:7c:c5:c0:7d:d0:c1:16:ad:01:25:92:eb:6b: fb:59:c9:15:28:b4:71:fd:96:d7:33:d2:65:5f:c7:94:31:6f: 58:5c:01:aa:dc:5d:25:21:c8:54:79:ac:d6:58:9d:e7:eb:ec: 6c:e3:4e:8f:50:e4:28:8a:54:62:d9:5e:36:c3:fe:b9:13:56: 52:e5:ca:ce:54:49:93:88:35:72:19:a1:56:b4:a0:01:87:c6: 27:01:b6:03:64:57:33:ee:5b:f9:19:c8:00:18:9f:2e:1a:ff: 63:7d:c3:db:2c:2f:bd:d4:1e:31:27:76:18:3d:80:0a:5e:1e: f2:ea:f5:97:8e:07:c7:7e:4d:87:44:9a:c5:54:84:e2:37:d3: 9b:95:cd:87:6c:67:73:68:c0:16:cb:c8:51:aa:65:60:24:8b: a5:05:ae:65:bd:1c:0b:24:b6:65:44:6a:21:ec:fa:ec:93:6c: 10:be:8d:bd:cb:bb:89:f4:c9:54:77:fb:7c:7b:2a:ee:da:b5: db:d7:35:ba:11:39:0e:8c:86:97:bf:49:1e:4c:e0:a6:1c:07: e1:b3:6b:3a:8c:3d:40:02:67:df:58:12:d7:08:e0:e7:7b:6f: 1e:ff:60:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfvH3ey65ePc4vVJR9MEE5AJL1rowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5 NEQ2OUJCOTAeFw0yNjA3MjQxNDExMjRaFw0yNjA3MjUxNzA4MjRaMDMxMTAvBgNV BAMTKDRFNThBQTZCMDg0NEI0MkQzRDdDRkJCODg5RTREOTEyQkJFNkJGRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI3fC/SelZ6JuWR5rH0F3GBLTH 82m7iKkDt6QeaZ359bupixIsJ39YV2bRScl1nVOeq1lI2WZ4ZkMt4AjwbFhrt8V5 qpzswdy2LLBCtBz7Ngv6iqixKXj7DGJx6tWCwWAmjeoUqYZBUn0M7XMSt6U+qWP7 1vQZQVi4AjYORlewTWLxTMMKzwNwh5HcZ8i1FdxMIKQypwAcCyNTgVqTRIo+RFkd baf4O5bKOFGxMeuVW23+xGl/2L4o4yKLAQOxL9csBNIt+s+A7JCgZyHM3+BGbxPR O4EAt4xnUJiYndUYq1YGXfEqQm3VHA/lWsfbzJLcM412nupIZyHikQC6XyTrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTliqawhEtC09fPu4ieTZErvmv/YwHwYDVR0j BBgwFoAUzKO7c4mfeDNMoD1tpNj9P5TWm7kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODM4NTQ1NTU1ODIzMDAxNy8wL0NDQTNCQjczODk5Rjc4MzM0Q0EwM0Q2REE0RDhG RDNGOTRENjlCQjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODgzODU0NTU1NTgyMzAwMTcvMC9DQ0EzQkI3Mzg5OUY3 ODMzNENBMDNENkRBNEQ4RkQzRjk0RDY5QkI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQFVfh6EwOCq5 V41AuxAoTM8NgbiJ+CN8xcB90MEWrQElkutr+1nJFSi0cf2W1zPSZV/HlDFvWFwB qtxdJSHIVHms1lid5+vsbONOj1DkKIpUYtleNsP+uRNWUuXKzlRJk4g1chmhVrSg AYfGJwG2A2RXM+5b+RnIABifLhr/Y33D2ywvvdQeMSd2GD2ACl4e8ur1l44Hx35N h0SaxVSE4jfTm5XNh2xnc2jAFsvIUaplYCSLpQWuZb0cCyS2ZURqIez67JNsEL6N vcu7ifTJVHf7fHsq7tq129c1uhE5DoyGl79JHkzgphwH4bNrOow9QAJn31gS1wjg 53tvHv9gbg== -----END CERTIFICATE-----Generated at Fri Jul 24 20:11:45 2026 by rpki-client