$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft (raw, json) Hash identifier: BssI5g2od4CFSNNYfB3FAsG+TFZtDoeOpWpcO/oPhNo= Subject key identifier: 91:75:B3:39:D7:01:D1:56:A7:5C:43:79:CD:51:8E:43:79:16:2C:9C Authority key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Certificate issuer: /CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Certificate serial: 54A506DC9B6817E79B4B81F42762C860EC43A081 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft Manifest number: 06 Signing time: Thu 26 Mar 2026 05:33:28 +0000 Manifest this update: Thu 26 Mar 2026 05:28:28 +0000 Manifest next update: Fri 27 Mar 2026 09:12:28 +0000 Files and hashes: 1: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl (hash: f0SeFj06I9MxrSSl9HIRJdNDAAt9xC8vFFlUG21odTc=) 2: 3136332e35332e35322e302f32322d3234203d3e203531383437.roa (hash: QuYF2uZ6IZ+l3FPWrOqcXWtoS7S46LuH4kJESx2x1Qs=) 3: 3136332e35332e35322e302f32322d3234203d3e20313439303537.roa (hash: uICx57p5+jtBkGMOR0tDJ+Anre9HEKQERsFBp0N7f88=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a5:06:dc:9b:68:17:e7:9b:4b:81:f4:27:62:c8:60:ec:43:a0:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Validity Not Before: Mar 26 05:28:28 2026 GMT Not After : Mar 27 09:12:28 2026 GMT Subject: CN=9175B339D701D156A75C4379CD518E4379162C9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d4:3b:fa:7c:b3:b1:7c:3f:88:84:e4:5a:61: b4:d2:4a:00:aa:97:8b:1c:c8:6f:1e:28:eb:b9:70: 88:e6:85:6b:3a:0c:dd:84:5b:d7:f2:bd:03:a9:9d: cd:15:16:31:28:f9:ef:34:b4:15:c2:8d:1a:7c:56: 6d:42:d8:16:c4:be:c2:f4:c2:fb:76:a7:5e:57:87: e7:7b:8c:f8:32:99:4d:f1:b5:aa:55:1b:f0:d1:4d: a3:82:6d:83:2b:30:bb:c3:88:4d:af:d1:d1:dd:9a: 6c:43:01:2d:fe:59:e6:13:0e:19:80:d6:76:c5:bf: 86:d0:7e:9b:76:5b:ba:a0:d1:c2:22:22:ec:a1:16: 98:0c:c7:40:a8:0f:83:b5:40:c7:2f:fa:ad:5b:66: 42:4b:74:c3:63:44:02:9d:03:68:b4:d7:b7:04:46: a9:fb:ef:08:c7:7f:57:7b:f4:b0:cc:57:b6:de:1c: 75:82:3c:d4:f4:ab:51:5b:69:f9:f0:24:92:47:e8: 4d:c9:dd:cb:88:90:2e:dd:06:4b:fb:ca:62:39:65: af:9d:c1:52:82:8c:41:17:b3:a9:39:56:1e:1e:f0: fc:cb:0d:c3:de:48:9b:30:1b:d8:68:74:dd:65:89: 0b:65:5f:2f:fb:39:d1:aa:eb:b0:f3:98:8a:09:23: 9e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:75:B3:39:D7:01:D1:56:A7:5C:43:79:CD:51:8E:43:79:16:2C:9C X509v3 Authority Key Identifier: keyid:CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0a:7f:90:37:0a:e4:9a:db:d2:59:2f:07:86:cb:dc:63:68: 95:7e:2c:3f:ef:f5:db:4b:65:9d:c2:ad:b9:02:b3:e4:30:87: 6f:69:d8:e7:18:3b:de:3e:45:c6:61:d1:eb:45:60:90:bc:0e: 3d:86:02:73:c8:77:0e:49:c7:a0:ab:5d:d9:ae:28:c8:98:8d: ab:05:fc:e5:20:96:2c:81:bc:ae:7d:7b:48:ff:2c:66:44:2a: cf:4a:63:1f:a3:6d:b8:fb:a1:ef:97:3c:c7:9c:5c:58:f0:93: 84:fd:9d:d5:17:b4:73:ca:b6:ef:a9:e0:2c:d8:40:b6:05:d3: 6f:04:b5:2c:f7:b2:14:a9:19:b7:de:72:ce:05:2a:39:b5:6a: a0:9e:0d:75:35:9c:38:2c:15:8c:9a:15:05:b6:46:bd:ea:00: 2b:41:3d:75:a2:1e:ca:33:17:6a:16:e2:29:7a:9c:8f:cb:22: a2:a5:6e:2f:e2:8a:90:14:55:c3:ba:3f:b0:28:83:5b:d8:46: 87:3e:ea:37:06:c9:52:a0:8c:34:7d:d7:8c:c4:b8:80:5d:1c: 79:c7:33:53:c0:de:17:44:b7:4f:b5:b8:26:4d:dd:1c:91:51: a9:21:bf:38:d8:9a:1d:fb:f8:d8:6a:98:79:5d:12:4c:75:67: 71:32:8d:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVKUG3JtoF+ebS4H0J2LIYOxDoIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5 NEQ2OUJCOTAeFw0yNjAzMjYwNTI4MjhaFw0yNjAzMjcwOTEyMjhaMDMxMTAvBgNV BAMTKDkxNzVCMzM5RDcwMUQxNTZBNzVDNDM3OUNENTE4RTQzNzkxNjJDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS1Dv6fLOxfD+IhORaYbTSSgCq l4scyG8eKOu5cIjmhWs6DN2EW9fyvQOpnc0VFjEo+e80tBXCjRp8Vm1C2BbEvsL0 wvt2p15Xh+d7jPgymU3xtapVG/DRTaOCbYMrMLvDiE2v0dHdmmxDAS3+WeYTDhmA 1nbFv4bQfpt2W7qg0cIiIuyhFpgMx0CoD4O1QMcv+q1bZkJLdMNjRAKdA2i017cE Rqn77wjHf1d79LDMV7beHHWCPNT0q1FbafnwJJJH6E3J3cuIkC7dBkv7ymI5Za+d wVKCjEEXs6k5Vh4e8PzLDcPeSJswG9hodN1liQtlXy/7OdGq67DzmIoJI55PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkXWzOdcB0VanXEN5zVGOQ3kWLJwwHwYDVR0j BBgwFoAUzKO7c4mfeDNMoD1tpNj9P5TWm7kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODM4NTQ1NTU1ODIzMDAxNy8wL0NDQTNCQjczODk5Rjc4MzM0Q0EwM0Q2REE0RDhG RDNGOTRENjlCQjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODgzODU0NTU1NTgyMzAwMTcvMC9DQ0EzQkI3Mzg5OUY3 ODMzNENBMDNENkRBNEQ4RkQzRjk0RDY5QkI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgp/kDcK5Jrb 0lkvB4bL3GNolX4sP+/120tlncKtuQKz5DCHb2nY5xg73j5FxmHR60VgkLwOPYYC c8h3DknHoKtd2a4oyJiNqwX85SCWLIG8rn17SP8sZkQqz0pjH6NtuPuh75c8x5xc WPCThP2d1Re0c8q276ngLNhAtgXTbwS1LPeyFKkZt95yzgUqObVqoJ4NdTWcOCwV jJoVBbZGveoAK0E9daIeyjMXahbiKXqcj8sioqVuL+KKkBRVw7o/sCiDW9hGhz7q NwbJUqCMNH3XjMS4gF0cecczU8DeF0S3T7W4Jk3dHJFRqSG/ONiaHfv42GqYeV0S THVncTKNEg== -----END CERTIFICATE-----Generated at Thu Mar 26 19:20:19 2026 by rpki-client