$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft (raw, json) Hash identifier: mDF+OM0RiyPuaneYV0qnOIYOdjunLVSYiXSnmmvehFc= Subject key identifier: F7:2D:74:F4:08:17:36:D8:BB:3B:4D:75:A5:76:A2:C4:49:ED:3B:26 Authority key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Certificate issuer: /CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Certificate serial: 2B1CD499FD28DC5E04DE0CD017E87805410E848C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft Manifest number: E6 Signing time: Mon 05 Oct 2026 04:33:40 +0000 Manifest this update: Mon 05 Oct 2026 04:28:40 +0000 Manifest next update: Thu 08 Oct 2026 09:25:40 +0000 Files and hashes: 1: 3136332e35332e35322e302f32322d3234203d3e20313439303537.roa (hash: uICx57p5+jtBkGMOR0tDJ+Anre9HEKQERsFBp0N7f88=) 2: 3130332e3137372e3136322e302f32332d3234203d3e20313439303537.roa (hash: jgtfx24D6pLUOGIrP0FsDFNvF8xIgwwrZ2kQ0C7L36A=) 3: 3136332e35332e35322e302f32322d3234203d3e203531383437.roa (hash: QuYF2uZ6IZ+l3FPWrOqcXWtoS7S46LuH4kJESx2x1Qs=) 4: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl (hash: /qLrP+tfDje306cwxh6fcyleXY45YuWsiA986VlykYY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 14:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1c:d4:99:fd:28:dc:5e:04:de:0c:d0:17:e8:78:05:41:0e:84:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Validity Not Before: Oct 5 04:28:40 2026 GMT Not After : Oct 8 09:25:40 2026 GMT Subject: CN=F72D74F4081736D8BB3B4D75A576A2C449ED3B26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:3a:91:61:a9:da:54:0d:3d:82:14:ae:fc: 8a:53:ac:de:da:23:2a:5f:f9:e3:6d:35:41:56:3a: fc:aa:53:76:64:e6:77:3c:c5:9c:09:4c:b3:bd:8f: 6b:14:ea:a6:e6:6f:ee:6d:45:87:35:59:40:0c:d0: 2e:32:6f:11:69:34:01:51:ea:48:1f:1f:ae:2d:01: b5:1a:9b:86:2d:f3:a3:75:ec:f2:61:ef:9a:bb:cf: 2b:67:d0:8d:04:bc:f3:9f:d5:d7:82:85:71:c4:28: 6f:f4:09:c5:54:7f:e9:78:2b:5d:3e:7f:10:fe:ac: 3e:35:56:22:53:aa:2f:20:93:c1:42:29:f1:45:19: fb:68:b6:ce:3d:88:4e:fa:bd:d7:40:8a:27:a8:7c: f8:fc:77:93:42:7c:c7:73:01:54:0f:aa:d1:cf:66: c4:87:81:38:df:a0:d1:e9:e8:b9:0f:b6:14:3e:7d: 5c:45:81:6b:9d:7f:8e:09:66:f5:e4:00:62:0e:f6: ed:81:79:52:86:d4:48:52:1e:c2:a5:9f:d3:69:e2: f3:63:8a:80:7b:c0:e2:d7:25:93:6d:1b:fe:ed:2d: ec:3e:ee:f5:65:7e:59:9a:11:9d:ba:3a:2a:a9:f4: bb:97:e3:63:b7:c5:5c:bd:d4:40:7c:30:2d:06:6a: 04:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2D:74:F4:08:17:36:D8:BB:3B:4D:75:A5:76:A2:C4:49:ED:3B:26 X509v3 Authority Key Identifier: keyid:CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e2:80:cd:a9:8c:47:0a:50:34:04:40:8d:ba:80:71:6f:c0: db:5a:5b:35:60:6d:dc:90:58:34:4a:15:71:f1:7d:58:87:71: 28:68:9f:64:59:ac:b6:5b:0b:12:2d:3b:f3:4d:45:45:45:9a: 2c:5b:e6:cc:db:34:3d:6d:26:61:c3:5d:fc:ce:f3:ec:e9:54: 20:97:69:13:ec:8b:6d:65:4c:7e:28:9a:44:fd:7e:c4:9f:c9: eb:b0:25:5b:1e:a1:9e:95:5f:c2:f5:49:52:9c:7e:93:e3:a2: 9f:25:08:cd:32:c9:b1:db:96:9a:c7:49:cf:00:9e:d7:2d:c1: 1f:bc:b9:ea:5f:3a:81:d6:2e:da:d6:3c:c6:11:ae:d7:5e:d0: 0b:c2:91:ac:53:73:3f:ab:67:9e:17:ec:00:a1:fe:b4:db:a3: e6:41:bd:ad:10:ca:64:df:94:6b:9b:70:34:f6:d5:07:08:da: ac:bd:12:08:d7:62:b1:aa:7d:9a:5f:c2:40:c8:82:3b:6a:39: e4:ca:16:f5:41:f9:9f:aa:3d:57:21:ed:b2:c5:45:1a:3f:08: 6f:cd:19:7f:4a:44:38:c2:3d:9b:85:31:be:71:64:b8:83:f6: 8f:7a:4b:da:89:c9:75:72:1b:79:f6:22:be:83:07:88:d4:de: a6:70:9e:9f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKxzUmf0o3F4E3gzQF+h4BUEOhIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5 NEQ2OUJCOTAeFw0yNjEwMDUwNDI4NDBaFw0yNjEwMDgwOTI1NDBaMDMxMTAvBgNV BAMTKEY3MkQ3NEY0MDgxNzM2RDhCQjNCNEQ3NUE1NzZBMkM0NDlFRDNCMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zjqRYanaVA09ghSu/IpTrN7a Iypf+eNtNUFWOvyqU3Zk5nc8xZwJTLO9j2sU6qbmb+5tRYc1WUAM0C4ybxFpNAFR 6kgfH64tAbUam4Yt86N17PJh75q7zytn0I0EvPOf1deChXHEKG/0CcVUf+l4K10+ fxD+rD41ViJTqi8gk8FCKfFFGftots49iE76vddAiieofPj8d5NCfMdzAVQPqtHP ZsSHgTjfoNHp6LkPthQ+fVxFgWudf44JZvXkAGIO9u2BeVKG1EhSHsKln9Np4vNj ioB7wOLXJZNtG/7tLew+7vVlflmaEZ26Oiqp9LuX42O3xVy91EB8MC0GagQ5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9y109AgXNti7O011pXaixEntOyYwHwYDVR0j BBgwFoAUzKO7c4mfeDNMoD1tpNj9P5TWm7kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODM4NTQ1NTU1ODIzMDAxNy8wL0NDQTNCQjczODk5Rjc4MzM0Q0EwM0Q2REE0RDhG RDNGOTRENjlCQjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODgzODU0NTU1NTgyMzAwMTcvMC9DQ0EzQkI3Mzg5OUY3 ODMzNENBMDNENkRBNEQ4RkQzRjk0RDY5QkI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+KAzamMRwpQ NARAjbqAcW/A21pbNWBt3JBYNEoVcfF9WIdxKGifZFmstlsLEi07801FRUWaLFvm zNs0PW0mYcNd/M7z7OlUIJdpE+yLbWVMfiiaRP1+xJ/J67AlWx6hnpVfwvVJUpx+ k+OinyUIzTLJsduWmsdJzwCe1y3BH7y56l86gdYu2tY8xhGu117QC8KRrFNzP6tn nhfsAKH+tNuj5kG9rRDKZN+Ua5twNPbVBwjarL0SCNdisap9ml/CQMiCO2o55MoW 9UH5n6o9VyHtssVFGj8Ib80Zf0pEOMI9m4UxvnFkuIP2j3pL2onJdXIbefYivoMH iNTepnCenw== -----END CERTIFICATE-----Generated at Tue Oct 6 01:10:49 2026 by rpki-client