$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft (raw, json) Hash identifier: SJT4FkGu27UXuP0DJtzzoYUFLQOfjxpTNSa1VUJhGbY= Subject key identifier: 37:DA:F5:A0:C0:81:C3:C8:46:5C:CB:54:58:E5:1F:15:A6:26:4F:8F Authority key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Certificate issuer: /CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Certificate serial: 153CBB71F7F430C16C1038BFE8404FB25F299B8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft Manifest number: 46 Signing time: Wed 13 May 2026 04:25:56 +0000 Manifest this update: Wed 13 May 2026 04:20:56 +0000 Manifest next update: Thu 14 May 2026 07:32:56 +0000 Files and hashes: 1: 3136332e35332e35322e302f32322d3234203d3e20313439303537.roa (hash: uICx57p5+jtBkGMOR0tDJ+Anre9HEKQERsFBp0N7f88=) 2: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl (hash: Bs3Yi1exi066arux4gF0P4xOXNMQZLRmS8oYy+yB694=) 3: 3136332e35332e35322e302f32322d3234203d3e203531383437.roa (hash: QuYF2uZ6IZ+l3FPWrOqcXWtoS7S46LuH4kJESx2x1Qs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3c:bb:71:f7:f4:30:c1:6c:10:38:bf:e8:40:4f:b2:5f:29:9b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Validity Not Before: May 13 04:20:56 2026 GMT Not After : May 14 07:32:56 2026 GMT Subject: CN=37DAF5A0C081C3C8465CCB5458E51F15A6264F8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1e:19:0d:3a:d0:6e:55:f0:92:10:25:6d:9e: ca:44:02:c5:6c:89:a1:f4:ab:30:a0:5c:cd:0a:e1: da:9f:e3:f9:61:9e:2a:47:e0:59:25:e0:fc:13:ac: 5f:d3:1b:c1:7b:b1:86:34:85:24:57:cd:f2:32:66: 9c:e9:31:f8:7a:45:6d:01:24:7b:d6:9f:fe:87:58: f7:1d:1e:61:c8:1c:c4:27:fc:76:78:7d:e6:e8:47: 0d:b0:3e:d7:a6:1c:55:ee:34:db:0b:b7:f2:46:3c: 65:48:a3:c4:ab:9a:e4:b3:d9:7e:55:83:e6:c2:3c: 18:2e:77:26:b7:34:33:34:0f:bc:cb:86:6f:fb:c9: 34:69:98:0d:40:d1:c4:4f:03:c4:b8:37:01:bd:9b: c3:89:45:35:48:b7:a7:bb:6f:89:c9:28:9d:0c:ce: 3a:49:b8:cf:df:0a:d2:a9:ca:57:5c:bc:ab:d3:d7: 38:ca:fa:36:d0:5f:c2:96:b5:19:28:43:7c:bf:7c: 33:dd:ca:84:8b:54:d7:10:42:c7:8c:2c:43:ba:37: 5b:80:cc:88:a4:8b:fb:6c:a9:4c:44:e7:d8:29:d6: 4a:8f:d9:52:f4:40:55:43:44:19:ea:e1:91:b4:35: 8b:74:4b:7d:b0:51:2c:12:a7:e1:f9:96:a4:36:0c: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DA:F5:A0:C0:81:C3:C8:46:5C:CB:54:58:E5:1F:15:A6:26:4F:8F X509v3 Authority Key Identifier: keyid:CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:82:c2:b3:cc:a3:1f:7c:a6:62:92:8d:5b:61:c5:72:30:4f: 96:62:56:9b:e7:d9:cd:75:c7:12:bb:27:05:bc:62:19:39:49: aa:58:f5:4f:bf:69:f7:63:13:de:f9:84:cc:9b:e6:d2:c1:d6: 70:5a:bf:75:e2:4c:35:28:17:9a:2c:b7:6e:fb:dd:72:76:4a: ff:9e:96:7c:b9:f5:59:b2:97:14:0d:33:c1:4c:e3:91:b7:07: 47:b5:6a:44:7e:fb:56:bb:ef:54:8b:9a:e0:6a:1c:98:d5:0b: df:ae:33:6a:54:19:7f:9f:29:0d:6f:d9:e0:ef:b6:d4:8b:c8: d0:ad:a7:fe:23:a3:88:77:93:dc:57:8a:98:b4:c8:90:d4:97: 84:28:d6:24:9e:da:d0:bf:d0:64:08:e0:bd:c5:e8:9e:10:b6: eb:a9:fd:20:7b:29:29:f4:76:70:09:34:e8:c9:25:ba:08:98: 19:e8:5d:c3:67:36:91:2d:0b:33:6b:b4:70:76:17:3f:41:e3: 8f:d6:23:8b:8b:69:73:f9:6e:43:56:0a:e6:09:f9:b8:ef:cc: 13:96:e3:be:59:4e:24:73:51:c1:9d:1d:d0:9f:7c:57:16:5d: da:d8:53:d3:8f:bb:e8:79:3e:d7:f0:43:1e:40:a1:e3:07:06: a2:31:c7:36 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFTy7cff0MMFsEDi/6EBPsl8pm4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5 NEQ2OUJCOTAeFw0yNjA1MTMwNDIwNTZaFw0yNjA1MTQwNzMyNTZaMDMxMTAvBgNV BAMTKDM3REFGNUEwQzA4MUMzQzg0NjVDQ0I1NDU4RTUxRjE1QTYyNjRGOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVHhkNOtBuVfCSECVtnspEAsVs iaH0qzCgXM0K4dqf4/lhnipH4Fkl4PwTrF/TG8F7sYY0hSRXzfIyZpzpMfh6RW0B JHvWn/6HWPcdHmHIHMQn/HZ4feboRw2wPtemHFXuNNsLt/JGPGVIo8SrmuSz2X5V g+bCPBgudya3NDM0D7zLhm/7yTRpmA1A0cRPA8S4NwG9m8OJRTVIt6e7b4nJKJ0M zjpJuM/fCtKpyldcvKvT1zjK+jbQX8KWtRkoQ3y/fDPdyoSLVNcQQseMLEO6N1uA zIiki/tsqUxE59gp1kqP2VL0QFVDRBnq4ZG0NYt0S32wUSwSp+H5lqQ2DCKlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUN9r1oMCBw8hGXMtUWOUfFaYmT48wHwYDVR0j BBgwFoAUzKO7c4mfeDNMoD1tpNj9P5TWm7kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODM4NTQ1NTU1ODIzMDAxNy8wL0NDQTNCQjczODk5Rjc4MzM0Q0EwM0Q2REE0RDhG RDNGOTRENjlCQjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODgzODU0NTU1NTgyMzAwMTcvMC9DQ0EzQkI3Mzg5OUY3 ODMzNENBMDNENkRBNEQ4RkQzRjk0RDY5QkI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4LCs8yjH3ym YpKNW2HFcjBPlmJWm+fZzXXHErsnBbxiGTlJqlj1T79p92MT3vmEzJvm0sHWcFq/ deJMNSgXmiy3bvvdcnZK/56WfLn1WbKXFA0zwUzjkbcHR7VqRH77VrvvVIua4Goc mNUL364zalQZf58pDW/Z4O+21IvI0K2n/iOjiHeT3FeKmLTIkNSXhCjWJJ7a0L/Q ZAjgvcXonhC266n9IHspKfR2cAk06MklugiYGehdw2c2kS0LM2u0cHYXP0Hjj9Yj i4tpc/luQ1YK5gn5uO/ME5bjvllOJHNRwZ0d0J98VxZd2thT04+76Hk+1/BDHkCh 4wcGojHHNg== -----END CERTIFICATE-----Generated at Wed May 13 15:20:14 2026 by rpki-client