$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft File: C2DA49E3A7421A170AB2589567E7C29841F7D385.mft (raw, json) Hash identifier: 7q2sCSIdvT3cCiDqiURMmO7K2RYWxPBK5qJ1nzYtqmg= Subject key identifier: DE:EB:91:01:6C:BD:7F:31:3F:99:07:A4:DF:5F:3D:0E:08:70:89:CD Authority key identifier: C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 Certificate issuer: /CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Certificate serial: 332B4E25BF19388710717DBC3E8AC5A6045DDCF4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft Manifest number: CE Signing time: Sun 27 Sep 2026 06:34:41 +0000 Manifest this update: Sun 27 Sep 2026 06:29:41 +0000 Manifest next update: Wed 30 Sep 2026 12:40:41 +0000 Files and hashes: 1: C2DA49E3A7421A170AB2589567E7C29841F7D385.crl (hash: JzXhNTnyd2yyHtE+VAXZYQdBewm3+7CdzcNBuxDwNjQ=) 2: 3136302e3235302e39312e302f32342d3234203d3e2030.roa (hash: I01ky8XkMCzc3U3eB94acbcUgoqzrThF0fyrFH1PSns=) 3: 3136302e3235302e39302e302f32342d3234203d3e2030.roa (hash: K1QDkUk1IphA/GflzuMhC8hun3fH4ROmohlTCdV9p9U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:2b:4e:25:bf:19:38:87:10:71:7d:bc:3e:8a:c5:a6:04:5d:dc:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Validity Not Before: Sep 27 06:29:41 2026 GMT Not After : Sep 30 12:40:41 2026 GMT Subject: CN=DEEB91016CBD7F313F9907A4DF5F3D0E087089CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a3:c1:59:cf:a2:43:b6:ce:e4:65:09:bb:0e: 83:3a:fc:fb:b0:ba:9f:7b:80:f8:ff:75:6a:2f:79: 0c:bb:28:8b:ff:f0:80:88:6d:c3:0e:dc:b8:76:bc: e6:a6:94:85:91:84:d4:c8:70:92:c0:92:1b:e5:16: 4c:77:5d:6a:9b:d4:da:77:2c:cc:ad:e2:ad:ff:d5: 2a:05:a9:d5:f5:84:ad:7e:ea:3b:f8:b4:c2:6a:60: 28:ea:0f:54:47:4b:89:f1:de:16:e4:4e:83:5a:17: c5:7e:de:aa:02:f2:66:7f:4b:69:a2:b4:5a:e7:39: 6d:ac:3c:30:19:bc:59:3a:d2:66:c6:3d:8b:85:90: 74:ec:30:fc:42:50:59:6d:5b:a8:45:41:c4:53:0a: 33:91:a9:7c:8f:0f:da:8f:a9:6d:94:cb:0e:06:41: 6c:8c:86:7d:be:f7:01:b9:8e:84:13:5c:23:25:e4: 9b:31:b9:93:a4:c4:df:15:b1:fe:f1:f0:64:56:43: f6:2c:cb:26:27:37:9d:9d:9a:e6:f0:25:f8:4c:1e: 83:a5:e2:2e:7d:12:4f:bc:9d:a4:87:e3:07:8a:2a: 81:2b:f3:d7:e8:2c:5f:cd:bf:a8:3b:a9:1f:97:13: dd:2b:3d:c8:61:38:63:20:48:0e:ce:a3:51:d3:6f: 5a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EB:91:01:6C:BD:7F:31:3F:99:07:A4:DF:5F:3D:0E:08:70:89:CD X509v3 Authority Key Identifier: keyid:C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d7:76:f7:0a:ba:09:ef:32:f3:c4:df:eb:a0:5c:1d:96:83: 66:99:85:b5:9d:86:77:68:3e:2f:77:c7:0e:a0:30:42:39:9e: 76:3d:f5:b2:6f:13:0a:6d:df:8c:34:ab:b9:9f:e1:67:d1:08: 1b:80:0a:fb:ba:88:7c:91:9a:b7:bf:35:f5:ed:cf:98:7f:49: c2:3a:02:dc:bf:58:f6:14:07:da:31:01:4c:c3:82:89:ed:d3: 3c:08:09:93:d3:1d:46:05:2b:33:d3:fb:08:db:6d:5c:d2:23: 34:b2:cb:cc:b3:0a:02:dd:b1:74:c2:c7:24:fd:a8:b0:ed:33: 5d:f7:74:4f:05:1b:ba:b8:2d:fe:51:3d:ed:11:6b:b4:95:16: b9:1d:4d:92:f1:53:91:c3:72:ae:e8:08:7b:e4:c5:3a:aa:ee: 3e:16:f8:57:34:24:f6:95:33:ed:0b:6e:fd:a1:0e:7a:d3:c0: ff:6d:9e:11:dc:e1:70:40:4d:1a:74:f6:eb:9d:f1:89:41:a8: e5:a7:27:86:0a:c4:fa:04:07:61:ff:10:01:60:25:0c:67:9a: 6f:82:24:cb:59:82:b0:9c:54:81:36:6c:a7:53:9d:40:c3:54: 91:3a:89:3b:86:ec:d5:90:c1:23:54:3e:ab:af:43:6e:fd:8d: 76:31:ae:d4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMytOJb8ZOIcQcX28PorFpgRd3PQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0 MUY3RDM4NTAeFw0yNjA5MjcwNjI5NDFaFw0yNjA5MzAxMjQwNDFaMDMxMTAvBgNV BAMTKERFRUI5MTAxNkNCRDdGMzEzRjk5MDdBNERGNUYzRDBFMDg3MDg5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQo8FZz6JDts7kZQm7DoM6/Puw up97gPj/dWoveQy7KIv/8ICIbcMO3Lh2vOamlIWRhNTIcJLAkhvlFkx3XWqb1Np3 LMyt4q3/1SoFqdX1hK1+6jv4tMJqYCjqD1RHS4nx3hbkToNaF8V+3qoC8mZ/S2mi tFrnOW2sPDAZvFk60mbGPYuFkHTsMPxCUFltW6hFQcRTCjORqXyPD9qPqW2Uyw4G QWyMhn2+9wG5joQTXCMl5JsxuZOkxN8Vsf7x8GRWQ/YsyyYnN52dmubwJfhMHoOl 4i59Ek+8naSH4weKKoEr89foLF/Nv6g7qR+XE90rPchhOGMgSA7Oo1HTb1o5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3uuRAWy9fzE/mQek3189Dghwic0wHwYDVR0j BBgwFoAUwtpJ46dCGhcKsliVZ+fCmEH304UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8wL0MyREE0OUUzQTc0MjFBMTcwQUIyNTg5NTY3RTdD Mjk4NDFGN0QzODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0MUY3RDM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMC9DMkRBNDlFM0E3NDIx QTE3MEFCMjU4OTU2N0U3QzI5ODQxRjdEMzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9d29wq6Ce8y 88Tf66BcHZaDZpmFtZ2Gd2g+L3fHDqAwQjmedj31sm8TCm3fjDSruZ/hZ9EIG4AK +7qIfJGat7819e3PmH9JwjoC3L9Y9hQH2jEBTMOCie3TPAgJk9MdRgUrM9P7CNtt XNIjNLLLzLMKAt2xdMLHJP2osO0zXfd0TwUburgt/lE97RFrtJUWuR1NkvFTkcNy rugIe+TFOqruPhb4VzQk9pUz7Qtu/aEOetPA/22eEdzhcEBNGnT2653xiUGo5acn hgrE+gQHYf8QAWAlDGeab4Iky1mCsJxUgTZsp1OdQMNUkTqJO4bs1ZDBI1Q+q69D bv2NdjGu1A== -----END CERTIFICATE-----Generated at Sun Sep 27 10:32:37 2026 by rpki-client