$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft File: CD2AB13A444BFE19493186434EE872CEC8A1952E.mft (raw, json) Hash identifier: MDGxEvo9gcy8MjwoXZigLAUElpwJLt+YdqdU9dC02wY= Subject key identifier: 45:3D:CD:B3:7D:89:4A:BB:2C:01:80:71:98:4F:79:1D:C0:DF:94:4F Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Certificate serial: 0682EF03130F93D6E6B76AD8833A4571DA5CA8D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft Manifest number: 86 Signing time: Thu 23 Jul 2026 22:19:41 +0000 Manifest this update: Thu 23 Jul 2026 22:14:41 +0000 Manifest next update: Fri 24 Jul 2026 22:45:41 +0000 Files and hashes: 1: 3130332e37382e3132362e302f32332d3233203d3e203633363534.roa (hash: ZP+h20JkWqSxKh8vbW484Nj0Ejp6CZykPD9jcY7GQqk=) 2: CD2AB13A444BFE19493186434EE872CEC8A1952E.crl (hash: SwrX8ajshQX1n5YxhviiE8IJ2kXGI/xwxftwoai1k5Q=) 3: 3130332e37382e3132362e302f32332d3233203d3e2034383437.roa (hash: X0iD6rj5LsFjlWutUYZ76kK04W1xa6nb2omOPTwXuf0=) 4: 3130332e37382e3132342e302f32322d3232203d3e203633363534.roa (hash: uYs6fO1/g3sgQhRLmL6xn7AxEm3lgSIqHQsxteKIieA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:82:ef:03:13:0f:93:d6:e6:b7:6a:d8:83:3a:45:71:da:5c:a8:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Validity Not Before: Jul 23 22:14:41 2026 GMT Not After : Jul 24 22:45:41 2026 GMT Subject: CN=453DCDB37D894ABB2C018071984F791DC0DF944F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c3:bc:62:c1:fd:f2:c5:9a:11:cd:08:43:8c: 37:78:c9:d2:fa:a2:60:02:5a:79:2f:61:2b:b4:93: d0:de:ce:a5:ab:c9:f1:78:c8:d0:09:c3:34:56:7d: 87:30:ee:3f:72:87:83:de:3b:47:c7:80:76:f1:83: 2b:4f:9d:3b:85:4e:25:16:7c:af:9b:25:34:e1:b9: 1b:c9:ec:5f:74:2b:0d:e1:88:58:af:c1:7b:90:5a: 0b:a5:f8:a8:3b:c9:88:e6:cc:37:cf:25:b5:76:8c: 57:4e:b7:b7:93:6b:8f:dd:69:c4:5b:b0:df:c2:43: d1:ea:4e:cf:c3:a4:a2:b1:b8:a9:4b:42:1e:d0:f7: cb:28:4f:72:b7:b0:63:c7:a5:d1:09:fe:d6:ae:bd: 22:21:cf:3a:30:8b:2f:4f:34:f5:35:87:de:fd:b2: dc:7f:ce:82:cf:9b:74:c1:ae:e7:16:fe:22:fa:0e: 45:2d:b9:df:54:a0:fd:83:83:54:67:34:47:90:37: c7:29:2b:7a:88:ed:25:5e:fa:75:55:ea:31:7f:5e: 17:ad:b7:5a:c2:98:44:c1:45:77:a4:9d:11:f6:97: a0:61:29:81:96:71:9a:2c:30:f8:ca:c6:26:fb:36: 8a:01:64:68:84:7f:e7:cd:3c:6a:70:22:da:bb:40: 5c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3D:CD:B3:7D:89:4A:BB:2C:01:80:71:98:4F:79:1D:C0:DF:94:4F X509v3 Authority Key Identifier: keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:99:6c:8e:f8:44:81:c1:57:0d:23:ec:50:58:dc:15:b8:76: bb:50:ce:fa:06:6a:d2:1e:47:c0:06:05:8d:ca:9b:f6:5b:27: c8:52:d7:96:b9:60:04:60:a0:d2:27:bb:c0:7b:62:99:c1:c4: c6:ca:32:36:57:e6:05:a7:30:67:b7:bb:70:8c:4f:4b:18:23: 48:a0:96:a9:c5:d1:a3:42:7a:ff:70:29:0a:67:d5:e1:08:a5: f4:58:30:57:b8:7c:98:04:fc:35:11:46:dc:2b:85:2e:3f:90: 50:73:c9:4b:1d:c1:0b:c6:33:f4:e9:cc:53:16:38:14:d8:db: ee:0f:cb:35:7d:01:e5:9e:98:84:6c:11:7c:98:2e:26:ae:38: b4:74:54:9a:d0:6c:de:e7:99:a3:13:44:11:2f:a4:89:9e:f4: 63:e4:03:5c:49:79:06:35:a7:c3:e0:08:9e:4a:bb:3d:68:30: 60:cd:c5:64:86:bd:4b:b7:01:28:be:86:11:a5:68:4a:6d:14: 7b:e1:55:01:b6:51:4d:71:3f:76:c2:02:b5:69:91:a9:80:5c: c6:cc:4a:1e:0d:4d:68:be:d4:66:00:7c:c7:63:31:9f:2b:fc: 52:0d:ca:f4:8b:55:c0:11:30:83:68:7f:6e:8e:fa:b1:b4:1e: a3:57:fc:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBoLvAxMPk9bmt2rYgzpFcdpcqNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD OEExOTUyRTAeFw0yNjA3MjMyMjE0NDFaFw0yNjA3MjQyMjQ1NDFaMDMxMTAvBgNV BAMTKDQ1M0RDREIzN0Q4OTRBQkIyQzAxODA3MTk4NEY3OTFEQzBERjk0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiw7xiwf3yxZoRzQhDjDd4ydL6 omACWnkvYSu0k9DezqWryfF4yNAJwzRWfYcw7j9yh4PeO0fHgHbxgytPnTuFTiUW fK+bJTThuRvJ7F90Kw3hiFivwXuQWgul+Kg7yYjmzDfPJbV2jFdOt7eTa4/dacRb sN/CQ9HqTs/DpKKxuKlLQh7Q98soT3K3sGPHpdEJ/tauvSIhzzowiy9PNPU1h979 stx/zoLPm3TBrucW/iL6DkUtud9UoP2Dg1RnNEeQN8cpK3qI7SVe+nVV6jF/Xhet t1rCmETBRXeknRH2l6BhKYGWcZosMPjKxib7NooBZGiEf+fNPGpwItq7QFzrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURT3Ns32JSrssAYBxmE95HcDflE8wHwYDVR0j BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3 MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDE4MTU4NDU5OTQ0OTkvMC9DRDJBQjEzQTQ0NEJG RTE5NDkzMTg2NDM0RUU4NzJDRUM4QTE5NTJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZlsjvhEgcFX DSPsUFjcFbh2u1DO+gZq0h5HwAYFjcqb9lsnyFLXlrlgBGCg0ie7wHtimcHExsoy NlfmBacwZ7e7cIxPSxgjSKCWqcXRo0J6/3ApCmfV4Qil9FgwV7h8mAT8NRFG3CuF Lj+QUHPJSx3BC8Yz9OnMUxY4FNjb7g/LNX0B5Z6YhGwRfJguJq44tHRUmtBs3ueZ oxNEES+kiZ70Y+QDXEl5BjWnw+AInkq7PWgwYM3FZIa9S7cBKL6GEaVoSm0Ue+FV AbZRTXE/dsICtWmRqYBcxsxKHg1NaL7UZgB8x2Mxnyv8Ug3K9ItVwBEwg2h/bo76 sbQeo1f8AA== -----END CERTIFICATE-----Generated at Fri Jul 24 04:51:45 2026 by rpki-client