$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft File: CD2AB13A444BFE19493186434EE872CEC8A1952E.mft (raw, json) Hash identifier: 6pwwQgJGGS1jqDKiDdPkJGbtppRbW3l9+3xDFWvNK1s= Subject key identifier: 9B:DC:B7:85:FD:23:C7:8A:7F:32:02:DB:F8:67:63:BA:36:C6:29:A4 Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Certificate serial: 4F5BD188A0F81C1BAF2BC7799A8D1FAAC4A0FB19 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft Manifest number: C2 Signing time: Sat 26 Sep 2026 12:03:48 +0000 Manifest this update: Sat 26 Sep 2026 11:58:48 +0000 Manifest next update: Tue 29 Sep 2026 23:34:48 +0000 Files and hashes: 1: 3130332e37382e3132362e302f32332d3233203d3e2034383437.roa (hash: X0iD6rj5LsFjlWutUYZ76kK04W1xa6nb2omOPTwXuf0=) 2: 3130332e37382e3132342e302f32322d3232203d3e203633363534.roa (hash: uYs6fO1/g3sgQhRLmL6xn7AxEm3lgSIqHQsxteKIieA=) 3: CD2AB13A444BFE19493186434EE872CEC8A1952E.crl (hash: 7ULD/HDZ9TC+m10nPwuvdtWfnSLQli68+mkYJZ/m6tI=) 4: 3130332e37382e3132362e302f32332d3233203d3e203633363534.roa (hash: ZP+h20JkWqSxKh8vbW484Nj0Ejp6CZykPD9jcY7GQqk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5b:d1:88:a0:f8:1c:1b:af:2b:c7:79:9a:8d:1f:aa:c4:a0:fb:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Validity Not Before: Sep 26 11:58:48 2026 GMT Not After : Sep 29 23:34:48 2026 GMT Subject: CN=9BDCB785FD23C78A7F3202DBF86763BA36C629A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:34:aa:de:2e:fd:0b:3b:7e:0e:25:b9:43: bc:eb:83:48:56:58:66:4d:fc:a0:5f:d2:f3:6b:f8: 6e:17:92:43:54:b5:eb:7d:50:b9:18:1b:62:77:46: 89:d1:ef:8f:7d:9a:6e:77:db:3a:30:a9:43:5e:bc: 3e:be:e5:e6:99:9b:a3:d9:8e:d4:40:a2:df:19:68: c7:5f:e4:d5:65:cf:57:63:6a:ea:36:fa:c6:b9:79: 19:17:77:50:fe:e8:c3:0d:13:e5:9b:18:13:0a:ab: 53:fa:51:c7:6a:78:a3:bd:c8:7c:ad:12:63:91:68: 3c:a3:13:2e:db:d7:01:9d:5b:33:fa:bf:b0:b0:22: aa:00:46:9d:db:33:82:3c:26:75:c3:c2:fc:86:a0: 8e:85:d6:42:3b:c6:f5:66:31:ad:4f:9f:a0:45:a4: fd:c6:5b:d6:33:34:37:e6:9c:91:0a:bf:87:a7:25: 99:26:2c:ff:8a:36:96:b5:2b:e0:24:69:26:ac:54: 2a:00:83:e7:a2:f6:a9:92:9a:fa:72:be:3a:6b:45: 21:cc:32:b8:c3:17:21:78:ab:de:91:4c:e0:c3:f0: d1:22:6a:18:49:65:f7:90:b7:37:04:8b:23:4f:86: db:ed:d9:bf:76:7a:0d:63:52:f8:9a:85:b5:51:5d: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DC:B7:85:FD:23:C7:8A:7F:32:02:DB:F8:67:63:BA:36:C6:29:A4 X509v3 Authority Key Identifier: keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f9:41:f0:78:78:53:eb:10:4f:49:06:1f:31:5e:bf:be:42: af:75:31:15:80:71:0a:87:82:22:2d:9b:6d:57:f9:b8:7e:f4: e9:87:10:8a:c9:71:0d:ec:88:bd:2b:8c:c3:7b:7a:87:7f:3d: 52:aa:f8:ae:5d:d4:31:5a:00:30:24:12:e2:c7:05:7f:c3:dd: c2:0e:97:ea:da:1e:ac:73:2e:72:59:ad:e7:db:f2:ed:b3:34: 7c:53:36:6a:1c:49:a0:24:b9:15:7b:fd:07:64:a2:d7:e9:30: 2b:f7:c3:92:a9:cc:f9:09:19:cd:a6:42:71:95:62:cf:b1:08: 06:3d:bc:2e:37:e7:f4:bd:d3:cf:3e:91:10:b9:86:2e:22:b6: 36:9d:dd:ff:26:6c:ad:e1:3a:3b:49:62:1b:29:63:cb:e4:36: f0:d6:4e:47:71:1f:b2:59:a5:74:11:cc:e7:cc:af:10:d7:82: 3f:ed:58:09:b3:52:71:a3:3e:b6:33:20:1c:7e:c4:25:20:cc: 2b:c3:73:85:eb:97:5c:43:7a:98:38:73:19:a1:3f:60:de:6b: c1:25:4e:54:de:0a:d4:ac:a7:f2:ab:0b:8e:4e:02:20:47:f0: 32:cf:2f:c3:6b:0d:9f:f5:bb:8b:79:94:2f:a2:71:bd:b4:c3: 27:7d:4f:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT1vRiKD4HBuvK8d5mo0fqsSg+xkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD OEExOTUyRTAeFw0yNjA5MjYxMTU4NDhaFw0yNjA5MjkyMzM0NDhaMDMxMTAvBgNV BAMTKDlCRENCNzg1RkQyM0M3OEE3RjMyMDJEQkY4Njc2M0JBMzZDNjI5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeTSq3i79Czt+DiW5Q7zrg0hW WGZN/KBf0vNr+G4XkkNUtet9ULkYG2J3RonR7499mm532zowqUNevD6+5eaZm6PZ jtRAot8ZaMdf5NVlz1djauo2+sa5eRkXd1D+6MMNE+WbGBMKq1P6UcdqeKO9yHyt EmORaDyjEy7b1wGdWzP6v7CwIqoARp3bM4I8JnXDwvyGoI6F1kI7xvVmMa1Pn6BF pP3GW9YzNDfmnJEKv4enJZkmLP+KNpa1K+AkaSasVCoAg+ei9qmSmvpyvjprRSHM MrjDFyF4q96RTODD8NEiahhJZfeQtzcEiyNPhtvt2b92eg1jUviahbVRXbpnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUm9y3hf0jx4p/MgLb+GdjujbGKaQwHwYDVR0j BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3 MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDE4MTU4NDU5OTQ0OTkvMC9DRDJBQjEzQTQ0NEJG RTE5NDkzMTg2NDM0RUU4NzJDRUM4QTE5NTJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvlB8Hh4U+sQ T0kGHzFev75Cr3UxFYBxCoeCIi2bbVf5uH706YcQislxDeyIvSuMw3t6h389Uqr4 rl3UMVoAMCQS4scFf8Pdwg6X6toerHMuclmt59vy7bM0fFM2ahxJoCS5FXv9B2Si 1+kwK/fDkqnM+QkZzaZCcZViz7EIBj28Ljfn9L3Tzz6RELmGLiK2Np3d/yZsreE6 O0liGyljy+Q28NZOR3EfslmldBHM58yvENeCP+1YCbNScaM+tjMgHH7EJSDMK8Nz heuXXEN6mDhzGaE/YN5rwSVOVN4K1Kyn8qsLjk4CIEfwMs8vw2sNn/W7i3mUL6Jx vbTDJ31PJw== -----END CERTIFICATE-----Generated at Sun Sep 27 12:02:57 2026 by rpki-client