$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft File: CD2AB13A444BFE19493186434EE872CEC8A1952E.mft (raw, json) Hash identifier: ygHFME2FpFPvgpCMqpmV0121m19cL1Z3Ksb4KMaEQkE= Subject key identifier: FB:97:42:A1:4E:00:E7:25:95:43:62:E3:75:49:EE:9F:FE:17:68:7D Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Certificate serial: 2B20403102795E1CB32D883B2AFB484BF61A4072 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft Manifest number: 25 Signing time: Tue 12 May 2026 17:55:37 +0000 Manifest this update: Tue 12 May 2026 17:50:37 +0000 Manifest next update: Wed 13 May 2026 17:59:37 +0000 Files and hashes: 1: CD2AB13A444BFE19493186434EE872CEC8A1952E.crl (hash: TLV46a+dyvj6TZrFu+C7yYh6k4zg5I1gVv36o+8dhO4=) 2: 3130332e37382e3132342e302f32322d3232203d3e203633363534.roa (hash: uYs6fO1/g3sgQhRLmL6xn7AxEm3lgSIqHQsxteKIieA=) 3: 3130332e37382e3132362e302f32332d3233203d3e203633363534.roa (hash: ZP+h20JkWqSxKh8vbW484Nj0Ejp6CZykPD9jcY7GQqk=) 4: 3130332e37382e3132362e302f32332d3233203d3e2034383437.roa (hash: X0iD6rj5LsFjlWutUYZ76kK04W1xa6nb2omOPTwXuf0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:20:40:31:02:79:5e:1c:b3:2d:88:3b:2a:fb:48:4b:f6:1a:40:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Validity Not Before: May 12 17:50:37 2026 GMT Not After : May 13 17:59:37 2026 GMT Subject: CN=FB9742A14E00E725954362E37549EE9FFE17687D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:f3:26:50:15:22:94:2c:31:6d:5d:ba:40: 54:f0:8a:39:d2:23:af:91:76:b7:60:b5:e1:1a:8d: db:35:fd:19:3f:c2:63:3c:f9:8e:80:1b:57:22:a7: 15:6d:95:c1:f6:c8:ab:1a:71:30:76:df:7e:84:fd: 47:0a:0b:44:78:34:18:08:c8:1e:4e:64:fc:89:7a: e9:e2:4d:ad:01:2b:da:f0:0d:31:7a:79:fd:27:9e: 2d:09:c6:d6:3b:2c:54:e6:eb:39:53:ba:18:c3:b9: 07:ed:2c:c5:88:14:4d:cd:f8:c5:6b:55:37:75:ce: d2:c7:43:2a:94:23:c9:73:0e:eb:d1:90:e3:ad:3b: 17:b7:76:c4:e2:19:83:48:ad:52:21:f0:88:3d:95: f5:46:d4:ed:d5:d1:f0:b9:e5:9c:0e:23:52:e8:02: 80:a1:d8:48:20:20:68:03:ab:ae:cc:d6:32:ee:2f: 5c:46:3e:eb:f6:5f:73:5b:31:1f:5b:19:ff:b7:df: af:46:a3:e1:10:1d:95:ec:8c:e4:ee:59:b6:18:78: ea:37:2f:2f:64:40:d3:ff:bf:6f:c0:e2:44:ed:47: 3c:11:c3:98:48:8a:70:e7:a3:d5:80:37:c2:c4:f6: 51:d1:d7:96:9a:47:98:a3:df:98:78:02:b3:1f:1f: ed:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:97:42:A1:4E:00:E7:25:95:43:62:E3:75:49:EE:9F:FE:17:68:7D X509v3 Authority Key Identifier: keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e8:95:ae:f2:59:6e:1f:40:13:12:fb:f9:43:80:64:79:6e: bd:78:ce:20:c0:4e:8d:8c:bb:5c:69:97:62:8a:02:34:96:1d: 00:58:40:e7:25:24:60:20:0c:4a:b0:9e:29:6f:7a:83:60:21: fb:cf:bc:7c:0f:70:fc:e7:4d:66:20:a4:08:9c:ea:19:6b:d3: 46:c6:c2:87:ef:50:ab:7f:7b:bf:ae:91:16:01:04:94:0c:4d: fa:66:c7:8f:f7:e4:db:c2:f1:46:d5:ac:c3:33:95:83:96:54: 96:e1:76:e1:9e:fd:3f:dd:6d:26:2a:16:5b:81:6d:4f:79:78: 1d:f9:98:33:73:49:1b:12:cb:03:52:35:c1:b9:75:89:6b:10: ac:c7:d3:98:dc:2a:41:ef:51:c7:e6:bb:12:e4:1a:64:03:db: 92:0a:cf:60:eb:5b:bf:32:08:07:d4:37:36:42:d2:59:95:fd: a9:a9:a8:de:7b:a8:d0:dd:a0:53:aa:0c:14:5e:fd:f8:88:eb: a9:86:a8:b1:0e:e4:2e:fd:ab:4e:4a:8c:5b:7c:97:4c:fd:50: dc:03:bf:38:ef:78:fd:7a:e8:08:ae:64:7b:ef:1c:57:4a:5d: e7:e2:01:38:f4:f3:2a:2f:fb:50:fb:ac:83:01:d1:89:90:b7: d9:b7:53:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKyBAMQJ5XhyzLYg7KvtIS/YaQHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD OEExOTUyRTAeFw0yNjA1MTIxNzUwMzdaFw0yNjA1MTMxNzU5MzdaMDMxMTAvBgNV BAMTKEZCOTc0MkExNEUwMEU3MjU5NTQzNjJFMzc1NDlFRTlGRkUxNzY4N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BvMmUBUilCwxbV26QFTwijnS I6+RdrdgteEajds1/Rk/wmM8+Y6AG1cipxVtlcH2yKsacTB2336E/UcKC0R4NBgI yB5OZPyJeuniTa0BK9rwDTF6ef0nni0JxtY7LFTm6zlTuhjDuQftLMWIFE3N+MVr VTd1ztLHQyqUI8lzDuvRkOOtOxe3dsTiGYNIrVIh8Ig9lfVG1O3V0fC55ZwOI1Lo AoCh2EggIGgDq67M1jLuL1xGPuv2X3NbMR9bGf+3369Go+EQHZXsjOTuWbYYeOo3 Ly9kQNP/v2/A4kTtRzwRw5hIinDno9WAN8LE9lHR15aaR5ij35h4ArMfH+3RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+5dCoU4A5yWVQ2LjdUnun/4XaH0wHwYDVR0j BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3 MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDE4MTU4NDU5OTQ0OTkvMC9DRDJBQjEzQTQ0NEJG RTE5NDkzMTg2NDM0RUU4NzJDRUM4QTE5NTJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuiVrvJZbh9A ExL7+UOAZHluvXjOIMBOjYy7XGmXYooCNJYdAFhA5yUkYCAMSrCeKW96g2Ah+8+8 fA9w/OdNZiCkCJzqGWvTRsbCh+9Qq397v66RFgEElAxN+mbHj/fk28LxRtWswzOV g5ZUluF24Z79P91tJioWW4FtT3l4HfmYM3NJGxLLA1I1wbl1iWsQrMfTmNwqQe9R x+a7EuQaZAPbkgrPYOtbvzIIB9Q3NkLSWZX9qamo3nuo0N2gU6oMFF79+IjrqYao sQ7kLv2rTkqMW3yXTP1Q3AO/OO94/XroCK5ke+8cV0pd5+IBOPTzKi/7UPusgwHR iZC32bdTpg== -----END CERTIFICATE-----Generated at Wed May 13 12:25:36 2026 by rpki-client