$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft File: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft (raw, json) Hash identifier: LevD4T29DqJLVSUdQFF6tdzKOACe9SQXeTCzOIXeoqk= Subject key identifier: B1:DE:DF:46:EC:29:15:FA:F8:CB:4A:83:DD:36:53:25:CC:7E:BA:8B Authority key identifier: CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 Certificate issuer: /CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Certificate serial: 1CD463A1FB36C00FA5031474DAE27F8945D48986 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft Manifest number: 97 Signing time: Fri 25 Sep 2026 11:37:33 +0000 Manifest this update: Fri 25 Sep 2026 11:32:33 +0000 Manifest next update: Mon 28 Sep 2026 20:32:33 +0000 Files and hashes: 1: 3130332e3131382e35352e302f32342d3234203d3e2034383038.roa (hash: OUMKjqnkkGp3PVwr7CXbPojjV56LxWcDa/5MEngiGbw=) 2: 3130332e3131382e35322e302f32322d3232203d3e2034383437.roa (hash: xq72NdzM2QgKl+fSZk9EQ3yZcWKD6a9nLN9KDnpJwEU=) 3: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl (hash: cqqMNbVd76TkqsDHVk0FiJbXmtmmKuBICDczB0M78gg=) 4: 3130332e3131382e35342e302f32342d3234203d3e2034383038.roa (hash: QBdwKwmiJSDtwraFhZzAr79SFiWotZ4Xhn5ZCBGE5Fg=) 5: 3130332e3131382e35332e302f32342d3234203d3e2034383038.roa (hash: ZyH5igDdJdH1Qu3ydszfBwsotmmkbRAGBxTqOzB+BZ8=) 6: 3130332e3131382e35322e302f32322d3232203d3e2034383038.roa (hash: Xoed/rVl3qutv9Zq8jRPphX8ViBicQo/g46B0NkCxg4=) 7: 3130332e3131382e35322e302f32342d3234203d3e2034383038.roa (hash: t+UcDtfuQc57H7Nf+QogZp2E/pRJKxaQ+uABOn1R814=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 20:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d4:63:a1:fb:36:c0:0f:a5:03:14:74:da:e2:7f:89:45:d4:89:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Validity Not Before: Sep 25 11:32:33 2026 GMT Not After : Sep 28 20:32:33 2026 GMT Subject: CN=B1DEDF46EC2915FAF8CB4A83DD365325CC7EBA8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2f:69:14:9c:0e:a5:4f:c5:51:f5:97:32:fc: d2:cd:8d:6e:21:72:0c:29:9f:7e:27:c0:d7:5e:fd: c7:43:49:10:6d:3d:12:9d:58:fa:39:a2:1d:96:5e: c8:53:85:57:7b:5d:7d:c7:43:4e:04:ac:47:d0:08: 59:3c:01:98:aa:f8:95:27:9c:3a:6a:5d:5e:f5:01: df:a5:9d:29:40:11:aa:19:0b:e2:b2:27:cb:9e:98: 92:bf:a3:b5:c5:e8:86:da:3c:96:35:31:c2:9c:f3: 4d:f8:2e:3e:d8:a7:c2:4c:b3:c3:7b:70:87:fb:ee: d4:82:18:b1:6f:80:46:10:c5:75:b6:84:d4:e0:62: 28:ae:b9:72:b3:46:3c:3d:0f:a6:98:74:a5:46:2e: 0a:f4:74:87:b0:0b:9c:7e:b3:70:40:08:3c:05:4a: cf:b0:6a:5b:87:1b:93:ec:fb:fd:ba:f8:b6:38:9d: 24:b9:c0:b2:ee:aa:bf:cd:9f:a2:18:77:af:06:63: 47:48:16:20:19:67:76:77:c2:6c:ca:bb:ab:7c:65: 43:cb:03:62:89:2f:2e:03:52:d2:f6:a4:c5:65:68: ee:25:2f:8e:35:af:8c:72:5d:da:00:cd:3a:ac:2d: 52:61:e8:04:41:ee:c6:76:ea:f9:13:bd:b9:8e:ec: d6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DE:DF:46:EC:29:15:FA:F8:CB:4A:83:DD:36:53:25:CC:7E:BA:8B X509v3 Authority Key Identifier: keyid:CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:97:b2:53:ec:dc:21:39:1e:38:90:95:c9:a1:ad:c8:d2:7d: c0:6e:ec:57:1f:81:d9:a6:b1:bc:27:4b:26:82:fe:c1:50:64: 17:eb:af:52:44:f4:bf:8f:27:20:07:0e:9f:db:a4:89:4b:c4: 7e:0b:59:8a:09:fd:57:7c:6c:43:fd:fc:d6:c7:cf:a8:a3:3d: a4:58:24:96:61:8e:59:bd:ad:4e:db:71:10:ae:d9:0c:be:85: 03:d1:b7:84:32:c2:fd:cc:10:58:da:fd:72:c7:d7:8d:09:4a: a0:ca:a9:9d:dd:14:e5:2b:31:5e:ee:34:2b:8d:05:40:a0:85: 83:91:46:25:1d:4f:4a:3e:8d:22:00:04:ec:b2:c7:c4:38:59: e4:4d:ac:8f:46:67:c2:17:54:da:05:fe:be:3c:13:61:50:a1: e5:e4:b5:89:e4:d9:b9:fa:d5:c7:af:c4:97:55:3e:16:20:a9: 08:b6:1e:da:45:3b:a6:5e:13:3c:7a:f0:47:53:e4:63:ae:1c: 2d:5c:cb:6d:3d:7e:e7:4c:a0:cd:82:60:06:0d:6c:0b:43:af: 36:c4:ed:b9:d5:ca:b3:40:4a:b1:cf:e9:6d:f2:af:0e:6a:85: 13:3b:c9:17:4a:a3:2d:99:82:21:03:27:49:d6:04:41:26:1f: 20:70:33:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHNRjofs2wA+lAxR02uJ/iUXUiYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgw RUNEQ0RGODAeFw0yNjA5MjUxMTMyMzNaFw0yNjA5MjgyMDMyMzNaMDMxMTAvBgNV BAMTKEIxREVERjQ2RUMyOTE1RkFGOENCNEE4M0REMzY1MzI1Q0M3RUJBOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFL2kUnA6lT8VR9Zcy/NLNjW4h cgwpn34nwNde/cdDSRBtPRKdWPo5oh2WXshThVd7XX3HQ04ErEfQCFk8AZiq+JUn nDpqXV71Ad+lnSlAEaoZC+KyJ8uemJK/o7XF6IbaPJY1McKc8034Lj7Yp8JMs8N7 cIf77tSCGLFvgEYQxXW2hNTgYiiuuXKzRjw9D6aYdKVGLgr0dIewC5x+s3BACDwF Ss+waluHG5Ps+/26+LY4nSS5wLLuqr/Nn6IYd68GY0dIFiAZZ3Z3wmzKu6t8ZUPL A2KJLy4DUtL2pMVlaO4lL441r4xyXdoAzTqsLVJh6ARB7sZ26vkTvbmO7NbDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsd7fRuwpFfr4y0qD3TZTJcx+uoswHwYDVR0j BBgwFoAUzbsbPNe6o3iwGhXynzMvSA7NzfgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODU5NjEwOTE4MzI4NzMxNS8wL0NEQkIxQjNDRDdCQUEzNzhCMDFBMTVGMjlGMzMy RjQ4MEVDRENERjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgwRUNEQ0RGOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg1OTYxMDkxODMyODczMTUvMC9DREJCMUIzQ0Q3QkFB Mzc4QjAxQTE1RjI5RjMzMkY0ODBFQ0RDREY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5eyU+zcITke OJCVyaGtyNJ9wG7sVx+B2aaxvCdLJoL+wVBkF+uvUkT0v48nIAcOn9ukiUvEfgtZ ign9V3xsQ/381sfPqKM9pFgklmGOWb2tTttxEK7ZDL6FA9G3hDLC/cwQWNr9csfX jQlKoMqpnd0U5SsxXu40K40FQKCFg5FGJR1PSj6NIgAE7LLHxDhZ5E2sj0ZnwhdU 2gX+vjwTYVCh5eS1ieTZufrVx6/El1U+FiCpCLYe2kU7pl4TPHrwR1PkY64cLVzL bT1+50ygzYJgBg1sC0OvNsTtudXKs0BKsc/pbfKvDmqFEzvJF0qjLZmCIQMnSdYE QSYfIHAz9g== -----END CERTIFICATE-----Generated at Sat Sep 26 14:46:15 2026 by rpki-client