$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft File: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft (raw, json) Hash identifier: Fnpo+iygsBMHP+8rnGzt6ME9+JaqsFXut3pbkuA5QNg= Subject key identifier: 69:AA:7D:CF:FB:76:17:3F:53:69:D7:E0:85:24:B4:3D:89:CC:E2:BC Authority key identifier: CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 Certificate issuer: /CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Certificate serial: 4F208092E3CEC29AB947E30D999C896878BAE49C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft Manifest number: 5B Signing time: Thu 23 Jul 2026 19:04:21 +0000 Manifest this update: Thu 23 Jul 2026 18:59:21 +0000 Manifest next update: Fri 24 Jul 2026 21:37:21 +0000 Files and hashes: 1: 3130332e3131382e35322e302f32342d3234203d3e2034383038.roa (hash: t+UcDtfuQc57H7Nf+QogZp2E/pRJKxaQ+uABOn1R814=) 2: CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl (hash: 35PE9cPk6fGiID37g74tp+B1x9zWAVPg+KaFll5VIrI=) 3: 3130332e3131382e35352e302f32342d3234203d3e2034383038.roa (hash: OUMKjqnkkGp3PVwr7CXbPojjV56LxWcDa/5MEngiGbw=) 4: 3130332e3131382e35342e302f32342d3234203d3e2034383038.roa (hash: QBdwKwmiJSDtwraFhZzAr79SFiWotZ4Xhn5ZCBGE5Fg=) 5: 3130332e3131382e35332e302f32342d3234203d3e2034383038.roa (hash: ZyH5igDdJdH1Qu3ydszfBwsotmmkbRAGBxTqOzB+BZ8=) 6: 3130332e3131382e35322e302f32322d3232203d3e2034383437.roa (hash: xq72NdzM2QgKl+fSZk9EQ3yZcWKD6a9nLN9KDnpJwEU=) 7: 3130332e3131382e35322e302f32322d3232203d3e2034383038.roa (hash: Xoed/rVl3qutv9Zq8jRPphX8ViBicQo/g46B0NkCxg4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:20:80:92:e3:ce:c2:9a:b9:47:e3:0d:99:9c:89:68:78:ba:e4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8 Validity Not Before: Jul 23 18:59:21 2026 GMT Not After : Jul 24 21:37:21 2026 GMT Subject: CN=69AA7DCFFB76173F5369D7E08524B43D89CCE2BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e8:7f:4b:07:cf:62:e1:a2:cd:9b:c8:9b:d9: e2:ed:2f:59:ee:e9:21:ae:39:14:7c:d4:53:98:4e: e7:26:71:49:50:bc:ad:f8:a3:97:02:6d:8b:5f:83: d1:70:27:a8:48:9a:2f:7a:51:f2:12:17:6f:4d:a0: b6:1d:ab:15:02:b0:df:8e:9b:58:fb:d9:4c:39:03: 72:54:4e:35:b5:b5:1d:b0:8a:64:7e:8a:76:3b:56: ee:cd:a2:81:68:cc:fc:b8:68:b5:61:bf:e2:ee:42: da:69:9a:26:70:12:e8:c4:ca:7f:5f:0a:d5:09:b9: 86:b9:87:3d:c8:07:42:b3:67:ab:f7:52:12:08:23: 17:76:f1:3d:e3:78:43:86:91:dd:f5:60:a2:48:88: 93:1e:e0:93:92:3a:6a:f4:0c:82:c0:90:28:db:22: c6:a3:cc:d6:b0:b6:85:ed:c1:f7:36:11:8d:68:b1: 5e:d9:57:ca:6c:65:88:a2:86:fd:23:2d:5b:56:dd: fa:d7:40:a1:2c:7e:bf:87:bb:62:39:c0:dc:59:15: 89:80:f6:52:3b:0d:7a:10:31:c5:83:71:26:fb:83: 91:5e:0c:b5:b2:a5:12:41:ef:ad:c9:37:6f:e1:ff: 1c:34:fb:8a:c4:2d:c8:c2:70:e1:84:fa:a2:af:3d: ee:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AA:7D:CF:FB:76:17:3F:53:69:D7:E0:85:24:B4:3D:89:CC:E2:BC X509v3 Authority Key Identifier: keyid:CD:BB:1B:3C:D7:BA:A3:78:B0:1A:15:F2:9F:33:2F:48:0E:CD:CD:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108596109183287315/0/CDBB1B3CD7BAA378B01A15F29F332F480ECDCDF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d3:89:ed:df:ea:85:24:fe:c6:a7:95:de:b5:74:8e:1c:e9: 87:a2:dc:49:19:ea:3f:74:be:7a:95:bf:d2:24:82:28:ac:32: 0a:40:69:1e:87:0b:d1:dc:0a:14:66:78:e8:b7:ae:5c:f6:83: 4b:c5:08:44:cc:18:d5:2b:5c:ec:da:72:d7:ea:c9:aa:be:00: 02:e4:2a:a5:b3:37:bc:99:21:2c:34:ce:41:49:41:49:ae:b4: db:b9:c2:91:05:ff:46:d0:29:68:19:1c:52:d5:53:d8:ac:63: c6:27:b4:bb:df:b1:8d:7e:4a:15:56:52:01:eb:42:4e:77:97: a5:bb:aa:91:43:50:df:aa:7b:5a:93:39:69:64:50:66:7f:27: b7:b5:bf:f2:2a:26:73:05:c5:65:22:1e:05:0d:60:5f:86:45: 45:29:07:b0:68:ea:1b:fe:6a:64:75:a8:19:48:09:2c:a3:44: 35:f7:65:67:29:e2:19:af:c2:65:18:22:c7:d3:80:00:e5:cf: 9d:de:f2:94:67:91:86:0e:f2:ce:d9:c2:29:af:06:ac:65:37: bc:f2:08:bd:be:11:0c:2c:68:c6:e6:d9:34:b8:f9:15:43:7a: fd:bf:91:d9:ba:6c:ee:d0:b7:3c:10:fa:40:bf:55:5e:5a:48: 22:4a:b4:47 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTyCAkuPOwpq5R+MNmZyJaHi65JwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgw RUNEQ0RGODAeFw0yNjA3MjMxODU5MjFaFw0yNjA3MjQyMTM3MjFaMDMxMTAvBgNV BAMTKDY5QUE3RENGRkI3NjE3M0Y1MzY5RDdFMDg1MjRCNDNEODlDQ0UyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG6H9LB89i4aLNm8ib2eLtL1nu 6SGuORR81FOYTucmcUlQvK34o5cCbYtfg9FwJ6hImi96UfISF29NoLYdqxUCsN+O m1j72Uw5A3JUTjW1tR2wimR+inY7Vu7NooFozPy4aLVhv+LuQtppmiZwEujEyn9f CtUJuYa5hz3IB0KzZ6v3UhIIIxd28T3jeEOGkd31YKJIiJMe4JOSOmr0DILAkCjb IsajzNawtoXtwfc2EY1osV7ZV8psZYiihv0jLVtW3frXQKEsfr+Hu2I5wNxZFYmA 9lI7DXoQMcWDcSb7g5FeDLWypRJB763JN2/h/xw0+4rELcjCcOGE+qKvPe41AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaap9z/t2Fz9TadfghSS0PYnM4rwwHwYDVR0j BBgwFoAUzbsbPNe6o3iwGhXynzMvSA7NzfgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODU5NjEwOTE4MzI4NzMxNS8wL0NEQkIxQjNDRDdCQUEzNzhCMDFBMTVGMjlGMzMy RjQ4MEVDRENERjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RCQjFCM0NEN0JBQTM3OEIwMUExNUYyOUYzMzJGNDgwRUNEQ0RGOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg1OTYxMDkxODMyODczMTUvMC9DREJCMUIzQ0Q3QkFB Mzc4QjAxQTE1RjI5RjMzMkY0ODBFQ0RDREY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9OJ7d/qhST+ xqeV3rV0jhzph6LcSRnqP3S+epW/0iSCKKwyCkBpHocL0dwKFGZ46LeuXPaDS8UI RMwY1Stc7Npy1+rJqr4AAuQqpbM3vJkhLDTOQUlBSa6027nCkQX/RtApaBkcUtVT 2Kxjxie0u9+xjX5KFVZSAetCTneXpbuqkUNQ36p7WpM5aWRQZn8nt7W/8iomcwXF ZSIeBQ1gX4ZFRSkHsGjqG/5qZHWoGUgJLKNENfdlZyniGa/CZRgix9OAAOXPnd7y lGeRhg7yztnCKa8GrGU3vPIIvb4RDCxoxubZNLj5FUN6/b+R2bps7tC3PBD6QL9V XlpIIkq0Rw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:27:50 2026 by rpki-client