$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft File: CCB400245E6C2E159A469D4699195E08ECCE5250.mft (raw, json) Hash identifier: jv9gtyI8VcP4t6NG4QfUkYlDcDSogHUzdUlhYmJGSPw= Subject key identifier: 87:5F:F1:CA:E9:43:A2:6D:7F:F3:47:30:C0:3F:E4:2C:47:B5:34:A9 Authority key identifier: CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 Certificate issuer: /CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Certificate serial: 535D2172DE58FB5B577E5EFA96170973169219EA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft Manifest number: 51 Signing time: Fri 24 Jul 2026 01:45:03 +0000 Manifest this update: Fri 24 Jul 2026 01:40:03 +0000 Manifest next update: Sat 25 Jul 2026 03:44:03 +0000 Files and hashes: 1: 3230332e37392e302e302f32302d3233203d3e2034383337.roa (hash: iZk0qBKAsJdjY7IihKFZpnUxC226AAiytnSm3L2t6F8=) 2: CCB400245E6C2E159A469D4699195E08ECCE5250.crl (hash: CNnF+F57n1SSG31y6CTFs0PaNe1IIn8IfwGYDBS9Lx4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:5d:21:72:de:58:fb:5b:57:7e:5e:fa:96:17:09:73:16:92:19:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Validity Not Before: Jul 24 01:40:03 2026 GMT Not After : Jul 25 03:44:03 2026 GMT Subject: CN=875FF1CAE943A26D7FF34730C03FE42C47B534A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6b:96:61:41:f7:6a:97:68:c7:9e:b4:d1:eb: 6b:e0:0a:a4:5b:c0:51:f8:0e:54:f1:19:b4:af:1a: 8e:e3:10:b7:54:fb:2c:cf:fe:f6:e6:2b:b7:8e:a1: 16:1f:b8:a2:3b:a2:58:d4:30:94:28:8b:93:7c:c4: 6e:8e:5a:49:e8:e4:27:cf:5c:74:12:b3:2c:29:85: 9e:f3:f8:dd:35:47:d1:70:c5:f9:9c:ef:d6:e9:ce: 60:cd:39:e2:f0:32:be:b4:79:6b:27:c1:5f:1f:7d: 49:82:d0:b9:29:9b:b3:ac:6f:11:85:19:6d:01:11: 49:ff:b7:d2:b0:17:0e:57:cf:c7:ba:6f:1c:5b:4e: 58:c4:c5:73:6f:11:10:58:48:92:4d:62:f1:ca:bc: d6:b8:7f:7b:d5:6d:cc:e2:c7:29:b2:6f:8f:45:9a: c2:c9:15:6d:e7:0e:77:0d:86:72:5a:f4:7c:21:65: 7a:0b:f5:e6:46:ef:51:c7:5e:72:5f:72:78:93:45: 44:79:33:2a:43:da:ac:ab:01:2c:eb:86:1c:50:a3: 79:ef:b7:8c:ad:d1:dc:26:ed:ff:0c:ba:48:de:17: 46:e9:ea:95:56:83:31:6f:49:cb:c8:be:f1:2f:da: 49:1c:4e:98:f5:f3:cb:ec:d9:31:74:b3:74:43:69: fd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5F:F1:CA:E9:43:A2:6D:7F:F3:47:30:C0:3F:E4:2C:47:B5:34:A9 X509v3 Authority Key Identifier: keyid:CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:30:a1:6a:7e:bc:42:a6:14:65:e9:ee:05:49:5f:91:a4:0a: ea:26:7e:42:d3:82:14:eb:e3:35:c9:78:f9:79:f3:3c:ad:f2: 93:b4:f3:7d:8b:84:0e:f1:ce:bb:1a:c2:9e:8e:03:1d:df:43: 8f:7d:12:cf:de:fb:4d:23:c3:6c:79:ae:06:95:05:40:83:36: f1:c6:49:61:57:3b:e4:a2:c5:3f:1f:3c:a4:06:d7:80:53:da: 8a:33:f0:6e:aa:fe:62:aa:bc:4c:9c:53:74:04:41:02:4d:7b: dd:d5:b2:d9:cb:bc:1d:59:c2:f0:6f:24:78:a2:55:e0:7e:f3: eb:b7:30:8c:b4:06:cb:eb:0b:34:b2:af:4e:f3:df:2d:71:69: f7:09:b3:9c:0f:75:d4:83:56:c1:54:84:94:22:ad:f1:c8:93: ce:01:18:58:10:ae:6a:e9:95:75:6a:2d:70:d4:ed:ec:32:73: cf:92:b5:2c:37:d3:97:8f:2d:79:e4:ea:70:60:9b:df:a0:fa: 63:18:85:9c:15:b6:30:12:f4:5e:b4:8d:13:ca:f3:33:ec:de: 21:a8:58:21:b7:7f:6e:3c:f6:6e:c9:23:e5:80:8e:1f:65:7b: 97:bb:c8:8f:27:ad:3a:fa:6a:f8:05:78:90:81:d9:d2:d8:d1: d9:ca:e2:cf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU10hct5Y+1tXfl76lhcJcxaSGeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhF Q0NFNTI1MDAeFw0yNjA3MjQwMTQwMDNaFw0yNjA3MjUwMzQ0MDNaMDMxMTAvBgNV BAMTKDg3NUZGMUNBRTk0M0EyNkQ3RkYzNDczMEMwM0ZFNDJDNDdCNTM0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDia5ZhQfdql2jHnrTR62vgCqRb wFH4DlTxGbSvGo7jELdU+yzP/vbmK7eOoRYfuKI7oljUMJQoi5N8xG6OWkno5CfP XHQSsywphZ7z+N01R9Fwxfmc79bpzmDNOeLwMr60eWsnwV8ffUmC0Lkpm7OsbxGF GW0BEUn/t9KwFw5Xz8e6bxxbTljExXNvERBYSJJNYvHKvNa4f3vVbczixymyb49F msLJFW3nDncNhnJa9HwhZXoL9eZG71HHXnJfcniTRUR5MypD2qyrASzrhhxQo3nv t4yt0dwm7f8MukjeF0bp6pVWgzFvScvIvvEv2kkcTpj188vs2TF0s3RDaf1JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUh1/xyulDom1/80cwwD/kLEe1NKkwHwYDVR0j BBgwFoAUzLQAJF5sLhWaRp1GmRleCOzOUlAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg4MjkxNTgxOTU1Mjc4Ny8wL0NDQjQwMDI0NUU2QzJFMTU5QTQ2OUQ0Njk5MTk1 RTA4RUNDRTUyNTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhFQ0NFNTI1MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4ODI5MTU4MTk1NTI3ODcvMC9DQ0I0MDAyNDVFNkMy RTE1OUE0NjlENDY5OTE5NUUwOEVDQ0U1MjUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjChan68QqYU ZenuBUlfkaQK6iZ+QtOCFOvjNcl4+XnzPK3yk7TzfYuEDvHOuxrCno4DHd9Dj30S z977TSPDbHmuBpUFQIM28cZJYVc75KLFPx88pAbXgFPaijPwbqr+Yqq8TJxTdARB Ak173dWy2cu8HVnC8G8keKJV4H7z67cwjLQGy+sLNLKvTvPfLXFp9wmznA911INW wVSElCKt8ciTzgEYWBCuaumVdWotcNTt7DJzz5K1LDfTl48teeTqcGCb36D6YxiF nBW2MBL0XrSNE8rzM+zeIahYIbd/bjz2bskj5YCOH2V7l7vIjyetOvpq+AV4kIHZ 0tjR2crizw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:49:42 2026 by rpki-client