$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft File: CCB400245E6C2E159A469D4699195E08ECCE5250.mft (raw, json) Hash identifier: hJD/ezdJHO5X+nMjQ8Y6CsTxfxNfNQOQsqvSbdipvDI= Subject key identifier: CF:30:98:8D:CF:75:C3:2B:BB:38:64:94:0E:0C:3A:92:A6:C3:84:88 Authority key identifier: CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 Certificate issuer: /CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Certificate serial: 6135DA650529FE18FE2FACF470E16EDE52AADE53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft Manifest number: 95 Signing time: Mon 12 Oct 2026 10:11:50 +0000 Manifest this update: Mon 12 Oct 2026 10:06:50 +0000 Manifest next update: Thu 15 Oct 2026 10:59:50 +0000 Files and hashes: 1: 3230332e37392e302e302f32302d3233203d3e2034383337.roa (hash: iZk0qBKAsJdjY7IihKFZpnUxC226AAiytnSm3L2t6F8=) 2: CCB400245E6C2E159A469D4699195E08ECCE5250.crl (hash: juxEqq5WmMd08qEX4iMH8JXss2zdECQBDBy0I7XDX0U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:35:da:65:05:29:fe:18:fe:2f:ac:f4:70:e1:6e:de:52:aa:de:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCB400245E6C2E159A469D4699195E08ECCE5250 Validity Not Before: Oct 12 10:06:50 2026 GMT Not After : Oct 15 10:59:50 2026 GMT Subject: CN=CF30988DCF75C32BBB3864940E0C3A92A6C38488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bf:31:0e:97:12:c1:d3:52:04:33:8a:35:03: 51:b8:37:bf:45:df:2b:b6:f0:4b:d1:ac:67:5d:6a: 16:2a:56:9a:64:ee:e8:03:99:f1:a1:ce:6c:d2:0b: 4b:fc:95:99:c8:48:cf:5b:90:c0:4c:c9:a3:8e:b9: 66:90:8c:60:7d:86:73:91:1d:bf:9d:7e:7b:3b:20: 84:c1:a6:a4:7f:ec:ae:23:a9:be:df:33:83:23:76: 9d:9c:5f:59:f8:d5:4c:09:37:fd:c6:24:9e:5d:c2: a1:d0:36:7a:11:70:25:04:0b:27:11:6e:84:cd:98: 07:9f:9e:12:df:48:38:f1:a8:0b:a9:04:ff:bb:21: 02:50:84:a5:2e:bb:07:12:27:46:de:13:29:6e:ec: c7:29:df:54:f1:94:a6:65:3f:f4:a5:37:32:ce:18: d9:25:a6:31:2e:28:13:a3:b9:02:54:10:43:43:5a: f8:d7:59:90:c1:e3:3c:49:6b:fd:dd:8e:96:48:4b: d0:62:6a:55:b9:4c:8b:5e:0e:e7:3a:bd:16:d2:90: 8e:4e:b9:b4:17:af:2c:04:c2:c1:9c:97:db:aa:75: 84:c0:0a:f1:27:96:d6:0a:15:4a:e5:15:f6:be:dd: 2c:44:fb:6c:0d:1d:49:fd:76:2a:a5:63:6a:93:a7: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:30:98:8D:CF:75:C3:2B:BB:38:64:94:0E:0C:3A:92:A6:C3:84:88 X509v3 Authority Key Identifier: keyid:CC:B4:00:24:5E:6C:2E:15:9A:46:9D:46:99:19:5E:08:EC:CE:52:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCB400245E6C2E159A469D4699195E08ECCE5250.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111882915819552787/0/CCB400245E6C2E159A469D4699195E08ECCE5250.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:87:03:4e:0b:90:05:89:11:1a:2b:79:60:24:95:a0:a6:36: 40:3e:98:25:25:66:e5:9f:c8:d7:e4:f8:89:cb:90:a0:02:80: b7:7c:78:c4:7a:73:ce:58:0e:a2:d3:19:cd:17:c6:41:80:2f: 1f:10:83:f9:9d:e7:aa:50:ab:7f:3b:fd:90:97:03:5b:47:c7: 08:af:b2:e3:c2:55:1c:ae:ef:fc:0c:ca:f3:07:92:b8:78:39: e6:72:5a:c9:25:93:1c:18:6e:06:d6:92:0d:6d:4b:f5:33:00: 83:40:15:b4:c8:42:00:cc:61:bb:0f:ce:ec:38:63:61:1b:15: 14:d2:1b:20:e8:27:1c:e2:b3:8c:48:34:14:72:e5:4c:6b:a2: 6a:5e:8d:e8:16:75:80:eb:91:9b:8e:87:aa:37:c8:c6:bc:c7: 51:e8:d8:55:0e:ee:51:92:01:39:16:e1:60:c0:22:4c:ea:8d: 0c:8d:8d:e5:7f:f7:97:c7:34:ee:e5:8d:8c:e1:4b:8a:7f:02: 3c:a6:7b:c8:78:ae:bc:7c:29:4e:51:1c:99:9e:c8:52:7c:b9: 30:4f:bd:fa:dc:13:de:bd:84:60:8b:a3:fb:f3:0e:09:4c:c5: e8:69:45:bd:9e:03:4e:03:34:18:fc:b7:be:a7:38:ac:44:1f: ba:ae:3e:9b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYTXaZQUp/hj+L6z0cOFu3lKq3lMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhF Q0NFNTI1MDAeFw0yNjEwMTIxMDA2NTBaFw0yNjEwMTUxMDU5NTBaMDMxMTAvBgNV BAMTKENGMzA5ODhEQ0Y3NUMzMkJCQjM4NjQ5NDBFMEMzQTkyQTZDMzg0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUvzEOlxLB01IEM4o1A1G4N79F 3yu28EvRrGddahYqVppk7ugDmfGhzmzSC0v8lZnISM9bkMBMyaOOuWaQjGB9hnOR Hb+dfns7IITBpqR/7K4jqb7fM4Mjdp2cX1n41UwJN/3GJJ5dwqHQNnoRcCUECycR boTNmAefnhLfSDjxqAupBP+7IQJQhKUuuwcSJ0beEylu7Mcp31TxlKZlP/SlNzLO GNklpjEuKBOjuQJUEENDWvjXWZDB4zxJa/3djpZIS9BialW5TIteDuc6vRbSkI5O ubQXrywEwsGcl9uqdYTACvEnltYKFUrlFfa+3SxE+2wNHUn9diqlY2qTp8RZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzzCYjc91wyu7OGSUDgw6kqbDhIgwHwYDVR0j BBgwFoAUzLQAJF5sLhWaRp1GmRleCOzOUlAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg4MjkxNTgxOTU1Mjc4Ny8wL0NDQjQwMDI0NUU2QzJFMTU5QTQ2OUQ0Njk5MTk1 RTA4RUNDRTUyNTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NCNDAwMjQ1RTZDMkUxNTlBNDY5RDQ2OTkxOTVFMDhFQ0NFNTI1MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4ODI5MTU4MTk1NTI3ODcvMC9DQ0I0MDAyNDVFNkMy RTE1OUE0NjlENDY5OTE5NUUwOEVDQ0U1MjUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4cDTguQBYkR Git5YCSVoKY2QD6YJSVm5Z/I1+T4icuQoAKAt3x4xHpzzlgOotMZzRfGQYAvHxCD +Z3nqlCrfzv9kJcDW0fHCK+y48JVHK7v/AzK8weSuHg55nJaySWTHBhuBtaSDW1L 9TMAg0AVtMhCAMxhuw/O7DhjYRsVFNIbIOgnHOKzjEg0FHLlTGuial6N6BZ1gOuR m46HqjfIxrzHUejYVQ7uUZIBORbhYMAiTOqNDI2N5X/3l8c07uWNjOFLin8CPKZ7 yHiuvHwpTlEcmZ7IUny5ME+9+twT3r2EYIuj+/MOCUzF6GlFvZ4DTgM0GPy3vqc4 rEQfuq4+mw== -----END CERTIFICATE-----Generated at Tue Oct 13 08:46:44 2026 by rpki-client