$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft File: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft (raw, json) Hash identifier: itto5IgCBO09t0Q13d5h7ChSrZ4Fo43Hg0z2liezFdc= Subject key identifier: 0A:39:08:E2:C1:88:F1:BA:EB:B9:CE:30:FB:69:75:ED:0E:E8:8E:21 Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E Certificate issuer: /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Certificate serial: 246CA95410E4E5366C09E80088148FABF1CBB249 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft Manifest number: 48 Signing time: Fri 24 Jul 2026 12:51:13 +0000 Manifest this update: Fri 24 Jul 2026 12:46:13 +0000 Manifest next update: Sat 25 Jul 2026 14:54:13 +0000 Files and hashes: 1: 34352e3131372e37312e302f32342d3234203d3e203539303634.roa (hash: 1Y+Dh612RaqOJd6pDXHDbAj4lmDdl16U1NldnrDPKCw=) 2: 3130332e35372e3133392e302f32342d3234203d3e2034383437.roa (hash: cbxFaZtA0DoxRicp7QpsnTBUTzztA//mwgrvHEC1oqY=) 3: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl (hash: pVPR/DQytpRvU0M8kBKt7VW/m2bguPG+xJtF5CGIsME=) 4: 3130332e35372e3133372e302f32342d3234203d3e203539303634.roa (hash: EhkLMd2zDyYJ51w/Sy0gxXGPOF2SNni4GumU+NZ9Ag0=) 5: 34352e3131372e36382e302f32342d3234203d3e203539303634.roa (hash: tYxUjp3xtdPTVjkycWWXB9adnoLWLKlyWFGDfc/+/pQ=) 6: 34352e3131372e36392e302f32342d3234203d3e203539303634.roa (hash: KEOsUrMYTo7UB6tINn+uRJdhpQQWUcZgNgXhs7+3qhI=) 7: 34352e3131372e37302e302f32342d3234203d3e203539303634.roa (hash: GolnmXyy2lhajh4DhEErHiZTYtdA+C7MnLTJ8QR+h00=) 8: 3130332e35372e3133362e302f32342d3234203d3e203539303634.roa (hash: 9xsJXOdXAuZCp2S7dPdlIF9LfPtLX/1I2u7JF+Qm/7s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:6c:a9:54:10:e4:e5:36:6c:09:e8:00:88:14:8f:ab:f1:cb:b2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Validity Not Before: Jul 24 12:46:13 2026 GMT Not After : Jul 25 14:54:13 2026 GMT Subject: CN=0A3908E2C188F1BAEBB9CE30FB6975ED0EE88E21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:6a:e2:45:56:f8:51:98:2d:3f:07:99:8a: 3e:6b:16:b5:31:b2:64:86:fd:07:8a:7c:6f:7a:a5: 6d:13:dc:b5:f2:1a:e3:a4:27:97:c2:b0:b8:f3:d0: 9d:a2:c5:ec:6e:fe:6b:9f:a9:ce:2c:42:55:79:7b: aa:ae:8b:11:63:73:3a:30:c1:20:b0:60:0c:9d:06: 77:b0:fe:df:b0:3f:ae:60:d4:50:75:7d:54:55:47: a3:5c:8b:fd:de:ed:eb:d2:c1:bd:46:41:7b:67:36: d3:55:ac:b8:f3:99:ff:58:67:13:10:a2:f9:6a:ae: fe:f2:b8:96:b9:ed:9a:db:8f:60:41:e5:38:bd:11: 21:55:49:7f:92:57:33:09:3f:44:66:d2:70:ce:9a: 88:4e:41:cf:82:38:e9:cb:e6:e6:a8:d1:31:af:8b: 04:ab:5a:ce:9b:a6:f8:42:40:50:c8:61:b9:39:ed: fa:fa:8a:93:d8:66:35:00:2f:19:68:8c:11:06:c9: 21:fe:49:d7:c2:69:bf:90:96:b6:fa:33:1a:97:75: c8:35:14:34:08:ff:2a:4a:7f:4b:a7:cd:3c:15:5e: 7d:60:61:33:d9:02:3c:d8:be:08:64:1b:d1:5e:c4: fa:7f:d8:68:f0:b3:08:88:c0:e0:17:69:84:08:c4: 58:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:39:08:E2:C1:88:F1:BA:EB:B9:CE:30:FB:69:75:ED:0E:E8:8E:21 X509v3 Authority Key Identifier: keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:4d:9b:4d:7b:5a:47:d6:27:f1:f1:58:17:29:fd:61:bb:06: 9d:93:bd:02:9b:19:9e:46:18:39:e2:9d:c2:69:d2:09:52:67: 8e:0f:f9:03:14:31:62:03:a2:20:5c:49:f7:9d:e2:df:41:d5: d2:c6:ed:5b:70:31:3c:53:b8:39:ac:bc:e9:e2:a6:61:a8:a5: 27:d5:55:a0:77:19:ea:10:19:eb:35:ba:0a:66:75:91:da:19: 2b:3b:5d:2f:fd:0b:a9:3d:ed:bc:f2:e9:79:66:bb:a6:a6:8d: 9a:d5:1d:4b:9a:6d:94:88:09:dd:9e:2d:5d:e1:27:13:cd:4c: 0d:d9:7d:ab:85:a8:9f:16:b2:e3:8c:fd:03:74:a8:1a:20:35: 25:66:ea:20:12:f0:0e:d5:dc:42:81:01:5d:81:6b:d7:3e:dc: 05:13:d7:ec:c2:b0:81:73:e0:a9:bf:ba:06:6c:65:bd:41:48: b5:e0:a8:f7:32:e1:85:ad:fa:b0:ae:f9:ef:27:18:dc:12:08: fd:26:46:ee:59:d4:96:40:1a:28:75:36:a1:16:e3:de:99:45: 07:08:87:04:11:3e:80:42:1c:50:ca:8d:10:82:03:f2:57:96: 1d:66:c8:cb:d6:9b:83:78:47:6a:b6:b2:5f:e1:e6:31:d5:ce: f8:c4:81:2d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJGypVBDk5TZsCegAiBSPq/HLskkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRB REU5MUUxRTAeFw0yNjA3MjQxMjQ2MTNaFw0yNjA3MjUxNDU0MTNaMDMxMTAvBgNV BAMTKDBBMzkwOEUyQzE4OEYxQkFFQkI5Q0UzMEZCNjk3NUVEMEVFODhFMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIjGriRVb4UZgtPweZij5rFrUx smSG/QeKfG96pW0T3LXyGuOkJ5fCsLjz0J2ixexu/mufqc4sQlV5e6quixFjczow wSCwYAydBnew/t+wP65g1FB1fVRVR6Nci/3e7evSwb1GQXtnNtNVrLjzmf9YZxMQ ovlqrv7yuJa57Zrbj2BB5Ti9ESFVSX+SVzMJP0Rm0nDOmohOQc+COOnL5uao0TGv iwSrWs6bpvhCQFDIYbk57fr6ipPYZjUALxlojBEGySH+SdfCab+Qlrb6MxqXdcg1 FDQI/ypKf0unzTwVXn1gYTPZAjzYvghkG9FexPp/2GjwswiIwOAXaYQIxFhrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCjkI4sGI8brruc4w+2l17Q7ojiEwHwYDVR0j BBgwFoAUysQ+fdlksXIme9mLbYLVJK3pHh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDA5MjA4MTAyMzgxMTYwMy8wL0NBQzQzRTdERDk2NEIxNzIyNjdCRDk4QjZEODJE NTI0QURFOTFFMUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRBREU5MUUxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQwOTIwODEwMjM4MTE2MDMvMC9DQUM0M0U3REQ5NjRC MTcyMjY3QkQ5OEI2RDgyRDUyNEFERTkxRTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJE2bTXtaR9Yn 8fFYFyn9YbsGnZO9ApsZnkYYOeKdwmnSCVJnjg/5AxQxYgOiIFxJ953i30HV0sbt W3AxPFO4Oay86eKmYailJ9VVoHcZ6hAZ6zW6CmZ1kdoZKztdL/0LqT3tvPLpeWa7 pqaNmtUdS5ptlIgJ3Z4tXeEnE81MDdl9q4Wonxay44z9A3SoGiA1JWbqIBLwDtXc QoEBXYFr1z7cBRPX7MKwgXPgqb+6BmxlvUFIteCo9zLhha36sK757ycY3BII/SZG 7lnUlkAaKHU2oRbj3plFBwiHBBE+gEIcUMqNEIID8leWHWbIy9abg3hHarayX+Hm MdXO+MSBLQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:07:29 2026 by rpki-client