$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft File: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft (raw, json) Hash identifier: A2sPSGxFuAPMf6x3wPcdVBJHcKM3kQJ3XvNt2rs90ds= Subject key identifier: 61:41:12:3B:34:EF:06:F0:FA:DB:F2:B7:92:E9:0D:11:34:81:49:17 Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Certificate serial: 1B56D76F912481C8FD2AF713F5D669803C016ECD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft Manifest number: 45 Signing time: Thu 23 Jul 2026 14:33:52 +0000 Manifest this update: Thu 23 Jul 2026 14:28:52 +0000 Manifest next update: Fri 24 Jul 2026 16:24:52 +0000 Files and hashes: 1: 3130332e3234342e36342e302f32322d3232203d3e203538383531.roa (hash: bF8lXwImti0G2C5h9HUFWEwJAQE60tR62Vp1rdSFMcU=) 2: 3131342e3131322e3133362e302f32312d3231203d3e203538383531.roa (hash: +jDDG9chHRqcyqWLGG+Yj0uT75vd7evZ1ioSDSj0JtM=) 3: 3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa (hash: j5Rdo2Js55PNYoidEZ9f2WJvO7iSzLGP5wKzIv/CRG8=) 4: 312e3131392e3132342e302f32322d3232203d3e203538383531.roa (hash: cZFuiOH6cyFkDGUgid52B5+rCCUk1Je7maMmKWVlJrI=) 5: 312e3131392e302e302f31372d3137203d3e203538383531.roa (hash: JS3bNo89jFxRPcoUjJ2KW3+dlS5F8ZfPoJOwJABerhE=) 6: 3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa (hash: UzOtHYzkQbEQuGwE/udN6JYGU4x59h6zYKuWNYSyF5g=) 7: 3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa (hash: iYYYGCpOqt0aQJSSD8PSpzbRMdT6sgK2gSOfuxf7KWY=) 8: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl (hash: yWkdVYwddFIqoqTJcBL9Tfelf22wesVCMFdU1zvFgkg=) 9: 3130332e31362e3132342e302f32322d3232203d3e203538383531.roa (hash: J03Bd745xFUmekCrtUpll59JIIiIgF2WNL6PFFMPGcc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:56:d7:6f:91:24:81:c8:fd:2a:f7:13:f5:d6:69:80:3c:01:6e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Validity Not Before: Jul 23 14:28:52 2026 GMT Not After : Jul 24 16:24:52 2026 GMT Subject: CN=6141123B34EF06F0FADBF2B792E90D1134814917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:ce:c9:47:39:6a:a8:28:64:e6:14:ae:fd: 0e:c8:a5:38:26:c5:4a:72:f6:6f:ed:b9:f7:8b:f6: 44:05:c1:b2:ab:e8:56:08:71:40:ec:24:70:5d:67: 03:b0:69:df:01:4a:76:3a:74:85:bf:5a:01:4e:db: 9e:fb:e1:db:48:f4:8f:a5:6b:41:c3:57:05:ce:2d: 5e:54:57:c7:13:89:70:d1:8f:da:e7:33:38:1c:bb: d7:c5:0c:c4:23:b3:77:eb:e3:27:19:05:80:81:1a: f8:ba:9e:78:b8:b6:29:e1:68:8d:96:e7:3a:98:0e: 50:e0:69:ca:67:95:e4:08:ea:88:9b:e7:9a:fc:5f: 3b:07:23:09:f0:a8:6f:77:40:91:00:1b:82:3c:ca: 05:a4:ad:b1:92:fb:50:88:60:90:c8:3c:cf:4b:38: 1e:a8:67:bd:9d:72:a3:c1:09:68:1c:da:63:fc:55: b7:90:a1:1f:f7:e5:eb:01:8e:c9:56:86:31:c5:aa: 9a:42:c8:a6:aa:8e:91:1f:48:f0:c0:09:74:bd:36: 06:38:3c:44:a3:49:1e:c4:46:89:94:e0:58:27:c6: e1:55:65:0f:dc:f6:5c:ec:3a:90:45:53:3f:07:58: 40:ef:25:4e:1d:9b:1a:01:03:af:54:a2:d8:3e:80: 14:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:41:12:3B:34:EF:06:F0:FA:DB:F2:B7:92:E9:0D:11:34:81:49:17 X509v3 Authority Key Identifier: keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4f:32:f5:08:87:06:33:fd:69:3d:ba:86:89:30:d0:0e:8a: 6f:94:d9:80:96:8f:65:2b:fc:55:7d:39:32:b2:3d:8b:b4:d3: 60:44:8e:46:e9:0b:b9:09:d2:a2:5a:f9:71:16:db:6e:10:81: b5:fd:6b:c0:43:bd:50:bf:6e:05:2f:16:29:92:4d:bc:ce:3b: bd:e4:9b:6a:a9:45:9e:f6:55:62:e2:d4:58:bd:86:7c:b5:cf: 65:40:a7:83:54:52:2d:9e:16:c9:e5:10:c1:3a:31:21:df:a3: fa:87:c1:e1:95:2b:56:33:be:6a:7c:f7:7a:94:6b:46:78:c3: e4:fa:19:72:2b:e8:ae:ee:78:37:cf:fd:01:1a:5f:c9:ea:f8: a7:ad:75:b1:83:40:da:b8:e3:b3:cb:a6:01:2f:1b:0a:c4:b7: 6c:b9:db:9c:39:f1:c6:f8:5c:25:e0:85:06:1a:63:38:1d:9b: 4a:68:2e:24:25:52:88:28:8e:d5:ac:2c:45:56:0c:b8:36:67: 87:5a:f1:dc:05:b2:1a:2c:06:5c:ca:f1:33:b8:ed:7c:6a:1c: e6:0a:f5:b1:a9:04:d9:e6:bc:56:7a:09:c3:07:bd:55:18:99: 97:c8:7b:b6:ab:93:01:63:fa:4c:c3:de:3b:5e:b3:8e:36:79: be:af:75:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUG1bXb5Ekgcj9KvcT9dZpgDwBbs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5 MDRDNUVDMjAeFw0yNjA3MjMxNDI4NTJaFw0yNjA3MjQxNjI0NTJaMDMxMTAvBgNV BAMTKDYxNDExMjNCMzRFRjA2RjBGQURCRjJCNzkyRTkwRDExMzQ4MTQ5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDM7JRzlqqChk5hSu/Q7IpTgm xUpy9m/tufeL9kQFwbKr6FYIcUDsJHBdZwOwad8BSnY6dIW/WgFO25774dtI9I+l a0HDVwXOLV5UV8cTiXDRj9rnMzgcu9fFDMQjs3fr4ycZBYCBGvi6nni4tinhaI2W 5zqYDlDgacpnleQI6oib55r8XzsHIwnwqG93QJEAG4I8ygWkrbGS+1CIYJDIPM9L OB6oZ72dcqPBCWgc2mP8VbeQoR/35esBjslWhjHFqppCyKaqjpEfSPDACXS9NgY4 PESjSR7ERomU4FgnxuFVZQ/c9lzsOpBFUz8HWEDvJU4dmxoBA69Uotg+gBQXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYUESOzTvBvD62/K3kukNETSBSRcwHwYDVR0j BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NjE5MDA4OTU2MTcwNTEvMC8yREU3OEM5NDVFMkI1 MzM3NEI4NkMwQTdCREU1QURFNjkwNEM1RUMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYk8y9QiHBjP9 aT26hokw0A6Kb5TZgJaPZSv8VX05MrI9i7TTYESORukLuQnSolr5cRbbbhCBtf1r wEO9UL9uBS8WKZJNvM47veSbaqlFnvZVYuLUWL2GfLXPZUCng1RSLZ4WyeUQwTox Id+j+ofB4ZUrVjO+anz3epRrRnjD5PoZcivoru54N8/9ARpfyer4p611sYNA2rjj s8umAS8bCsS3bLnbnDnxxvhcJeCFBhpjOB2bSmguJCVSiCiO1awsRVYMuDZnh1rx 3AWyGiwGXMrxM7jtfGoc5gr1sakE2ea8VnoJwwe9VRiZl8h7tquTAWP6TMPeO16z jjZ5vq91KA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:11:57 2026 by rpki-client