$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft File: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft (raw, json) Hash identifier: QPvxvIUzjJPBGYiek/STBB2t9NFPBtW37DVIrxvTg8Q= Subject key identifier: 92:58:79:53:11:9A:4E:67:A0:02:D8:DB:E9:57:7D:1A:C7:F0:39:06 Authority key identifier: 5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 Certificate issuer: /CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Certificate serial: 3585B03A1C018EDCDFF34AA3BAFDFE2FD56E7BAD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft Manifest number: 013B Signing time: Tue 13 Oct 2026 13:48:05 +0000 Manifest this update: Tue 13 Oct 2026 13:43:05 +0000 Manifest next update: Fri 16 Oct 2026 21:22:05 +0000 Files and hashes: 1: 3130332e3130382e3232342e302f32322d3232203d3e20313337373439.roa (hash: zHzI/9PSJE+EIuOYM5GIgpRml/jlCOMfbR9huXzMYcw=) 2: 5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl (hash: n8MizoY+cDQeVnoOCr9psCBeVT45WyGGzFdGCSF2Qwg=) 3: 323430323a373234303a3a2f33322d3332203d3e20313337373439.roa (hash: tKoqGAOcSQfxgYC8jp3fBtEgDkfvHWvFK76RksqLpr0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 21:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:85:b0:3a:1c:01:8e:dc:df:f3:4a:a3:ba:fd:fe:2f:d5:6e:7b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DD11A515F0C906B8E95BDFA0B5057A8746BB709 Validity Not Before: Oct 13 13:43:05 2026 GMT Not After : Oct 16 21:22:05 2026 GMT Subject: CN=92587953119A4E67A002D8DBE9577D1AC7F03906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f0:ab:b2:12:db:88:65:a6:ea:de:4f:07:58: e8:c7:55:d0:24:45:59:17:bb:23:bf:ff:c0:cb:1c: 7b:d2:72:f2:4e:b9:87:c1:38:dc:3d:cf:18:a6:f7: f3:50:0f:8b:ef:d2:cd:c8:a8:8a:88:d3:68:f1:f4: 92:2f:66:06:22:56:9a:7c:4a:31:1e:20:40:63:ff: 00:b4:f8:4f:1e:9c:4b:ba:fd:3d:72:c1:70:2a:fe: 8f:ad:98:34:83:35:b4:70:f0:ce:84:b1:58:30:fa: a6:77:a9:64:1a:b7:17:27:d9:34:5f:8f:d5:97:11: 5e:4d:58:f9:62:f2:e4:65:6a:8d:14:06:ac:14:8c: f7:5c:28:bf:f4:64:9c:57:e1:ae:85:ae:be:a3:75: f6:88:db:f6:17:98:bb:7d:b0:af:19:0e:91:b8:ec: 44:e2:8a:3e:d4:42:55:b0:cc:e2:d4:65:f3:b3:6b: 2e:12:1d:93:00:79:cb:3d:d0:0a:6b:73:a8:b8:be: 78:4c:4b:75:6d:41:a5:13:a5:08:50:e1:62:2a:37: 56:a0:aa:09:79:88:a6:1d:a8:fb:7f:09:80:91:e1: c6:a3:55:72:4d:68:84:e3:10:73:be:54:d9:03:27: d8:89:eb:2d:1d:a0:75:ee:df:87:d8:b5:88:32:95: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:58:79:53:11:9A:4E:67:A0:02:D8:DB:E9:57:7D:1A:C7:F0:39:06 X509v3 Authority Key Identifier: keyid:5D:D1:1A:51:5F:0C:90:6B:8E:95:BD:FA:0B:50:57:A8:74:6B:B7:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548550146/0/5DD11A515F0C906B8E95BDFA0B5057A8746BB709.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1f:33:2a:a8:a4:a0:f2:83:a9:03:51:52:94:85:9b:7b:a2: 6b:ea:c6:98:35:73:ec:6f:86:e0:0d:b7:98:00:3b:36:91:3c: fb:65:3d:8a:e5:c1:9c:6a:cd:fa:09:b3:a4:b2:a4:3e:0f:70: 55:ee:6c:cf:fc:ee:92:d7:43:a4:f4:b1:24:4c:b8:cd:bc:ce: ae:59:b1:f7:98:d1:f8:5e:f2:59:36:a5:df:fe:2e:f1:b9:e0: 56:c7:3c:04:9b:81:84:4f:14:9e:70:f9:01:21:07:69:d7:ae: e1:5c:73:28:ef:ef:4c:85:b7:a0:5f:c0:45:86:49:75:73:11: 0d:07:0d:b8:d7:5e:12:e2:6b:76:65:77:81:d6:b6:ce:65:bb: 31:3f:d2:35:ca:04:f3:c2:45:18:5d:5e:11:74:e1:5e:d3:3f: 49:74:a3:81:32:2c:9f:80:ea:a8:d2:60:9a:3e:76:be:6f:af: 54:63:c5:51:1f:f6:48:7a:b0:73:1d:75:4c:76:18:1b:80:61: 3b:ee:0c:2d:2d:dd:e6:e5:07:c5:9e:d4:aa:53:ae:74:98:d4: 11:67:d8:3d:0d:04:59:64:11:4b:f4:b8:12:76:71:02:01:a8: 78:23:9f:7f:61:97:b8:78:ae:38:a9:7e:c1:4e:05:72:2e:4c: f9:59:88:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNYWwOhwBjtzf80qjuv3+L9Vue60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3 NDZCQjcwOTAeFw0yNjEwMTMxMzQzMDVaFw0yNjEwMTYyMTIyMDVaMDMxMTAvBgNV BAMTKDkyNTg3OTUzMTE5QTRFNjdBMDAyRDhEQkU5NTc3RDFBQzdGMDM5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI8KuyEtuIZabq3k8HWOjHVdAk RVkXuyO//8DLHHvScvJOuYfBONw9zxim9/NQD4vv0s3IqIqI02jx9JIvZgYiVpp8 SjEeIEBj/wC0+E8enEu6/T1ywXAq/o+tmDSDNbRw8M6EsVgw+qZ3qWQatxcn2TRf j9WXEV5NWPli8uRlao0UBqwUjPdcKL/0ZJxX4a6Frr6jdfaI2/YXmLt9sK8ZDpG4 7ETiij7UQlWwzOLUZfOzay4SHZMAecs90Aprc6i4vnhMS3VtQaUTpQhQ4WIqN1ag qgl5iKYdqPt/CYCR4cajVXJNaITjEHO+VNkDJ9iJ6y0doHXu34fYtYgyleitAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUklh5UxGaTmegAtjb6Vd9GsfwOQYwHwYDVR0j BBgwFoAUXdEaUV8MkGuOlb36C1BXqHRrtwkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODU1MDE0Ni8wLzVERDExQTUxNUYwQzkwNkI4RTk1QkRGQTBCNTA1 N0E4NzQ2QkI3MDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUREMTFBNTE1RjBDOTA2QjhFOTVCREZBMEI1MDU3QTg3NDZCQjcwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg1NTAxNDYvMC81REQxMUE1MTVGMEM5 MDZCOEU5NUJERkEwQjUwNTdBODc0NkJCNzA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALB8zKqikoPKD qQNRUpSFm3uia+rGmDVz7G+G4A23mAA7NpE8+2U9iuXBnGrN+gmzpLKkPg9wVe5s z/zuktdDpPSxJEy4zbzOrlmx95jR+F7yWTal3/4u8bngVsc8BJuBhE8UnnD5ASEH adeu4VxzKO/vTIW3oF/ARYZJdXMRDQcNuNdeEuJrdmV3gda2zmW7MT/SNcoE88JF GF1eEXThXtM/SXSjgTIsn4DqqNJgmj52vm+vVGPFUR/2SHqwcx11THYYG4BhO+4M LS3d5uUHxZ7UqlOudJjUEWfYPQ0EWWQRS/S4EnZxAgGoeCOff2GXuHiuOKl+wU4F ci5M+VmIsA== -----END CERTIFICATE-----Generated at Wed Oct 14 21:54:11 2026 by rpki-client