$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft File: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft (raw, json) Hash identifier: aeNbiTJ4OOYSxLH3cJsIoxeB8AXU0HEFjgureixjDZU= Subject key identifier: D5:B8:6A:3B:D7:EE:06:AA:69:58:39:34:CA:BB:44:6A:23:DC:7C:D6 Authority key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C Certificate issuer: /CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Certificate serial: 30FA0EA17A51B0F9936497627DF161497F7CE304 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft Manifest number: BF Signing time: Fri 28 Aug 2026 06:47:54 +0000 Manifest this update: Fri 28 Aug 2026 06:42:54 +0000 Manifest next update: Mon 31 Aug 2026 11:51:54 +0000 Files and hashes: 1: 323430613a633063303a3a2f33322d3332203d3e20313337373236.roa (hash: 1at51nd0IGgOA4YH54G2tz7k8cmIIn93vu2nRO3kz4M=) 2: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl (hash: rYWwEdrhNLynxynBukQr0cMaUGdECpJG/8Lm0+fHoQw=) 3: 3130332e3133302e3133322e302f32322d3232203d3e2030.roa (hash: FK6td7V83xHJimYsonXy6iGnkL28lgGxO82Pj8R5j/M=) 4: 323430613a633030303a3a2f32302d3230203d3e20313337373236.roa (hash: P/uGAO3eiSum4zNic0X3psUc8CVrx9YxKsqMCgddi/U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:fa:0e:a1:7a:51:b0:f9:93:64:97:62:7d:f1:61:49:7f:7c:e3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Validity Not Before: Aug 28 06:42:54 2026 GMT Not After : Aug 31 11:51:54 2026 GMT Subject: CN=D5B86A3BD7EE06AA69583934CABB446A23DC7CD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:81:ba:30:43:c6:c8:65:36:c5:64:75:53: 12:87:f7:f2:fa:1f:5b:c0:ba:3e:a3:0b:07:51:55: f1:37:45:38:16:81:59:db:e7:98:47:36:96:2d:0a: 92:13:a5:ef:a1:7c:24:f2:2c:6b:12:99:e5:6e:c7: 52:a3:cc:35:ba:75:d7:3c:a6:ac:d9:dc:9c:ee:13: a7:37:49:d9:ce:de:d0:df:e2:71:7f:c3:fd:97:c9: 37:d4:be:19:42:5f:42:05:5c:14:6a:3f:c4:f3:2a: 40:18:65:a1:39:16:38:ff:8d:0d:3a:4d:5d:5d:3e: 9e:7b:c1:84:46:2b:23:1a:58:1e:56:fd:bb:43:bc: ac:c3:2e:4c:90:86:f2:a3:27:8b:eb:4b:16:08:b6: 2d:71:98:54:f2:f3:54:4c:ce:d3:ee:24:23:0b:9d: 46:e7:34:db:44:25:2a:12:83:f3:13:c0:42:a7:c8: d9:71:b6:ee:52:c9:72:fb:ec:46:4a:7b:86:a0:a6: 0f:e3:05:0e:40:c3:db:77:da:17:de:35:e4:e6:af: 46:91:14:84:af:1a:b9:5c:66:68:bf:61:7c:2d:12: 52:e7:95:4a:62:bc:bd:a6:cb:21:38:07:6c:0e:e9: 53:6f:18:87:a8:0b:62:ca:90:fb:0c:cd:9d:ed:d9: 66:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B8:6A:3B:D7:EE:06:AA:69:58:39:34:CA:BB:44:6A:23:DC:7C:D6 X509v3 Authority Key Identifier: keyid:5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:a7:d8:34:45:cb:a3:9c:c1:74:46:47:ea:5f:c3:bf:71:94: 51:81:5b:08:d9:51:0f:6f:05:a5:44:8d:5b:db:0d:02:b9:d4: b3:d6:c9:a4:c6:03:d1:a9:60:58:70:e4:67:e7:29:18:ba:89: cf:b9:36:9f:df:17:eb:28:f9:78:f9:06:a8:13:6c:b8:af:a6: 29:64:e4:b6:56:c4:fb:f0:b4:68:21:df:df:00:86:20:30:31: 3d:f4:33:ca:79:66:1f:b9:a5:2a:35:a5:59:00:50:fa:25:25: ee:3e:c9:bc:ac:12:84:e8:77:75:4b:3a:ee:dc:d0:59:7b:ac: f3:51:0e:1d:c9:87:6f:82:f6:d6:0b:dd:1b:95:6e:15:a2:f4: 80:49:99:07:80:07:16:9f:80:6c:98:2b:35:3a:bb:ec:d5:c8: 17:01:66:13:09:41:df:e4:ce:83:f1:6a:f3:7b:31:4a:2f:4a: 42:fb:d6:61:75:e8:7e:ac:8f:d7:67:f7:db:1b:c2:84:5c:18: e8:f5:26:b1:f5:f4:7f:33:34:e0:d3:af:16:97:7e:9b:57:f6: 03:d1:96:f0:6a:0a:d3:de:62:54:32:bb:ed:d9:10:f3:56:db: d9:f1:10:05:f5:6a:b9:3a:72:2e:8d:45:c1:fd:66:52:ca:75: de:ae:da:11 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMPoOoXpRsPmTZJdiffFhSX984wQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMx QUM4RjQ4QzAeFw0yNjA4MjgwNjQyNTRaFw0yNjA4MzExMTUxNTRaMDMxMTAvBgNV BAMTKEQ1Qjg2QTNCRDdFRTA2QUE2OTU4MzkzNENBQkI0NDZBMjNEQzdDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuGIG6MEPGyGU2xWR1UxKH9/L6 H1vAuj6jCwdRVfE3RTgWgVnb55hHNpYtCpITpe+hfCTyLGsSmeVux1KjzDW6ddc8 pqzZ3JzuE6c3SdnO3tDf4nF/w/2XyTfUvhlCX0IFXBRqP8TzKkAYZaE5Fjj/jQ06 TV1dPp57wYRGKyMaWB5W/btDvKzDLkyQhvKjJ4vrSxYIti1xmFTy81RMztPuJCML nUbnNNtEJSoSg/MTwEKnyNlxtu5SyXL77EZKe4agpg/jBQ5Aw9t32hfeNeTmr0aR FISvGrlcZmi/YXwtElLnlUpivL2myyE4B2wO6VNvGIeoC2LKkPsMzZ3t2WZtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1bhqO9fuBqppWDk0yrtEaiPcfNYwHwYDVR0j BBgwFoAUW6/VLZ+0o3x6E4Ko78wZrBrI9IwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MzcxNDgxMjc4MDU0Ni8wLzVCQUZENTJEOUZCNEEzN0M3QTEzODJBOEVGQ0Mx OUFDMUFDOEY0OEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMxQUM4RjQ4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTM3MTQ4MTI3ODA1NDYvMC81QkFGRDUyRDlGQjRB MzdDN0ExMzgyQThFRkNDMTlBQzFBQzhGNDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6fYNEXLo5zB dEZH6l/Dv3GUUYFbCNlRD28FpUSNW9sNArnUs9bJpMYD0algWHDkZ+cpGLqJz7k2 n98X6yj5ePkGqBNsuK+mKWTktlbE+/C0aCHf3wCGIDAxPfQzynlmH7mlKjWlWQBQ +iUl7j7JvKwShOh3dUs67tzQWXus81EOHcmHb4L21gvdG5VuFaL0gEmZB4AHFp+A bJgrNTq77NXIFwFmEwlB3+TOg/Fq83sxSi9KQvvWYXXofqyP12f32xvChFwY6PUm sfX0fzM04NOvFpd+m1f2A9GW8GoK095iVDK77dkQ81bb2fEQBfVquTpyLo1Fwf1m Usp13q7aEQ== -----END CERTIFICATE-----Generated at Sat Aug 29 07:06:03 2026 by rpki-client