$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft File: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft (raw, json) Hash identifier: agNpx6Q0uH2KCcATRYGpnpDgwKtE9ioqSDLgNlNOSIU= Subject key identifier: 94:DD:AE:67:A7:5D:5B:1A:F6:A9:DC:DC:0C:77:03:F9:58:2E:5E:1D Authority key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C Certificate issuer: /CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Certificate serial: 31177CA1DA1F64BDBB008E853AB50F0031FB332F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft Manifest number: D4 Signing time: Tue 13 Oct 2026 23:08:19 +0000 Manifest this update: Tue 13 Oct 2026 23:03:19 +0000 Manifest next update: Sat 17 Oct 2026 02:27:19 +0000 Files and hashes: 1: 3130332e3133302e3133322e302f32322d3232203d3e2030.roa (hash: FK6td7V83xHJimYsonXy6iGnkL28lgGxO82Pj8R5j/M=) 2: 323430613a633063303a3a2f33322d3332203d3e20313337373236.roa (hash: 1at51nd0IGgOA4YH54G2tz7k8cmIIn93vu2nRO3kz4M=) 3: 323430613a633030303a3a2f32302d3230203d3e20313337373236.roa (hash: P/uGAO3eiSum4zNic0X3psUc8CVrx9YxKsqMCgddi/U=) 4: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl (hash: ajitz/Nwq22KCRBHpM9CPkGCr0Fe9EjrVEiHO0xWXJg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 02:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:17:7c:a1:da:1f:64:bd:bb:00:8e:85:3a:b5:0f:00:31:fb:33:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Validity Not Before: Oct 13 23:03:19 2026 GMT Not After : Oct 17 02:27:19 2026 GMT Subject: CN=94DDAE67A75D5B1AF6A9DCDC0C7703F9582E5E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f0:ce:0a:dd:d8:72:11:da:21:bf:9b:64:69: be:30:ce:f6:34:f7:76:5b:6d:98:1e:f9:4c:dd:85: cd:48:44:73:21:a6:1a:6a:51:01:bf:8b:a7:36:0a: 7c:6f:e8:b1:90:2b:76:9c:48:71:c1:6d:f4:45:ab: e5:14:97:ce:9b:7b:74:23:5a:b3:95:fe:64:61:54: 0b:6a:95:e8:66:e7:96:80:df:b3:5f:87:45:e8:60: 1b:6d:b8:4c:d1:2c:8c:fe:be:56:3c:64:1b:5c:b9: 81:54:10:f5:50:4b:2e:59:57:70:bc:11:2b:d5:64: db:54:ec:c0:ca:bd:ba:d4:25:23:2a:b7:63:38:11: 39:2b:4a:a1:6f:a3:76:d4:b1:10:64:00:0f:a7:c1: bf:05:8e:b6:fe:8c:ee:c5:04:d1:c8:6a:bf:29:7d: 34:e9:e3:97:fe:07:b6:d4:87:10:41:ef:31:9e:c2: 36:23:f1:8e:00:37:bd:b4:48:0e:01:28:8b:02:b8: 69:06:21:05:49:f4:2f:b5:f1:10:c8:65:5d:be:2b: 2d:cd:43:39:8f:f2:2b:fe:aa:ad:42:0b:43:67:75: 68:52:22:5e:a3:15:5c:cd:c6:35:97:2a:f1:68:ce: cc:27:18:96:42:6b:27:59:f9:e3:4c:05:41:be:8b: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DD:AE:67:A7:5D:5B:1A:F6:A9:DC:DC:0C:77:03:F9:58:2E:5E:1D X509v3 Authority Key Identifier: keyid:5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:26:6a:7e:db:43:8a:fd:d2:2a:c0:61:ef:19:f1:82:98:fc: 24:95:e0:1a:1b:96:f9:6c:ab:19:7b:96:ad:62:bb:c4:c4:87: 15:49:22:2f:31:74:a2:a5:1f:b0:0e:a9:67:11:62:59:ab:f6: ca:6b:18:eb:62:10:27:8d:59:7c:93:aa:76:da:5e:03:04:99: f2:63:1a:be:1e:51:dd:21:cc:cf:79:51:64:42:20:6a:4f:ba: 87:88:a9:39:c4:d7:e8:08:32:54:22:88:ec:69:1e:e1:60:d7: b2:38:23:4c:5d:c8:6d:32:dc:ef:e6:67:51:9f:56:d6:a4:3f: 8e:3a:5e:29:e6:ef:d8:51:4f:f5:51:eb:12:98:d4:71:40:9e: d9:bb:6e:e6:f0:27:3a:1a:76:32:d6:ea:3c:06:ef:37:b1:5b: 8d:af:ba:45:9c:55:38:15:22:13:dd:d9:87:09:9f:e8:28:b6: 28:37:c1:2b:84:8a:80:35:91:9b:20:51:28:b8:8d:a1:f9:19: 2b:26:c2:c5:40:8c:fb:01:42:62:08:7c:3e:e5:10:e0:f2:9a: 70:4d:a1:28:bb:d5:31:8c:ae:d9:b2:13:f8:1f:1e:63:09:35: 19:e1:09:d4:4e:fc:61:13:22:d2:16:13:e1:4a:66:eb:b6:2a: 7b:74:a0:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMRd8odofZL27AI6FOrUPADH7My8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMx QUM4RjQ4QzAeFw0yNjEwMTMyMzAzMTlaFw0yNjEwMTcwMjI3MTlaMDMxMTAvBgNV BAMTKDk0RERBRTY3QTc1RDVCMUFGNkE5RENEQzBDNzcwM0Y5NTgyRTVFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8M4K3dhyEdohv5tkab4wzvY0 93ZbbZge+Uzdhc1IRHMhphpqUQG/i6c2Cnxv6LGQK3acSHHBbfRFq+UUl86be3Qj WrOV/mRhVAtqlehm55aA37Nfh0XoYBttuEzRLIz+vlY8ZBtcuYFUEPVQSy5ZV3C8 ESvVZNtU7MDKvbrUJSMqt2M4ETkrSqFvo3bUsRBkAA+nwb8Fjrb+jO7FBNHIar8p fTTp45f+B7bUhxBB7zGewjYj8Y4AN720SA4BKIsCuGkGIQVJ9C+18RDIZV2+Ky3N QzmP8iv+qq1CC0NndWhSIl6jFVzNxjWXKvFozswnGJZCaydZ+eNMBUG+i7D9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlN2uZ6ddWxr2qdzcDHcD+VguXh0wHwYDVR0j BBgwFoAUW6/VLZ+0o3x6E4Ko78wZrBrI9IwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MzcxNDgxMjc4MDU0Ni8wLzVCQUZENTJEOUZCNEEzN0M3QTEzODJBOEVGQ0Mx OUFDMUFDOEY0OEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMxQUM4RjQ4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTM3MTQ4MTI3ODA1NDYvMC81QkFGRDUyRDlGQjRB MzdDN0ExMzgyQThFRkNDMTlBQzFBQzhGNDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCZqfttDiv3S KsBh7xnxgpj8JJXgGhuW+WyrGXuWrWK7xMSHFUkiLzF0oqUfsA6pZxFiWav2ymsY 62IQJ41ZfJOqdtpeAwSZ8mMavh5R3SHMz3lRZEIgak+6h4ipOcTX6AgyVCKI7Gke 4WDXsjgjTF3IbTLc7+ZnUZ9W1qQ/jjpeKebv2FFP9VHrEpjUcUCe2btu5vAnOhp2 MtbqPAbvN7Fbja+6RZxVOBUiE93Zhwmf6Ci2KDfBK4SKgDWRmyBRKLiNofkZKybC xUCM+wFCYgh8PuUQ4PKacE2hKLvVMYyu2bIT+B8eYwk1GeEJ1E78YRMi0hYT4Upm 67Yqe3Sgxg== -----END CERTIFICATE-----Generated at Wed Oct 14 09:07:13 2026 by rpki-client