$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft File: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft (raw, json) Hash identifier: eLNasKt03x3Udmnyu7me6t8iLDvHQbGb4OKUAh5tAmU= Subject key identifier: B2:0C:50:B5:41:AF:52:E1:A1:8F:E0:13:52:F2:EE:B3:C6:16:27:EB Authority key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Certificate issuer: /CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Certificate serial: 6CCF9D96669392CB40805780D2A99E640CAD466E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft Manifest number: D1 Signing time: Mon 12 Oct 2026 16:22:08 +0000 Manifest this update: Mon 12 Oct 2026 16:17:08 +0000 Manifest next update: Fri 16 Oct 2026 01:10:08 +0000 Files and hashes: 1: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl (hash: rUShnbvrmobWBKp6eZix2dPgDK2MtqmYYdPAUfooBDk=) 2: 3132322e3131342e302e302f31362d3136203d3e2034383337.roa (hash: 0+enGD/zc0KUM6hJ3xXwylGpBRXHqMrwp8Qwg/rjKXA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:cf:9d:96:66:93:92:cb:40:80:57:80:d2:a9:9e:64:0c:ad:46:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Validity Not Before: Oct 12 16:17:08 2026 GMT Not After : Oct 16 01:10:08 2026 GMT Subject: CN=B20C50B541AF52E1A18FE01352F2EEB3C61627EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3b:19:30:6c:e1:95:97:1f:de:2d:ef:6b:65: b0:f9:03:1a:bf:fd:3e:67:ff:fc:a3:81:ae:cf:3d: b7:3d:17:f4:ee:c9:df:00:c6:09:d8:bd:8f:30:19: 86:90:b2:5b:65:02:ab:b1:e9:fc:b3:cc:1e:cc:15: 1b:8a:63:83:ad:a7:ab:27:98:49:f2:6c:83:57:f2: f4:44:c3:09:31:f6:fb:14:5a:5f:06:73:44:6d:e3: 9e:70:20:e5:f6:9e:af:38:15:be:17:66:a5:03:dd: 9a:3e:72:e0:31:2d:48:0e:80:2d:52:c3:23:e5:15: 85:3c:14:4d:df:bf:66:ed:4c:19:b3:57:99:90:d8: 4a:e9:67:42:de:12:8c:bf:52:c5:d9:c7:38:fd:5b: b3:89:4c:16:fa:0d:31:37:47:98:31:2d:ae:8f:8f: 7f:f0:1f:05:87:d0:dc:ea:c6:02:a9:13:36:4a:63: 61:24:65:08:e2:ec:be:57:32:cf:11:d4:49:15:80: a3:57:9b:aa:38:bb:d2:79:96:d4:da:db:d5:84:47: bd:fa:39:99:7d:af:20:36:ec:ac:90:4b:7f:c3:2a: 6e:97:48:a1:84:02:26:62:f4:9a:e9:fc:5a:de:4c: be:75:57:2c:23:97:14:a2:8a:7a:60:d4:50:a5:2d: c6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0C:50:B5:41:AF:52:E1:A1:8F:E0:13:52:F2:EE:B3:C6:16:27:EB X509v3 Authority Key Identifier: keyid:2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d4:1a:35:70:b1:fe:40:af:d1:e0:04:66:c6:82:0b:c9:e7: b8:b2:05:fd:0b:42:1c:93:ee:32:0a:98:37:2b:f6:61:e4:5c: 06:76:43:7e:05:47:fb:33:fd:88:b7:a6:79:be:da:84:5c:bc: 85:88:65:5f:4a:d5:ba:12:96:b1:a6:99:89:b7:90:d0:08:66: b6:b5:d5:d0:ec:ff:d7:77:36:66:1a:10:f1:7b:c2:42:70:42: 25:40:e8:86:57:af:ad:51:91:43:c8:25:84:a3:66:da:6c:09: e3:6e:c7:fb:72:b7:20:2b:ca:0e:f6:d6:16:64:e1:26:9c:8c: d2:32:b7:46:d8:68:d9:47:20:84:a9:90:3f:21:20:58:a7:86: fe:15:38:ef:6f:90:05:6c:52:b2:c1:b2:b7:dc:dd:36:a1:af: 32:60:23:23:f2:ce:bd:2f:24:27:d3:02:8b:84:c6:bf:85:4b: 7c:b0:fa:f3:47:53:bc:29:19:6d:6a:dc:3b:25:85:9a:55:dd: ea:ec:e4:9d:28:97:a9:07:32:38:b6:07:38:93:88:ab:e8:8f: 66:4d:df:a2:17:9d:64:6c:1c:c2:e6:66:d1:78:b8:af:2f:f3: 4e:a8:40:93:83:5e:9c:0f:b3:8b:ce:af:f0:31:ef:95:12:0f: 36:51:d5:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbM+dlmaTkstAgFeA0qmeZAytRm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJE OEYzMTc1NjAeFw0yNjEwMTIxNjE3MDhaFw0yNjEwMTYwMTEwMDhaMDMxMTAvBgNV BAMTKEIyMEM1MEI1NDFBRjUyRTFBMThGRTAxMzUyRjJFRUIzQzYxNjI3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXOxkwbOGVlx/eLe9rZbD5Axq/ /T5n//yjga7PPbc9F/Tuyd8AxgnYvY8wGYaQsltlAqux6fyzzB7MFRuKY4Otp6sn mEnybINX8vREwwkx9vsUWl8Gc0Rt455wIOX2nq84Fb4XZqUD3Zo+cuAxLUgOgC1S wyPlFYU8FE3fv2btTBmzV5mQ2ErpZ0LeEoy/UsXZxzj9W7OJTBb6DTE3R5gxLa6P j3/wHwWH0NzqxgKpEzZKY2EkZQji7L5XMs8R1EkVgKNXm6o4u9J5ltTa29WER736 OZl9ryA27KyQS3/DKm6XSKGEAiZi9Jrp/FreTL51VywjlxSiinpg1FClLcY/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsgxQtUGvUuGhj+ATUvLus8YWJ+swHwYDVR0j BBgwFoAULVWgQfy3+f9zZekKfdqFQtjzF1YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc5MTI5MDQyMTI0ODAwMS8wLzJENTVBMDQxRkNCN0Y5RkY3MzY1RTkwQTdEREE4 NTQyRDhGMzE3NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3OTEyOTA0MjEyNDgwMDEvMC8yRDU1QTA0MUZDQjdG OUZGNzM2NUU5MEE3RERBODU0MkQ4RjMxNzU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntQaNXCx/kCv 0eAEZsaCC8nnuLIF/QtCHJPuMgqYNyv2YeRcBnZDfgVH+zP9iLemeb7ahFy8hYhl X0rVuhKWsaaZibeQ0AhmtrXV0Oz/13c2ZhoQ8XvCQnBCJUDohlevrVGRQ8glhKNm 2mwJ427H+3K3ICvKDvbWFmThJpyM0jK3Rtho2UcghKmQPyEgWKeG/hU472+QBWxS ssGyt9zdNqGvMmAjI/LOvS8kJ9MCi4TGv4VLfLD680dTvCkZbWrcOyWFmlXd6uzk nSiXqQcyOLYHOJOIq+iPZk3fohedZGwcwuZm0Xi4ry/zTqhAk4NenA+zi86v8DHv lRIPNlHVDA== -----END CERTIFICATE-----Generated at Tue Oct 13 22:49:56 2026 by rpki-client