$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft File: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft (raw, json) Hash identifier: Uk4tLq8cMeP1rOeM6li5WgbL/pfFMLMDeciccq+OCmk= Subject key identifier: FB:35:34:C5:08:8C:C4:CF:A2:95:8C:17:A8:55:52:56:5C:74:8C:78 Authority key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Certificate issuer: /CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Certificate serial: 570CA58E2DB7D8DBA35C2D220A11EC09075C46C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft Manifest number: BD Signing time: Fri 28 Aug 2026 06:48:06 +0000 Manifest this update: Fri 28 Aug 2026 06:43:06 +0000 Manifest next update: Mon 31 Aug 2026 11:27:06 +0000 Files and hashes: 1: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl (hash: tZiUpliGcCcPgu2pj+cVV7f2IYwI3ySH6N6ePAHU4Xg=) 2: 3132322e3131342e302e302f31362d3136203d3e2034383337.roa (hash: 0+enGD/zc0KUM6hJ3xXwylGpBRXHqMrwp8Qwg/rjKXA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0c:a5:8e:2d:b7:d8:db:a3:5c:2d:22:0a:11:ec:09:07:5c:46:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Validity Not Before: Aug 28 06:43:06 2026 GMT Not After : Aug 31 11:27:06 2026 GMT Subject: CN=FB3534C5088CC4CFA2958C17A85552565C748C78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:c3:2a:5e:d5:df:f0:f0:12:3f:48:94:25: b6:99:52:c9:06:24:73:d7:97:50:9e:0a:46:e9:09: c1:bd:e4:2e:ef:5c:9d:83:e8:36:70:6c:0a:f6:46: 61:63:b2:63:2e:88:10:04:46:d5:15:34:96:26:04: 43:f0:07:20:71:00:7b:f0:a0:35:15:61:2c:b8:83: 3b:ce:9f:b0:71:8a:f4:2f:d7:63:1f:82:5c:1c:65: 31:94:39:60:5d:1b:f0:6d:6c:89:7a:46:c2:7c:10: 9c:8a:11:08:ed:76:87:e8:19:7c:83:72:90:87:fe: 58:7e:59:29:58:dc:46:03:19:cd:5a:bb:7c:01:f3: 30:c1:0a:17:a4:fb:66:37:5e:df:a0:e5:6d:c8:ba: 9a:ab:1a:5d:e0:63:f4:08:f6:58:c1:24:7d:2b:0c: 67:bf:90:bd:62:c7:dd:06:85:38:14:cf:3f:cc:e9: 89:fd:74:7a:e7:1d:19:ef:4e:bf:45:6e:ae:45:62: 1a:6d:df:00:d4:93:2c:91:69:b2:0e:34:fc:c0:a3: 94:81:63:14:1a:ec:e1:20:43:f7:ba:2f:68:3b:2a: 08:52:53:f1:b3:31:20:9f:76:c4:b9:f3:50:09:6f: b3:87:15:09:ff:c7:27:95:11:90:cf:e5:90:ca:e6: db:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:35:34:C5:08:8C:C4:CF:A2:95:8C:17:A8:55:52:56:5C:74:8C:78 X509v3 Authority Key Identifier: keyid:2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c7:92:c2:0c:a5:46:13:96:4d:50:5e:a9:aa:c5:a8:a2:01: 6a:fc:9a:1d:e7:20:69:8c:70:87:fe:52:cf:ea:53:31:68:36: bb:d9:26:b0:95:39:f0:23:19:fb:fc:7b:14:ff:35:ec:32:65: 87:bb:36:21:bc:27:96:5e:49:c5:27:0e:f7:58:6a:5a:a6:62: f9:1b:2b:9f:e7:b1:09:c4:12:a6:10:a6:4c:17:33:4d:0f:44: 0e:d5:92:ab:8e:be:2c:4b:17:cf:d4:2c:a9:24:ef:ef:f0:76: eb:77:4f:6c:b0:55:a1:8a:cf:57:76:81:f7:20:1d:89:f3:c5: 14:a1:99:6c:c1:5a:cf:7f:5a:0b:91:7b:d5:11:22:64:9b:75: cf:2f:4e:58:e6:46:d0:a0:61:94:56:eb:ce:28:82:5f:60:2a: 7e:51:f0:e8:a7:a2:a5:e5:5d:3c:36:32:7a:38:c6:fa:3f:50: 0d:2a:a5:6f:5e:44:c4:13:ad:23:f5:be:0f:e1:23:7f:fb:7b: 1d:b0:c4:47:99:c6:0f:16:8d:5a:ec:3e:f9:d7:19:49:60:b7: ee:7c:3f:67:2e:c9:75:03:f0:22:bb:14:03:62:8a:0b:a6:1a: bb:91:46:37:9b:e0:8d:5a:22:4a:87:31:11:db:1a:18:61:2c: f8:80:63:81 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVwylji232NujXC0iChHsCQdcRsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJE OEYzMTc1NjAeFw0yNjA4MjgwNjQzMDZaFw0yNjA4MzExMTI3MDZaMDMxMTAvBgNV BAMTKEZCMzUzNEM1MDg4Q0M0Q0ZBMjk1OEMxN0E4NTU1MjU2NUM3NDhDNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmxsMqXtXf8PASP0iUJbaZUskG JHPXl1CeCkbpCcG95C7vXJ2D6DZwbAr2RmFjsmMuiBAERtUVNJYmBEPwByBxAHvw oDUVYSy4gzvOn7BxivQv12MfglwcZTGUOWBdG/BtbIl6RsJ8EJyKEQjtdofoGXyD cpCH/lh+WSlY3EYDGc1au3wB8zDBChek+2Y3Xt+g5W3IupqrGl3gY/QI9ljBJH0r DGe/kL1ix90GhTgUzz/M6Yn9dHrnHRnvTr9Fbq5FYhpt3wDUkyyRabIONPzAo5SB YxQa7OEgQ/e6L2g7KghSU/GzMSCfdsS581AJb7OHFQn/xyeVEZDP5ZDK5tsfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+zU0xQiMxM+ilYwXqFVSVlx0jHgwHwYDVR0j BBgwFoAULVWgQfy3+f9zZekKfdqFQtjzF1YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc5MTI5MDQyMTI0ODAwMS8wLzJENTVBMDQxRkNCN0Y5RkY3MzY1RTkwQTdEREE4 NTQyRDhGMzE3NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3OTEyOTA0MjEyNDgwMDEvMC8yRDU1QTA0MUZDQjdG OUZGNzM2NUU5MEE3RERBODU0MkQ4RjMxNzU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFseSwgylRhOW TVBeqarFqKIBavyaHecgaYxwh/5Sz+pTMWg2u9kmsJU58CMZ+/x7FP817DJlh7s2 Ibwnll5JxScO91hqWqZi+Rsrn+exCcQSphCmTBczTQ9EDtWSq46+LEsXz9QsqSTv 7/B263dPbLBVoYrPV3aB9yAdifPFFKGZbMFaz39aC5F71REiZJt1zy9OWOZG0KBh lFbrziiCX2AqflHw6KeipeVdPDYyejjG+j9QDSqlb15ExBOtI/W+D+Ejf/t7HbDE R5nGDxaNWuw++dcZSWC37nw/Zy7JdQPwIrsUA2KKC6Yau5FGN5vgjVoiSocxEdsa GGEs+IBjgQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:01 2026 by rpki-client