$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft File: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft (raw, json) Hash identifier: JpalWG9K+VkUiIBipnroXiffFWngTTGOLN3UUY0Aa5o= Subject key identifier: E5:4B:21:E0:7D:82:56:BB:8D:9C:73:BC:51:DF:EA:64:A2:7C:52:47 Authority key identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF Certificate issuer: /CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Certificate serial: 6C9CE9F4519D9911E86139CDCEEF3B663B6BE895 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft Manifest number: FB Signing time: Sun 25 Oct 2026 04:57:15 +0000 Manifest this update: Sun 25 Oct 2026 04:52:15 +0000 Manifest next update: Wed 28 Oct 2026 05:51:15 +0000 Files and hashes: 1: 3136372e3138392e302e302f31362d3234203d3e2030.roa (hash: MXf+SARmeNUqmxYlPN54Ktu2L7cV6EQdIwRkz23xCxM=) 2: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl (hash: 8AHpFeIVjf44UANiO+nPAHew8t/gtEsCPZtS8rEblik=) 3: 3136372e3138392e302e302f31362d3332203d3e203536303438.roa (hash: MrzEn6klYHxiYP4rtuuhkZhxDGTxHKj05TDsKOfntVs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 14:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9c:e9:f4:51:9d:99:11:e8:61:39:cd:ce:ef:3b:66:3b:6b:e8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Validity Not Before: Oct 25 04:52:15 2026 GMT Not After : Oct 28 05:51:15 2026 GMT Subject: CN=E54B21E07D8256BB8D9C73BC51DFEA64A27C5247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fa:4d:25:20:77:5f:fd:51:da:fa:da:9f:d3: 0e:11:b9:fe:d2:c1:70:5e:46:36:a7:6c:c6:49:e4: 52:7e:e5:74:94:1e:b5:80:d1:51:df:5c:b1:d7:a3: 5f:30:d8:9a:23:ef:08:9d:36:16:2a:34:34:14:fe: aa:5c:79:c0:cf:88:f9:ac:22:70:ee:a8:53:a2:c0: 38:64:00:3a:3f:ed:64:e3:08:61:8d:a1:d2:5f:27: b3:17:01:11:bb:dd:0b:d0:ad:c0:d2:33:11:84:60: c1:42:2e:20:01:c9:50:ab:bf:77:4f:1f:a8:d3:cd: 87:00:2d:61:ee:49:c6:fb:8e:3a:28:c8:55:d7:0c: 05:c6:02:8b:89:08:1d:be:12:21:e8:62:57:de:90: 9b:c0:4c:c9:f5:ee:0a:24:13:a0:87:34:9e:4d:dd: 93:01:9a:41:f5:62:ba:4e:ef:5b:43:ab:b9:9a:15: 09:c5:b2:eb:17:76:0c:21:c6:75:ea:3f:15:50:dd: 80:ae:3a:8f:67:a4:d7:7d:49:b8:ce:ea:29:cd:6b: dd:2a:db:e0:a4:7f:5e:77:6f:e7:0f:c6:b7:67:1b: ae:21:1b:64:cb:76:d8:9c:eb:60:df:06:14:0e:29: df:ac:e7:7e:cd:cc:2b:a5:62:9b:c0:6b:d8:49:c7: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4B:21:E0:7D:82:56:BB:8D:9C:73:BC:51:DF:EA:64:A2:7C:52:47 X509v3 Authority Key Identifier: keyid:7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f9:32:f7:de:84:74:56:94:f1:c8:04:95:28:a2:3c:ad:fd: 7a:31:57:ea:60:09:46:e3:77:ff:b6:06:8d:6e:0d:ea:f1:df: f1:b4:06:73:66:45:da:a0:71:2a:4d:67:6c:5e:0e:7a:46:50: 69:c2:b8:e5:6c:78:b4:00:70:2b:45:38:98:84:d4:ac:15:f6: b0:73:70:d5:46:22:4d:a4:bc:70:6a:0c:e7:eb:08:c2:c6:78: c8:02:38:44:af:a0:0b:16:83:91:b8:25:a7:b4:50:9c:eb:6c: ef:cc:dc:c6:71:b1:ad:33:29:a2:23:e5:63:02:74:45:8a:21: 95:46:9d:ba:9d:37:10:fd:cb:e9:ff:1f:41:22:40:05:ed:b8: 95:72:c8:bb:a7:ef:05:be:61:10:e1:cf:40:33:6d:2a:40:e3: c1:68:77:32:37:c4:1a:77:af:f4:5c:74:04:ef:66:dc:c0:0b: 6d:34:af:28:9a:ad:a7:fc:48:aa:c0:02:af:fc:4a:b5:89:23: 97:9f:f0:f2:70:1e:90:55:bc:82:e3:44:d0:89:c5:74:71:3b: 33:f7:d3:8f:18:51:08:0a:61:9c:3d:1b:44:95:59:18:b5:ad: 87:52:bc:64:2f:d2:2a:f6:cb:da:da:4e:a3:f8:0d:c6:3b:3c: f8:be:ac:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbJzp9FGdmRHoYTnNzu87Zjtr6JUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJE MkVENjlBRjAeFw0yNjEwMjUwNDUyMTVaFw0yNjEwMjgwNTUxMTVaMDMxMTAvBgNV BAMTKEU1NEIyMUUwN0Q4MjU2QkI4RDlDNzNCQzUxREZFQTY0QTI3QzUyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf+k0lIHdf/VHa+tqf0w4Ruf7S wXBeRjanbMZJ5FJ+5XSUHrWA0VHfXLHXo18w2Joj7widNhYqNDQU/qpcecDPiPms InDuqFOiwDhkADo/7WTjCGGNodJfJ7MXARG73QvQrcDSMxGEYMFCLiAByVCrv3dP H6jTzYcALWHuScb7jjooyFXXDAXGAouJCB2+EiHoYlfekJvATMn17gokE6CHNJ5N 3ZMBmkH1YrpO71tDq7maFQnFsusXdgwhxnXqPxVQ3YCuOo9npNd9SbjO6inNa90q 2+Ckf153b+cPxrdnG64hG2TLdtic62DfBhQOKd+s537NzCulYpvAa9hJxzm9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5Ush4H2CVruNnHO8Ud/qZKJ8UkcwHwYDVR0j BBgwFoAUfFWaAIQNADJbRdf2p8EO29Ltaa8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8wLzdDNTU5QTAwODQwRDAwMzI1QjQ1RDdGNkE3QzEw RURCRDJFRDY5QUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJEMkVENjlBRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMC83QzU1OUEwMDg0MEQw MDMyNUI0NUQ3RjZBN0MxMEVEQkQyRUQ2OUFGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafky996EdFaU 8cgElSiiPK39ejFX6mAJRuN3/7YGjW4N6vHf8bQGc2ZF2qBxKk1nbF4OekZQacK4 5Wx4tABwK0U4mITUrBX2sHNw1UYiTaS8cGoM5+sIwsZ4yAI4RK+gCxaDkbglp7RQ nOts78zcxnGxrTMpoiPlYwJ0RYohlUadup03EP3L6f8fQSJABe24lXLIu6fvBb5h EOHPQDNtKkDjwWh3MjfEGnev9Fx0BO9m3MALbTSvKJqtp/xIqsACr/xKtYkjl5/w 8nAekFW8guNE0InFdHE7M/fTjxhRCAphnD0bRJVZGLWth1K8ZC/SKvbL2tpOo/gN xjs8+L6s/w== -----END CERTIFICATE-----Generated at Sun Oct 25 14:35:25 2026 by rpki-client