$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft File: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft (raw, json) Hash identifier: VuTLULqj843X2ucxddlDhun5w9+wGTK7BLQwaK2W3Zw= Subject key identifier: 1C:34:C6:8E:66:2B:E9:17:A1:35:4B:01:1D:4A:4A:72:C7:F7:BC:5C Authority key identifier: 2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B Certificate issuer: /CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Certificate serial: 433116C98B0E8DD9609F3BEB98BEBD0CF168CECB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft Manifest number: D3 Signing time: Tue 27 Oct 2026 05:24:22 +0000 Manifest this update: Tue 27 Oct 2026 05:19:22 +0000 Manifest next update: Fri 30 Oct 2026 15:27:22 +0000 Files and hashes: 1: 323430313a643932303a3a2f32382d313238203d3e203633373138.roa (hash: wqKyq4CT7ZBhjVas93N8o2f4ItHVxa4rAXSDsabJnzU=) 2: 3138302e3137382e3139322e302f31382d3332203d3e203633373138.roa (hash: p/FOxsVY6yCDcHHnlzBhiEH5nnmslBPLMVOfQrX5mgI=) 3: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl (hash: euaIwLJWU9oEpTYwvFgUruCGaAob0TAFXgEUcDFDU+A=) 4: 3130332e3130352e3232302e302f32322d3332203d3e203633373138.roa (hash: UoMxgKtAhyszzVVZnBqAdDpPta7+jHjGEznfu4FR8Iw=) 5: 3138302e3137382e3235322e302f32322d3332203d3e2034383337.roa (hash: YA2y5WDqbbqXlH3plbuoacVKmNM5TSdO8J/ShSoYXBU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 15:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:31:16:c9:8b:0e:8d:d9:60:9f:3b:eb:98:be:bd:0c:f1:68:ce:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Validity Not Before: Oct 27 05:19:22 2026 GMT Not After : Oct 30 15:27:22 2026 GMT Subject: CN=1C34C68E662BE917A1354B011D4A4A72C7F7BC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:65:05:b8:2c:5b:94:3b:10:02:b8:12:f7:f2: 4e:f2:b6:7c:ec:59:5e:41:c7:6c:65:3b:3e:f0:2b: db:c7:55:49:10:01:74:03:c5:cd:95:45:3f:ba:e5: d3:28:c7:af:e7:a8:2b:cd:ec:60:d3:93:cd:49:e4: 4a:aa:cf:6d:3c:8a:13:cf:27:24:dd:2b:7c:38:03: 6e:af:55:92:68:38:f3:7b:c7:58:ce:36:de:e9:9f: c0:f7:66:7c:f0:9c:1d:19:00:b2:69:8e:ed:3b:63: e6:81:3c:57:8d:2c:64:81:01:91:c8:91:b5:1a:19: 75:ac:b6:1f:2f:75:e7:d9:9e:3d:d7:6e:61:c6:7d: cb:85:5c:d7:43:5c:77:58:49:36:c6:cb:26:9e:69: 0b:7b:2e:73:86:75:93:9e:08:20:d6:cc:c1:8e:80: f6:3e:60:87:dd:df:6a:e1:a0:05:5e:92:06:d6:2b: 44:0a:bb:ff:3f:42:7c:06:31:11:fc:5c:68:c5:92: 0e:7c:71:79:19:66:30:77:68:b2:e0:31:47:e8:12: 3f:10:47:fe:88:95:85:a4:01:c8:f6:42:c2:40:31: 96:8b:1e:b7:c5:61:b3:a6:8f:cb:64:de:c1:34:7d: 16:9c:2d:76:4f:e4:c2:a2:63:dc:3b:14:78:e2:91: ce:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:34:C6:8E:66:2B:E9:17:A1:35:4B:01:1D:4A:4A:72:C7:F7:BC:5C X509v3 Authority Key Identifier: keyid:2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:19:8e:84:9b:6c:89:15:2f:cd:14:8b:99:56:99:1b:93:4f: 25:fe:2d:f6:59:0a:47:23:0b:60:ce:e2:ed:20:17:c3:d3:db: 27:0e:ee:8b:0d:2f:de:e1:5b:d7:4d:99:f7:61:bc:2e:e8:8e: d6:63:c3:08:52:46:73:db:6d:48:36:69:b3:62:ee:04:f8:51: 12:6d:79:80:91:98:ee:e9:96:9d:95:43:ef:f5:cf:d5:12:ec: 25:df:59:c1:f2:b1:37:70:a0:dd:c7:e4:f6:c6:7a:c8:20:fc: dc:36:0b:fe:82:0f:fa:b2:83:27:5d:e2:04:cc:23:3a:c4:a9: e2:bf:e0:eb:f0:87:fc:e5:6b:5e:4e:d8:cc:4e:59:17:82:c0: 1c:d6:6a:7b:78:35:08:c8:f0:20:5c:63:dd:c8:97:ea:4f:a6: a6:93:87:54:42:0a:5f:96:a4:57:e4:af:75:29:61:e6:17:51: 88:d3:7f:21:f4:ef:e8:51:7e:95:55:d5:d6:e2:fc:1a:ba:aa: dc:11:26:2f:39:c4:d8:85:ee:01:05:2c:aa:f0:48:32:50:50: c6:50:67:d5:9d:d6:f2:a3:3e:98:75:de:dd:83:b0:27:d9:ba: 26:12:71:10:34:bb:17:96:91:2d:f0:11:59:d2:4e:67:cd:aa: 59:8e:53:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQzEWyYsOjdlgnzvrmL69DPFozsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2 QzM4QTM0QjAeFw0yNjEwMjcwNTE5MjJaFw0yNjEwMzAxNTI3MjJaMDMxMTAvBgNV BAMTKDFDMzRDNjhFNjYyQkU5MTdBMTM1NEIwMTFENEE0QTcyQzdGN0JDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjZQW4LFuUOxACuBL38k7ytnzs WV5Bx2xlOz7wK9vHVUkQAXQDxc2VRT+65dMox6/nqCvN7GDTk81J5Eqqz208ihPP JyTdK3w4A26vVZJoOPN7x1jONt7pn8D3ZnzwnB0ZALJpju07Y+aBPFeNLGSBAZHI kbUaGXWsth8vdefZnj3XbmHGfcuFXNdDXHdYSTbGyyaeaQt7LnOGdZOeCCDWzMGO gPY+YIfd32rhoAVekgbWK0QKu/8/QnwGMRH8XGjFkg58cXkZZjB3aLLgMUfoEj8Q R/6IlYWkAcj2QsJAMZaLHrfFYbOmj8tk3sE0fRacLXZP5MKiY9w7FHjikc4ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHDTGjmYr6RehNUsBHUpKcsf3vFwwHwYDVR0j BBgwFoAUK7YXPYGJDkeJ4bS6ai46kWw4o0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzNjc2NzU4MzI1NjU3OC8wLzJCQjYxNzNEODE4OTBFNDc4OUUxQjRCQTZBMkUz QTkxNkMzOEEzNEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2QzM4QTM0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzY3Njc1ODMyNTY1NzgvMC8yQkI2MTczRDgxODkw RTQ3ODlFMUI0QkE2QTJFM0E5MTZDMzhBMzRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehmOhJtsiRUv zRSLmVaZG5NPJf4t9lkKRyMLYM7i7SAXw9PbJw7uiw0v3uFb102Z92G8LuiO1mPD CFJGc9ttSDZps2LuBPhREm15gJGY7umWnZVD7/XP1RLsJd9ZwfKxN3Cg3cfk9sZ6 yCD83DYL/oIP+rKDJ13iBMwjOsSp4r/g6/CH/OVrXk7YzE5ZF4LAHNZqe3g1CMjw IFxj3ciX6k+mppOHVEIKX5akV+SvdSlh5hdRiNN/IfTv6FF+lVXV1uL8Grqq3BEm LznE2IXuAQUsqvBIMlBQxlBn1Z3W8qM+mHXe3YOwJ9m6JhJxEDS7F5aRLfARWdJO Z82qWY5TCA== -----END CERTIFICATE-----Generated at Wed Oct 28 19:33:46 2026 by rpki-client