$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft File: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft (raw, json) Hash identifier: /87O5x1Ly9R9tGmK3TXspJDIxpGn/KL7aexw9KmHjkI= Subject key identifier: 5E:72:A9:93:11:AE:FA:E5:28:FD:AA:BD:28:B3:EA:C0:A8:A6:3D:FB Authority key identifier: 2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B Certificate issuer: /CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Certificate serial: 056B3A782C46362CC7A8FC349978B535E0F07394 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft Manifest number: BE Signing time: Thu 10 Sep 2026 05:10:52 +0000 Manifest this update: Thu 10 Sep 2026 05:05:52 +0000 Manifest next update: Sun 13 Sep 2026 06:15:52 +0000 Files and hashes: 1: 3130332e3130352e3232302e302f32322d3332203d3e203633373138.roa (hash: UoMxgKtAhyszzVVZnBqAdDpPta7+jHjGEznfu4FR8Iw=) 2: 323430313a643932303a3a2f32382d313238203d3e203633373138.roa (hash: wqKyq4CT7ZBhjVas93N8o2f4ItHVxa4rAXSDsabJnzU=) 3: 3138302e3137382e3139322e302f31382d3332203d3e203633373138.roa (hash: p/FOxsVY6yCDcHHnlzBhiEH5nnmslBPLMVOfQrX5mgI=) 4: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl (hash: 6mdc87EnaOSgjaZ72u8lRSV4UVTe3b6IU2ef0aVbACI=) 5: 3138302e3137382e3235322e302f32322d3332203d3e2034383337.roa (hash: YA2y5WDqbbqXlH3plbuoacVKmNM5TSdO8J/ShSoYXBU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:6b:3a:78:2c:46:36:2c:c7:a8:fc:34:99:78:b5:35:e0:f0:73:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Validity Not Before: Sep 10 05:05:52 2026 GMT Not After : Sep 13 06:15:52 2026 GMT Subject: CN=5E72A99311AEFAE528FDAABD28B3EAC0A8A63DFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ff:bc:7a:e8:2e:7a:0e:32:ba:4f:7f:2f:98: 18:eb:68:16:5f:5d:ce:62:49:9b:15:1e:87:9c:86: c1:86:a3:fc:1c:68:17:53:4a:98:69:7f:38:50:25: 3d:3a:3a:71:f2:bc:26:d3:50:fd:1f:da:39:09:44: ad:6a:fa:a1:97:c6:40:1d:4f:d7:d7:9f:61:be:1d: 6e:39:9d:97:80:6c:35:6d:33:47:f1:38:03:e8:b1: 05:5d:3c:84:35:bd:aa:8c:57:6b:52:c8:39:ae:f1: 53:3a:bc:80:70:4e:9b:f8:3d:40:8e:0c:8e:32:a8: 73:e2:6f:91:0e:3d:2d:18:62:0c:c4:d1:7d:2b:07: cf:9e:ce:b7:b3:d1:fc:f2:2c:0a:31:72:f7:be:a7: 08:f3:86:c7:b1:0b:12:da:7c:92:ab:21:df:27:11: ac:55:91:3d:b0:5f:14:51:a0:64:2a:df:78:2d:e9: c8:a9:32:3f:1c:a7:e7:14:13:ec:fd:6f:9d:d1:7a: e1:6e:91:75:77:9d:a5:fd:99:5a:79:39:28:5f:3a: 8f:ec:54:d9:91:3e:85:f8:8d:07:8a:c2:ba:82:70: 60:1e:bf:88:58:62:fc:5e:2a:8a:a7:e8:61:20:60: 63:9c:b1:0c:b2:94:7e:ef:7e:fc:90:e5:94:43:fc: 45:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:72:A9:93:11:AE:FA:E5:28:FD:AA:BD:28:B3:EA:C0:A8:A6:3D:FB X509v3 Authority Key Identifier: keyid:2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:04:10:aa:12:f1:46:e7:fb:d8:8b:bd:8e:72:87:2f:00:d0: 8d:5d:73:83:9b:11:eb:a4:3f:28:16:79:53:d9:7d:44:ec:f1: 13:a7:09:8e:e7:0c:89:19:1b:d5:11:b2:2b:a9:f2:5b:ca:6d: 7e:7f:4d:4e:47:8e:5b:10:5e:f6:1a:cb:c6:80:77:28:5a:e2: ce:f9:1d:7e:97:ef:46:f2:47:60:61:f3:0f:51:c0:79:bd:bb: e3:80:46:8f:53:b9:5d:9f:c8:b6:35:93:8d:49:ae:0d:53:e8: 4f:aa:b9:31:37:3e:9b:f7:ac:a5:b4:79:d2:44:29:c5:37:1f: 6a:82:79:53:2a:6f:b7:4d:27:cf:2f:ca:0a:41:49:07:cd:35: df:de:c4:53:9d:19:a2:18:e7:2b:4f:93:42:11:12:cb:58:ba: a6:e1:71:90:01:44:39:a2:d3:f2:7d:d4:96:cb:e1:25:a1:97: 7f:95:40:3d:af:35:b5:65:d9:d7:45:79:bc:da:6b:76:63:77: bc:77:8f:1c:cc:b8:ab:12:8b:10:25:b8:62:9b:b1:18:46:ff: 6c:d5:20:8c:e7:69:0c:52:b5:f1:d5:4c:cd:26:a3:79:4b:f9: 26:6a:64:c9:3b:ed:f6:30:c1:fd:07:1e:7d:1c:d2:01:8e:31: b4:de:4c:2e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBWs6eCxGNizHqPw0mXi1NeDwc5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2 QzM4QTM0QjAeFw0yNjA5MTAwNTA1NTJaFw0yNjA5MTMwNjE1NTJaMDMxMTAvBgNV BAMTKDVFNzJBOTkzMTFBRUZBRTUyOEZEQUFCRDI4QjNFQUMwQThBNjNERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb/7x66C56DjK6T38vmBjraBZf Xc5iSZsVHoechsGGo/wcaBdTSphpfzhQJT06OnHyvCbTUP0f2jkJRK1q+qGXxkAd T9fXn2G+HW45nZeAbDVtM0fxOAPosQVdPIQ1vaqMV2tSyDmu8VM6vIBwTpv4PUCO DI4yqHPib5EOPS0YYgzE0X0rB8+ezrez0fzyLAoxcve+pwjzhsexCxLafJKrId8n EaxVkT2wXxRRoGQq33gt6cipMj8cp+cUE+z9b53ReuFukXV3naX9mVp5OShfOo/s VNmRPoX4jQeKwrqCcGAev4hYYvxeKoqn6GEgYGOcsQyylH7vfvyQ5ZRD/EUpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXnKpkxGu+uUo/aq9KLPqwKimPfswHwYDVR0j BBgwFoAUK7YXPYGJDkeJ4bS6ai46kWw4o0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzNjc2NzU4MzI1NjU3OC8wLzJCQjYxNzNEODE4OTBFNDc4OUUxQjRCQTZBMkUz QTkxNkMzOEEzNEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2QzM4QTM0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzY3Njc1ODMyNTY1NzgvMC8yQkI2MTczRDgxODkw RTQ3ODlFMUI0QkE2QTJFM0E5MTZDMzhBMzRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAQQqhLxRuf7 2Iu9jnKHLwDQjV1zg5sR66Q/KBZ5U9l9ROzxE6cJjucMiRkb1RGyK6nyW8ptfn9N TkeOWxBe9hrLxoB3KFrizvkdfpfvRvJHYGHzD1HAeb2744BGj1O5XZ/ItjWTjUmu DVPoT6q5MTc+m/espbR50kQpxTcfaoJ5Uypvt00nzy/KCkFJB801397EU50Zohjn K0+TQhESy1i6puFxkAFEOaLT8n3UlsvhJaGXf5VAPa81tWXZ10V5vNprdmN3vHeP HMy4qxKLECW4YpuxGEb/bNUgjOdpDFK18dVMzSajeUv5JmpkyTvt9jDB/QcefRzS AY4xtN5MLg== -----END CERTIFICATE-----Generated at Thu Sep 10 18:48:32 2026 by rpki-client