$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft File: 53B0CEC9D00981686264164126DB6F3385680024.mft (raw, json) Hash identifier: SqEKv8gkJMHevA+Yhnvger7DdNI3cmwo3HhQjog7uLM= Subject key identifier: 73:2C:19:F1:A3:E2:B4:6D:D6:DF:F9:84:9E:B6:47:69:62:41:1E:AF Authority key identifier: 53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24 Certificate issuer: /CN=53B0CEC9D00981686264164126DB6F3385680024 Certificate serial: 2401D98F5986886E5895F48C31E9F3FB51DD446E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft Manifest number: AA Signing time: Fri 21 Aug 2026 12:24:37 +0000 Manifest this update: Fri 21 Aug 2026 12:19:37 +0000 Manifest next update: Sat 22 Aug 2026 13:45:37 +0000 Files and hashes: 1: 3131392e34322e302e302f31392d3139203d3e203538383334.roa (hash: UypYF6EVHxU0/wisde4zLRsNmq03Ct0ZuhmxCmXu5gs=) 2: 3231392e3233352e3230382e302f32302d3230203d3e203538383334.roa (hash: jkg6tUZ7+qXk3FouI03XOahA6TPu6n/Kjb5AdiASdbY=) 3: 34392e3233392e3139322e302f31382d3138203d3e203538383334.roa (hash: ec5yDLpeyWMgWUg4UNjd9N/J72lkvu3GkBAQZSij1hQ=) 4: 3231392e3233352e31362e302f32302d3230203d3e203538383334.roa (hash: r6KqIfOL8ifKdsPunCCm1mAP8gnrhN32td99CTh9X4I=) 5: 53B0CEC9D00981686264164126DB6F3385680024.crl (hash: V2P8ilhUvG6prfbdDiJzLMkH8JXUq6OBD5XRFk+K/uA=) 6: 3131392e34302e3132382e302f31372d3137203d3e203538383334.roa (hash: 1DmuiOPq4TEZCmPUH8eAmnwG9L8yZKBYkchb9eK5PEs=) 7: 34392e3233392e3139322e302f31382d3138203d3e203137383136.roa (hash: ZzmzODzaCB8s1IKPJOR3kgAoZF7CG5/EOXrTUM6+kBo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 13:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:01:d9:8f:59:86:88:6e:58:95:f4:8c:31:e9:f3:fb:51:dd:44:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53B0CEC9D00981686264164126DB6F3385680024 Validity Not Before: Aug 21 12:19:37 2026 GMT Not After : Aug 22 13:45:37 2026 GMT Subject: CN=732C19F1A3E2B46DD6DFF9849EB6476962411EAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:60:58:a7:70:4a:f2:70:66:83:09:e0:fe: f7:9e:80:fa:b2:f1:0b:aa:6b:44:18:98:58:a6:5b: 36:08:63:a2:bb:57:65:4c:e9:e9:3b:07:75:ff:22: 6e:24:dd:d1:85:33:06:15:af:3a:b2:e7:b9:57:b6: 0d:21:29:4f:f7:b0:1b:27:0c:fe:c9:63:39:30:1b: e9:5e:e3:b4:d4:4b:87:e3:42:f9:6a:c9:f0:62:17: 46:9b:46:f7:59:e3:c6:94:65:90:43:1a:d4:9b:4d: d1:70:10:49:06:92:3b:2e:63:d9:1c:44:45:90:bc: 28:2c:79:b6:1f:ad:e0:32:98:a7:3f:8a:92:7e:da: c2:8f:54:e8:22:05:33:72:ff:24:5d:9b:79:86:c1: e7:e7:b5:8e:4b:25:14:2d:15:c9:8a:12:1a:f7:ef: 20:73:62:3d:bb:73:35:02:d8:58:a6:6c:db:29:a0: af:7d:bd:b9:61:55:a2:35:a9:6c:61:ff:6b:b5:f7: 9a:28:80:f9:be:23:d2:4e:b6:41:c7:e6:0c:7f:09: ba:b5:d0:f7:67:c3:89:4e:20:f9:9c:30:64:76:de: 73:8b:fa:62:69:0b:8d:d9:c2:43:99:3e:ad:bb:bc: a8:b2:4d:73:25:ce:6a:b0:45:ae:2a:b9:8c:4f:de: fe:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2C:19:F1:A3:E2:B4:6D:D6:DF:F9:84:9E:B6:47:69:62:41:1E:AF X509v3 Authority Key Identifier: keyid:53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:b5:8a:a8:0a:14:b1:c0:67:54:ba:6a:c5:fd:31:3e:34:1c: 92:f7:c9:a2:12:4e:56:89:a2:c5:29:97:5e:9c:39:36:99:9e: f4:57:69:db:1e:c4:f5:4c:86:56:f8:7c:a7:a1:3b:90:04:48: 29:d3:2d:2d:59:dc:c1:6f:0e:2a:68:f6:29:e7:7e:6b:e8:88: d9:aa:93:44:71:00:0a:ef:dd:40:94:ee:12:77:a2:24:af:9b: b5:73:4d:3b:79:b2:c9:eb:b7:bc:09:90:a3:54:8c:00:f2:50: 23:bd:3a:73:39:ff:cd:07:8c:e3:af:5f:82:36:eb:55:61:6a: 0e:94:b6:d4:c3:15:db:3e:e9:34:60:a6:ef:81:08:a2:7d:40: bf:71:b5:af:fa:f0:96:4a:43:d2:49:7c:31:e9:85:11:39:80: e0:46:fb:ba:05:bf:f1:db:d1:68:2d:e3:6e:15:ee:c8:e9:26: b6:f5:e1:58:1d:e8:cb:31:55:1a:9e:d6:e3:79:eb:47:d6:4b: 27:5b:2b:27:63:f7:7c:c7:1e:fb:89:a1:d0:1f:e8:79:70:ea: 9e:cb:6c:02:8c:c0:b4:f7:3d:53:08:e6:94:52:fe:94:1d:05: 19:c9:99:f1:3d:97:e9:ca:66:16:a7:c9:bd:56:4c:36:dc:a0: 0c:b9:da:d3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJAHZj1mGiG5YlfSMMenz+1HdRG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCMENFQzlEMDA5ODE2ODYyNjQxNjQxMjZEQjZGMzM4 NTY4MDAyNDAeFw0yNjA4MjExMjE5MzdaFw0yNjA4MjIxMzQ1MzdaMDMxMTAvBgNV BAMTKDczMkMxOUYxQTNFMkI0NkRENkRGRjk4NDlFQjY0NzY5NjI0MTFFQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDarGBYp3BK8nBmgwng/veegPqy 8Quqa0QYmFimWzYIY6K7V2VM6ek7B3X/Im4k3dGFMwYVrzqy57lXtg0hKU/3sBsn DP7JYzkwG+le47TUS4fjQvlqyfBiF0abRvdZ48aUZZBDGtSbTdFwEEkGkjsuY9kc REWQvCgsebYfreAymKc/ipJ+2sKPVOgiBTNy/yRdm3mGwefntY5LJRQtFcmKEhr3 7yBzYj27czUC2FimbNspoK99vblhVaI1qWxh/2u195oogPm+I9JOtkHH5gx/Cbq1 0Pdnw4lOIPmcMGR23nOL+mJpC43ZwkOZPq27vKiyTXMlzmqwRa4quYxP3v7dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcywZ8aPitG3W3/mEnrZHaWJBHq8wHwYDVR0j BBgwFoAUU7DOydAJgWhiZBZBJttvM4VoACQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA2MDEwNTEzNzk0NjYyNS8wLzUzQjBDRUM5RDAwOTgxNjg2MjY0MTY0MTI2REI2 RjMzODU2ODAwMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTNCMENFQzlEMDA5ODE2ODYyNjQxNjQxMjZEQjZGMzM4NTY4MDAyNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNjAxMDUxMzc5NDY2MjUvMC81M0IwQ0VDOUQwMDk4 MTY4NjI2NDE2NDEyNkRCNkYzMzg1NjgwMDI0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1bWKqAoUscBn VLpqxf0xPjQckvfJohJOVomixSmXXpw5Npme9Fdp2x7E9UyGVvh8p6E7kARIKdMt LVncwW8OKmj2Ked+a+iI2aqTRHEACu/dQJTuEneiJK+btXNNO3myyeu3vAmQo1SM APJQI706czn/zQeM469fgjbrVWFqDpS21MMV2z7pNGCm74EIon1Av3G1r/rwlkpD 0kl8MemFETmA4Eb7ugW/8dvRaC3jbhXuyOkmtvXhWB3oyzFVGp7W43nrR9ZLJ1sr J2P3fMce+4mh0B/oeXDqnstsAozAtPc9UwjmlFL+lB0FGcmZ8T2X6cpmFqfJvVZM NtygDLna0w== -----END CERTIFICATE-----Generated at Sat Aug 22 04:56:50 2026 by rpki-client