$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft File: 532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft (raw, json) Hash identifier: os6Om2Cmt6WCfe2ya+ND3k4uz0Bk/Lbf6qjS6yRnykA= Subject key identifier: 41:E8:7B:A3:8A:D4:74:E5:52:24:E4:05:8E:93:58:FC:00:4F:2C:43 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 512D0DC5FE3996AB9C4B95E4326631F11DDDEE36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft Manifest number: DC Signing time: Fri 04 Sep 2026 08:20:14 +0000 Manifest this update: Fri 04 Sep 2026 08:15:14 +0000 Manifest next update: Mon 07 Sep 2026 13:52:14 +0000 Files and hashes: 1: AS23650.roa (hash: ZrXwoi3Yc5wEkiCFcSV0YRLu2did5FGgulcpf2h2DTs=) 2: AS4837.roa (hash: iOOWAMHmzhTv2avlWBB19ZOmGwP6qQPSjlupNqBsPHY=) 3: AS131483.roa (hash: wricmOxr6vSrRQNd1vocTKW3nC/2pcVrm0VvZPVplfs=) 4: 532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl (hash: dux5Qmzvr5kllHBjH/QkFNjyjopcoy4ZBopYnNEUtdU=) 5: AS151302.roa (hash: LjMyhy9oJozbR4yTez6ckcklvG7qUHbJIsa2boA2gxo=) 6: AS151300.roa (hash: P7ijkqfVlDFLRg4B2Lm3ItQppso5LOmzGo91SxlE8AE=) 7: AS56046.roa (hash: HLsn9oUBMKPFVruk78wyq4D7p3b/BZMNS7vsPLrkGog=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 15:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:2d:0d:c5:fe:39:96:ab:9c:4b:95:e4:32:66:31:f1:1d:dd:ee:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Sep 4 08:15:14 2026 GMT Not After : Sep 7 13:52:14 2026 GMT Subject: CN=41E87BA38AD474E55224E4058E9358FC004F2C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d3:94:71:da:52:52:15:c6:0a:19:4e:e5:6e: b6:63:46:ec:88:e0:e3:ce:3a:6f:c6:db:4f:b5:72: 08:f0:41:03:29:6e:e0:01:28:03:a9:54:e9:ac:2b: bc:79:3a:10:04:7c:89:1e:02:1e:94:be:cb:fe:8d: bc:c1:18:10:5e:61:7f:37:5f:1d:de:29:1f:c5:9e: 4b:7d:a8:5b:35:9c:69:f0:fc:7a:7f:3f:07:3c:3c: a8:56:62:47:e4:7e:45:62:18:6b:e9:b9:59:b0:f7: 4f:41:40:09:f0:47:17:ef:58:ef:e2:12:98:2e:69: 2e:7a:61:e0:16:10:c7:5c:d9:06:5b:4b:b9:10:b1: 51:d0:16:85:9b:3e:02:f1:5d:38:7b:12:dc:bb:fa: 8e:69:af:25:49:d5:91:5c:76:be:dc:d6:3c:c3:65: ed:ad:e7:6c:13:5d:90:57:94:1b:99:38:57:61:3c: bf:61:ff:7b:e7:6f:50:a6:39:a4:75:15:bb:86:c0: ef:dd:9c:e6:c3:4e:e1:f1:65:a0:d9:53:67:29:41: 87:f5:b1:a8:89:8e:a9:b1:1d:47:71:86:79:9d:e2: 6b:22:36:c9:63:e7:17:15:ad:84:21:ee:2a:e0:64: 74:78:ea:b0:8e:08:1d:37:5c:ee:5f:db:2e:a4:20: 8d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E8:7B:A3:8A:D4:74:E5:52:24:E4:05:8E:93:58:FC:00:4F:2C:43 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:fa:26:31:ac:73:ba:a6:ab:cf:fa:b9:c0:e5:b4:4c:03:1b: b3:eb:6b:5c:e5:aa:b5:61:0e:0f:ee:21:ef:de:cc:82:cc:52: cc:33:f9:90:95:56:c0:63:9d:a3:46:34:8b:e0:25:23:b8:39: 6e:3c:7f:07:d7:28:63:dc:d4:b5:85:98:0b:3c:7d:8c:75:7f: 66:76:b0:42:d0:6c:eb:3c:41:bd:2c:04:57:1d:52:4b:5c:e0: ac:fc:59:90:19:66:5a:10:15:e3:e0:6d:c8:58:e8:30:d6:04: de:a3:18:c2:a8:8e:f4:7e:0e:20:37:c9:9f:8a:64:98:c3:66: d1:44:39:ff:ee:75:15:6f:97:93:a1:c2:b7:a3:81:04:4d:43: b1:00:a5:85:91:e5:8b:6b:0a:e6:19:ae:bf:23:9e:2b:1b:61: 4d:ea:a4:e9:3a:95:a2:a0:fe:83:eb:aa:18:87:4e:2a:48:73: 80:53:81:8c:8d:5f:c5:90:19:ba:b3:ef:30:17:eb:05:e9:ce: d5:d1:da:ae:e5:22:4d:a3:14:84:4e:4a:61:94:dd:f4:89:62: 50:f0:65:36:6f:08:22:cc:21:3a:fb:56:de:c1:ea:66:2b:82: 96:02:d1:f9:0e:24:2b:d2:91:bd:86:77:35:33:07:f3:ce:bd: e8:f7:2c:2c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUS0Nxf45lqucS5XkMmYx8R3d7jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA5MDQwODE1MTRaFw0yNjA5MDcxMzUyMTRaMDMxMTAvBgNV BAMTKDQxRTg3QkEzOEFENDc0RTU1MjI0RTQwNThFOTM1OEZDMDA0RjJDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO05Rx2lJSFcYKGU7lbrZjRuyI 4OPOOm/G20+1cgjwQQMpbuABKAOpVOmsK7x5OhAEfIkeAh6Uvsv+jbzBGBBeYX83 Xx3eKR/Fnkt9qFs1nGnw/Hp/Pwc8PKhWYkfkfkViGGvpuVmw909BQAnwRxfvWO/i EpguaS56YeAWEMdc2QZbS7kQsVHQFoWbPgLxXTh7Ety7+o5pryVJ1ZFcdr7c1jzD Ze2t52wTXZBXlBuZOFdhPL9h/3vnb1CmOaR1FbuGwO/dnObDTuHxZaDZU2cpQYf1 saiJjqmxHUdxhnmd4msiNslj5xcVrYQh7irgZHR46rCOCB03XO5f2y6kII2TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQeh7o4rUdOVSJOQFjpNY/ABPLEMwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC81MzJFQzk1RDlFRTI3 NkQ5NjU2MjBCN0U0MENBNTBCNEFCOEZDQjBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefomMaxzuqar z/q5wOW0TAMbs+trXOWqtWEOD+4h797MgsxSzDP5kJVWwGOdo0Y0i+AlI7g5bjx/ B9coY9zUtYWYCzx9jHV/ZnawQtBs6zxBvSwEVx1SS1zgrPxZkBlmWhAV4+BtyFjo MNYE3qMYwqiO9H4OIDfJn4pkmMNm0UQ5/+51FW+Xk6HCt6OBBE1DsQClhZHli2sK 5hmuvyOeKxthTeqk6TqVoqD+g+uqGIdOKkhzgFOBjI1fxZAZurPvMBfrBenO1dHa ruUiTaMUhE5KYZTd9IliUPBlNm8IIswhOvtW3sHqZiuClgLR+Q4kK9KRvYZ3NTMH 88696PcsLA== -----END CERTIFICATE-----Generated at Sat Sep 5 09:39:42 2026 by rpki-client