$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft File: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft (raw, json) Hash identifier: 7pyBbvT68ymmmiA3nac4hlTHs/n9gQiL4o0eBpSfOI0= Subject key identifier: F0:41:9E:7A:2A:76:5C:C7:9C:AE:3A:AB:22:CC:9D:FD:FB:39:A5:B4 Authority key identifier: 25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE Certificate issuer: /CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Certificate serial: 73E2736A91AE8821F59DDFD975BFBDCE0A56FAFE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft Manifest number: C4 Signing time: Wed 28 Oct 2026 17:06:15 +0000 Manifest this update: Wed 28 Oct 2026 17:01:15 +0000 Manifest next update: Sat 31 Oct 2026 22:21:15 +0000 Files and hashes: 1: 3130332e34312e3233322e302f32342d3234203d3e203538343636.roa (hash: dFVSB8aOnwvTGNapkLqn2kL47R2dXV0mGH0IkW3w0p4=) 2: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl (hash: JZUKgh0YNJ+6uXOk7R0K7Rjb6mb35aJSdab1B4ij8Mk=) 3: 3130332e39302e3135322e302f32342d3234203d3e203538353139.roa (hash: eNSDDIFaERWet2gtvMhXJGMxUdYweq9eQTGX6iMngvk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 22:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e2:73:6a:91:ae:88:21:f5:9d:df:d9:75:bf:bd:ce:0a:56:fa:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Validity Not Before: Oct 28 17:01:15 2026 GMT Not After : Oct 31 22:21:15 2026 GMT Subject: CN=F0419E7A2A765CC79CAE3AAB22CC9DFDFB39A5B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:2b:40:cc:3e:01:8b:c9:39:0a:63:a4:6f: 4f:ef:93:1b:34:79:34:12:80:db:0b:ff:23:54:ca: 47:c9:a0:25:f0:2b:96:0f:a6:27:69:23:5d:0d:aa: 79:c9:37:fe:1d:8e:41:a8:a6:71:8a:fb:63:e4:b7: 24:bb:aa:00:4b:47:f4:e4:49:27:da:72:d4:f6:92: 48:e2:c7:da:58:79:b5:e4:23:c6:67:3b:7f:fd:3d: 35:c9:f0:ba:e7:f0:b8:99:41:43:cf:d0:cd:d4:ec: a8:4f:ef:d7:21:7d:e5:3f:0f:5b:83:41:ae:fe:ef: fe:76:f8:19:5f:54:ef:18:3e:5e:02:a3:79:cd:c4: 22:6f:e2:c5:73:14:fb:34:d6:db:25:e4:e2:0c:9c: 16:e2:de:e7:dd:3e:51:46:c8:7e:eb:1a:ae:dc:3c: ce:14:94:f3:e1:89:8c:5f:07:72:54:8c:56:da:b4: 2c:f4:18:65:45:41:bc:cd:d2:ae:a5:7e:24:8f:c8: b8:a0:95:08:1f:16:de:da:90:17:49:35:28:a0:dd: 7c:82:f3:4e:e1:38:dc:19:78:7a:31:e3:67:c3:b8: 45:dc:d3:2b:49:e5:14:fe:c1:2a:7e:26:15:0b:99: 9f:2e:bb:74:59:e8:a0:8c:75:27:86:c4:ac:f0:0b: 26:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:41:9E:7A:2A:76:5C:C7:9C:AE:3A:AB:22:CC:9D:FD:FB:39:A5:B4 X509v3 Authority Key Identifier: keyid:25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:19:64:f7:25:a9:b4:65:f0:38:da:5e:86:0b:51:09:8f:45: 7e:b8:52:4c:ae:12:f3:9f:32:72:0e:7a:20:54:7c:56:3b:34: 87:6b:9b:73:e0:d8:08:94:47:4a:c1:dd:0a:14:03:a9:89:9a: b6:e1:21:09:98:1f:65:bd:d8:45:25:7e:10:5b:dd:c3:54:b1: ff:c9:5e:fb:99:66:84:42:16:d9:83:ec:08:08:40:a4:7c:3a: 78:96:37:51:cf:fc:1c:d0:86:88:1a:f6:f9:81:9c:71:82:1b: a5:86:98:55:ea:a3:fe:22:d9:fe:aa:7f:82:c4:05:a4:74:5a: b8:11:ac:8f:2c:87:49:5d:95:e9:ab:16:5c:cb:0d:4f:c0:ee: 2e:09:f7:ba:0d:8c:41:71:b1:b7:e8:f6:08:20:c4:c9:f3:eb: b7:bd:e2:ef:4d:b6:2a:e1:2c:70:e5:59:26:4b:aa:ac:ed:94: 07:01:ad:27:02:9d:20:a5:66:b6:5b:17:9e:87:43:a1:0b:52: 09:4c:db:79:e7:2a:17:0a:17:d4:7e:f0:ad:00:ef:a4:63:be: 78:93:9f:38:91:23:8d:f0:24:d2:75:6b:3f:04:a0:50:23:5e: 24:43:a4:59:f4:dd:2f:51:09:45:39:ef:4f:40:a4:08:e1:a8: 8d:4c:15:6b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc+JzapGuiCH1nd/Zdb+9zgpW+v4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVG OUVCNjBBRTAeFw0yNjEwMjgxNzAxMTVaFw0yNjEwMzEyMjIxMTVaMDMxMTAvBgNV BAMTKEYwNDE5RTdBMkE3NjVDQzc5Q0FFM0FBQjIyQ0M5REZERkIzOUE1QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTitAzD4Bi8k5CmOkb0/vkxs0 eTQSgNsL/yNUykfJoCXwK5YPpidpI10NqnnJN/4djkGopnGK+2PktyS7qgBLR/Tk SSfactT2kkjix9pYebXkI8ZnO3/9PTXJ8Lrn8LiZQUPP0M3U7KhP79chfeU/D1uD Qa7+7/52+BlfVO8YPl4Co3nNxCJv4sVzFPs01tsl5OIMnBbi3ufdPlFGyH7rGq7c PM4UlPPhiYxfB3JUjFbatCz0GGVFQbzN0q6lfiSPyLiglQgfFt7akBdJNSig3XyC 807hONwZeHox42fDuEXc0ytJ5RT+wSp+JhULmZ8uu3RZ6KCMdSeGxKzwCyZfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8EGeeip2XMecrjqrIsyd/fs5pbQwHwYDVR0j BBgwFoAUJVGtdeoUffROi6oSQvJ0HvnrYK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg4OTg5NzE5MzM0MDkyOS8wLzI1NTFBRDc1RUExNDdERjQ0RThCQUExMjQyRjI3 NDFFRjlFQjYwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVGOUVCNjBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4ODk4OTcxOTMzNDA5MjkvMC8yNTUxQUQ3NUVBMTQ3 REY0NEU4QkFBMTI0MkYyNzQxRUY5RUI2MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhlk9yWptGXw ONpehgtRCY9FfrhSTK4S858ycg56IFR8Vjs0h2ubc+DYCJRHSsHdChQDqYmatuEh CZgfZb3YRSV+EFvdw1Sx/8le+5lmhEIW2YPsCAhApHw6eJY3Uc/8HNCGiBr2+YGc cYIbpYaYVeqj/iLZ/qp/gsQFpHRauBGsjyyHSV2V6asWXMsNT8DuLgn3ug2MQXGx t+j2CCDEyfPrt73i7022KuEscOVZJkuqrO2UBwGtJwKdIKVmtlsXnodDoQtSCUzb eecqFwoX1H7wrQDvpGO+eJOfOJEjjfAk0nVrPwSgUCNeJEOkWfTdL1EJRTnvT0Ck COGojUwVaw== -----END CERTIFICATE-----Generated at Fri Oct 30 16:56:32 2026 by rpki-client