$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft File: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft (raw, json) Hash identifier: r9oAj6tIq8EUZG5tZqx0MxM3jnenXQSoypPKWcbUmzo= Subject key identifier: 2D:96:4E:27:1C:0B:94:AF:3F:57:B7:D1:CC:BD:32:FB:9E:5D:86:AF Authority key identifier: 25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE Certificate issuer: /CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Certificate serial: 7B1B4225B7BE9A1C8CE124B75B2D760A92E85DC5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft Manifest number: AE Signing time: Tue 08 Sep 2026 15:44:25 +0000 Manifest this update: Tue 08 Sep 2026 15:39:25 +0000 Manifest next update: Fri 11 Sep 2026 20:17:25 +0000 Files and hashes: 1: 3130332e39302e3135322e302f32342d3234203d3e203538353139.roa (hash: eNSDDIFaERWet2gtvMhXJGMxUdYweq9eQTGX6iMngvk=) 2: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl (hash: UrtEyHACYoQmbMsX4Yw2JSJ6Bhi3BZDVcZgZ6B9cSIo=) 3: 3130332e34312e3233322e302f32342d3234203d3e203538343636.roa (hash: dFVSB8aOnwvTGNapkLqn2kL47R2dXV0mGH0IkW3w0p4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:1b:42:25:b7:be:9a:1c:8c:e1:24:b7:5b:2d:76:0a:92:e8:5d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Validity Not Before: Sep 8 15:39:25 2026 GMT Not After : Sep 11 20:17:25 2026 GMT Subject: CN=2D964E271C0B94AF3F57B7D1CCBD32FB9E5D86AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:da:d1:98:b9:05:1e:9d:ba:72:15:85:ac: af:70:77:f5:9c:b2:c8:55:1b:21:54:ad:59:c3:c6: 1f:1d:ee:c7:d6:bb:c2:73:07:db:26:87:a8:09:fd: 14:e3:cc:5f:ba:04:66:c4:79:97:71:df:db:ab:8a: b5:14:ee:22:5c:16:be:b1:53:23:e9:35:37:a4:ee: 0b:f4:47:ef:62:70:d3:bb:e8:73:56:06:be:1a:88: b6:18:6d:19:8c:d9:f5:9e:13:00:fd:10:bf:a7:6e: b2:35:46:99:6d:b0:fd:99:46:35:4b:8d:85:cc:c6: a5:9a:67:fc:51:25:13:65:dd:7a:66:80:79:09:52: 32:20:c6:12:37:2d:97:ab:82:c2:d3:41:ca:ca:db: 8d:e9:5c:97:d5:a8:f1:0a:cd:bf:7e:4f:52:3b:3e: 79:b4:4d:b5:12:45:a0:6a:0f:02:3d:c7:a4:6e:f1: 32:21:6c:8f:93:14:4d:7c:1b:d8:94:42:6a:31:8b: f1:d9:87:fe:4e:6c:aa:c4:aa:be:75:f9:83:98:23: a9:f3:03:a0:0d:f0:e3:81:1c:40:83:e8:94:20:ac: 20:3d:a1:d9:d6:1f:47:85:a2:42:52:d3:c5:22:b2: 67:80:3d:8f:51:c2:21:14:34:21:b8:b6:06:d2:cb: 0e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:96:4E:27:1C:0B:94:AF:3F:57:B7:D1:CC:BD:32:FB:9E:5D:86:AF X509v3 Authority Key Identifier: keyid:25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:37:89:4b:81:0e:53:4d:bf:c0:9a:71:a5:86:d5:b2:05:04: 21:04:ac:50:ed:89:48:ce:fd:54:f7:29:a0:29:2a:32:67:30: 40:90:5e:cd:c8:f7:0a:8c:45:52:81:4f:33:26:c7:42:0b:7f: 74:85:10:e1:23:bb:49:ec:af:93:b2:41:15:fb:17:7d:d1:a9: 0e:38:20:44:fa:1e:28:05:c4:3d:59:43:83:1d:26:ee:84:3b: b5:74:ba:b8:d9:f1:fc:fe:84:91:ab:06:38:92:dc:a1:ed:66: f8:98:6a:0f:86:09:8a:93:de:f2:9d:2f:65:7b:80:2c:7e:32: d9:da:01:82:f0:69:10:d1:77:9e:d8:59:3c:f2:4b:d9:3c:94: 35:4d:31:19:c2:0a:64:78:8c:bb:69:50:07:a1:16:10:c7:79: 45:7f:ff:60:ea:c7:78:95:d8:15:ba:04:61:46:6f:61:e7:de: 1b:27:72:7a:94:7d:8f:46:96:ca:64:c8:30:2c:27:70:2c:79: ce:97:f6:f5:c5:8a:06:f5:73:32:0b:67:f4:ea:54:94:aa:ca: 56:49:cb:68:ae:49:07:33:6b:1b:2d:7f:e0:5c:ff:71:e6:a2: fb:44:12:70:e5:9f:0b:11:48:7e:73:6c:bc:f4:fb:2c:55:1d: 71:a4:ae:5e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUextCJbe+mhyM4SS3Wy12CpLoXcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVG OUVCNjBBRTAeFw0yNjA5MDgxNTM5MjVaFw0yNjA5MTEyMDE3MjVaMDMxMTAvBgNV BAMTKDJEOTY0RTI3MUMwQjk0QUYzRjU3QjdEMUNDQkQzMkZCOUU1RDg2QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLNrRmLkFHp26chWFrK9wd/Wc sshVGyFUrVnDxh8d7sfWu8JzB9smh6gJ/RTjzF+6BGbEeZdx39urirUU7iJcFr6x UyPpNTek7gv0R+9icNO76HNWBr4aiLYYbRmM2fWeEwD9EL+nbrI1RpltsP2ZRjVL jYXMxqWaZ/xRJRNl3XpmgHkJUjIgxhI3LZergsLTQcrK243pXJfVqPEKzb9+T1I7 Pnm0TbUSRaBqDwI9x6Ru8TIhbI+TFE18G9iUQmoxi/HZh/5ObKrEqr51+YOYI6nz A6AN8OOBHECD6JQgrCA9odnWH0eFokJS08UismeAPY9RwiEUNCG4tgbSyw4hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULZZOJxwLlK8/V7fRzL0y+55dhq8wHwYDVR0j BBgwFoAUJVGtdeoUffROi6oSQvJ0HvnrYK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg4OTg5NzE5MzM0MDkyOS8wLzI1NTFBRDc1RUExNDdERjQ0RThCQUExMjQyRjI3 NDFFRjlFQjYwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVGOUVCNjBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4ODk4OTcxOTMzNDA5MjkvMC8yNTUxQUQ3NUVBMTQ3 REY0NEU4QkFBMTI0MkYyNzQxRUY5RUI2MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjeJS4EOU02/ wJpxpYbVsgUEIQSsUO2JSM79VPcpoCkqMmcwQJBezcj3CoxFUoFPMybHQgt/dIUQ 4SO7Seyvk7JBFfsXfdGpDjggRPoeKAXEPVlDgx0m7oQ7tXS6uNnx/P6EkasGOJLc oe1m+JhqD4YJipPe8p0vZXuALH4y2doBgvBpENF3nthZPPJL2TyUNU0xGcIKZHiM u2lQB6EWEMd5RX//YOrHeJXYFboEYUZvYefeGydyepR9j0aWymTIMCwncCx5zpf2 9cWKBvVzMgtn9OpUlKrKVknLaK5JBzNrGy1/4Fz/ceai+0QScOWfCxFIfnNsvPT7 LFUdcaSuXg== -----END CERTIFICATE-----Generated at Thu Sep 10 18:45:33 2026 by rpki-client