$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft File: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft (raw, json) Hash identifier: dWiwbA3Hpfg5ZoBBaWVKeAp/bofCGL5GCd5M/s16Kb8= Subject key identifier: 9D:8E:F5:20:AF:A3:38:D0:55:46:C9:B5:3B:F7:0F:D2:CF:C6:01:66 Authority key identifier: 53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24 Certificate issuer: /CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24 Certificate serial: 2B1E57CACF7DDF51A4E5A0FFBAB3F60912DF5E80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft Manifest number: 9E Signing time: Tue 13 Oct 2026 12:38:01 +0000 Manifest this update: Tue 13 Oct 2026 12:33:01 +0000 Manifest next update: Sat 17 Oct 2026 00:00:01 +0000 Files and hashes: 1: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl (hash: E6KTUHV/DHFOC90mbcSgZLDZ8io6vLCWP2KAlWW8ySE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1e:57:ca:cf:7d:df:51:a4:e5:a0:ff:ba:b3:f6:09:12:df:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24 Validity Not Before: Oct 13 12:33:01 2026 GMT Not After : Oct 17 00:00:01 2026 GMT Subject: CN=9D8EF520AFA338D05546C9B53BF70FD2CFC60166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2f:c3:8f:47:4c:a8:cd:f4:a1:5c:f7:cb:e5: 67:70:16:2c:91:0d:68:1a:bb:59:d4:84:07:e9:81: 64:c6:4b:9c:b9:ed:ae:35:ca:79:1d:f2:27:d7:a0: 44:67:5d:ed:16:67:1b:fd:27:a7:ba:27:7a:28:e3: ed:24:d8:39:90:d2:5c:aa:dd:49:d9:08:7f:03:e2: cc:95:44:c8:f1:7d:f5:66:45:ef:00:8d:e3:85:c8: ab:c7:e2:f6:1a:30:95:66:c0:15:6b:c5:83:8d:f5: 5e:87:99:cf:fb:32:e1:0e:46:20:b4:33:81:6d:b5: b7:43:52:fa:28:eb:88:1a:f6:87:48:d0:04:91:8c: 99:3f:df:c9:e6:47:02:1d:79:8f:06:e3:22:28:a6: 8e:13:7c:48:db:59:7a:fe:a0:a7:73:e6:6e:72:93: 49:49:f1:d6:08:b3:c1:a9:c9:e7:85:44:ef:63:b7: 20:e9:20:1e:b0:9f:27:b2:88:88:fd:f9:fe:9c:19: e0:42:ef:d0:7d:b4:27:19:77:44:61:6e:f5:a6:b6: f2:72:f2:af:00:53:01:e8:37:1d:02:73:d4:b6:da: c7:ce:bc:3a:f4:72:d3:24:65:37:49:7a:58:b0:3e: ac:4d:d0:07:db:4c:3e:16:fa:35:4b:f9:b0:b3:60: c9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8E:F5:20:AF:A3:38:D0:55:46:C9:B5:3B:F7:0F:D2:CF:C6:01:66 X509v3 Authority Key Identifier: keyid:53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:6c:5a:6a:09:b0:78:a4:6b:f2:5e:8f:1b:b0:4f:59:a3:3c: 02:53:30:55:ac:23:ab:52:dc:e9:f3:71:db:a7:32:6c:69:a3: b5:aa:8f:0a:b0:4d:dd:37:d3:50:6f:0e:25:8f:cd:d4:53:1e: f1:fa:41:17:95:18:b3:46:45:92:f7:26:57:81:a5:9d:c1:5c: d2:ce:c5:23:6d:7d:75:f8:98:89:42:cf:79:17:c9:92:bb:25: 8d:96:63:9f:53:80:62:0e:72:b6:66:e3:58:3a:cd:f4:b8:84: 63:d6:1c:b0:76:2d:8b:98:a9:3c:30:7b:bf:c1:09:f5:69:e9: 08:3d:af:91:8a:24:c4:25:4b:57:3f:f7:1c:9c:bf:6a:4c:da: 4e:07:70:99:35:23:fa:4f:06:b5:c4:2e:be:f6:14:8b:a5:5d: 13:8c:5c:c4:08:dc:dd:3f:12:57:13:dc:71:34:77:50:26:54: fd:8b:8f:7b:60:65:45:ea:99:08:fd:64:39:b5:d8:d0:b4:08: cd:31:ae:55:71:0e:b4:99:32:2f:82:4a:5e:77:3c:e2:0b:81: ee:71:44:7d:35:8c:d8:e2:c5:ba:a3:4f:5d:c0:2e:5e:d4:e5: d1:ac:1f:67:a3:6b:7d:46:25:a8:3e:4d:96:55:7b:da:6b:c5: 7f:25:04:80 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKx5Xys9931Gk5aD/urP2CRLfXoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1MTZGQTE0OTdDRkNDREJCRjI4RjJCREU5RkE0ODZG RTkwRkUyNDAeFw0yNjEwMTMxMjMzMDFaFw0yNjEwMTcwMDAwMDFaMDMxMTAvBgNV BAMTKDlEOEVGNTIwQUZBMzM4RDA1NTQ2QzlCNTNCRjcwRkQyQ0ZDNjAxNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOL8OPR0yozfShXPfL5WdwFiyR DWgau1nUhAfpgWTGS5y57a41ynkd8ifXoERnXe0WZxv9J6e6J3oo4+0k2DmQ0lyq 3UnZCH8D4syVRMjxffVmRe8AjeOFyKvH4vYaMJVmwBVrxYON9V6Hmc/7MuEORiC0 M4FttbdDUvoo64ga9odI0ASRjJk/38nmRwIdeY8G4yIopo4TfEjbWXr+oKdz5m5y k0lJ8dYIs8GpyeeFRO9jtyDpIB6wnyeyiIj9+f6cGeBC79B9tCcZd0RhbvWmtvJy 8q8AUwHoNx0Cc9S22sfOvDr0ctMkZTdJeliwPqxN0AfbTD4W+jVL+bCzYMknAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnY71IK+jONBVRsm1O/cP0s/GAWYwHwYDVR0j BBgwFoAUU1FvoUl8/M278o8r3p+khv6Q/iQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY2MzU1MDk3ODU1NTkyNS8xLzUzNTE2RkExNDk3Q0ZDQ0RCQkYyOEYyQkRFOUZB NDg2RkU5MEZFMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM1MTZGQTE0OTdDRkNDREJCRjI4RjJCREU5RkE0ODZGRTkwRkUyNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NjM1NTA5Nzg1NTU5MjUvMS81MzUxNkZBMTQ5N0NG Q0NEQkJGMjhGMkJERTlGQTQ4NkZFOTBGRTI0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGxaagmweKRr 8l6PG7BPWaM8AlMwVawjq1Lc6fNx26cybGmjtaqPCrBN3TfTUG8OJY/N1FMe8fpB F5UYs0ZFkvcmV4GlncFc0s7FI219dfiYiULPeRfJkrsljZZjn1OAYg5ytmbjWDrN 9LiEY9YcsHYti5ipPDB7v8EJ9WnpCD2vkYokxCVLVz/3HJy/akzaTgdwmTUj+k8G tcQuvvYUi6VdE4xcxAjc3T8SVxPccTR3UCZU/YuPe2BlReqZCP1kObXY0LQIzTGu VXEOtJkyL4JKXnc84guB7nFEfTWM2OLFuqNPXcAuXtTl0awfZ6NrfUYlqD5NllV7 2mvFfyUEgA== -----END CERTIFICATE-----Generated at Tue Oct 13 22:50:04 2026 by rpki-client