$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft File: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft (raw, json) Hash identifier: 8WL9KK46jP8LzaG97uoXo4P1XtSGLPsLxPdKH1BmlLI= Subject key identifier: E6:3F:1C:6F:35:6D:92:DE:F9:0E:79:F7:7A:08:A7:EE:E6:B7:8A:9E Authority key identifier: 53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24 Certificate issuer: /CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24 Certificate serial: 5C28C3F7C0089EC2CABCAFCA08F643DEF254458E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft Manifest number: 89 Signing time: Fri 28 Aug 2026 06:47:48 +0000 Manifest this update: Fri 28 Aug 2026 06:42:48 +0000 Manifest next update: Mon 31 Aug 2026 15:05:48 +0000 Files and hashes: 1: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl (hash: qLwON4CxbJPMl8pnFye+2MNKGFtxBcB4obLclsd/nLk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:28:c3:f7:c0:08:9e:c2:ca:bc:af:ca:08:f6:43:de:f2:54:45:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24 Validity Not Before: Aug 28 06:42:48 2026 GMT Not After : Aug 31 15:05:48 2026 GMT Subject: CN=E63F1C6F356D92DEF90E79F77A08A7EEE6B78A9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fb:b9:f3:82:3d:a5:ed:9b:c6:7d:2f:eb:77: ca:da:3c:7e:bb:7f:d6:a5:aa:f9:05:a1:4b:17:cc: 34:cb:5e:08:01:7d:82:46:27:71:dc:b9:71:41:c7: fe:0b:8a:95:31:98:a8:bb:99:4d:5d:5b:e8:0d:fa: 69:2c:94:2d:d4:24:79:d7:9e:ae:74:6f:90:02:aa: be:f7:31:d7:a9:d7:e3:93:3f:6a:0e:81:07:f6:5a: cc:9c:73:cd:44:b3:06:ea:dc:89:93:5e:de:4f:78: 10:42:a8:04:9e:d3:07:2a:0f:4d:b6:74:a7:fb:1c: bd:85:5e:5c:99:d2:6f:14:af:42:54:44:bc:04:8c: 98:2c:75:0c:32:77:2c:2f:9d:76:e2:c1:e2:77:0a: ee:1d:34:a2:c6:f2:b2:11:11:92:1f:07:da:e7:58: 90:17:1e:bd:17:b0:bf:73:4a:5c:bd:9b:58:95:99: 55:ea:69:e7:8a:8b:d2:40:b0:1b:70:a4:62:c2:42: 6f:da:89:a9:ef:71:b9:08:fa:2c:e7:79:d7:45:2a: b6:fb:d0:aa:51:4e:ba:f7:5f:74:e4:57:6a:28:95: d9:22:15:2d:9f:2d:54:ab:e5:b7:dc:4d:38:e2:dd: c0:e5:2c:5b:c1:9c:99:cc:2a:e4:76:fc:06:84:a5: aa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:1C:6F:35:6D:92:DE:F9:0E:79:F7:7A:08:A7:EE:E6:B7:8A:9E X509v3 Authority Key Identifier: keyid:53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:5c:2d:e6:c4:f6:73:7e:05:4a:64:7f:55:03:ab:7c:71:40: 47:80:3a:c1:ce:7f:7f:b3:cc:50:d0:ad:4c:79:b9:3e:30:6b: 50:af:9c:fe:93:67:76:50:05:c6:af:d7:66:a2:f3:93:73:f7: 84:05:10:1f:d6:ee:a5:61:86:b9:31:f9:61:b6:f2:fb:68:93: 63:05:12:e2:32:26:99:a4:a1:13:67:3f:5f:1d:fa:82:26:1a: af:b1:1f:a7:f8:48:e6:97:f8:e1:18:81:06:5c:0e:49:d2:56: 89:8a:7b:45:1a:d6:c1:9c:44:b1:e3:17:aa:6c:00:cc:57:5a: 01:6d:74:cf:4e:12:0c:bd:e4:48:d1:b4:a2:a9:74:60:10:38: 41:86:8b:14:6a:b4:3e:ab:05:e6:71:ad:f6:af:56:7f:be:36: 27:3f:d6:4d:d4:39:0c:87:5c:55:f4:5a:86:e9:85:99:34:a7: e6:c2:0b:18:84:c6:85:83:d5:ad:90:fe:b5:9b:27:8c:e1:ba: ed:84:6e:37:4f:10:8c:c1:c9:81:3a:24:55:d4:38:b8:07:60: 25:e1:31:c8:f9:e1:f5:f4:4e:9f:7e:17:91:09:b1:4e:00:bd: 64:23:8e:a5:91:99:c8:4f:41:59:12:95:8c:2e:81:21:9a:23: 14:75:e6:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXCjD98AInsLKvK/KCPZD3vJURY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1MTZGQTE0OTdDRkNDREJCRjI4RjJCREU5RkE0ODZG RTkwRkUyNDAeFw0yNjA4MjgwNjQyNDhaFw0yNjA4MzExNTA1NDhaMDMxMTAvBgNV BAMTKEU2M0YxQzZGMzU2RDkyREVGOTBFNzlGNzdBMDhBN0VFRTZCNzhBOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn+7nzgj2l7ZvGfS/rd8raPH67 f9alqvkFoUsXzDTLXggBfYJGJ3HcuXFBx/4LipUxmKi7mU1dW+gN+mkslC3UJHnX nq50b5ACqr73Mdep1+OTP2oOgQf2Wsycc81Eswbq3ImTXt5PeBBCqASe0wcqD022 dKf7HL2FXlyZ0m8Ur0JURLwEjJgsdQwydywvnXbiweJ3Cu4dNKLG8rIREZIfB9rn WJAXHr0XsL9zSly9m1iVmVXqaeeKi9JAsBtwpGLCQm/aianvcbkI+izneddFKrb7 0KpRTrr3X3TkV2ooldkiFS2fLVSr5bfcTTji3cDlLFvBnJnMKuR2/AaEpaq5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5j8cbzVtkt75Dnn3egin7ua3ip4wHwYDVR0j BBgwFoAUU1FvoUl8/M278o8r3p+khv6Q/iQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY2MzU1MDk3ODU1NTkyNS8xLzUzNTE2RkExNDk3Q0ZDQ0RCQkYyOEYyQkRFOUZB NDg2RkU5MEZFMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM1MTZGQTE0OTdDRkNDREJCRjI4RjJCREU5RkE0ODZGRTkwRkUyNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NjM1NTA5Nzg1NTU5MjUvMS81MzUxNkZBMTQ5N0NG Q0NEQkJGMjhGMkJERTlGQTQ4NkZFOTBGRTI0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFwt5sT2c34F SmR/VQOrfHFAR4A6wc5/f7PMUNCtTHm5PjBrUK+c/pNndlAFxq/XZqLzk3P3hAUQ H9bupWGGuTH5Ybby+2iTYwUS4jImmaShE2c/Xx36giYar7Efp/hI5pf44RiBBlwO SdJWiYp7RRrWwZxEseMXqmwAzFdaAW10z04SDL3kSNG0oql0YBA4QYaLFGq0PqsF 5nGt9q9Wf742Jz/WTdQ5DIdcVfRahumFmTSn5sILGITGhYPVrZD+tZsnjOG67YRu N08QjMHJgTokVdQ4uAdgJeExyPnh9fROn34XkQmxTgC9ZCOOpZGZyE9BWRKVjC6B IZojFHXm4A== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:13 2026 by rpki-client