$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft File: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft (raw, json) Hash identifier: RsowZ0SowcsLRMpol6Zr1+hUv0FZYSzP/k4ILdhWLWI= Subject key identifier: 54:71:C1:B1:92:F2:5D:69:4B:A1:B7:87:41:DC:76:78:F1:F7:B7:BA Authority key identifier: 53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24 Certificate issuer: /CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24 Certificate serial: 2DDDA4E9AB1223190566B0873CB9B7F31280675E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft Manifest number: 4D Signing time: Tue 14 Jul 2026 09:35:59 +0000 Manifest this update: Tue 14 Jul 2026 09:30:59 +0000 Manifest next update: Wed 15 Jul 2026 10:02:59 +0000 Files and hashes: 1: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl (hash: vyPH3tRWxPKSXahqcDRwr8zaHoPj/ebidcCXH7TciWI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 10:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:dd:a4:e9:ab:12:23:19:05:66:b0:87:3c:b9:b7:f3:12:80:67:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24 Validity Not Before: Jul 14 09:30:59 2026 GMT Not After : Jul 15 10:02:59 2026 GMT Subject: CN=5471C1B192F25D694BA1B78741DC7678F1F7B7BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:32:e9:3d:b9:77:c9:65:14:e3:e1:e6:b6:cb: 01:88:d2:90:19:35:df:3a:ec:3e:40:80:70:d2:eb: 9e:52:91:d0:b0:a7:7a:a1:36:c4:b2:78:2a:5f:6b: b2:e1:eb:22:51:6e:de:11:8a:fc:04:b3:1f:71:b0: 93:19:5b:d4:c2:ff:7b:bd:ac:db:0c:72:62:67:51: f6:b0:c9:07:11:31:93:91:b3:cd:a2:48:6a:99:b9: 3d:42:7b:59:41:dc:c2:1c:4a:55:da:a0:33:00:47: c1:4b:51:96:a5:a8:47:fd:04:6c:30:fa:2f:1b:f8: f5:3a:74:46:b7:fd:59:6a:67:23:f6:c3:1f:e9:ea: c5:6f:69:f3:62:8c:ed:21:58:ad:f0:75:32:e4:47: 16:ae:66:3f:be:5a:7d:bf:ac:ca:fa:9a:bd:a4:29: 37:bf:f6:f2:a1:ab:4b:95:ee:02:97:4a:df:d4:f2: 97:f8:ac:53:91:29:51:c0:ea:51:30:58:3c:93:2c: 69:b9:87:22:81:4e:2a:de:77:3e:4c:57:10:af:a1: f5:f2:06:b0:df:6b:68:25:ba:08:c7:20:db:d5:54: fd:eb:c3:81:16:d2:fb:bb:2c:43:4f:b7:93:b9:77: 31:63:4b:b1:0e:64:ae:1e:97:1f:c5:22:ff:97:29: 9e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:71:C1:B1:92:F2:5D:69:4B:A1:B7:87:41:DC:76:78:F1:F7:B7:BA X509v3 Authority Key Identifier: keyid:53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:20:a4:3f:62:2b:b5:a4:f2:6f:45:29:44:90:a8:05:61:f5: 93:bc:ea:89:ac:07:36:05:99:41:38:5a:23:27:07:02:70:82: 67:4d:a1:bc:d5:8a:0f:1a:5c:c0:b8:15:fa:95:b0:ae:62:3b: 2c:49:f4:17:91:15:d4:9a:f7:4b:bb:b9:39:64:16:b9:30:2f: 8d:0a:2a:50:e3:d0:9c:d2:f6:ef:69:74:7c:95:96:59:93:88: e8:7c:74:e0:e9:c1:76:1c:43:46:59:bd:97:cb:00:4c:74:c2: 26:5a:3e:6a:6a:56:f8:ed:4f:f2:29:d1:6e:89:a5:4e:6a:5c: fa:05:56:e7:ea:c2:38:7d:7c:66:ff:2b:de:2c:b3:4e:4c:1d: f3:69:be:7e:2a:9c:48:38:de:1b:21:35:ba:50:44:6f:26:3a: 87:62:b4:9a:25:25:f2:2d:a4:af:51:22:13:d3:a3:2a:d2:02: 10:a6:7d:94:0a:9f:37:7a:eb:f0:0a:96:89:a1:d0:93:cd:c6: e0:b0:1c:67:d8:35:1a:fc:cb:e9:aa:25:12:c3:f6:e4:0a:d6: 65:28:9e:dc:3a:7a:65:aa:dc:8c:a2:d8:e1:b2:3d:d8:ba:f9: 71:96:0e:39:b7:7f:26:36:79:1c:51:80:ce:49:30:87:a2:ec: cb:9f:af:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULd2k6asSIxkFZrCHPLm38xKAZ14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1MTZGQTE0OTdDRkNDREJCRjI4RjJCREU5RkE0ODZG RTkwRkUyNDAeFw0yNjA3MTQwOTMwNTlaFw0yNjA3MTUxMDAyNTlaMDMxMTAvBgNV BAMTKDU0NzFDMUIxOTJGMjVENjk0QkExQjc4NzQxREM3Njc4RjFGN0I3QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsMuk9uXfJZRTj4ea2ywGI0pAZ Nd867D5AgHDS655SkdCwp3qhNsSyeCpfa7Lh6yJRbt4RivwEsx9xsJMZW9TC/3u9 rNsMcmJnUfawyQcRMZORs82iSGqZuT1Ce1lB3MIcSlXaoDMAR8FLUZalqEf9BGww +i8b+PU6dEa3/VlqZyP2wx/p6sVvafNijO0hWK3wdTLkRxauZj++Wn2/rMr6mr2k KTe/9vKhq0uV7gKXSt/U8pf4rFORKVHA6lEwWDyTLGm5hyKBTiredz5MVxCvofXy BrDfa2glugjHINvVVP3rw4EW0vu7LENPt5O5dzFjS7EOZK4elx/FIv+XKZ6LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVHHBsZLyXWlLobeHQdx2ePH3t7owHwYDVR0j BBgwFoAUU1FvoUl8/M278o8r3p+khv6Q/iQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY2MzU1MDk3ODU1NTkyNS8xLzUzNTE2RkExNDk3Q0ZDQ0RCQkYyOEYyQkRFOUZB NDg2RkU5MEZFMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM1MTZGQTE0OTdDRkNDREJCRjI4RjJCREU5RkE0ODZGRTkwRkUyNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NjM1NTA5Nzg1NTU5MjUvMS81MzUxNkZBMTQ5N0NG Q0NEQkJGMjhGMkJERTlGQTQ4NkZFOTBGRTI0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCCkP2IrtaTy b0UpRJCoBWH1k7zqiawHNgWZQThaIycHAnCCZ02hvNWKDxpcwLgV+pWwrmI7LEn0 F5EV1Jr3S7u5OWQWuTAvjQoqUOPQnNL272l0fJWWWZOI6Hx04OnBdhxDRlm9l8sA THTCJlo+ampW+O1P8inRbomlTmpc+gVW5+rCOH18Zv8r3iyzTkwd82m+fiqcSDje GyE1ulBEbyY6h2K0miUl8i2kr1EiE9OjKtICEKZ9lAqfN3rr8AqWiaHQk83G4LAc Z9g1GvzL6aolEsP25ArWZSie3Dp6ZarcjKLY4bI92Lr5cZYOObd/JjZ5HFGAzkkw h6Lsy5+vmQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:17 2026 by rpki-client