$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft File: B53E57671412C3144DC646263A3169FBAB466617.mft (raw, json) Hash identifier: xRIG9Qj8GQOXMLU+QBl/PPEO6Z5DikF9p8aF3o80D/o= Subject key identifier: E2:BF:4D:55:AE:3C:84:FB:FB:2B:EB:44:9E:6E:B4:71:7B:1D:E9:06 Authority key identifier: B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 Certificate issuer: /CN=B53E57671412C3144DC646263A3169FBAB466617 Certificate serial: 5C24F4288B29FA6441D8882987BE51EBCE14A185 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft Manifest number: 88 Signing time: Fri 28 Aug 2026 06:48:08 +0000 Manifest this update: Fri 28 Aug 2026 06:43:08 +0000 Manifest next update: Mon 31 Aug 2026 15:28:08 +0000 Files and hashes: 1: 3130332e3235332e3230342e302f32322d3234203d3e203137363231.roa (hash: miR+yOAxVwH6aRovAi7pmIbHENiIMw7vrr3vUC/C/ag=) 2: 3130332e3235332e3230342e302f32322d3234203d3e2034383131.roa (hash: f3RcKA0n7bijmUgFzN1FVeb80vQjPy76qjvv4vuDzfQ=) 3: 3130332e3235332e3230342e302f32322d3234203d3e203137343238.roa (hash: ko7gCLi6CMLFIhxFKTT1cmJPl7Ml6iCxb4ojqre9A3Q=) 4: B53E57671412C3144DC646263A3169FBAB466617.crl (hash: m0cSuuhbEhJ2QH5ASTqeJBk3JRgYxwFvteRJYxxTyHg=) 5: 3130332e3235332e3230342e302f32322d3234203d3e203234343030.roa (hash: E4wR4NLFggrLxHJQdf1KzP2OMs6lbWCeIqkEqlDy23g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:24:f4:28:8b:29:fa:64:41:d8:88:29:87:be:51:eb:ce:14:a1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B53E57671412C3144DC646263A3169FBAB466617 Validity Not Before: Aug 28 06:43:08 2026 GMT Not After : Aug 31 15:28:08 2026 GMT Subject: CN=E2BF4D55AE3C84FBFB2BEB449E6EB4717B1DE906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:db:8f:96:fe:83:7d:e2:90:f8:e7:47:d9:64: 25:9b:22:3f:9b:0a:e0:dd:d4:7f:5b:93:8c:18:bb: 2c:87:89:99:e5:bb:88:36:75:3d:04:74:d5:d4:bf: 8b:1d:d7:9d:8c:19:51:ad:3a:6f:ab:49:13:29:ac: 15:e5:fe:cb:38:39:3e:24:9a:bc:09:60:e2:02:07: 89:53:31:c3:01:e7:a9:9e:c5:1e:88:46:84:c8:77: 1b:9a:dd:50:50:da:a8:a5:37:4f:3b:f8:f2:4b:64: 10:c3:22:36:2b:fd:92:ec:ed:92:5a:ab:0b:c4:99: 06:b0:ea:30:4e:e0:70:ef:6a:be:06:05:3a:04:57: fd:69:7d:a0:44:a5:de:3d:ea:dc:96:5d:a3:5b:3f: 44:ec:41:1e:ec:87:57:7b:7f:29:d1:d1:49:1a:04: 8a:bb:5d:05:46:dd:4a:25:1f:6f:e1:da:cd:32:dd: 45:d2:90:20:a9:ed:da:15:cb:8e:5a:02:f7:79:76: 8d:45:1d:d1:0a:35:a6:d3:a8:12:8d:02:69:a2:ea: f1:3f:31:eb:b1:92:3b:4b:6a:a0:6d:db:99:81:6e: d6:92:70:d1:0b:78:0d:ee:54:a2:3d:3e:1c:04:26: 8c:78:56:1f:dc:a7:23:67:a9:db:00:dd:b6:36:36: cb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BF:4D:55:AE:3C:84:FB:FB:2B:EB:44:9E:6E:B4:71:7B:1D:E9:06 X509v3 Authority Key Identifier: keyid:B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:46:05:eb:90:73:10:c1:b6:29:77:10:0b:47:db:d2:c7:13: 1e:33:a9:e1:70:a4:17:a9:2a:52:dc:ee:0f:bb:93:73:d0:86: bb:a8:29:09:56:87:0c:f2:fe:d9:b0:d2:dc:90:00:09:3e:1d: c8:95:33:cf:71:a7:51:80:0e:9f:db:b8:58:e9:7c:9b:fd:4f: ff:10:6a:0f:87:72:9a:a6:c8:3f:4a:6f:ee:b2:0d:bf:4b:1d: 31:cb:7c:e6:24:34:ef:71:7f:fb:13:e8:06:b4:5d:aa:49:4a: 01:54:cd:a4:33:1c:07:22:83:3c:9e:d1:6c:72:6a:52:1c:29: b2:f0:55:2f:b2:06:3b:cd:5e:bf:73:07:53:63:c3:c8:bd:09: 54:0d:d3:37:ba:06:9f:fe:52:07:bc:9d:00:f5:96:87:8d:27: e8:fa:10:97:d6:1f:97:29:55:11:f8:21:c8:58:60:55:09:4d: ab:d5:bb:2d:dd:8d:5e:b8:eb:b4:55:6f:4b:3a:1e:be:03:f8: 33:94:52:3a:11:98:76:ef:04:8b:75:6b:04:27:15:72:79:16: 49:d0:98:aa:f9:ae:95:76:52:4d:6d:1f:96:66:fe:c2:8e:c7: 3f:54:ba:2c:3c:6c:f4:54:0e:3a:62:21:2b:db:fc:41:02:e9: 30:6d:6a:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXCT0KIsp+mRB2Igph75R684UoYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJB QjQ2NjYxNzAeFw0yNjA4MjgwNjQzMDhaFw0yNjA4MzExNTI4MDhaMDMxMTAvBgNV BAMTKEUyQkY0RDU1QUUzQzg0RkJGQjJCRUI0NDlFNkVCNDcxN0IxREU5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk24+W/oN94pD450fZZCWbIj+b CuDd1H9bk4wYuyyHiZnlu4g2dT0EdNXUv4sd152MGVGtOm+rSRMprBXl/ss4OT4k mrwJYOICB4lTMcMB56mexR6IRoTIdxua3VBQ2qilN087+PJLZBDDIjYr/ZLs7ZJa qwvEmQaw6jBO4HDvar4GBToEV/1pfaBEpd496tyWXaNbP0TsQR7sh1d7fynR0Uka BIq7XQVG3UolH2/h2s0y3UXSkCCp7doVy45aAvd5do1FHdEKNabTqBKNAmmi6vE/ MeuxkjtLaqBt25mBbtaScNELeA3uVKI9PhwEJox4Vh/cpyNnqdsA3bY2NssDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4r9NVa48hPv7K+tEnm60cXsd6QYwHwYDVR0j BBgwFoAUtT5XZxQSwxRNxkYmOjFp+6tGZhcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTI5MTI2NTgyMTc2OTc0OS8wL0I1M0U1NzY3MTQxMkMzMTQ0REM2NDYyNjNBMzE2 OUZCQUI0NjY2MTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJBQjQ2NjYxNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkyOTEyNjU4MjE3Njk3NDkvMC9CNTNFNTc2NzE0MTJD MzE0NERDNjQ2MjYzQTMxNjlGQkFCNDY2NjE3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkYF65BzEMG2 KXcQC0fb0scTHjOp4XCkF6kqUtzuD7uTc9CGu6gpCVaHDPL+2bDS3JAACT4dyJUz z3GnUYAOn9u4WOl8m/1P/xBqD4dymqbIP0pv7rINv0sdMct85iQ073F/+xPoBrRd qklKAVTNpDMcByKDPJ7RbHJqUhwpsvBVL7IGO81ev3MHU2PDyL0JVA3TN7oGn/5S B7ydAPWWh40n6PoQl9YflylVEfghyFhgVQlNq9W7Ld2NXrjrtFVvSzoevgP4M5RS OhGYdu8Ei3VrBCcVcnkWSdCYqvmulXZSTW0flmb+wo7HP1S6LDxs9FQOOmIhK9v8 QQLpMG1qgg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:24 2026 by rpki-client