$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft File: B53E57671412C3144DC646263A3169FBAB466617.mft (raw, json) Hash identifier: 9P8t5XHzsdbA3iBc82VT4jhlNxVSqe95aGLgQffOWKU= Subject key identifier: 99:8C:D2:DC:97:0A:43:38:1A:76:61:28:B1:65:04:94:49:67:B2:65 Authority key identifier: B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 Certificate issuer: /CN=B53E57671412C3144DC646263A3169FBAB466617 Certificate serial: 300FE55B4E931C5B7F27B5F4D2D5C730CD8D2837 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft Manifest number: 9C Signing time: Tue 13 Oct 2026 15:18:08 +0000 Manifest this update: Tue 13 Oct 2026 15:13:08 +0000 Manifest next update: Fri 16 Oct 2026 17:07:08 +0000 Files and hashes: 1: 3130332e3235332e3230342e302f32322d3234203d3e203137343238.roa (hash: ko7gCLi6CMLFIhxFKTT1cmJPl7Ml6iCxb4ojqre9A3Q=) 2: 3130332e3235332e3230342e302f32322d3234203d3e203234343030.roa (hash: E4wR4NLFggrLxHJQdf1KzP2OMs6lbWCeIqkEqlDy23g=) 3: B53E57671412C3144DC646263A3169FBAB466617.crl (hash: 220FuJt2stuiSj048ElWcWiDJ5vFBhJwLsizrczYrEU=) 4: 3130332e3235332e3230342e302f32322d3234203d3e2034383131.roa (hash: f3RcKA0n7bijmUgFzN1FVeb80vQjPy76qjvv4vuDzfQ=) 5: 3130332e3235332e3230342e302f32322d3234203d3e203137363231.roa (hash: miR+yOAxVwH6aRovAi7pmIbHENiIMw7vrr3vUC/C/ag=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 17:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:0f:e5:5b:4e:93:1c:5b:7f:27:b5:f4:d2:d5:c7:30:cd:8d:28:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B53E57671412C3144DC646263A3169FBAB466617 Validity Not Before: Oct 13 15:13:08 2026 GMT Not After : Oct 16 17:07:08 2026 GMT Subject: CN=998CD2DC970A43381A766128B16504944967B265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:81:5d:1f:47:d4:9b:9e:13:ae:af:1d:69:96: 9b:5b:ff:27:5e:15:2c:7c:93:88:f6:24:86:ea:d2: e0:70:71:d9:75:be:ca:96:79:14:06:7b:6c:8b:c1: 87:57:01:1c:69:91:9e:2f:6a:12:da:ac:74:dc:fc: 53:6a:c8:e0:40:b3:fd:cc:e3:47:b7:1e:62:d5:47: 7f:99:09:55:bd:c7:d2:c7:c6:3f:51:c6:5b:92:7d: 76:48:a3:7b:5d:0b:07:15:2f:3d:4b:7a:7a:02:41: 03:cb:07:96:50:03:1f:9a:d4:53:8a:d5:11:a4:85: 94:f6:72:06:e1:96:fd:39:67:32:8e:18:a5:f5:5a: 58:87:cd:ea:11:41:7f:a2:c2:4f:33:2a:49:8e:ce: c4:bf:dc:5e:6f:5d:e9:19:47:1e:25:35:e8:d4:ee: 91:9b:f3:89:23:68:e1:9a:ca:e3:be:01:1a:17:f1: e3:a0:ae:9e:2b:59:9a:dc:55:42:32:66:8b:09:5e: 42:f6:19:f1:b8:a1:c8:94:5f:0c:01:13:66:45:69: b6:0e:30:8d:7f:ce:51:fa:b6:56:11:80:d2:8d:6d: 9a:12:61:ef:e4:2a:9c:b4:66:fa:40:2b:d3:c4:f7: f0:a6:dd:d3:1f:20:81:a5:01:80:b9:40:be:e4:f6: 36:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8C:D2:DC:97:0A:43:38:1A:76:61:28:B1:65:04:94:49:67:B2:65 X509v3 Authority Key Identifier: keyid:B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fa:32:c7:5a:81:de:b0:10:42:6f:17:59:d7:b6:bf:9c:e3: c5:29:e4:99:e1:5e:7b:5d:8b:18:c0:f2:e3:bf:5d:27:ea:b0: d5:04:2b:bf:60:ac:6c:42:fd:5b:57:a3:f4:5d:15:14:5f:c9: b7:11:77:e9:85:77:a7:87:3f:08:37:63:64:2c:c7:b7:67:23: 92:37:e6:2b:ec:01:62:27:c6:7a:f1:5c:c9:5d:a2:bc:52:1d: 71:54:39:22:9b:b5:b7:29:81:c7:0a:71:22:22:af:ed:56:e7: c5:1b:de:aa:0b:ed:9c:18:5e:38:4b:51:66:fa:ec:8e:30:0e: ca:ea:60:fc:0f:a8:91:fe:09:9d:a3:0a:1e:36:91:1b:d5:10: 0c:81:8a:a7:38:f9:78:64:5e:ce:a6:99:36:36:03:cb:4d:04: fe:c0:04:0f:ee:67:1d:04:d3:b9:81:33:63:62:2b:9f:55:12: 1e:87:f2:71:30:91:3a:4d:93:21:a2:25:0f:aa:4f:b7:71:26: f6:2c:02:91:b1:33:32:42:8e:5d:e2:5e:04:3d:89:e0:26:a9: 92:86:1c:a7:02:57:df:c4:f9:91:c0:28:7d:a1:45:ee:47:03: 64:0b:3d:7b:24:b7:ff:a4:50:2b:17:d5:0c:c9:75:f2:bf:19: 3e:f6:19:87 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMA/lW06THFt/J7X00tXHMM2NKDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJB QjQ2NjYxNzAeFw0yNjEwMTMxNTEzMDhaFw0yNjEwMTYxNzA3MDhaMDMxMTAvBgNV BAMTKDk5OENEMkRDOTcwQTQzMzgxQTc2NjEyOEIxNjUwNDk0NDk2N0IyNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYgV0fR9SbnhOurx1plptb/yde FSx8k4j2JIbq0uBwcdl1vsqWeRQGe2yLwYdXARxpkZ4vahLarHTc/FNqyOBAs/3M 40e3HmLVR3+ZCVW9x9LHxj9RxluSfXZIo3tdCwcVLz1LenoCQQPLB5ZQAx+a1FOK 1RGkhZT2cgbhlv05ZzKOGKX1WliHzeoRQX+iwk8zKkmOzsS/3F5vXekZRx4lNejU 7pGb84kjaOGayuO+ARoX8eOgrp4rWZrcVUIyZosJXkL2GfG4ociUXwwBE2ZFabYO MI1/zlH6tlYRgNKNbZoSYe/kKpy0ZvpAK9PE9/Cm3dMfIIGlAYC5QL7k9jYxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmYzS3JcKQzgadmEosWUElElnsmUwHwYDVR0j BBgwFoAUtT5XZxQSwxRNxkYmOjFp+6tGZhcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTI5MTI2NTgyMTc2OTc0OS8wL0I1M0U1NzY3MTQxMkMzMTQ0REM2NDYyNjNBMzE2 OUZCQUI0NjY2MTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJBQjQ2NjYxNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkyOTEyNjU4MjE3Njk3NDkvMC9CNTNFNTc2NzE0MTJD MzE0NERDNjQ2MjYzQTMxNjlGQkFCNDY2NjE3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvoyx1qB3rAQ Qm8XWde2v5zjxSnkmeFee12LGMDy479dJ+qw1QQrv2CsbEL9W1ej9F0VFF/JtxF3 6YV3p4c/CDdjZCzHt2cjkjfmK+wBYifGevFcyV2ivFIdcVQ5Ipu1tymBxwpxIiKv 7VbnxRveqgvtnBheOEtRZvrsjjAOyupg/A+okf4JnaMKHjaRG9UQDIGKpzj5eGRe zqaZNjYDy00E/sAED+5nHQTTuYEzY2Irn1USHofycTCROk2TIaIlD6pPt3Em9iwC kbEzMkKOXeJeBD2J4CapkoYcpwJX38T5kcAofaFF7kcDZAs9eyS3/6RQKxfVDMl1 8r8ZPvYZhw== -----END CERTIFICATE-----Generated at Wed Oct 14 17:28:35 2026 by rpki-client