$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft File: B53E57671412C3144DC646263A3169FBAB466617.mft (raw, json) Hash identifier: 8I38RuMDYn0fFgqPZbcV7C81ypj6CkfODyn7W7wZpto= Subject key identifier: A6:B4:DE:7C:2B:3F:4C:56:7C:E8:55:17:F2:55:77:FA:5D:0C:C6:22 Authority key identifier: B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 Certificate issuer: /CN=B53E57671412C3144DC646263A3169FBAB466617 Certificate serial: 4DF61C822EC15CAB3E00E558235E10D7825957AD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft Manifest number: 0E Signing time: Fri 29 May 2026 07:12:42 +0000 Manifest this update: Fri 29 May 2026 07:07:42 +0000 Manifest next update: Sat 30 May 2026 08:57:42 +0000 Files and hashes: 1: 3130332e3235332e3230342e302f32322d3234203d3e2034383131.roa (hash: f3RcKA0n7bijmUgFzN1FVeb80vQjPy76qjvv4vuDzfQ=) 2: 3130332e3235332e3230342e302f32322d3234203d3e203234343030.roa (hash: E4wR4NLFggrLxHJQdf1KzP2OMs6lbWCeIqkEqlDy23g=) 3: B53E57671412C3144DC646263A3169FBAB466617.crl (hash: niOeZK4q37W++/3HkOLOUh4pFFxPnzi5wAb8IWmgDnI=) 4: 3130332e3235332e3230342e302f32322d3234203d3e203137343238.roa (hash: ko7gCLi6CMLFIhxFKTT1cmJPl7Ml6iCxb4ojqre9A3Q=) 5: 3130332e3235332e3230342e302f32322d3234203d3e203137363231.roa (hash: miR+yOAxVwH6aRovAi7pmIbHENiIMw7vrr3vUC/C/ag=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f6:1c:82:2e:c1:5c:ab:3e:00:e5:58:23:5e:10:d7:82:59:57:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B53E57671412C3144DC646263A3169FBAB466617 Validity Not Before: May 29 07:07:42 2026 GMT Not After : May 30 08:57:42 2026 GMT Subject: CN=A6B4DE7C2B3F4C567CE85517F25577FA5D0CC622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:fe:06:cc:58:66:87:5b:44:37:e9:11:d6: 65:7a:14:1a:bf:97:c0:ed:e0:53:a4:51:0d:7b:52: b1:40:2b:01:88:b8:a3:9f:dd:59:55:37:f4:af:b4: fc:f2:ef:3c:51:0f:28:cf:9d:0f:5b:ea:58:f5:a1: d3:7f:b9:03:f1:6c:9d:23:7f:80:97:c3:a7:bd:c0: 81:2d:76:0c:35:05:ff:10:35:78:76:94:4c:15:90: 43:59:f7:fc:97:b6:33:81:84:6b:b4:dc:34:0e:b0: 25:26:a2:41:ad:4c:bd:55:0c:e3:3d:b4:d4:ba:db: d5:ea:78:f2:51:53:44:62:7b:91:cd:2d:b7:4f:bc: f3:10:62:4c:e0:b1:76:ed:b3:eb:41:42:c9:03:5c: 98:db:85:53:ed:0f:33:ba:1b:cb:42:de:fd:65:c7: 4e:84:ca:77:60:02:c2:30:2f:2f:21:d9:76:4b:69: c2:32:c8:2a:88:90:be:a8:42:8a:7e:93:42:19:65: 11:59:0d:3f:d1:6c:9b:51:ec:97:a8:96:05:ca:8d: 39:f7:17:9d:48:b8:d4:09:91:f6:b0:5e:1b:a5:e8: e9:3a:e7:bb:74:2c:4a:b5:6f:b6:d0:fd:e2:c0:9c: d5:a2:70:e0:2b:49:bd:65:0e:65:5d:e6:86:8a:75: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B4:DE:7C:2B:3F:4C:56:7C:E8:55:17:F2:55:77:FA:5D:0C:C6:22 X509v3 Authority Key Identifier: keyid:B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2a:30:b8:4b:a4:79:da:63:12:1d:39:08:59:5c:ca:df:34: b4:66:5d:76:a2:f3:c3:c8:38:98:12:3d:c2:57:15:d4:07:42: f8:79:02:36:ac:75:cf:6f:d1:43:85:08:93:9d:8e:15:cf:42: b4:a6:7f:07:67:6b:4d:24:78:d5:45:bf:3e:35:4f:e7:05:02: 64:46:ce:fd:18:76:99:ce:10:8c:c0:e7:eb:18:dd:36:65:11: d4:3a:12:17:48:64:24:e6:42:7a:e5:d0:7a:28:41:04:49:67: 6e:bf:fb:eb:63:97:46:82:32:7e:0b:fa:b3:e7:4f:5a:f7:55: 51:dc:8f:d6:15:ee:1e:08:3d:94:02:e6:1e:21:6c:51:88:42: 70:0a:4b:dc:65:7e:6d:2f:26:95:52:42:11:c3:7a:13:88:6f: 9a:78:29:9e:42:f1:6e:2d:96:c9:cb:fa:8a:48:01:a6:35:b7: 61:14:a8:2a:2e:23:92:a3:2c:57:53:38:df:e1:ad:c8:bd:27: b9:eb:3a:fd:c7:d3:c7:18:b0:8c:b9:fc:3f:3d:ec:ed:81:53: 7d:61:af:58:c9:81:d5:a4:d9:11:84:00:23:40:79:78:00:03: bb:be:af:bd:59:53:cf:05:1b:bb:39:d5:a3:4f:3e:fb:b6:3a: 55:c9:aa:01 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTfYcgi7BXKs+AOVYI14Q14JZV60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJB QjQ2NjYxNzAeFw0yNjA1MjkwNzA3NDJaFw0yNjA1MzAwODU3NDJaMDMxMTAvBgNV BAMTKEE2QjRERTdDMkIzRjRDNTY3Q0U4NTUxN0YyNTU3N0ZBNUQwQ0M2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Zv4GzFhmh1tEN+kR1mV6FBq/ l8Dt4FOkUQ17UrFAKwGIuKOf3VlVN/SvtPzy7zxRDyjPnQ9b6lj1odN/uQPxbJ0j f4CXw6e9wIEtdgw1Bf8QNXh2lEwVkENZ9/yXtjOBhGu03DQOsCUmokGtTL1VDOM9 tNS629XqePJRU0Rie5HNLbdPvPMQYkzgsXbts+tBQskDXJjbhVPtDzO6G8tC3v1l x06EyndgAsIwLy8h2XZLacIyyCqIkL6oQop+k0IZZRFZDT/RbJtR7JeolgXKjTn3 F51IuNQJkfawXhul6Ok657t0LEq1b7bQ/eLAnNWicOArSb1lDmVd5oaKdap1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUprTefCs/TFZ86FUX8lV3+l0MxiIwHwYDVR0j BBgwFoAUtT5XZxQSwxRNxkYmOjFp+6tGZhcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTI5MTI2NTgyMTc2OTc0OS8wL0I1M0U1NzY3MTQxMkMzMTQ0REM2NDYyNjNBMzE2 OUZCQUI0NjY2MTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJBQjQ2NjYxNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkyOTEyNjU4MjE3Njk3NDkvMC9CNTNFNTc2NzE0MTJD MzE0NERDNjQ2MjYzQTMxNjlGQkFCNDY2NjE3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiowuEukedpj Eh05CFlcyt80tGZddqLzw8g4mBI9wlcV1AdC+HkCNqx1z2/RQ4UIk52OFc9CtKZ/ B2drTSR41UW/PjVP5wUCZEbO/Rh2mc4QjMDn6xjdNmUR1DoSF0hkJOZCeuXQeihB BElnbr/762OXRoIyfgv6s+dPWvdVUdyP1hXuHgg9lALmHiFsUYhCcApL3GV+bS8m lVJCEcN6E4hvmngpnkLxbi2Wycv6ikgBpjW3YRSoKi4jkqMsV1M43+GtyL0nues6 /cfTxxiwjLn8Pz3s7YFTfWGvWMmB1aTZEYQAI0B5eAADu76vvVlTzwUbuznVo08+ +7Y6VcmqAQ== -----END CERTIFICATE-----Generated at Fri May 29 22:02:59 2026 by rpki-client