$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft File: 1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft (raw, json) Hash identifier: wo+nA+pks5RBsPtzH7GRiv0Esncj0BYsVZDSzWgP1bo= Subject key identifier: DE:04:8B:8A:B1:04:07:17:F1:88:90:21:EF:71:1F:7F:29:DE:18:A5 Authority key identifier: 15:57:B2:F7:8A:0F:8A:CA:63:B4:BE:D7:56:4D:19:B7:9B:69:FF:ED Certificate issuer: /CN=1557B2F78A0F8ACA63B4BED7564D19B79B69FFED Certificate serial: 322FEE79645864ADA0E8D2F3EBE7C87FB78F5D35 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft Manifest number: 1B Signing time: Tue 27 Oct 2026 23:20:17 +0000 Manifest this update: Tue 27 Oct 2026 23:15:17 +0000 Manifest next update: Sat 31 Oct 2026 03:39:17 +0000 Files and hashes: 1: 3132332e3130332e32342e302f32322d3232203d3e2034383038.roa (hash: FZPXOuuaRRXPhHCFo0zBvRgZoP26kE1/D9UKHQehW7I=) 2: 1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl (hash: FT8s4O62zAG5nW/szSGzOVrLUmRmvAPqF9Cf9Vq1vDQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 11:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:2f:ee:79:64:58:64:ad:a0:e8:d2:f3:eb:e7:c8:7f:b7:8f:5d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1557B2F78A0F8ACA63B4BED7564D19B79B69FFED Validity Not Before: Oct 27 23:15:17 2026 GMT Not After : Oct 31 03:39:17 2026 GMT Subject: CN=DE048B8AB1040717F1889021EF711F7F29DE18A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:99:8e:5d:c2:9d:67:5a:03:8a:c9:79:9f: c5:bc:96:b0:02:8e:a9:b1:4a:8e:11:c3:99:35:64: c6:71:9a:e6:4f:d3:41:10:87:45:d4:5b:fc:00:cc: 45:5b:a4:bf:bd:3f:5b:1a:0a:c9:4d:7a:2d:e1:b8: 35:0e:87:93:a7:10:d6:ab:09:d1:f5:ef:12:75:69: 52:51:e5:53:18:b9:e9:18:1b:e2:31:7b:02:f0:a6: 50:8f:91:a7:12:92:4c:99:27:3c:c5:ca:f6:f1:f1: 78:c1:af:ee:a2:42:c3:a0:3f:1f:e5:a3:f4:fd:96: 8d:01:59:4c:59:34:70:65:bd:08:48:08:b9:64:d0: ad:2b:fd:1d:2c:7c:1b:0a:f9:f1:2e:38:3a:b2:b0: fd:75:59:e8:5d:db:09:87:a7:52:4f:6c:f0:ad:bd: 5d:ae:bd:16:c1:a1:82:e6:94:ec:87:38:c8:3a:01: b0:4d:51:29:ad:ba:11:ad:e6:33:64:2d:77:8c:b0: 5d:9d:e5:31:58:8f:66:0b:0c:cb:6f:09:82:f2:47: 0c:4c:c2:c9:dd:94:ae:b1:32:aa:ad:7b:b3:f0:a2: ba:9d:09:5a:5b:3a:44:0c:68:6a:29:f1:7e:aa:07: 3a:e5:e7:6a:f3:59:5e:17:ee:f6:ef:31:b6:07:49: 6f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:04:8B:8A:B1:04:07:17:F1:88:90:21:EF:71:1F:7F:29:DE:18:A5 X509v3 Authority Key Identifier: keyid:15:57:B2:F7:8A:0F:8A:CA:63:B4:BE:D7:56:4D:19:B7:9B:69:FF:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:86:8e:9c:ab:9d:c0:dc:3e:90:01:32:1f:3c:24:9d:c1:82: 95:0f:89:2d:3a:c3:56:27:8c:f2:2d:62:35:64:29:8c:16:98: f0:bf:d1:3d:8c:f9:d0:7b:57:b4:1b:76:b7:2e:02:28:b9:da: bd:12:0b:d9:6d:09:12:80:03:c2:c2:18:87:79:03:3a:a6:39: 39:f9:dd:0f:5d:7b:20:ca:b4:c0:61:1a:b2:e0:1d:b8:8a:d9: b6:02:35:fd:b5:fd:fc:59:09:6b:22:41:55:4d:34:b6:2e:8e: 23:c1:03:d2:45:06:6b:b4:e9:fc:7e:18:55:4c:f8:79:b8:a6: 01:24:3a:9e:e1:95:c8:bb:4d:ff:95:7c:d2:89:d5:8f:6e:59: 50:bd:6e:2d:de:2e:b3:3b:bc:fb:8a:2b:98:cc:5a:80:84:f9: 47:07:49:6a:a2:a5:6f:77:d4:c3:31:e8:24:12:a4:d3:4e:9a: ef:7a:e4:9d:17:3b:c6:f4:5f:b5:55:ed:00:39:ef:f6:58:36: f5:18:f7:e5:92:6a:54:c7:d4:b3:6e:7a:4b:ff:2c:10:ad:c4: 30:15:ea:6a:a1:96:ac:00:e3:0b:0a:e0:7c:61:0e:04:99:5e: 0b:b9:01:46:f3:b2:92:9f:2c:9a:9f:b1:06:68:74:e6:bd:f3: f4:55:43:ed -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMi/ueWRYZK2g6NLz6+fIf7ePXTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU1N0IyRjc4QTBGOEFDQTYzQjRCRUQ3NTY0RDE5Qjc5 QjY5RkZFRDAeFw0yNjEwMjcyMzE1MTdaFw0yNjEwMzEwMzM5MTdaMDMxMTAvBgNV BAMTKERFMDQ4QjhBQjEwNDA3MTdGMTg4OTAyMUVGNzExRjdGMjlERTE4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VpmOXcKdZ1oDisl5n8W8lrAC jqmxSo4Rw5k1ZMZxmuZP00EQh0XUW/wAzEVbpL+9P1saCslNei3huDUOh5OnENar CdH17xJ1aVJR5VMYuekYG+IxewLwplCPkacSkkyZJzzFyvbx8XjBr+6iQsOgPx/l o/T9lo0BWUxZNHBlvQhICLlk0K0r/R0sfBsK+fEuODqysP11Wehd2wmHp1JPbPCt vV2uvRbBoYLmlOyHOMg6AbBNUSmtuhGt5jNkLXeMsF2d5TFYj2YLDMtvCYLyRwxM wsndlK6xMqqte7PworqdCVpbOkQMaGop8X6qBzrl52rzWV4X7vbvMbYHSW/VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3gSLirEEBxfxiJAh73EffyneGKUwHwYDVR0j BBgwFoAUFVey94oPispjtL7XVk0Zt5tp/+0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE0 Njk5ODI2MzEyODI2MDY1My8wLzE1NTdCMkY3OEEwRjhBQ0E2M0I0QkVENzU2NEQx OUI3OUI2OUZGRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTU1N0IyRjc4QTBGOEFDQTYzQjRCRUQ3NTY0RDE5Qjc5QjY5RkZFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNDY5OTgyNjMxMjgyNjA2NTMvMC8xNTU3QjJGNzhBMEY4 QUNBNjNCNEJFRDc1NjREMTlCNzlCNjlGRkVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4aOnKudwNw+ kAEyHzwkncGClQ+JLTrDVieM8i1iNWQpjBaY8L/RPYz50HtXtBt2ty4CKLnavRIL 2W0JEoADwsIYh3kDOqY5OfndD117IMq0wGEasuAduIrZtgI1/bX9/FkJayJBVU00 ti6OI8ED0kUGa7Tp/H4YVUz4ebimASQ6nuGVyLtN/5V80onVj25ZUL1uLd4uszu8 +4ormMxagIT5RwdJaqKlb3fUwzHoJBKk006a73rknRc7xvRftVXtADnv9lg29Rj3 5ZJqVMfUs256S/8sEK3EMBXqaqGWrADjCwrgfGEOBJleC7kBRvOykp8smp+xBmh0 5r3z9FVD7Q== -----END CERTIFICATE-----Generated at Wed Oct 28 07:27:05 2026 by rpki-client