$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft File: 1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft (raw, json) Hash identifier: 3qxmoA56SG6s6FENk1uiCqgDEsCivJqxk5KHaBb3Uhw= Subject key identifier: B5:11:DC:BB:7D:95:58:11:A5:E4:72:69:D2:F8:68:D5:7B:F3:12:86 Authority key identifier: 15:57:B2:F7:8A:0F:8A:CA:63:B4:BE:D7:56:4D:19:B7:9B:69:FF:ED Certificate issuer: /CN=1557B2F78A0F8ACA63B4BED7564D19B79B69FFED Certificate serial: 2DA2DECFA7AA3481169A8EB0733265523A43AB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft Manifest number: 06 Signing time: Wed 09 Sep 2026 20:00:33 +0000 Manifest this update: Wed 09 Sep 2026 19:55:33 +0000 Manifest next update: Sun 13 Sep 2026 00:08:33 +0000 Files and hashes: 1: 1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl (hash: +0N0lxvk4/52hcjASPEXFctq8DBiSemUM2OXARZXZTo=) 2: 3132332e3130332e32342e302f32322d3232203d3e2034383038.roa (hash: FZPXOuuaRRXPhHCFo0zBvRgZoP26kE1/D9UKHQehW7I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a2:de:cf:a7:aa:34:81:16:9a:8e:b0:73:32:65:52:3a:43:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1557B2F78A0F8ACA63B4BED7564D19B79B69FFED Validity Not Before: Sep 9 19:55:33 2026 GMT Not After : Sep 13 00:08:33 2026 GMT Subject: CN=B511DCBB7D955811A5E47269D2F868D57BF31286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:04:3e:1b:78:c1:92:72:3a:12:4b:29:9f:c4: df:05:92:c6:28:6c:fc:74:b8:36:18:0a:18:5b:5b: a3:5d:b3:22:c3:7b:86:60:35:2d:fa:09:6d:7d:b0: ec:7c:9e:0c:0e:f6:6b:52:02:74:70:db:97:aa:4d: ea:1e:4a:a2:2e:c0:ae:04:aa:ab:cc:ea:e3:bc:5d: d2:da:40:63:57:45:ad:76:09:1f:94:1a:41:a8:98: d3:88:57:f5:c8:03:29:ec:f3:eb:c5:8e:6b:78:74: 61:29:f4:77:ea:3b:65:0b:30:8d:71:10:5a:87:b4: 97:22:1e:96:50:5e:27:9b:67:eb:2a:dc:96:fc:36: bf:fe:02:ae:e3:eb:59:f1:4d:e5:de:31:52:2a:5d: a3:2b:f2:a1:ae:fa:35:30:a6:f1:1b:a8:f5:21:d5: 7e:fd:ef:c4:f0:c2:f2:17:1d:43:5e:f5:10:8c:4b: 70:4e:e2:21:7a:bd:9d:c6:17:11:21:71:36:d5:92: a4:ae:35:98:1c:ae:40:0c:26:15:61:0a:60:5a:04: 12:d6:92:22:64:21:6b:73:f5:1a:cd:ff:4d:55:8f: 77:d2:8f:dd:6e:bc:23:63:6b:67:14:85:81:81:d2: fe:26:77:92:2b:63:7b:ec:e7:56:23:2d:4e:4d:8d: f2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:11:DC:BB:7D:95:58:11:A5:E4:72:69:D2:F8:68:D5:7B:F3:12:86 X509v3 Authority Key Identifier: keyid:15:57:B2:F7:8A:0F:8A:CA:63:B4:BE:D7:56:4D:19:B7:9B:69:FF:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:51:e4:a0:9e:f6:45:e7:d5:10:42:42:5a:5e:dd:92:19:67: fb:28:0d:80:22:00:92:c1:6d:9d:b8:4f:5e:e1:88:8b:1d:dc: 8f:23:0c:db:61:2c:5a:c9:63:c0:b7:ec:e4:be:ba:7b:9e:32: df:3b:b5:9b:19:3c:19:33:07:04:3d:9f:db:00:34:44:e3:72: 89:ec:eb:1a:86:66:96:72:22:ce:2b:d6:c9:4a:d7:c0:dc:64: 8b:04:81:ac:a1:02:36:10:90:ad:f3:4d:5e:71:ee:f4:78:af: 04:fb:cf:3b:8d:4c:28:b4:8c:95:88:4a:b0:77:be:9c:7d:96: 2a:68:a3:8e:d3:4a:cf:71:ca:45:0f:ce:11:95:20:ad:a0:f5: d1:93:8d:31:6f:60:af:f4:47:61:dc:d0:db:76:dd:c0:5c:65: 20:18:f6:2d:52:06:7e:e9:23:8f:6f:38:e1:9a:07:94:25:80: 94:7d:b6:e4:a5:66:85:4a:cd:55:d4:e2:88:e9:3f:5a:02:0f: e1:ad:22:21:c1:02:e4:2d:00:6d:9f:01:6a:97:31:d2:30:a0: 65:37:7d:d1:27:b7:63:86:15:1b:37:3c:27:ec:12:9a:4f:60: 6e:2c:9a:bd:80:3f:21:88:92:a9:42:a6:6b:89:79:8a:c5:33: fc:50:3d:96 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgITLaLez6eqNIEWmo6wczJlUjpDqzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxNTU3QjJGNzhBMEY4QUNBNjNCNEJFRDc1NjREMTlCNzlC NjlGRkVEMB4XDTI2MDkwOTE5NTUzM1oXDTI2MDkxMzAwMDgzM1owMzExMC8GA1UE AxMoQjUxMURDQkI3RDk1NTgxMUE1RTQ3MjY5RDJGODY4RDU3QkYzMTI4NjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMsEPht4wZJyOhJLKZ/E3wWSxihs /HS4NhgKGFtbo12zIsN7hmA1LfoJbX2w7HyeDA72a1ICdHDbl6pN6h5Koi7ArgSq q8zq47xd0tpAY1dFrXYJH5QaQaiY04hX9cgDKezz68WOa3h0YSn0d+o7ZQswjXEQ Woe0lyIellBeJ5tn6yrclvw2v/4CruPrWfFN5d4xUipdoyvyoa76NTCm8Ruo9SHV fv3vxPDC8hcdQ171EIxLcE7iIXq9ncYXESFxNtWSpK41mByuQAwmFWEKYFoEEtaS ImQha3P1Gs3/TVWPd9KP3W68I2NrZxSFgYHS/iZ3kitje+znViMtTk2N8uMCAwEA AaOCAh0wggIZMB0GA1UdDgQWBBS1Edy7fZVYEaXkcmnS+GjVe/MShjAfBgNVHSME GDAWgBQVV7L3ig+KymO0vtdWTRm3m2n/7TAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTQ2 OTk4MjYzMTI4MjYwNjUzLzAvMTU1N0IyRjc4QTBGOEFDQTYzQjRCRUQ3NTY0RDE5 Qjc5QjY5RkZFRC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS8xNTU3QjJGNzhBMEY4QUNBNjNCNEJFRDc1NjREMTlCNzlCNjlGRkVELmNlcjB+ BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS1ycHMuY25u aWMuY24vcmVwby9BMTE0Njk5ODI2MzEyODI2MDY1My8wLzE1NTdCMkY3OEEwRjhB Q0E2M0I0QkVENzU2NEQxOUI3OUI2OUZGRUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLUeSgnvZF59UQ QkJaXt2SGWf7KA2AIgCSwW2duE9e4YiLHdyPIwzbYSxayWPAt+zkvrp7njLfO7Wb GTwZMwcEPZ/bADRE43KJ7OsahmaWciLOK9bJStfA3GSLBIGsoQI2EJCt801ece70 eK8E+887jUwotIyViEqwd76cfZYqaKOO00rPccpFD84RlSCtoPXRk40xb2Cv9Edh 3NDbdt3AXGUgGPYtUgZ+6SOPbzjhmgeUJYCUfbbkpWaFSs1V1OKI6T9aAg/hrSIh wQLkLQBtnwFqlzHSMKBlN33RJ7djhhUbNzwn7BKaT2BuLJq9gD8hiJKpQqZriXmK xTP8UD2W -----END CERTIFICATE-----Generated at Thu Sep 10 14:33:08 2026 by rpki-client