$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: xPXypgy7WabjstuDsyZ4GrYajL38gvl6F7OyKyIrsZ4= Subject key identifier: 27:AC:5C:34:DF:F9:B5:1F:96:99:5A:05:D8:65:74:9C:08:25:A2:F3 Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 2D211168C4C39718C6AABE95F016D961B9A98E8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: 017D Signing time: Fri 02 Oct 2026 18:35:42 +0000 Manifest this update: Fri 02 Oct 2026 18:30:42 +0000 Manifest next update: Mon 05 Oct 2026 21:22:42 +0000 Files and hashes: 1: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: fFWzo5aoHkQ2MWpxGLp+dp057yDGRA4rbLiDKY3ejU8=) 2: 3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa (hash: kE6wKBhuMjUgxfn0PWTZvjM6ZUZVSUsYT25Ok7nH0lY=) 3: 3135382e3134302e3235342e302f32342d3234203d3e203535393936.roa (hash: NLHSvBrFcQ4h0w0Js8XZIXTtt8u1SFZTuDSqPn5KlaU=) 4: 3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa (hash: /INl4ky3xjx7mEQ0U6bBoC5+zKf+ujMJbBuWVFGPcb0=) 5: 3135382e3134302e3235322e302f32332d3234203d3e20313331323734.roa (hash: TGnpfnQhsS1k/nAP16cg2KpYb7g3AjQiWgU6wkKWs+8=) 6: 3135382e3134302e3235322e302f32332d3234203d3e203535393936.roa (hash: t9lcKguav4WXOmojUnQHYTiiMa8z1W3aaU9zrltKORw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 06:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:21:11:68:c4:c3:97:18:c6:aa:be:95:f0:16:d9:61:b9:a9:8e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Oct 2 18:30:42 2026 GMT Not After : Oct 5 21:22:42 2026 GMT Subject: CN=27AC5C34DFF9B51F96995A05D865749C0825A2F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f5:c6:24:77:0d:46:93:f3:26:79:af:ab:82: 2f:29:e2:4c:3a:1c:b8:ed:13:6f:34:e2:df:42:8e: 6b:f6:5d:0d:c6:f3:21:72:b7:73:f5:d1:ce:e3:02: fc:e5:15:bb:f8:3a:75:0d:da:6b:5f:57:7a:c8:23: 7a:64:71:de:ab:2b:ec:e1:c3:f0:0b:60:f0:86:cc: 12:60:fa:04:63:60:36:dd:35:f4:91:ca:57:10:59: 2e:e9:84:bb:10:55:ae:ee:ab:be:0f:38:fa:9a:45: f6:13:c9:fd:d9:d6:7e:75:da:7f:71:f8:d1:a1:fb: 2f:ba:6f:7f:93:1f:94:45:a2:6c:08:95:03:28:92: b9:55:af:2d:49:5a:cf:a2:90:dc:85:06:1d:d9:51: 7f:35:1e:46:d0:8c:24:a8:c9:bb:3c:c1:ba:f1:4d: 53:c9:77:71:ad:55:43:8a:a7:fe:63:48:0a:47:69: 53:41:d2:6c:84:2c:b9:50:28:93:bc:97:fe:02:c8: 14:78:55:6b:72:e7:27:b2:53:8e:d1:3a:31:f7:9e: f8:e6:b9:25:84:02:98:97:9a:41:d4:59:be:72:0e: c8:72:eb:41:2e:2d:95:e6:b4:c7:3b:21:b3:af:80: 34:ac:96:61:e5:72:ef:8d:da:ef:81:33:ac:e6:ec: a7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AC:5C:34:DF:F9:B5:1F:96:99:5A:05:D8:65:74:9C:08:25:A2:F3 X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:28:eb:ba:0b:d2:b9:25:e7:ce:8e:28:cb:f7:c7:0b:4f:e2: cb:97:9a:d8:76:5a:10:30:d1:6e:43:fc:69:a6:50:dc:7d:51: 82:33:c4:11:ee:4b:6e:4d:8b:77:79:26:c2:ca:61:d3:d0:5d: 79:b0:6a:53:f6:bf:a0:6d:a1:f3:d1:35:c0:18:e9:2d:a4:7c: e0:bd:46:df:80:74:fe:4e:57:b0:15:4a:de:92:6d:e2:9b:58: d4:25:a2:ae:8d:02:d5:5e:77:9b:af:3a:2d:5b:9f:e9:cc:01: 02:4e:69:cb:b8:a3:08:5f:69:45:66:07:07:64:dc:63:94:4a: d5:79:d6:9f:39:6b:b0:02:16:6d:c1:6d:30:ea:a5:00:e6:82: e1:90:a9:df:19:db:5e:64:f1:b5:1a:e6:d1:6c:96:6b:35:ad: 93:47:b1:56:9b:45:8a:93:1e:27:8d:97:5c:91:77:f0:56:1b: af:bf:32:71:31:be:1d:89:d5:48:ac:df:95:62:13:e1:f4:39: 55:23:6a:a9:5e:13:de:73:0b:77:84:e6:a2:31:08:cf:55:36: 6c:81:ba:f1:6d:b1:63:68:62:76:71:c9:fb:6b:a3:8e:70:3f: 1e:e6:ef:a0:2a:83:76:de:d0:a6:87:4d:00:26:31:77:af:05: 1a:37:eb:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULSERaMTDlxjGqr6V8BbZYbmpjo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjEwMDIxODMwNDJaFw0yNjEwMDUyMTIyNDJaMDMxMTAvBgNV BAMTKDI3QUM1QzM0REZGOUI1MUY5Njk5NUEwNUQ4NjU3NDlDMDgyNUEyRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9cYkdw1Gk/Mmea+rgi8p4kw6 HLjtE2804t9Cjmv2XQ3G8yFyt3P10c7jAvzlFbv4OnUN2mtfV3rII3pkcd6rK+zh w/ALYPCGzBJg+gRjYDbdNfSRylcQWS7phLsQVa7uq74POPqaRfYTyf3Z1n512n9x +NGh+y+6b3+TH5RFomwIlQMokrlVry1JWs+ikNyFBh3ZUX81HkbQjCSoybs8wbrx TVPJd3GtVUOKp/5jSApHaVNB0myELLlQKJO8l/4CyBR4VWty5yeyU47ROjH3nvjm uSWEApiXmkHUWb5yDshy60EuLZXmtMc7IbOvgDSslmHlcu+N2u+BM6zm7KfhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJ6xcNN/5tR+WmVoF2GV0nAglovMwHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3ijrugvSuSXn zo4oy/fHC0/iy5ea2HZaEDDRbkP8aaZQ3H1RgjPEEe5Lbk2Ld3kmwsph09BdebBq U/a/oG2h89E1wBjpLaR84L1G34B0/k5XsBVK3pJt4ptY1CWiro0C1V53m686LVuf 6cwBAk5py7ijCF9pRWYHB2TcY5RK1XnWnzlrsAIWbcFtMOqlAOaC4ZCp3xnbXmTx tRrm0WyWazWtk0exVptFipMeJ42XXJF38FYbr78ycTG+HYnVSKzflWIT4fQ5VSNq qV4T3nMLd4TmojEIz1U2bIG68W2xY2hidnHJ+2ujjnA/HubvoCqDdt7QpodNACYx d68FGjfrSg== -----END CERTIFICATE-----Generated at Sat Oct 3 18:16:31 2026 by rpki-client