$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft File: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft (raw, json) Hash identifier: 086Vk7rRMopaak1I9YhCEu9iUxbsfm8UUZ9LXFHuavM= Subject key identifier: 0D:73:FD:CA:C9:86:E2:B6:3A:B2:50:B7:D0:05:53:F9:AC:F4:41:76 Authority key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C Certificate issuer: /CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Certificate serial: 41AF84A2CED98F685ABD60CDB8CF31E323228032 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft Manifest number: D3 Signing time: Sun 11 Oct 2026 20:31:01 +0000 Manifest this update: Sun 11 Oct 2026 20:26:01 +0000 Manifest next update: Wed 14 Oct 2026 23:04:01 +0000 Files and hashes: 1: 323430613a633030303a3a2f32302d3230203d3e20313337373236.roa (hash: P/uGAO3eiSum4zNic0X3psUc8CVrx9YxKsqMCgddi/U=) 2: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl (hash: P98UoUr0djVhJrs09Q9tFM21pn/5hQy8MLf3G9yBluU=) 3: 3130332e3133302e3133322e302f32322d3232203d3e2030.roa (hash: FK6td7V83xHJimYsonXy6iGnkL28lgGxO82Pj8R5j/M=) 4: 323430613a633063303a3a2f33322d3332203d3e20313337373236.roa (hash: 1at51nd0IGgOA4YH54G2tz7k8cmIIn93vu2nRO3kz4M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 23:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:af:84:a2:ce:d9:8f:68:5a:bd:60:cd:b8:cf:31:e3:23:22:80:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Validity Not Before: Oct 11 20:26:01 2026 GMT Not After : Oct 14 23:04:01 2026 GMT Subject: CN=0D73FDCAC986E2B63AB250B7D00553F9ACF44176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:49:f1:83:49:43:a7:6f:87:8f:6d:16:6b:32: 60:58:8f:1d:99:1b:88:1d:2c:c7:00:aa:97:08:1f: 81:69:0d:7a:6d:ff:8a:dc:9a:f0:bf:77:20:f7:cd: db:f9:b1:53:6f:c8:b6:f7:3e:f6:34:0a:08:80:b8: 88:24:6f:b1:90:ae:df:f0:4f:a3:92:a3:86:45:52: 00:79:79:d6:eb:e5:82:0d:a2:8c:37:6e:1e:62:79: d5:fa:b6:97:9e:e4:fb:40:d4:a9:dc:18:8c:1b:79: 1c:f6:ea:7b:12:a8:6d:95:60:31:9b:a7:20:a0:95: 35:da:9d:04:0d:5e:44:c9:9b:b3:fc:13:f6:f5:25: 6a:4d:41:d0:95:3c:a7:03:d4:08:22:5c:fa:b3:15: 53:4f:b2:f3:bb:56:5c:bc:9d:57:52:cc:24:76:5c: 28:54:f7:2d:e1:14:9c:fa:94:76:f1:ca:a8:62:18: ea:d8:8c:52:e7:97:a4:86:3b:67:18:6f:37:ef:94: 3f:33:89:e2:52:ff:ee:09:68:1a:5c:38:34:0a:5a: 3a:c4:db:e4:74:ad:5b:ca:94:f4:0e:d7:64:67:ae: 0f:b7:2d:97:64:91:d8:77:54:a9:15:3e:bd:c0:3b: f0:cb:12:3d:22:96:5a:ad:b5:6f:1e:df:ff:98:b7: db:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:73:FD:CA:C9:86:E2:B6:3A:B2:50:B7:D0:05:53:F9:AC:F4:41:76 X509v3 Authority Key Identifier: keyid:5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:0b:5f:ba:a6:63:8c:9b:db:0a:6c:44:f6:b3:63:48:12:23: c8:4f:96:d5:0f:cd:f0:ae:0c:20:9a:f2:a0:29:8e:42:95:ad: 5d:dd:45:ad:dc:46:cb:32:ab:89:4a:89:ae:e8:ff:37:39:2c: 36:b0:9b:85:39:7a:a4:e5:8b:0d:3c:ef:e5:65:a1:df:ac:bc: df:11:04:35:1b:f3:47:65:a9:71:21:c6:0e:b8:d0:b2:50:1a: 08:ff:bb:26:c5:a5:19:0f:0b:9b:7b:e3:a6:7b:1a:db:83:59: 5d:d8:38:fc:e0:f6:12:ff:50:5a:4d:ae:74:9c:b5:84:cc:10: 6a:15:a1:0d:d0:5c:b0:42:c0:01:ca:b8:b5:c0:99:72:93:3b: 03:f2:a5:b9:a5:de:4f:3d:bb:d2:37:f0:68:f1:c9:72:b5:51: 5e:f0:83:83:48:9e:06:4e:6f:b5:9f:0a:4a:01:f4:27:22:19: 12:97:19:62:87:db:87:22:b0:73:5b:f7:63:32:e1:aa:c7:da: ff:f3:70:65:22:fc:94:d3:2f:b1:ba:50:ec:91:c7:fd:9d:a8: 4f:d8:32:b4:55:76:77:65:20:a5:75:91:db:01:fb:e5:ca:fa: d5:a0:9a:18:e5:08:26:19:af:9d:8a:1f:1c:2a:92:fa:a0:4d: e6:15:fa:61 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQa+Eos7Zj2havWDNuM8x4yMigDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMx QUM4RjQ4QzAeFw0yNjEwMTEyMDI2MDFaFw0yNjEwMTQyMzA0MDFaMDMxMTAvBgNV BAMTKDBENzNGRENBQzk4NkUyQjYzQUIyNTBCN0QwMDU1M0Y5QUNGNDQxNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzSfGDSUOnb4ePbRZrMmBYjx2Z G4gdLMcAqpcIH4FpDXpt/4rcmvC/dyD3zdv5sVNvyLb3PvY0CgiAuIgkb7GQrt/w T6OSo4ZFUgB5edbr5YINoow3bh5iedX6tpee5PtA1KncGIwbeRz26nsSqG2VYDGb pyCglTXanQQNXkTJm7P8E/b1JWpNQdCVPKcD1AgiXPqzFVNPsvO7Vly8nVdSzCR2 XChU9y3hFJz6lHbxyqhiGOrYjFLnl6SGO2cYbzfvlD8zieJS/+4JaBpcODQKWjrE 2+R0rVvKlPQO12Rnrg+3LZdkkdh3VKkVPr3AO/DLEj0illqttW8e3/+Yt9sfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDXP9ysmG4rY6slC30AVT+az0QXYwHwYDVR0j BBgwFoAUW6/VLZ+0o3x6E4Ko78wZrBrI9IwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MzcxNDgxMjc4MDU0Ni8wLzVCQUZENTJEOUZCNEEzN0M3QTEzODJBOEVGQ0Mx OUFDMUFDOEY0OEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMxQUM4RjQ4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTM3MTQ4MTI3ODA1NDYvMC81QkFGRDUyRDlGQjRB MzdDN0ExMzgyQThFRkNDMTlBQzFBQzhGNDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwtfuqZjjJvb CmxE9rNjSBIjyE+W1Q/N8K4MIJryoCmOQpWtXd1FrdxGyzKriUqJruj/NzksNrCb hTl6pOWLDTzv5WWh36y83xEENRvzR2WpcSHGDrjQslAaCP+7JsWlGQ8Lm3vjpnsa 24NZXdg4/OD2Ev9QWk2udJy1hMwQahWhDdBcsELAAcq4tcCZcpM7A/KluaXeTz27 0jfwaPHJcrVRXvCDg0ieBk5vtZ8KSgH0JyIZEpcZYofbhyKwc1v3YzLhqsfa//Nw ZSL8lNMvsbpQ7JHH/Z2oT9gytFV2d2UgpXWR2wH75cr61aCaGOUIJhmvnYofHCqS +qBN5hX6YQ== -----END CERTIFICATE-----Generated at Tue Oct 13 01:57:26 2026 by rpki-client