$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft File: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft (raw, json) Hash identifier: e4dXBsSOJUA4TbsdBMrsLLLnse9l3H4h3EwkRqK2bss= Subject key identifier: 36:77:C5:F7:01:BC:B4:F9:22:8E:20:72:C4:CA:17:A4:1C:A6:6D:CE Authority key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Certificate issuer: /CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Certificate serial: 674A22F8C4F737C95065FB9BACB4F003EA1E4FB8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft Manifest number: CA Signing time: Sat 26 Sep 2026 09:48:31 +0000 Manifest this update: Sat 26 Sep 2026 09:43:31 +0000 Manifest next update: Tue 29 Sep 2026 13:42:31 +0000 Files and hashes: 1: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl (hash: dsjkl4QMtDMSUk3p8WKnyvlAWPd/w1UXoUQEE2Q4hB8=) 2: 3132322e3131342e302e302f31362d3136203d3e2034383337.roa (hash: 0+enGD/zc0KUM6hJ3xXwylGpBRXHqMrwp8Qwg/rjKXA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 13:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:4a:22:f8:c4:f7:37:c9:50:65:fb:9b:ac:b4:f0:03:ea:1e:4f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Validity Not Before: Sep 26 09:43:31 2026 GMT Not After : Sep 29 13:42:31 2026 GMT Subject: CN=3677C5F701BCB4F9228E2072C4CA17A41CA66DCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e2:72:3a:ab:7f:ec:52:30:fd:be:f2:3b:89: 33:22:03:ff:bb:73:28:0d:15:f5:4a:62:71:ed:b7: 6b:57:2a:d2:3d:54:a8:ca:56:24:e7:f6:49:81:5f: 24:da:0b:5f:19:cf:e9:10:2a:aa:ad:01:78:6f:80: 74:e3:00:12:5c:c2:f5:c8:64:12:9f:22:eb:3d:7a: df:dd:53:35:70:4a:5a:4e:50:80:60:4f:6f:94:ed: 8c:36:a1:44:97:1c:93:6a:4f:c6:ce:61:8a:2d:09: 63:94:17:82:e0:45:b9:e3:ed:5d:0b:96:84:d4:a3: fc:a1:9b:27:5c:2d:8f:d8:52:b1:7b:e0:56:25:f9: f3:9c:b2:9b:ce:93:26:a9:07:d0:1b:0a:f9:7d:6b: c1:4f:47:29:a3:d9:26:02:06:40:cf:21:14:15:a3: b6:27:aa:37:ab:6f:17:54:58:b1:da:39:e1:0b:ab: 98:30:c1:b6:ad:99:0f:8d:86:3a:b1:c7:ae:53:8f: ec:3a:5b:89:21:a8:81:5a:8c:40:b6:40:c2:da:6a: 07:de:e5:82:f9:19:38:35:1c:ad:5c:45:03:ab:b9: 0d:d2:1e:05:00:2f:c9:6e:fd:30:c5:c5:22:3f:ec: 75:1b:6f:74:2f:ad:4b:1f:56:8b:c6:71:d8:d3:42: 6a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:77:C5:F7:01:BC:B4:F9:22:8E:20:72:C4:CA:17:A4:1C:A6:6D:CE X509v3 Authority Key Identifier: keyid:2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:04:9a:2a:e6:8d:40:b2:62:6d:92:82:4a:9e:ee:5a:9b:12: 9c:f2:9c:4a:18:7e:fe:9d:58:84:02:95:82:0a:5d:cc:ce:cb: f0:60:b3:06:73:b1:57:47:66:95:12:7c:93:7e:7d:8d:2a:cb: 67:17:e2:3e:7b:61:fd:a4:de:04:50:b7:0e:73:be:69:50:dd: b7:35:0b:d1:45:9f:8f:b6:40:7f:0d:c8:b0:32:3a:a3:2d:3b: 54:d6:dc:05:e0:da:f5:85:dd:75:c4:00:02:ac:4b:45:10:49: f8:f7:c1:82:5e:35:74:b6:9d:52:a4:3a:fa:16:44:d2:f8:f7: a6:52:2d:96:23:38:77:6b:93:ce:a7:24:5b:75:d4:84:d7:52: 0b:18:48:5a:8a:27:46:fd:f1:f2:8e:7a:41:ad:04:03:89:15: bc:20:de:91:dc:05:de:7d:39:81:9d:1b:f9:82:dd:04:ac:f6: ec:da:b7:75:7f:1d:64:43:71:3e:c9:2f:7f:fd:7a:b7:c9:40: b8:29:65:9b:5a:e6:37:6c:06:18:e4:bd:50:8a:6c:4f:51:3c: 0a:6a:68:44:71:d5:a9:e7:4a:10:d6:ed:33:fc:ce:7f:df:13: 13:c4:21:aa:67:a4:bc:b3:dc:22:47:6e:48:87:a2:d2:3b:61: cf:cc:1b:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ0oi+MT3N8lQZfubrLTwA+oeT7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJE OEYzMTc1NjAeFw0yNjA5MjYwOTQzMzFaFw0yNjA5MjkxMzQyMzFaMDMxMTAvBgNV BAMTKDM2NzdDNUY3MDFCQ0I0RjkyMjhFMjA3MkM0Q0ExN0E0MUNBNjZEQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4nI6q3/sUjD9vvI7iTMiA/+7 cygNFfVKYnHtt2tXKtI9VKjKViTn9kmBXyTaC18Zz+kQKqqtAXhvgHTjABJcwvXI ZBKfIus9et/dUzVwSlpOUIBgT2+U7Yw2oUSXHJNqT8bOYYotCWOUF4LgRbnj7V0L loTUo/yhmydcLY/YUrF74FYl+fOcspvOkyapB9AbCvl9a8FPRymj2SYCBkDPIRQV o7YnqjerbxdUWLHaOeELq5gwwbatmQ+Nhjqxx65Tj+w6W4khqIFajEC2QMLaagfe 5YL5GTg1HK1cRQOruQ3SHgUAL8lu/TDFxSI/7HUbb3QvrUsfVovGcdjTQmqLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNnfF9wG8tPkijiByxMoXpBymbc4wHwYDVR0j BBgwFoAULVWgQfy3+f9zZekKfdqFQtjzF1YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc5MTI5MDQyMTI0ODAwMS8wLzJENTVBMDQxRkNCN0Y5RkY3MzY1RTkwQTdEREE4 NTQyRDhGMzE3NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3OTEyOTA0MjEyNDgwMDEvMC8yRDU1QTA0MUZDQjdG OUZGNzM2NUU5MEE3RERBODU0MkQ4RjMxNzU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQSaKuaNQLJi bZKCSp7uWpsSnPKcShh+/p1YhAKVggpdzM7L8GCzBnOxV0dmlRJ8k359jSrLZxfi Pnth/aTeBFC3DnO+aVDdtzUL0UWfj7ZAfw3IsDI6oy07VNbcBeDa9YXddcQAAqxL RRBJ+PfBgl41dLadUqQ6+hZE0vj3plItliM4d2uTzqckW3XUhNdSCxhIWoonRv3x 8o56Qa0EA4kVvCDekdwF3n05gZ0b+YLdBKz27Nq3dX8dZENxPskvf/16t8lAuCll m1rmN2wGGOS9UIpsT1E8CmpoRHHVqedKENbtM/zOf98TE8QhqmekvLPcIkduSIei 0jthz8wbQA== -----END CERTIFICATE-----Generated at Sun Sep 27 19:45:23 2026 by rpki-client