$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft File: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft (raw, json) Hash identifier: ZV0YbehvGpZrNVk0jOWOWQKLZzmpEQJgbZzpKC33toY= Subject key identifier: 54:EB:40:84:76:BF:75:8E:27:04:47:88:E9:9A:E2:7E:24:E8:4C:6A Authority key identifier: 2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B Certificate issuer: /CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Certificate serial: 45915CD1643ED452EA58D83A26B4EA5FB2BD66B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft Manifest number: CE Signing time: Thu 15 Oct 2026 19:21:55 +0000 Manifest this update: Thu 15 Oct 2026 19:16:55 +0000 Manifest next update: Mon 19 Oct 2026 06:35:55 +0000 Files and hashes: 1: 3130332e3130352e3232302e302f32322d3332203d3e203633373138.roa (hash: UoMxgKtAhyszzVVZnBqAdDpPta7+jHjGEznfu4FR8Iw=) 2: 3138302e3137382e3235322e302f32322d3332203d3e2034383337.roa (hash: YA2y5WDqbbqXlH3plbuoacVKmNM5TSdO8J/ShSoYXBU=) 3: 323430313a643932303a3a2f32382d313238203d3e203633373138.roa (hash: wqKyq4CT7ZBhjVas93N8o2f4ItHVxa4rAXSDsabJnzU=) 4: 3138302e3137382e3139322e302f31382d3332203d3e203633373138.roa (hash: p/FOxsVY6yCDcHHnlzBhiEH5nnmslBPLMVOfQrX5mgI=) 5: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl (hash: kGINnswmfwNICeovKhxPb1p/RRA8BzYwaw7FNZ+Ld44=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 06:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:91:5c:d1:64:3e:d4:52:ea:58:d8:3a:26:b4:ea:5f:b2:bd:66:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Validity Not Before: Oct 15 19:16:55 2026 GMT Not After : Oct 19 06:35:55 2026 GMT Subject: CN=54EB408476BF758E27044788E99AE27E24E84C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:ee:ac:cb:e2:69:ef:0d:69:ff:83:55:b9: 73:28:55:c0:d0:01:66:fe:89:61:a7:00:5a:18:b6: 4f:6d:a1:0e:c8:a3:28:13:b2:a3:f8:a9:4c:61:dd: 6a:94:b4:86:ea:e7:b0:65:97:09:6c:04:d9:86:7d: 7a:56:51:e7:58:3a:31:65:22:35:af:cd:eb:da:fc: ce:3c:62:f3:77:c1:9f:02:7b:72:c3:7e:2b:76:52: c8:30:b1:13:05:52:b1:02:13:d5:81:af:4c:85:b4: 83:66:d4:d2:3e:78:d8:9d:d5:92:d8:46:d9:c5:88: 61:41:18:bf:d2:a9:63:49:60:4f:03:40:33:9c:8d: a8:b1:d2:9c:0b:90:d3:a9:e7:2e:b9:ba:3e:e1:8d: 11:f9:df:ed:31:d6:95:eb:bf:3a:98:9f:44:91:c5: 51:fe:05:c2:ef:71:74:c1:55:86:3b:83:39:59:03: f5:78:32:f1:02:11:8c:19:8f:7b:12:c3:ad:40:69: 7f:49:6f:b8:63:07:7f:a0:2f:28:fe:90:a9:74:07: 4d:ce:42:83:a2:be:9a:a3:0d:a5:59:5f:83:8b:d9: 8f:71:96:25:c2:bc:72:54:69:37:e8:00:52:1f:b3: c9:ee:f3:8a:06:bb:c9:48:4a:06:01:66:43:ca:a0: 4c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EB:40:84:76:BF:75:8E:27:04:47:88:E9:9A:E2:7E:24:E8:4C:6A X509v3 Authority Key Identifier: keyid:2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:fa:23:13:9a:2d:9e:04:31:f1:2e:bf:52:af:bb:b2:1c:f1: 52:b4:97:a6:7d:93:65:15:38:97:b6:02:51:04:76:7d:ba:fd: 14:f4:f0:1c:ed:53:05:56:61:0d:fc:1b:2c:50:bf:82:3d:08: e5:50:5c:63:c8:e0:b8:ba:41:5d:64:16:22:b8:4c:46:4f:60: 23:ce:9f:20:94:61:51:85:1c:4b:3a:dd:e0:c0:53:82:f1:d2: 07:30:4b:24:47:4b:86:29:54:c2:49:23:0e:90:77:76:41:98: 46:b9:c6:bd:e0:3a:07:58:14:82:cf:2e:58:dd:9b:fc:4a:ed: d7:43:91:9f:65:39:af:3c:bb:42:57:4b:32:9a:96:cc:73:24: 9f:34:c3:4e:f9:37:8e:4b:90:4c:54:f1:86:3e:99:2b:93:02: db:0e:f2:a7:82:8a:9b:2c:f6:52:9f:e6:a6:c3:b6:18:7d:0e: ac:91:6d:a7:0c:21:51:e0:d5:57:c9:e1:99:32:08:78:6a:d8: cd:3c:b3:1c:9d:fd:0c:42:a9:22:73:14:3b:16:1b:b6:72:25: 6d:70:9a:cb:41:dd:c2:c2:c9:f5:42:e6:e0:f9:81:15:78:19: 54:91:85:91:0a:e9:5a:6a:3b:67:56:36:7c:c2:f3:07:7a:6f: 1e:50:d1:42 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURZFc0WQ+1FLqWNg6JrTqX7K9ZrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2 QzM4QTM0QjAeFw0yNjEwMTUxOTE2NTVaFw0yNjEwMTkwNjM1NTVaMDMxMTAvBgNV BAMTKDU0RUI0MDg0NzZCRjc1OEUyNzA0NDc4OEU5OUFFMjdFMjRFODRDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCokO6sy+Jp7w1p/4NVuXMoVcDQ AWb+iWGnAFoYtk9toQ7IoygTsqP4qUxh3WqUtIbq57BllwlsBNmGfXpWUedYOjFl IjWvzeva/M48YvN3wZ8Ce3LDfit2UsgwsRMFUrECE9WBr0yFtINm1NI+eNid1ZLY RtnFiGFBGL/SqWNJYE8DQDOcjaix0pwLkNOp5y65uj7hjRH53+0x1pXrvzqYn0SR xVH+BcLvcXTBVYY7gzlZA/V4MvECEYwZj3sSw61AaX9Jb7hjB3+gLyj+kKl0B03O QoOivpqjDaVZX4OL2Y9xliXCvHJUaTfoAFIfs8nu84oGu8lISgYBZkPKoEx3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVOtAhHa/dY4nBEeI6ZrifiToTGowHwYDVR0j BBgwFoAUK7YXPYGJDkeJ4bS6ai46kWw4o0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzNjc2NzU4MzI1NjU3OC8wLzJCQjYxNzNEODE4OTBFNDc4OUUxQjRCQTZBMkUz QTkxNkMzOEEzNEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2QzM4QTM0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzY3Njc1ODMyNTY1NzgvMC8yQkI2MTczRDgxODkw RTQ3ODlFMUI0QkE2QTJFM0E5MTZDMzhBMzRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/ojE5otngQx 8S6/Uq+7shzxUrSXpn2TZRU4l7YCUQR2fbr9FPTwHO1TBVZhDfwbLFC/gj0I5VBc Y8jguLpBXWQWIrhMRk9gI86fIJRhUYUcSzrd4MBTgvHSBzBLJEdLhilUwkkjDpB3 dkGYRrnGveA6B1gUgs8uWN2b/Ert10ORn2U5rzy7QldLMpqWzHMknzTDTvk3jkuQ TFTxhj6ZK5MC2w7yp4KKmyz2Up/mpsO2GH0OrJFtpwwhUeDVV8nhmTIIeGrYzTyz HJ39DEKpInMUOxYbtnIlbXCay0HdwsLJ9ULm4PmBFXgZVJGFkQrpWmo7Z1Y2fMLz B3pvHlDRQg== -----END CERTIFICATE-----Generated at Fri Oct 16 13:07:03 2026 by rpki-client