$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft File: 53B0CEC9D00981686264164126DB6F3385680024.mft (raw, json) Hash identifier: TSaJf3RrEgLmgyyS0psgWYG4jVBvSM0deX6otTs9xqY= Subject key identifier: 30:3A:15:B8:DC:52:C4:EF:3A:FB:1C:70:AE:C1:54:22:AC:A1:CC:2A Authority key identifier: 53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24 Certificate issuer: /CN=53B0CEC9D00981686264164126DB6F3385680024 Certificate serial: 621DC90CEDE3FF2681AC170100585554EE3B788D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft Manifest number: 03 Signing time: Fri 17 Apr 2026 20:14:48 +0000 Manifest this update: Fri 17 Apr 2026 20:09:48 +0000 Manifest next update: Sat 18 Apr 2026 23:58:48 +0000 Files and hashes: 1: 3231392e3233352e3230382e302f32302d3230203d3e203538383334.roa (hash: jkg6tUZ7+qXk3FouI03XOahA6TPu6n/Kjb5AdiASdbY=) 2: 53B0CEC9D00981686264164126DB6F3385680024.crl (hash: AkxZgh+vTtGWUz0xFm3VIzlKME++c9R8eV8lIr2BdQk=) 3: 3231392e3233352e31362e302f32302d3230203d3e203538383334.roa (hash: r6KqIfOL8ifKdsPunCCm1mAP8gnrhN32td99CTh9X4I=) 4: 34392e3233392e3139322e302f31382d3138203d3e203538383334.roa (hash: ec5yDLpeyWMgWUg4UNjd9N/J72lkvu3GkBAQZSij1hQ=) 5: 3131392e34302e3132382e302f31372d3137203d3e203538383334.roa (hash: 1DmuiOPq4TEZCmPUH8eAmnwG9L8yZKBYkchb9eK5PEs=) 6: 3131392e34322e302e302f31392d3139203d3e203538383334.roa (hash: UypYF6EVHxU0/wisde4zLRsNmq03Ct0ZuhmxCmXu5gs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:1d:c9:0c:ed:e3:ff:26:81:ac:17:01:00:58:55:54:ee:3b:78:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53B0CEC9D00981686264164126DB6F3385680024 Validity Not Before: Apr 17 20:09:48 2026 GMT Not After : Apr 18 23:58:48 2026 GMT Subject: CN=303A15B8DC52C4EF3AFB1C70AEC15422ACA1CC2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cc:af:24:f8:8f:ad:59:61:60:ae:dc:fc:f5: 9a:4c:6c:f9:d4:99:d0:ce:23:c6:1c:6e:75:51:b4: e6:85:c4:04:35:b9:17:73:f3:d3:d6:51:a5:65:e7: c8:74:d5:1f:20:cd:8f:66:32:a0:6e:5b:0b:32:6c: f3:26:3f:2c:6c:13:1e:cd:8a:5c:88:59:fd:c6:cf: 40:cb:a0:23:54:94:2e:63:ee:2c:a6:3e:00:91:bb: 38:67:7d:39:a9:2d:e0:19:15:99:8b:00:da:85:53: af:90:3c:ab:1b:06:93:d4:7d:99:92:66:2f:2b:76: 2e:09:a9:52:24:84:a5:59:07:7f:a7:da:c3:39:a8: 99:55:f2:f1:46:31:45:1b:d5:8f:8f:eb:03:5f:2c: 11:70:0c:20:39:e0:15:4e:93:c7:bc:c6:a3:72:f4: 9e:aa:4d:cf:ef:9a:f7:8f:3f:22:9a:6f:c4:bf:16: 2c:43:1b:c8:2e:05:cb:54:e3:a2:4d:40:1e:4e:36: 11:d5:76:9c:36:6e:c6:ee:90:9f:aa:94:8a:d2:c8: ec:b0:9a:b1:9c:0f:b2:9f:16:50:31:22:92:3a:44: d9:ee:96:83:a6:37:1a:54:c7:e5:bc:97:42:a7:a6: 3b:b2:33:d9:fc:59:83:57:f0:e9:15:7d:65:bd:d6: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3A:15:B8:DC:52:C4:EF:3A:FB:1C:70:AE:C1:54:22:AC:A1:CC:2A X509v3 Authority Key Identifier: keyid:53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:db:a7:3e:33:05:2a:4d:60:98:0d:35:bd:0d:f0:f8:dd:bc: 5c:c4:75:c5:fd:29:42:7c:ab:0d:93:ae:10:df:38:a4:22:51: 80:b2:56:f1:5c:71:40:f5:19:96:4f:8e:6a:0b:01:5c:a6:d1: fe:dd:ba:aa:f5:df:1b:2b:e7:22:60:cc:17:e7:fd:fa:34:f9: 26:35:cc:0b:f1:ab:5e:5a:78:97:ab:27:43:cc:85:83:5e:55: 52:5b:98:47:8f:4a:24:5a:07:60:c2:a1:3f:a9:80:80:89:02: 5d:09:1c:f2:cc:c4:fe:27:ad:ac:3e:11:83:a2:43:de:fa:68: 1f:c8:ce:bf:d6:32:9f:cf:c1:25:e3:0c:d7:ae:97:9d:7f:5a: 26:52:5d:de:55:06:4e:10:b4:09:64:94:03:4c:d9:50:4a:ec: c7:44:50:2f:42:ff:7d:69:34:87:8a:f2:e0:08:c5:21:b9:a1: 0d:2b:8e:b1:62:c5:dc:c7:f3:3e:5b:f6:3c:80:1e:f9:82:88: 17:1e:b4:6a:41:18:84:b2:19:30:74:e1:f4:b8:8e:ae:33:bd: 37:6d:7c:88:e4:76:09:4c:76:f9:f3:08:b8:64:20:6d:49:ae: 92:99:de:98:6f:c1:b4:e2:34:3e:2e:b5:75:77:cf:d7:d1:3f: d1:09:72:86 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYh3JDO3j/yaBrBcBAFhVVO47eI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCMENFQzlEMDA5ODE2ODYyNjQxNjQxMjZEQjZGMzM4 NTY4MDAyNDAeFw0yNjA0MTcyMDA5NDhaFw0yNjA0MTgyMzU4NDhaMDMxMTAvBgNV BAMTKDMwM0ExNUI4REM1MkM0RUYzQUZCMUM3MEFFQzE1NDIyQUNBMUNDMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zK8k+I+tWWFgrtz89ZpMbPnU mdDOI8YcbnVRtOaFxAQ1uRdz89PWUaVl58h01R8gzY9mMqBuWwsybPMmPyxsEx7N ilyIWf3Gz0DLoCNUlC5j7iymPgCRuzhnfTmpLeAZFZmLANqFU6+QPKsbBpPUfZmS Zi8rdi4JqVIkhKVZB3+n2sM5qJlV8vFGMUUb1Y+P6wNfLBFwDCA54BVOk8e8xqNy 9J6qTc/vmvePPyKab8S/FixDG8guBctU46JNQB5ONhHVdpw2bsbukJ+qlIrSyOyw mrGcD7KfFlAxIpI6RNnuloOmNxpUx+W8l0KnpjuyM9n8WYNX8OkVfWW91gkrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMDoVuNxSxO86+xxwrsFUIqyhzCowHwYDVR0j BBgwFoAUU7DOydAJgWhiZBZBJttvM4VoACQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA2MDEwNTEzNzk0NjYyNS8wLzUzQjBDRUM5RDAwOTgxNjg2MjY0MTY0MTI2REI2 RjMzODU2ODAwMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTNCMENFQzlEMDA5ODE2ODYyNjQxNjQxMjZEQjZGMzM4NTY4MDAyNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNjAxMDUxMzc5NDY2MjUvMC81M0IwQ0VDOUQwMDk4 MTY4NjI2NDE2NDEyNkRCNkYzMzg1NjgwMDI0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9unPjMFKk1g mA01vQ3w+N28XMR1xf0pQnyrDZOuEN84pCJRgLJW8VxxQPUZlk+OagsBXKbR/t26 qvXfGyvnImDMF+f9+jT5JjXMC/GrXlp4l6snQ8yFg15VUluYR49KJFoHYMKhP6mA gIkCXQkc8szE/ietrD4Rg6JD3vpoH8jOv9Yyn8/BJeMM166XnX9aJlJd3lUGThC0 CWSUA0zZUErsx0RQL0L/fWk0h4ry4AjFIbmhDSuOsWLF3MfzPlv2PIAe+YKIFx60 akEYhLIZMHTh9LiOrjO9N218iOR2CUx2+fMIuGQgbUmukpnemG/BtOI0Pi61dXfP 19E/0Qlyhg== -----END CERTIFICATE-----Generated at Fri Apr 17 23:55:42 2026 by rpki-client