$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft File: 532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft (raw, json) Hash identifier: dwUP0OnF9NbxH5p3kUgelm8LJOtuAGv007DdyCN5szY= Subject key identifier: 18:92:8B:FB:1C:77:B9:6B:C9:66:5F:32:40:83:84:82:A4:B4:01:3E Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 03F0D54EA3AB6D1A4413C2E1DF7772C533CBBD65 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft Manifest number: E6 Signing time: Sat 26 Sep 2026 18:29:16 +0000 Manifest this update: Sat 26 Sep 2026 18:24:16 +0000 Manifest next update: Tue 29 Sep 2026 20:46:16 +0000 Files and hashes: 1: AS151300.roa (hash: P7ijkqfVlDFLRg4B2Lm3ItQppso5LOmzGo91SxlE8AE=) 2: AS4837.roa (hash: iOOWAMHmzhTv2avlWBB19ZOmGwP6qQPSjlupNqBsPHY=) 3: AS56046.roa (hash: HLsn9oUBMKPFVruk78wyq4D7p3b/BZMNS7vsPLrkGog=) 4: AS131483.roa (hash: wricmOxr6vSrRQNd1vocTKW3nC/2pcVrm0VvZPVplfs=) 5: AS23650.roa (hash: ZrXwoi3Yc5wEkiCFcSV0YRLu2did5FGgulcpf2h2DTs=) 6: 532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl (hash: 9qfIVoayDaGfv92tQyk2SFJZ28cvt1mP6S50KRzmIA8=) 7: AS151302.roa (hash: LjMyhy9oJozbR4yTez6ckcklvG7qUHbJIsa2boA2gxo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f0:d5:4e:a3:ab:6d:1a:44:13:c2:e1:df:77:72:c5:33:cb:bd:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Sep 26 18:24:16 2026 GMT Not After : Sep 29 20:46:16 2026 GMT Subject: CN=18928BFB1C77B96BC9665F3240838482A4B4013E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cd:9f:58:f5:e6:cb:86:0e:5b:fd:88:34:f3: 58:43:c2:ff:60:ca:82:59:0f:ec:df:65:d5:49:0d: a4:a8:bd:7b:95:10:dd:62:8d:23:34:16:4f:e1:ec: d4:3a:fe:d2:10:20:1f:7e:ab:ea:e6:8d:26:0f:23: fc:5a:df:4e:5d:23:11:79:76:53:d7:7e:71:e6:2b: 95:d4:36:f8:02:00:06:e9:64:30:6c:59:6d:20:71: 25:2c:34:aa:d7:9d:5b:57:de:f6:b8:61:1c:04:bd: cc:49:33:91:77:0c:52:de:08:9f:de:2d:cd:49:86: 8e:b7:a7:f8:f7:45:81:25:cc:00:2c:8a:4f:b9:c1: ed:b9:0b:9c:74:a3:42:77:09:e7:93:37:60:4c:58: bf:b4:bb:c6:88:d0:e7:15:c9:5a:d1:52:70:ae:ed: 45:7b:c9:98:ba:dc:f1:b2:d8:a5:a2:bb:16:86:3c: 3b:18:58:61:4a:36:57:f3:e1:67:c3:8b:34:6b:93: 9e:30:e8:7a:61:24:30:8e:97:ae:b4:51:e3:e1:8d: e5:b9:b2:70:cf:f9:c5:c5:87:0b:82:8c:8f:82:85: 39:2a:c4:61:ed:48:7a:98:34:8e:e3:27:18:02:b3: 67:43:5f:5d:f7:1a:5a:48:6c:68:20:2f:f3:04:d7: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:92:8B:FB:1C:77:B9:6B:C9:66:5F:32:40:83:84:82:A4:B4:01:3E X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:89:d8:9d:9c:73:e0:c5:94:37:96:63:5a:f8:34:00:0e:b8: 70:0d:21:00:ce:06:af:4b:b3:43:f6:31:79:d5:2f:2d:1d:36: 5e:5e:6a:4f:84:a0:9e:12:78:4c:26:c2:2d:45:c2:46:d4:79: 50:11:94:f0:6b:d7:92:b1:ae:72:af:b6:9c:86:e4:4b:ee:98: 75:6b:f7:a0:fd:14:08:12:71:0a:e5:0e:a0:19:f8:fe:5a:6b: a8:fd:64:ee:3c:5a:0e:a3:57:1c:3c:45:60:e4:99:f1:54:38: 82:8e:89:76:5b:e7:f4:1e:70:cc:bb:81:69:41:ca:0b:14:68: f7:75:48:74:8f:a3:11:9b:98:90:7f:36:c2:04:19:37:cb:00: 26:46:36:37:26:71:23:19:f8:bd:69:8f:2e:f2:6e:8e:61:11: c0:f5:b8:24:e3:b5:94:44:48:57:0d:67:e8:cf:65:9a:ed:ba: da:0c:2c:66:53:7c:13:57:6f:c4:d1:9a:2c:62:cb:25:20:86: 73:98:f5:27:6f:11:8b:1c:76:ce:6f:47:86:c3:bf:56:0b:c8: ef:91:d5:cc:65:19:54:1f:a2:b6:80:05:c5:dd:3c:7e:b9:f6: 8c:f0:ca:cd:5f:91:5d:5c:82:fe:7d:5f:19:0f:d4:7b:c9:79: 24:f6:ff:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA/DVTqOrbRpEE8Lh33dyxTPLvWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA5MjYxODI0MTZaFw0yNjA5MjkyMDQ2MTZaMDMxMTAvBgNV BAMTKDE4OTI4QkZCMUM3N0I5NkJDOTY2NUYzMjQwODM4NDgyQTRCNDAxM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzZ9Y9ebLhg5b/Yg081hDwv9g yoJZD+zfZdVJDaSovXuVEN1ijSM0Fk/h7NQ6/tIQIB9+q+rmjSYPI/xa305dIxF5 dlPXfnHmK5XUNvgCAAbpZDBsWW0gcSUsNKrXnVtX3va4YRwEvcxJM5F3DFLeCJ/e Lc1Jho63p/j3RYElzAAsik+5we25C5x0o0J3CeeTN2BMWL+0u8aI0OcVyVrRUnCu 7UV7yZi63PGy2KWiuxaGPDsYWGFKNlfz4WfDizRrk54w6HphJDCOl660UePhjeW5 snDP+cXFhwuCjI+ChTkqxGHtSHqYNI7jJxgCs2dDX133GlpIbGggL/ME19vhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGJKL+xx3uWvJZl8yQIOEgqS0AT4wHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC81MzJFQzk1RDlFRTI3 NkQ5NjU2MjBCN0U0MENBNTBCNEFCOEZDQjBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA4nYnZxz4MWU N5ZjWvg0AA64cA0hAM4Gr0uzQ/YxedUvLR02Xl5qT4SgnhJ4TCbCLUXCRtR5UBGU 8GvXkrGucq+2nIbkS+6YdWv3oP0UCBJxCuUOoBn4/lprqP1k7jxaDqNXHDxFYOSZ 8VQ4go6Jdlvn9B5wzLuBaUHKCxRo93VIdI+jEZuYkH82wgQZN8sAJkY2NyZxIxn4 vWmPLvJujmERwPW4JOO1lERIVw1n6M9lmu262gwsZlN8E1dvxNGaLGLLJSCGc5j1 J28Rixx2zm9HhsO/VgvI75HVzGUZVB+itoAFxd08frn2jPDKzV+RXVyC/n1fGQ/U e8l5JPb/Xw== -----END CERTIFICATE-----Generated at Sun Sep 27 00:17:25 2026 by rpki-client