$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft File: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft (raw, json) Hash identifier: GKZ90FYHbJoAECg0+4ynSxW0xjwNgdcM8umaRCxVPfk= Subject key identifier: FF:7A:C4:2B:DF:57:A3:D7:60:95:45:FF:25:38:81:FD:4F:61:BE:7B Authority key identifier: 25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE Certificate issuer: /CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Certificate serial: 2031C5DE4343557B5525718EBC4EFC009FADE081 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft Manifest number: BD Signing time: Mon 12 Oct 2026 23:47:32 +0000 Manifest this update: Mon 12 Oct 2026 23:42:32 +0000 Manifest next update: Fri 16 Oct 2026 08:26:32 +0000 Files and hashes: 1: 3130332e34312e3233322e302f32342d3234203d3e203538343636.roa (hash: dFVSB8aOnwvTGNapkLqn2kL47R2dXV0mGH0IkW3w0p4=) 2: 3130332e39302e3135322e302f32342d3234203d3e203538353139.roa (hash: eNSDDIFaERWet2gtvMhXJGMxUdYweq9eQTGX6iMngvk=) 3: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl (hash: kwXEszh79ngINHY3qSSn0etvzi5QdlFXieIFZggXDNw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:31:c5:de:43:43:55:7b:55:25:71:8e:bc:4e:fc:00:9f:ad:e0:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Validity Not Before: Oct 12 23:42:32 2026 GMT Not After : Oct 16 08:26:32 2026 GMT Subject: CN=FF7AC42BDF57A3D7609545FF253881FD4F61BE7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d5:4f:96:c2:4b:a9:1f:5f:2a:8e:81:6e:67: 37:f0:9d:fc:35:57:16:92:6c:08:96:28:60:03:d6: b4:7e:b3:52:0c:25:17:11:2c:51:18:f1:9b:6c:f3: 94:cb:82:84:d3:b5:0f:b9:7b:8a:07:f6:d2:12:5e: e2:e0:d7:8c:28:5a:79:44:ed:33:bb:7a:b9:99:42: 0f:5c:67:31:4b:77:4f:78:2a:3a:f0:f2:7b:2f:b2: c7:a6:2f:2b:3d:b9:f8:c6:3b:49:11:4e:30:0b:94: 45:1b:21:52:42:b6:d6:cd:55:af:a3:b1:48:ec:d9: b4:12:01:87:5d:b7:c7:7d:56:b7:dd:3a:6c:78:62: 4b:7a:7e:d3:8f:98:56:e3:37:93:39:68:20:95:df: 9b:a3:90:14:d2:94:f7:4e:79:d0:71:33:b4:d2:18: 90:2f:74:ad:f4:e7:a5:02:bc:07:b7:47:d2:81:6f: 89:f2:36:ab:ed:4c:72:48:be:2a:3e:d0:59:7d:29: a7:68:30:4d:6a:ab:26:74:22:73:d1:cc:02:4f:d2: 44:72:61:4a:c4:b8:62:b5:e8:90:a1:db:35:7f:55: dc:07:17:b8:5d:dd:ce:a8:6b:75:66:98:8f:52:90: f5:4d:4e:e4:59:a2:b3:76:1b:5b:0f:cc:aa:75:81: bf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7A:C4:2B:DF:57:A3:D7:60:95:45:FF:25:38:81:FD:4F:61:BE:7B X509v3 Authority Key Identifier: keyid:25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ea:23:7d:42:9e:b4:2a:87:85:59:e8:64:13:b7:53:48:80: 6b:d1:7e:bb:c9:7d:d7:30:45:f4:44:7a:ba:ec:c9:a3:22:f1: e8:a4:cd:d4:ab:d3:ce:34:26:14:6c:9a:59:7e:6e:1c:00:6e: cc:1d:d6:23:06:a9:48:bc:df:55:01:39:59:6b:94:cc:45:c2: 58:c3:ac:31:15:16:4b:0f:e0:b9:a7:5d:c5:26:78:f1:e4:a1: 29:e9:22:e5:03:5c:4b:63:56:47:18:df:16:8e:fe:5a:2b:0c: c6:31:8a:76:ef:7b:b7:52:90:d7:ef:8f:c6:04:53:75:ba:59: c5:3c:13:ee:f5:8b:31:59:f1:2a:08:00:49:44:4c:39:c3:32: 58:c5:8d:b4:0b:a1:a7:7a:25:0f:73:e5:41:c1:5c:27:ae:ce: d6:0b:ae:b4:b4:d0:d9:35:ab:e6:8f:07:be:9e:d6:bd:ea:43: c3:d8:fb:ad:44:f1:31:e9:db:3d:a2:ad:26:19:e2:94:c6:7f: 4f:f7:5f:6f:f7:07:27:7f:cf:c3:51:03:c3:8e:50:ed:d1:f6: f4:c9:55:78:4e:a9:54:79:36:06:2a:b4:47:70:33:24:a0:c0: cc:cd:df:55:73:3d:7f:0f:a6:ac:01:53:97:b4:ac:93:1d:c2: 31:09:c2:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIDHF3kNDVXtVJXGOvE78AJ+t4IEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVG OUVCNjBBRTAeFw0yNjEwMTIyMzQyMzJaFw0yNjEwMTYwODI2MzJaMDMxMTAvBgNV BAMTKEZGN0FDNDJCREY1N0EzRDc2MDk1NDVGRjI1Mzg4MUZENEY2MUJFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ1U+WwkupH18qjoFuZzfwnfw1 VxaSbAiWKGAD1rR+s1IMJRcRLFEY8Zts85TLgoTTtQ+5e4oH9tISXuLg14woWnlE 7TO7ermZQg9cZzFLd094Kjrw8nsvssemLys9ufjGO0kRTjALlEUbIVJCttbNVa+j sUjs2bQSAYddt8d9VrfdOmx4Ykt6ftOPmFbjN5M5aCCV35ujkBTSlPdOedBxM7TS GJAvdK3056UCvAe3R9KBb4nyNqvtTHJIvio+0Fl9KadoME1qqyZ0InPRzAJP0kRy YUrEuGK16JCh2zV/VdwHF7hd3c6oa3VmmI9SkPVNTuRZorN2G1sPzKp1gb8HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/3rEK99Xo9dglUX/JTiB/U9hvnswHwYDVR0j BBgwFoAUJVGtdeoUffROi6oSQvJ0HvnrYK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg4OTg5NzE5MzM0MDkyOS8wLzI1NTFBRDc1RUExNDdERjQ0RThCQUExMjQyRjI3 NDFFRjlFQjYwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVGOUVCNjBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4ODk4OTcxOTMzNDA5MjkvMC8yNTUxQUQ3NUVBMTQ3 REY0NEU4QkFBMTI0MkYyNzQxRUY5RUI2MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+ojfUKetCqH hVnoZBO3U0iAa9F+u8l91zBF9ER6uuzJoyLx6KTN1KvTzjQmFGyaWX5uHABuzB3W IwapSLzfVQE5WWuUzEXCWMOsMRUWSw/guaddxSZ48eShKeki5QNcS2NWRxjfFo7+ WisMxjGKdu97t1KQ1++PxgRTdbpZxTwT7vWLMVnxKggASURMOcMyWMWNtAuhp3ol D3PlQcFcJ67O1guutLTQ2TWr5o8Hvp7WvepDw9j7rUTxMenbPaKtJhnilMZ/T/df b/cHJ3/Pw1EDw45Q7dH29MlVeE6pVHk2Biq0R3AzJKDAzM3fVXM9fw+mrAFTl7Ss kx3CMQnCYA== -----END CERTIFICATE-----Generated at Wed Oct 14 15:23:29 2026 by rpki-client