$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft File: B53E57671412C3144DC646263A3169FBAB466617.mft (raw, json) Hash identifier: jqXJN0aCWxwO/Od/kc8jFuQi8J1qsMqYEpB3zFf/Fmk= Subject key identifier: B8:08:31:A3:77:32:C7:9C:3A:0C:21:38:52:A5:A9:39:D1:6A:FB:B4 Authority key identifier: B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 Certificate issuer: /CN=B53E57671412C3144DC646263A3169FBAB466617 Certificate serial: 7B7818DFB0A28662DE1E46C3690108764FA1BDE3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft Manifest number: 9A Signing time: Fri 09 Oct 2026 02:28:01 +0000 Manifest this update: Fri 09 Oct 2026 02:23:01 +0000 Manifest next update: Mon 12 Oct 2026 09:54:01 +0000 Files and hashes: 1: 3130332e3235332e3230342e302f32322d3234203d3e203137343238.roa (hash: ko7gCLi6CMLFIhxFKTT1cmJPl7Ml6iCxb4ojqre9A3Q=) 2: 3130332e3235332e3230342e302f32322d3234203d3e2034383131.roa (hash: f3RcKA0n7bijmUgFzN1FVeb80vQjPy76qjvv4vuDzfQ=) 3: 3130332e3235332e3230342e302f32322d3234203d3e203234343030.roa (hash: E4wR4NLFggrLxHJQdf1KzP2OMs6lbWCeIqkEqlDy23g=) 4: 3130332e3235332e3230342e302f32322d3234203d3e203137363231.roa (hash: miR+yOAxVwH6aRovAi7pmIbHENiIMw7vrr3vUC/C/ag=) 5: B53E57671412C3144DC646263A3169FBAB466617.crl (hash: FSleFtPlvsiHvW7+p4dvS3gAucvOXDAPWWp8Ul55RiI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:78:18:df:b0:a2:86:62:de:1e:46:c3:69:01:08:76:4f:a1:bd:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B53E57671412C3144DC646263A3169FBAB466617 Validity Not Before: Oct 9 02:23:01 2026 GMT Not After : Oct 12 09:54:01 2026 GMT Subject: CN=B80831A37732C79C3A0C213852A5A939D16AFBB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:e6:61:cc:a5:13:3f:b3:5d:c0:99:f4:1e: f2:7e:8c:61:9b:47:d3:b9:d1:a3:45:9f:d1:5f:8c: 49:32:a7:e9:51:7b:c9:4d:18:9c:87:00:0e:57:25: 9f:5b:09:af:2e:f9:cc:2b:b5:62:5b:36:e5:79:67: 38:47:cc:f4:05:c0:4c:1e:85:10:8e:5b:80:9d:e7: e3:f4:f4:9a:11:a9:bc:20:57:b0:c7:24:3e:96:89: 1e:2d:01:f2:a8:c0:aa:b6:7c:55:d6:6f:1b:68:d7: f0:9f:ea:d6:18:a0:ef:b2:a7:3a:a3:f9:f0:87:83: b7:5e:2f:fd:85:2d:a6:c6:e2:c1:2e:4a:77:c8:da: 8d:43:f5:af:23:13:0f:05:16:05:e5:1c:58:0c:b9: 9a:03:2e:70:9a:37:35:75:71:c6:14:fe:42:b2:48: 67:47:60:b9:c0:8c:eb:7b:42:53:ef:86:0c:e0:02: 81:d0:93:15:ed:bf:6e:2a:36:11:34:3f:79:87:b1: 7d:b5:6f:10:7a:69:82:91:1b:31:7c:61:86:08:db: d6:49:64:27:be:94:49:eb:42:d8:4e:b2:24:79:c4: 65:07:3a:fe:6d:91:bb:92:f2:5a:34:b8:1a:00:e4: 6e:82:d1:e9:17:e2:59:57:51:9a:5a:1f:94:87:db: ce:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:08:31:A3:77:32:C7:9C:3A:0C:21:38:52:A5:A9:39:D1:6A:FB:B4 X509v3 Authority Key Identifier: keyid:B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9c:ba:a5:d8:3d:00:08:fa:a1:c9:fc:24:4d:61:1a:c0:a0: 99:bb:8e:c8:7f:e3:46:cd:af:c4:ff:6e:7d:33:d0:ef:f8:1c: 0a:df:3f:07:7a:11:4b:6c:c5:41:b3:0d:19:36:46:09:f9:d6: e7:81:e4:11:0d:72:6e:34:02:f0:d2:0e:0a:0e:64:f0:b6:d6: ae:c3:2f:0b:46:b1:ad:17:93:f2:c9:10:61:9d:3a:c6:46:df: 1b:f3:cd:14:5b:82:48:4a:bc:1d:da:b9:8b:68:4b:63:78:eb: 26:0e:9e:29:74:42:54:3f:4b:ee:0f:8d:42:38:18:76:8c:18: 6f:ce:96:99:fd:0a:af:8f:5a:60:71:8a:46:1a:67:af:b1:d2: 8e:05:c0:2b:65:49:00:84:ef:03:b4:88:a0:cd:dc:98:63:7d: 40:77:07:12:6e:33:dc:91:1d:23:2f:93:55:2d:ca:d7:f7:e9: 53:20:de:65:67:50:74:6f:e0:c6:8b:c3:6c:bf:13:8a:a1:ec: 51:2a:fe:f3:74:57:48:18:fc:af:62:4c:b5:2e:13:43:72:fa: eb:31:40:95:7e:31:7e:a9:da:75:2c:f9:73:88:99:89:d6:7c: 70:6e:73:e2:a9:5f:70:fe:ab:c1:ab:2d:19:52:4d:c6:04:ec: 05:ed:b3:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe3gY37CihmLeHkbDaQEIdk+hveMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJB QjQ2NjYxNzAeFw0yNjEwMDkwMjIzMDFaFw0yNjEwMTIwOTU0MDFaMDMxMTAvBgNV BAMTKEI4MDgzMUEzNzczMkM3OUMzQTBDMjEzODUyQTVBOTM5RDE2QUZCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+uZhzKUTP7NdwJn0HvJ+jGGb R9O50aNFn9FfjEkyp+lRe8lNGJyHAA5XJZ9bCa8u+cwrtWJbNuV5ZzhHzPQFwEwe hRCOW4Cd5+P09JoRqbwgV7DHJD6WiR4tAfKowKq2fFXWbxto1/Cf6tYYoO+ypzqj +fCHg7deL/2FLabG4sEuSnfI2o1D9a8jEw8FFgXlHFgMuZoDLnCaNzV1ccYU/kKy SGdHYLnAjOt7QlPvhgzgAoHQkxXtv24qNhE0P3mHsX21bxB6aYKRGzF8YYYI29ZJ ZCe+lEnrQthOsiR5xGUHOv5tkbuS8lo0uBoA5G6C0ekX4llXUZpaH5SH285jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuAgxo3cyx5w6DCE4UqWpOdFq+7QwHwYDVR0j BBgwFoAUtT5XZxQSwxRNxkYmOjFp+6tGZhcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTI5MTI2NTgyMTc2OTc0OS8wL0I1M0U1NzY3MTQxMkMzMTQ0REM2NDYyNjNBMzE2 OUZCQUI0NjY2MTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJBQjQ2NjYxNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkyOTEyNjU4MjE3Njk3NDkvMC9CNTNFNTc2NzE0MTJD MzE0NERDNjQ2MjYzQTMxNjlGQkFCNDY2NjE3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZy6pdg9AAj6 ocn8JE1hGsCgmbuOyH/jRs2vxP9ufTPQ7/gcCt8/B3oRS2zFQbMNGTZGCfnW54Hk EQ1ybjQC8NIOCg5k8LbWrsMvC0axrReT8skQYZ06xkbfG/PNFFuCSEq8Hdq5i2hL Y3jrJg6eKXRCVD9L7g+NQjgYdowYb86Wmf0Kr49aYHGKRhpnr7HSjgXAK2VJAITv A7SIoM3cmGN9QHcHEm4z3JEdIy+TVS3K1/fpUyDeZWdQdG/gxovDbL8TiqHsUSr+ 83RXSBj8r2JMtS4TQ3L66zFAlX4xfqnadSz5c4iZidZ8cG5z4qlfcP6rwastGVJN xgTsBe2zZQ== -----END CERTIFICATE-----Generated at Sun Oct 11 03:48:39 2026 by rpki-client