$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft File: B53E57671412C3144DC646263A3169FBAB466617.mft (raw, json) Hash identifier: iv2Qlm2YMYGEMsPYElrn23dOJNjzAjf69+JyolIT96s= Subject key identifier: 2C:AE:D1:57:80:F1:F0:8A:93:FF:A3:41:B6:32:84:1E:A9:7F:31:D2 Authority key identifier: B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 Certificate issuer: /CN=B53E57671412C3144DC646263A3169FBAB466617 Certificate serial: 40DB965AE13A24ECB1956AB62BB8FEFAC5C00816 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft Manifest number: 5F Signing time: Tue 28 Jul 2026 17:42:25 +0000 Manifest this update: Tue 28 Jul 2026 17:37:25 +0000 Manifest next update: Wed 29 Jul 2026 18:02:25 +0000 Files and hashes: 1: 3130332e3235332e3230342e302f32322d3234203d3e203234343030.roa (hash: E4wR4NLFggrLxHJQdf1KzP2OMs6lbWCeIqkEqlDy23g=) 2: B53E57671412C3144DC646263A3169FBAB466617.crl (hash: FexVwTWpvg9R7qzfYVXheQJPHwF/GNXLKFAJC0DYPJg=) 3: 3130332e3235332e3230342e302f32322d3234203d3e2034383131.roa (hash: f3RcKA0n7bijmUgFzN1FVeb80vQjPy76qjvv4vuDzfQ=) 4: 3130332e3235332e3230342e302f32322d3234203d3e203137343238.roa (hash: ko7gCLi6CMLFIhxFKTT1cmJPl7Ml6iCxb4ojqre9A3Q=) 5: 3130332e3235332e3230342e302f32322d3234203d3e203137363231.roa (hash: miR+yOAxVwH6aRovAi7pmIbHENiIMw7vrr3vUC/C/ag=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:db:96:5a:e1:3a:24:ec:b1:95:6a:b6:2b:b8:fe:fa:c5:c0:08:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B53E57671412C3144DC646263A3169FBAB466617 Validity Not Before: Jul 28 17:37:25 2026 GMT Not After : Jul 29 18:02:25 2026 GMT Subject: CN=2CAED15780F1F08A93FFA341B632841EA97F31D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:97:f7:98:74:61:33:e5:a0:48:0c:ce:7c:1c: 95:5f:3c:c1:87:95:cd:26:df:c3:82:83:b0:ef:f9: 29:6f:9d:ae:82:97:27:5e:00:a1:e7:4f:31:d6:8d: b2:ce:a5:6d:75:ed:cb:41:8e:7f:5b:0e:ba:8a:e7: 2d:b3:f1:3f:4a:7d:78:40:d3:a9:e5:13:cd:cb:c7: a0:13:6b:2e:50:df:aa:c2:30:3c:f8:5d:5d:bf:ee: df:7b:7c:ad:25:cc:2b:29:af:8d:f1:87:60:da:ff: 66:bb:4a:80:12:15:3e:9a:b1:c1:32:43:67:46:77: 81:7c:cd:48:87:66:b1:44:80:4a:26:91:39:17:65: 01:6b:20:c4:9e:b8:0c:0d:13:97:39:d2:c6:1c:9a: 95:4f:23:fa:10:af:3e:ce:7a:3a:11:be:10:06:ab: fa:0c:06:60:3e:b8:d3:d2:ca:61:a3:e9:07:67:f7: e0:56:14:00:2d:a4:68:d2:46:f2:68:4f:ba:48:8a: 03:cc:ad:6c:7d:73:be:3d:b5:4f:e8:1d:31:8c:df: a1:78:ca:0d:7f:33:9d:19:3f:35:28:1a:0c:fb:ef: 0d:0c:77:79:65:04:46:ea:68:4f:10:a4:b3:e0:62: cf:2e:ca:53:f9:a5:10:9c:68:ac:4f:58:72:5c:6f: 71:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AE:D1:57:80:F1:F0:8A:93:FF:A3:41:B6:32:84:1E:A9:7F:31:D2 X509v3 Authority Key Identifier: keyid:B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a3:2c:40:1a:94:87:ae:fc:df:11:05:29:86:1f:13:64:e1: 98:71:f5:4c:11:38:ba:03:20:4d:81:b4:46:84:f1:51:6f:b3: 5f:a0:c4:56:84:8e:4b:fb:64:53:95:05:cc:33:aa:0c:cc:71: 3f:28:f7:dd:18:6c:73:05:ed:94:bd:78:53:f8:35:be:ec:35: 2e:49:fe:9d:a9:6d:b1:62:82:22:0b:83:e2:52:17:88:32:28: 21:7a:52:ad:2e:07:31:30:19:4e:09:47:d6:0e:93:be:49:05: c5:6f:6f:28:c0:fc:90:26:61:cb:e2:ff:94:24:e3:57:65:cb: 60:87:88:26:c8:9f:b4:24:41:8a:21:44:a8:a5:b9:0d:dd:39: db:45:d4:8b:c1:7e:13:11:60:87:2a:5a:cd:c2:59:30:00:0e: e5:f8:da:8f:13:69:38:3e:23:9a:f5:df:a0:8a:7a:99:d6:82: 8a:c2:bc:c6:69:7b:bd:04:8b:e4:86:63:44:ee:87:75:2a:f8: fb:f3:09:7b:bd:8c:41:5d:02:6c:ee:aa:41:59:81:c6:91:9b: b7:89:0e:87:60:e6:a7:40:de:42:a2:d8:b1:65:6c:22:4f:31: 26:e4:62:3c:ff:78:30:81:12:66:7f:45:42:5a:c5:6b:af:24: d0:0f:6d:fb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQNuWWuE6JOyxlWq2K7j++sXACBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJB QjQ2NjYxNzAeFw0yNjA3MjgxNzM3MjVaFw0yNjA3MjkxODAyMjVaMDMxMTAvBgNV BAMTKDJDQUVEMTU3ODBGMUYwOEE5M0ZGQTM0MUI2MzI4NDFFQTk3RjMxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXl/eYdGEz5aBIDM58HJVfPMGH lc0m38OCg7Dv+Slvna6ClydeAKHnTzHWjbLOpW117ctBjn9bDrqK5y2z8T9KfXhA 06nlE83Lx6ATay5Q36rCMDz4XV2/7t97fK0lzCspr43xh2Da/2a7SoASFT6ascEy Q2dGd4F8zUiHZrFEgEomkTkXZQFrIMSeuAwNE5c50sYcmpVPI/oQrz7OejoRvhAG q/oMBmA+uNPSymGj6Qdn9+BWFAAtpGjSRvJoT7pIigPMrWx9c749tU/oHTGM36F4 yg1/M50ZPzUoGgz77w0Md3llBEbqaE8QpLPgYs8uylP5pRCcaKxPWHJcb3GDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULK7RV4Dx8IqT/6NBtjKEHql/MdIwHwYDVR0j BBgwFoAUtT5XZxQSwxRNxkYmOjFp+6tGZhcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTI5MTI2NTgyMTc2OTc0OS8wL0I1M0U1NzY3MTQxMkMzMTQ0REM2NDYyNjNBMzE2 OUZCQUI0NjY2MTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJBQjQ2NjYxNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkyOTEyNjU4MjE3Njk3NDkvMC9CNTNFNTc2NzE0MTJD MzE0NERDNjQ2MjYzQTMxNjlGQkFCNDY2NjE3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaMsQBqUh678 3xEFKYYfE2ThmHH1TBE4ugMgTYG0RoTxUW+zX6DEVoSOS/tkU5UFzDOqDMxxPyj3 3RhscwXtlL14U/g1vuw1Lkn+naltsWKCIguD4lIXiDIoIXpSrS4HMTAZTglH1g6T vkkFxW9vKMD8kCZhy+L/lCTjV2XLYIeIJsiftCRBiiFEqKW5Dd0520XUi8F+ExFg hypazcJZMAAO5fjajxNpOD4jmvXfoIp6mdaCisK8xml7vQSL5IZjRO6HdSr4+/MJ e72MQV0CbO6qQVmBxpGbt4kOh2Dmp0DeQqLYsWVsIk8xJuRiPP94MIESZn9FQlrF a68k0A9t+w== -----END CERTIFICATE-----Generated at Wed Jul 29 08:50:09 2026 by rpki-client