$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft File: E5D57E4A2476439498A02EC11848C8E17D56B388.mft (raw, json) Hash identifier: Y3YKDXJ01KoPD6bippWL2ehHozkWY13Y+P+7qQXTv1I= Subject key identifier: 4C:DF:19:54:06:20:80:5F:D5:F6:F0:CE:D5:75:35:3B:82:79:E0:DA Authority key identifier: E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88 Certificate issuer: /CN=E5D57E4A2476439498A02EC11848C8E17D56B388 Certificate serial: 6E927DAB97B2E7AAF54C84DA8716499CECE991F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft Manifest number: 96 Signing time: Sat 24 Oct 2026 12:11:42 +0000 Manifest this update: Sat 24 Oct 2026 12:06:42 +0000 Manifest next update: Tue 27 Oct 2026 13:37:42 +0000 Files and hashes: 1: E5D57E4A2476439498A02EC11848C8E17D56B388.crl (hash: XHYwwj0o0+ycoVtiSd5/sIrD1LosI+WZqOFGgxIW3Hk=) 2: 3136332e3232372e34302e302f32332d3234203d3e20313337373535.roa (hash: GQ8uXcbQu5NjmYx12RowTxJ7cLfQNV5AAopnjSe07GE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 17:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:92:7d:ab:97:b2:e7:aa:f5:4c:84:da:87:16:49:9c:ec:e9:91:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E5D57E4A2476439498A02EC11848C8E17D56B388 Validity Not Before: Oct 24 12:06:42 2026 GMT Not After : Oct 27 13:37:42 2026 GMT Subject: CN=4CDF19540620805FD5F6F0CED575353B8279E0DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7f:2a:06:41:c1:0a:32:ac:f3:36:e5:57:a8: 78:b9:3d:be:07:d3:a3:ab:66:fa:56:f0:f9:14:59: 92:c8:d4:2e:e5:1a:e8:18:02:41:6e:d7:65:0b:fd: 9e:b7:20:f4:60:9e:a6:c0:c8:67:cf:02:e5:df:68: 9b:e5:9e:a7:8c:3e:09:d2:77:21:e0:07:0b:71:97: af:b7:e0:35:ee:ec:fb:8f:44:6e:3a:97:51:8c:e9: 1a:eb:7a:19:c7:98:fd:2e:a5:5f:f3:48:3d:d3:00: 88:19:47:96:ca:0b:c0:67:51:a4:39:66:c3:a2:d2: 70:17:a9:46:5b:93:62:77:70:f5:2a:6d:c0:4d:7d: d7:14:1a:6d:5d:f8:b0:23:36:8f:65:d0:b2:ee:aa: 72:ff:f4:70:3e:ec:c0:7d:ac:1e:ab:d7:8b:c9:fb: 08:3c:de:5a:dc:78:1a:8f:4e:4a:68:37:23:71:ac: 3d:68:ef:26:da:70:97:cb:dd:c7:38:ea:e1:cc:aa: 3b:fc:36:3f:f7:7a:10:77:4f:27:5d:3f:8c:9f:7a: de:c9:a1:95:b2:e1:74:82:be:a7:82:79:cc:29:72: 41:e1:65:f7:f9:cb:cb:27:a9:2b:7c:b2:a4:4a:ec: 5e:24:a4:86:24:b0:73:9d:fe:64:0d:35:c2:7a:a0: 2e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DF:19:54:06:20:80:5F:D5:F6:F0:CE:D5:75:35:3B:82:79:E0:DA X509v3 Authority Key Identifier: keyid:E5:D5:7E:4A:24:76:43:94:98:A0:2E:C1:18:48:C8:E1:7D:56:B3:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E5D57E4A2476439498A02EC11848C8E17D56B388.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112291523388571669/0/E5D57E4A2476439498A02EC11848C8E17D56B388.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:30:fa:63:3b:c5:a5:4b:0c:d8:d0:b9:03:e1:47:d3:cd:b0: 36:74:80:cb:61:99:1d:ff:59:4f:57:da:01:f4:2a:8c:5f:cf: 93:5a:59:a3:99:bc:d5:ee:aa:c3:74:fb:c1:80:00:c1:fb:ef: 3b:d3:a2:b3:1a:61:9c:4a:f1:7e:78:02:2e:eb:cf:b4:b0:1c: e4:dd:c7:8a:be:58:97:05:36:e6:ba:99:9c:5b:94:a9:c5:5d: d7:c4:d6:f8:e6:f7:07:84:3a:55:11:1d:a8:35:1b:65:41:89: 19:28:eb:70:cd:e4:99:a9:4e:f1:87:65:8f:59:a0:22:f0:96: 0a:43:13:80:05:7d:07:53:4a:8f:74:97:f3:51:9c:2a:f6:ef: fc:ec:fe:f0:19:66:97:b7:42:7e:3a:90:01:22:3a:2e:d1:65: e5:ba:af:ed:8f:65:a5:e8:03:7a:7d:68:28:32:34:25:70:ad: dc:43:36:e5:20:04:61:17:d0:a7:46:f7:e4:b8:fb:dc:af:49: 46:61:f3:ba:56:6e:31:1f:03:97:d2:bd:69:98:2d:36:82:47: f6:d0:24:a6:67:84:99:90:d8:25:a7:24:19:ec:b5:af:98:76: f3:d9:2c:35:98:ae:7d:6e:28:db:bc:70:fb:32:f1:86:c0:44: 7f:93:f7:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbpJ9q5ey56r1TITahxZJnOzpkfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTVENTdFNEEyNDc2NDM5NDk4QTAyRUMxMTg0OEM4RTE3 RDU2QjM4ODAeFw0yNjEwMjQxMjA2NDJaFw0yNjEwMjcxMzM3NDJaMDMxMTAvBgNV BAMTKDRDREYxOTU0MDYyMDgwNUZENUY2RjBDRUQ1NzUzNTNCODI3OUUwREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvfyoGQcEKMqzzNuVXqHi5Pb4H 06OrZvpW8PkUWZLI1C7lGugYAkFu12UL/Z63IPRgnqbAyGfPAuXfaJvlnqeMPgnS dyHgBwtxl6+34DXu7PuPRG46l1GM6RrrehnHmP0upV/zSD3TAIgZR5bKC8BnUaQ5 ZsOi0nAXqUZbk2J3cPUqbcBNfdcUGm1d+LAjNo9l0LLuqnL/9HA+7MB9rB6r14vJ +wg83lrceBqPTkpoNyNxrD1o7ybacJfL3cc46uHMqjv8Nj/3ehB3TyddP4yfet7J oZWy4XSCvqeCecwpckHhZff5y8snqSt8sqRK7F4kpIYksHOd/mQNNcJ6oC6rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTN8ZVAYggF/V9vDO1XU1O4J54NowHwYDVR0j BBgwFoAU5dV+SiR2Q5SYoC7BGEjI4X1Ws4gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI5MTUyMzM4ODU3MTY2OS8wL0U1RDU3RTRBMjQ3NjQzOTQ5OEEwMkVDMTE4NDhD OEUxN0Q1NkIzODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTVENTdFNEEyNDc2NDM5NDk4QTAyRUMxMTg0OEM4RTE3RDU2QjM4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyOTE1MjMzODg1NzE2NjkvMC9FNUQ1N0U0QTI0NzY0 Mzk0OThBMDJFQzExODQ4QzhFMTdENTZCMzg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDD6YzvFpUsM 2NC5A+FH082wNnSAy2GZHf9ZT1faAfQqjF/Pk1pZo5m81e6qw3T7wYAAwfvvO9Oi sxphnErxfngCLuvPtLAc5N3Hir5YlwU25rqZnFuUqcVd18TW+Ob3B4Q6VREdqDUb ZUGJGSjrcM3kmalO8Ydlj1mgIvCWCkMTgAV9B1NKj3SX81GcKvbv/Oz+8Blml7dC fjqQASI6LtFl5bqv7Y9lpegDen1oKDI0JXCt3EM25SAEYRfQp0b35Lj73K9JRmHz ulZuMR8Dl9K9aZgtNoJH9tAkpmeEmZDYJackGey1r5h289ksNZiufW4o27xw+zLx hsBEf5P3Bw== -----END CERTIFICATE-----Generated at Sun Oct 25 14:14:41 2026 by rpki-client