$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft File: 1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft (raw, json) Hash identifier: 9eeiyAn/YOxqCQQjpr5gyP1OjOc3JLVaOZFPjfta9tA= Subject key identifier: 28:5C:48:D6:FC:B2:2D:D5:42:6D:25:09:1B:68:8A:74:F1:83:90:05 Authority key identifier: 15:57:B2:F7:8A:0F:8A:CA:63:B4:BE:D7:56:4D:19:B7:9B:69:FF:ED Certificate issuer: /CN=1557B2F78A0F8ACA63B4BED7564D19B79B69FFED Certificate serial: 5C0EB1E1E63F0DA80C91F598B82CB298EE533181 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft Manifest number: 0B Signing time: Mon 21 Sep 2026 05:57:57 +0000 Manifest this update: Mon 21 Sep 2026 05:52:57 +0000 Manifest next update: Thu 24 Sep 2026 16:05:57 +0000 Files and hashes: 1: 1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl (hash: GEKNM58EF6TBkGIaAYzgLRSowf6t0I4vT3zI2jOcrvM=) 2: 3132332e3130332e32342e302f32322d3232203d3e2034383038.roa (hash: FZPXOuuaRRXPhHCFo0zBvRgZoP26kE1/D9UKHQehW7I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0e:b1:e1:e6:3f:0d:a8:0c:91:f5:98:b8:2c:b2:98:ee:53:31:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1557B2F78A0F8ACA63B4BED7564D19B79B69FFED Validity Not Before: Sep 21 05:52:57 2026 GMT Not After : Sep 24 16:05:57 2026 GMT Subject: CN=285C48D6FCB22DD5426D25091B688A74F1839005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:31:4f:f2:2f:c9:6e:d7:5e:52:a9:cb:55:56: 5e:35:6a:4d:81:cc:0a:1f:18:70:da:ee:2e:a6:b9: e1:82:53:84:32:86:a5:45:5b:6e:29:c0:b8:a5:ea: 1f:00:3c:26:66:87:f5:6a:6e:83:9a:c4:6e:a7:8c: db:19:1f:6a:52:7a:7a:6e:cb:f8:3c:76:83:fe:9c: aa:bf:ea:00:ca:2a:a7:b7:3b:a3:e5:cd:1d:7b:14: 25:b9:70:60:9a:94:6e:ef:61:5e:39:fc:d9:05:1d: f7:8a:5b:59:ca:c5:ff:aa:54:2e:87:1d:45:93:6e: d6:b8:d8:b9:53:7d:19:a9:6e:3c:bd:db:69:ff:d2: 03:0e:ae:73:52:20:a4:0a:4a:d5:a6:cb:b7:5f:87: 42:6e:9d:6e:7e:8a:c0:fd:e4:9e:01:eb:35:ba:43: ff:ea:b3:4b:e7:87:57:81:84:94:3f:7a:51:63:54: 39:3f:81:7f:0b:13:78:0a:7c:2d:9c:11:90:e2:1f: 71:d5:38:f8:7d:f7:7d:c0:e6:a6:15:c9:9c:bd:18: eb:1a:98:a1:24:42:b1:84:57:4c:aa:dc:32:b5:43: 4b:b4:4a:74:d2:61:47:e5:c0:0c:d1:1c:ca:bf:02: d9:4d:84:fa:a4:dc:0a:45:64:1b:df:df:a2:21:84: 8f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5C:48:D6:FC:B2:2D:D5:42:6D:25:09:1B:68:8A:74:F1:83:90:05 X509v3 Authority Key Identifier: keyid:15:57:B2:F7:8A:0F:8A:CA:63:B4:BE:D7:56:4D:19:B7:9B:69:FF:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ca:9c:dd:49:f4:fa:e8:97:e5:45:b7:5d:3d:8f:c1:5f:99: 78:6d:9d:d2:82:71:2e:b2:a9:94:a6:87:ce:c1:bf:95:50:94: a5:7d:1b:bd:69:47:8a:92:c2:ce:5e:eb:32:23:1f:10:c3:20: f2:8d:40:7f:96:4f:e8:73:6a:54:a9:15:6c:12:4e:c3:2a:83: 2c:d5:19:e8:4a:a9:15:a7:53:26:52:9b:a9:a2:71:0a:40:bd: 03:7b:26:1d:4a:e9:6e:cd:9b:b1:e4:db:ac:52:37:14:39:0f: 5c:a6:ce:d4:b8:f9:96:1b:c6:dc:87:83:af:02:83:62:51:5c: 76:f0:96:76:14:fd:f8:bc:be:c0:d6:4b:0c:ed:c1:3f:d1:62: 28:75:b5:8b:33:46:c4:ad:28:b1:a2:39:40:76:62:d7:36:2e: ad:50:23:84:8e:eb:c2:1b:c1:82:95:cb:f1:62:ee:9f:2a:b5: 1b:79:11:be:ec:91:6f:d2:00:bf:da:76:7c:fa:5b:f1:45:dd: 90:b3:31:00:0c:4a:45:90:76:4f:44:c8:7a:f2:01:e5:66:da: 0c:07:09:f4:bf:e9:83:51:63:90:f6:08:fc:e4:e2:de:3f:27: 84:c1:12:7b:1f:b9:40:38:bf:6d:57:b0:af:3c:d2:bb:77:19: bc:61:4b:e1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXA6x4eY/DagMkfWYuCyymO5TMYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU1N0IyRjc4QTBGOEFDQTYzQjRCRUQ3NTY0RDE5Qjc5 QjY5RkZFRDAeFw0yNjA5MjEwNTUyNTdaFw0yNjA5MjQxNjA1NTdaMDMxMTAvBgNV BAMTKDI4NUM0OEQ2RkNCMjJERDU0MjZEMjUwOTFCNjg4QTc0RjE4MzkwMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLMU/yL8lu115SqctVVl41ak2B zAofGHDa7i6mueGCU4QyhqVFW24pwLil6h8APCZmh/VqboOaxG6njNsZH2pSenpu y/g8doP+nKq/6gDKKqe3O6PlzR17FCW5cGCalG7vYV45/NkFHfeKW1nKxf+qVC6H HUWTbta42LlTfRmpbjy922n/0gMOrnNSIKQKStWmy7dfh0JunW5+isD95J4B6zW6 Q//qs0vnh1eBhJQ/elFjVDk/gX8LE3gKfC2cEZDiH3HVOPh9933A5qYVyZy9GOsa mKEkQrGEV0yq3DK1Q0u0SnTSYUflwAzRHMq/AtlNhPqk3ApFZBvf36IhhI8FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKFxI1vyyLdVCbSUJG2iKdPGDkAUwHwYDVR0j BBgwFoAUFVey94oPispjtL7XVk0Zt5tp/+0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE0 Njk5ODI2MzEyODI2MDY1My8wLzE1NTdCMkY3OEEwRjhBQ0E2M0I0QkVENzU2NEQx OUI3OUI2OUZGRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTU1N0IyRjc4QTBGOEFDQTYzQjRCRUQ3NTY0RDE5Qjc5QjY5RkZFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNDY5OTgyNjMxMjgyNjA2NTMvMC8xNTU3QjJGNzhBMEY4 QUNBNjNCNEJFRDc1NjREMTlCNzlCNjlGRkVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8qc3Un0+uiX 5UW3XT2PwV+ZeG2d0oJxLrKplKaHzsG/lVCUpX0bvWlHipLCzl7rMiMfEMMg8o1A f5ZP6HNqVKkVbBJOwyqDLNUZ6EqpFadTJlKbqaJxCkC9A3smHUrpbs2bseTbrFI3 FDkPXKbO1Lj5lhvG3IeDrwKDYlFcdvCWdhT9+Ly+wNZLDO3BP9FiKHW1izNGxK0o saI5QHZi1zYurVAjhI7rwhvBgpXL8WLunyq1G3kRvuyRb9IAv9p2fPpb8UXdkLMx AAxKRZB2T0TIevIB5WbaDAcJ9L/pg1FjkPYI/OTi3j8nhMESex+5QDi/bVewrzzS u3cZvGFL4Q== -----END CERTIFICATE-----Generated at Tue Sep 22 21:07:32 2026 by rpki-client