$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft File: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft (raw, json) Hash identifier: PbtN8sCBphSzd9cMEto1oKBrKMAjswM3+W9BEIA87tU= Subject key identifier: 8B:64:D2:91:0E:64:94:80:73:E1:FF:A1:86:D5:39:73:28:71:F4:A3 Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Certificate serial: 03203751CED089F03BE192BB5F64E66C4E3FFA54 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft Manifest number: 0156 Signing time: Thu 08 Oct 2026 23:02:48 +0000 Manifest this update: Thu 08 Oct 2026 22:57:48 +0000 Manifest next update: Mon 12 Oct 2026 03:20:48 +0000 Files and hashes: 1: AS37965.roa (hash: WqUXnyg1uf3ZmALi5qBQD27vR+G2kGWGNdeH3Rrxw/s=) 2: AS7468.roa (hash: 75eFM6TDUijgBthtNWc7ZiQTaXN3U/MkdRryvwmRYbA=) 3: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl (hash: Yx2OJgbZUy6eH8Vxlyrn0SSME4aokOQztOzPw2ANfh4=) 4: AS0.roa (hash: MeUjvzlC8RfPCHIeXCPkR1JPOSKEr9L37VfQjU8gU4M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 03:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:20:37:51:ce:d0:89:f0:3b:e1:92:bb:5f:64:e6:6c:4e:3f:fa:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Validity Not Before: Oct 8 22:57:48 2026 GMT Not After : Oct 12 03:20:48 2026 GMT Subject: CN=8B64D2910E64948073E1FFA186D539732871F4A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:86:76:29:6f:f9:c2:a4:fd:6e:89:51:8e: bd:64:d6:8e:00:2c:02:bb:f3:9f:51:80:f8:0a:0f: c2:36:4b:8e:bd:62:ea:1e:16:4a:10:f7:a9:84:15: 10:e5:45:ee:dd:91:c5:dc:f2:89:c3:1b:09:3a:21: dd:c6:9c:95:28:db:a3:7a:78:b2:94:11:fc:45:40: ae:1d:06:2f:6b:a7:29:06:06:4e:b0:91:f8:ed:f7: f1:ab:3b:97:44:c2:51:57:7a:59:61:bb:10:46:dd: 45:e0:16:4f:6e:df:10:fe:4d:c6:0a:35:f3:f6:30: 58:c1:93:90:54:84:c9:0f:b9:f8:e1:ab:83:db:eb: 37:c5:43:ad:56:d0:0f:28:d6:1c:ca:99:9f:06:08: 90:e2:67:33:16:1c:e5:76:f1:cc:64:dc:a9:4d:8b: c5:84:55:54:34:be:4f:c5:66:a2:04:5f:60:7a:af: af:af:37:ba:dd:cd:0f:1b:f7:1b:91:3d:f3:71:2d: 84:f2:0f:d6:af:ae:67:95:dd:95:ba:b5:04:47:94: 0a:b4:3e:d9:52:aa:5b:84:f9:17:2e:d6:46:b9:1b: a2:0d:22:a3:8b:34:57:3c:3f:61:8b:85:b6:4c:84: cf:ff:bd:33:71:9b:83:df:0f:5e:23:21:50:06:bf: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:64:D2:91:0E:64:94:80:73:E1:FF:A1:86:D5:39:73:28:71:F4:A3 X509v3 Authority Key Identifier: keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ef:a2:1a:5b:8a:f7:fd:ea:6d:a7:e1:c7:1c:d6:a4:1c:b9: 1a:b3:c7:37:7d:02:e7:6a:b3:d5:7b:02:02:54:54:af:2d:5e: ed:49:57:90:7d:5e:fa:57:30:d5:bb:47:eb:e1:db:f1:71:d4: 6a:c1:9e:1f:b6:58:48:48:83:cb:36:2e:2c:ef:8c:f1:4a:7b: 3e:78:01:3f:40:4b:b4:2c:e1:f0:c0:93:d5:12:8a:76:dd:26: 23:9c:1c:8c:71:e7:61:1c:db:eb:89:76:5c:41:c5:b7:e2:3a: 9a:c4:af:8e:dd:e5:46:5e:26:71:3e:c5:18:45:f3:5c:1b:c3: 5c:08:b0:04:01:bd:cf:1b:1d:cf:41:bb:25:85:45:db:7c:2b: f7:ab:68:d8:c4:ff:80:ba:28:47:c8:5c:3a:9e:d0:cb:b1:db: 0f:cf:5e:8f:90:e5:61:c3:48:b0:dc:39:0a:31:b1:2b:e1:db: 92:d5:85:4b:3b:4e:7d:39:c7:02:ec:c1:9f:04:d0:21:4d:4b: d2:34:a7:b7:1c:c7:90:c1:0e:d4:f3:63:7b:b1:6c:48:b2:21: 1c:fc:b3:17:a9:03:bb:a8:a7:9c:57:10:cc:de:e2:37:ea:a1: 96:8d:1b:87:ce:55:10:f2:a1:b9:ae:3f:18:3a:3d:90:4d:3e: 78:7d:86:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAyA3Uc7QifA74ZK7X2TmbE4/+lQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0 RTBFNEM1RTAeFw0yNjEwMDgyMjU3NDhaFw0yNjEwMTIwMzIwNDhaMDMxMTAvBgNV BAMTKDhCNjREMjkxMEU2NDk0ODA3M0UxRkZBMTg2RDUzOTczMjg3MUY0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxg4Z2KW/5wqT9bolRjr1k1o4A LAK7859RgPgKD8I2S469YuoeFkoQ96mEFRDlRe7dkcXc8onDGwk6Id3GnJUo26N6 eLKUEfxFQK4dBi9rpykGBk6wkfjt9/GrO5dEwlFXellhuxBG3UXgFk9u3xD+TcYK NfP2MFjBk5BUhMkPufjhq4Pb6zfFQ61W0A8o1hzKmZ8GCJDiZzMWHOV28cxk3KlN i8WEVVQ0vk/FZqIEX2B6r6+vN7rdzQ8b9xuRPfNxLYTyD9avrmeV3ZW6tQRHlAq0 PtlSqluE+Rcu1ka5G6INIqOLNFc8P2GLhbZMhM//vTNxm4PfD14jIVAGv57BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUi2TSkQ5klIBz4f+hhtU5cyhx9KMwHwYDVR0j BBgwFoAUpRQI6XAQvbRBRigbini8+k4OTF4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8wL0E1MTQwOEU5NzAxMEJEQjQ0MTQ2MjgxQjhBNzhC Q0ZBNEUwRTRDNUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0RTBFNEM1RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMC9BNTE0MDhFOTcwMTBC REI0NDE0NjI4MUI4QTc4QkNGQTRFMEU0QzVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV++iGluK9/3q bafhxxzWpBy5GrPHN30C52qz1XsCAlRUry1e7UlXkH1e+lcw1btH6+Hb8XHUasGe H7ZYSEiDyzYuLO+M8Up7PngBP0BLtCzh8MCT1RKKdt0mI5wcjHHnYRzb64l2XEHF t+I6msSvjt3lRl4mcT7FGEXzXBvDXAiwBAG9zxsdz0G7JYVF23wr96to2MT/gLoo R8hcOp7Qy7HbD89ej5DlYcNIsNw5CjGxK+HbktWFSztOfTnHAuzBnwTQIU1L0jSn txzHkMEO1PNje7FsSLIhHPyzF6kDu6innFcQzN7iN+qhlo0bh85VEPKhua4/GDo9 kE0+eH2Gkw== -----END CERTIFICATE-----Generated at Sat Oct 10 17:51:58 2026 by rpki-client