$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: tGyFVYMDWfBLzUfN17qxkHHCM3JKnO68J/EbI12/SNI= Subject key identifier: F6:D2:EB:1B:B5:AA:74:B1:90:2C:42:08:6C:13:A2:EA:60:C1:6B:27 Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 1F11A9CB73649117341AA2AF6A91FB69F2896BF6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: 017B Signing time: Mon 28 Sep 2026 10:30:39 +0000 Manifest this update: Mon 28 Sep 2026 10:25:39 +0000 Manifest next update: Thu 01 Oct 2026 12:48:39 +0000 Files and hashes: 1: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: SdzG+b/5tGdPoPsKzyUjls3PL0juAmtTqAvs4uYWknM=) 2: 3135382e3134302e3235322e302f32332d3234203d3e20313331323734.roa (hash: TGnpfnQhsS1k/nAP16cg2KpYb7g3AjQiWgU6wkKWs+8=) 3: 3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa (hash: kE6wKBhuMjUgxfn0PWTZvjM6ZUZVSUsYT25Ok7nH0lY=) 4: 3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa (hash: /INl4ky3xjx7mEQ0U6bBoC5+zKf+ujMJbBuWVFGPcb0=) 5: 3135382e3134302e3235342e302f32342d3234203d3e203535393936.roa (hash: NLHSvBrFcQ4h0w0Js8XZIXTtt8u1SFZTuDSqPn5KlaU=) 6: 3135382e3134302e3235322e302f32332d3234203d3e203535393936.roa (hash: t9lcKguav4WXOmojUnQHYTiiMa8z1W3aaU9zrltKORw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 12:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:11:a9:cb:73:64:91:17:34:1a:a2:af:6a:91:fb:69:f2:89:6b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Sep 28 10:25:39 2026 GMT Not After : Oct 1 12:48:39 2026 GMT Subject: CN=F6D2EB1BB5AA74B1902C42086C13A2EA60C16B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:fb:19:4c:de:fa:7b:7b:21:3c:c8:da:ec: 2f:59:9e:69:3d:95:a0:46:dd:3d:e3:aa:fc:ee:07: 7c:95:b0:a0:95:67:c5:28:47:17:66:0d:5d:25:e0: 2a:e8:30:98:13:00:0b:a7:b0:ca:5f:55:57:ff:ca: 6e:f8:cd:9d:ec:b2:2d:d5:ac:93:41:b8:dc:95:2a: 95:57:5c:42:fb:c1:5d:b4:39:b6:bb:14:71:45:0a: 51:dd:34:20:48:40:89:95:07:c5:de:28:b7:4f:bd: 2a:32:be:d7:30:ea:57:25:23:02:6d:19:30:39:d5: 53:7e:f3:b0:39:ac:96:e0:02:bb:c5:11:f4:4d:eb: 93:21:d7:77:ca:3a:85:24:6b:98:9f:fa:b4:c3:2f: 3f:c2:7d:d2:ca:9d:2f:52:89:00:51:18:46:14:10: e3:ca:28:7b:c3:9b:00:fb:90:a0:23:f8:61:b2:f6: 76:c6:27:77:8e:81:c2:48:d7:85:6a:f9:d7:f8:d1: b4:14:6f:9d:8e:6b:29:02:82:92:3a:25:ed:f8:ff: 1f:bd:b1:ef:f0:ea:1b:43:b7:7f:5c:44:37:8d:68: b3:e9:98:d4:d5:62:bd:80:df:56:4c:48:07:55:49: 27:8c:ed:d9:75:3c:1b:98:2f:f6:81:d5:78:94:74: b6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D2:EB:1B:B5:AA:74:B1:90:2C:42:08:6C:13:A2:EA:60:C1:6B:27 X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:83:dd:5c:59:a1:b8:92:fb:3d:be:a0:17:5c:a7:4f:14:01: 80:a9:99:ee:b5:4e:13:a1:62:62:33:32:c7:00:76:46:16:fb: ab:03:74:67:e3:b9:ea:00:f3:a5:a6:23:7b:58:ff:b5:45:7b: cd:95:0d:50:e4:6f:4a:c6:fb:60:13:e4:2a:2c:a2:55:bd:c7: db:35:b3:ae:26:e1:b7:ed:0d:35:04:6f:ec:ba:f8:d0:9e:26: 90:22:84:ca:b7:41:26:d5:a7:17:af:cf:c0:04:8d:b5:b9:d8: 1e:43:f5:3c:0f:b7:f1:e9:ca:cd:1f:ba:38:10:e9:1c:98:ea: d9:c7:03:fc:c3:99:f4:b2:1e:32:81:64:d3:a9:35:33:95:76: 25:ce:bd:1a:ae:8e:0b:bb:52:f4:0f:f1:46:ff:3d:b5:9d:a3: bd:d7:8c:d9:ae:62:5e:47:90:59:40:58:d4:99:a3:f5:ac:02: e6:7c:2d:2d:53:e1:1a:14:23:60:c6:b1:fa:65:49:23:e6:58: af:4c:e9:22:88:a6:dd:94:de:d8:f8:e3:3c:54:2a:75:08:93: 34:01:b9:56:1c:04:83:f6:d9:a0:b9:4b:44:e4:80:22:22:70: 6b:d6:04:a6:bd:95:88:db:1f:7c:13:03:95:07:e9:97:07:16: fa:e9:20:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHxGpy3NkkRc0GqKvapH7afKJa/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjA5MjgxMDI1MzlaFw0yNjEwMDExMjQ4MzlaMDMxMTAvBgNV BAMTKEY2RDJFQjFCQjVBQTc0QjE5MDJDNDIwODZDMTNBMkVBNjBDMTZCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3lPsZTN76e3shPMja7C9Znmk9 laBG3T3jqvzuB3yVsKCVZ8UoRxdmDV0l4CroMJgTAAunsMpfVVf/ym74zZ3ssi3V rJNBuNyVKpVXXEL7wV20Oba7FHFFClHdNCBIQImVB8XeKLdPvSoyvtcw6lclIwJt GTA51VN+87A5rJbgArvFEfRN65Mh13fKOoUka5if+rTDLz/CfdLKnS9SiQBRGEYU EOPKKHvDmwD7kKAj+GGy9nbGJ3eOgcJI14Vq+df40bQUb52OaykCgpI6Je34/x+9 se/w6htDt39cRDeNaLPpmNTVYr2A31ZMSAdVSSeM7dl1PBuYL/aB1XiUdLa3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9tLrG7WqdLGQLEIIbBOi6mDBaycwHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYPdXFmhuJL7 Pb6gF1ynTxQBgKmZ7rVOE6FiYjMyxwB2Rhb7qwN0Z+O56gDzpaYje1j/tUV7zZUN UORvSsb7YBPkKiyiVb3H2zWzribht+0NNQRv7Lr40J4mkCKEyrdBJtWnF6/PwASN tbnYHkP1PA+38enKzR+6OBDpHJjq2ccD/MOZ9LIeMoFk06k1M5V2Jc69Gq6OC7tS 9A/xRv89tZ2jvdeM2a5iXkeQWUBY1Jmj9awC5nwtLVPhGhQjYMax+mVJI+ZYr0zp Ioim3ZTe2PjjPFQqdQiTNAG5VhwEg/bZoLlLROSAIiJwa9YEpr2ViNsffBMDlQfp lwcW+ukgUg== -----END CERTIFICATE-----Generated at Tue Sep 29 01:10:23 2026 by rpki-client