$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft File: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft (raw, json) Hash identifier: A4RCZqi8cDW27gVCu39gbonFTQ0vN/+nwq5SgxbfxJs= Subject key identifier: 6B:29:61:16:73:B6:FA:93:67:BC:C8:FF:6B:36:40:1A:49:97:81:95 Authority key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C Certificate issuer: /CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Certificate serial: 745B10541D5356FDF12D81F8FBC3546F97390DF2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft Manifest number: CD Signing time: Mon 28 Sep 2026 07:20:31 +0000 Manifest this update: Mon 28 Sep 2026 07:15:31 +0000 Manifest next update: Thu 01 Oct 2026 16:21:31 +0000 Files and hashes: 1: 323430613a633063303a3a2f33322d3332203d3e20313337373236.roa (hash: 1at51nd0IGgOA4YH54G2tz7k8cmIIn93vu2nRO3kz4M=) 2: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl (hash: 5+OSvSVGAapMl5AXsZx3SW5QSBlWziFSiCFeKy52rkU=) 3: 323430613a633030303a3a2f32302d3230203d3e20313337373236.roa (hash: P/uGAO3eiSum4zNic0X3psUc8CVrx9YxKsqMCgddi/U=) 4: 3130332e3133302e3133322e302f32322d3232203d3e2030.roa (hash: FK6td7V83xHJimYsonXy6iGnkL28lgGxO82Pj8R5j/M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5b:10:54:1d:53:56:fd:f1:2d:81:f8:fb:c3:54:6f:97:39:0d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Validity Not Before: Sep 28 07:15:31 2026 GMT Not After : Oct 1 16:21:31 2026 GMT Subject: CN=6B29611673B6FA9367BCC8FF6B36401A49978195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:f0:39:bd:18:5c:5b:cf:42:77:66:ca:3d: e7:f2:be:27:bf:02:68:1d:e7:99:f8:68:0c:27:0c: 05:9e:f8:53:e5:b4:79:2c:09:ed:d3:56:67:d2:49: 34:b4:6f:76:da:57:06:48:fe:08:2d:8c:73:4c:15: ee:82:d3:a9:87:51:17:1e:8b:5c:dc:b3:f9:a6:58: f6:39:69:70:de:7c:00:9d:39:f5:07:c5:73:d5:bd: d4:d1:8d:56:a8:b8:7e:bd:7c:57:44:01:f3:a8:52: 42:46:4c:1e:e3:e2:39:85:77:d3:5f:36:96:5f:52: 7e:61:31:04:96:f3:ac:1b:15:56:c0:9c:83:09:02: 6d:12:3c:7f:95:1b:c3:65:d4:b3:67:71:af:5b:36: 66:32:bb:3a:ac:25:69:68:44:3e:55:07:72:e9:15: 8b:3b:99:af:54:9f:36:60:36:8d:60:17:5c:a0:3a: 9f:af:81:f7:ff:28:04:be:b1:b3:7c:7d:ad:64:4e: 15:7e:78:59:01:89:73:c2:9e:90:bf:eb:16:6b:07: 80:77:e9:4d:92:71:b4:69:4f:d9:85:60:7c:ce:c7: b7:e3:f4:e5:de:b6:40:9d:0e:08:77:ac:02:b4:8a: 65:55:3e:c9:1f:55:33:fe:ff:f5:a9:96:46:c0:ac: 50:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:29:61:16:73:B6:FA:93:67:BC:C8:FF:6B:36:40:1A:49:97:81:95 X509v3 Authority Key Identifier: keyid:5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c5:0f:04:22:c2:4f:9f:3c:bc:4f:81:c9:6a:92:e7:ab:2e: 49:78:b8:5d:4d:81:30:67:33:f3:61:4a:b4:31:ff:97:fe:44: 62:52:57:02:26:c0:0d:bf:da:65:36:2c:6f:2f:0e:6e:e2:69: d0:17:52:78:68:a7:d1:55:a4:23:bc:2d:4a:ad:c1:24:bc:49: 4c:1e:ed:ed:e2:13:9f:c3:af:5d:53:9e:30:9f:2a:49:13:60: cf:7c:d5:a9:a0:fe:45:a9:cf:32:2e:67:04:e7:fc:5a:c4:3f: 31:de:f1:cf:08:d7:e4:9c:de:ff:52:b2:9f:8d:f3:5d:7e:9b: 0d:05:97:6d:08:50:f2:de:5b:66:ce:01:31:ef:ec:31:91:75: b2:d8:45:80:49:73:e2:c2:eb:25:0d:4e:a6:01:69:5b:44:c4: 98:20:5f:77:0f:ed:b3:a7:5c:62:5e:9b:c6:80:29:ac:42:fa: ee:c2:c0:b5:f5:55:ea:68:51:25:40:a1:45:65:13:84:6b:c0: fc:c9:40:9e:f0:d5:7b:f5:8f:e3:d5:be:0d:26:85:96:74:46: 35:e8:9c:79:11:3c:64:70:59:2f:de:51:4f:d5:fc:27:bf:91: 3f:96:d0:49:a9:df:ef:f2:fe:69:fc:62:2a:55:fa:ea:7f:0f: 70:83:b6:38 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdFsQVB1TVv3xLYH4+8NUb5c5DfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMx QUM4RjQ4QzAeFw0yNjA5MjgwNzE1MzFaFw0yNjEwMDExNjIxMzFaMDMxMTAvBgNV BAMTKDZCMjk2MTE2NzNCNkZBOTM2N0JDQzhGRjZCMzY0MDFBNDk5NzgxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA2fA5vRhcW89Cd2bKPefyvie/ Amgd55n4aAwnDAWe+FPltHksCe3TVmfSSTS0b3baVwZI/ggtjHNMFe6C06mHURce i1zcs/mmWPY5aXDefACdOfUHxXPVvdTRjVaouH69fFdEAfOoUkJGTB7j4jmFd9Nf NpZfUn5hMQSW86wbFVbAnIMJAm0SPH+VG8Nl1LNnca9bNmYyuzqsJWloRD5VB3Lp FYs7ma9UnzZgNo1gF1ygOp+vgff/KAS+sbN8fa1kThV+eFkBiXPCnpC/6xZrB4B3 6U2ScbRpT9mFYHzOx7fj9OXetkCdDgh3rAK0imVVPskfVTP+//WplkbArFBJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaylhFnO2+pNnvMj/azZAGkmXgZUwHwYDVR0j BBgwFoAUW6/VLZ+0o3x6E4Ko78wZrBrI9IwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MzcxNDgxMjc4MDU0Ni8wLzVCQUZENTJEOUZCNEEzN0M3QTEzODJBOEVGQ0Mx OUFDMUFDOEY0OEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMxQUM4RjQ4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTM3MTQ4MTI3ODA1NDYvMC81QkFGRDUyRDlGQjRB MzdDN0ExMzgyQThFRkNDMTlBQzFBQzhGNDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMUPBCLCT588 vE+ByWqS56suSXi4XU2BMGcz82FKtDH/l/5EYlJXAibADb/aZTYsby8ObuJp0BdS eGin0VWkI7wtSq3BJLxJTB7t7eITn8OvXVOeMJ8qSRNgz3zVqaD+RanPMi5nBOf8 WsQ/Md7xzwjX5Jze/1Kyn43zXX6bDQWXbQhQ8t5bZs4BMe/sMZF1sthFgElz4sLr JQ1OpgFpW0TEmCBfdw/ts6dcYl6bxoAprEL67sLAtfVV6mhRJUChRWUThGvA/MlA nvDVe/WP49W+DSaFlnRGNeiceRE8ZHBZL95RT9X8J7+RP5bQSanf7/L+afxiKlX6 6n8PcIO2OA== -----END CERTIFICATE-----Generated at Mon Sep 28 22:48:59 2026 by rpki-client