$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft File: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft (raw, json) Hash identifier: jNHN2STvSLWfoPW87OR4Y9FcVJsg2c3xRCDBRm+UVRo= Subject key identifier: 2A:2D:7E:29:C7:6D:A2:DB:91:8F:1A:1D:33:25:CD:00:A2:10:89:CF Authority key identifier: 2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 Certificate issuer: /CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Certificate serial: 084863860DF658521C4D56FB35ADC844AD8F7F57 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft Manifest number: C9 Signing time: Thu 24 Sep 2026 03:11:02 +0000 Manifest this update: Thu 24 Sep 2026 03:06:02 +0000 Manifest next update: Sun 27 Sep 2026 09:45:02 +0000 Files and hashes: 1: 2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl (hash: rLe7UGVWRiU2+WXPK7GpiZzKH35Y+GCtqGYo17OT6Qc=) 2: 3132322e3131342e302e302f31362d3136203d3e2034383337.roa (hash: 0+enGD/zc0KUM6hJ3xXwylGpBRXHqMrwp8Qwg/rjKXA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 09:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:48:63:86:0d:f6:58:52:1c:4d:56:fb:35:ad:c8:44:ad:8f:7f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D55A041FCB7F9FF7365E90A7DDA8542D8F31756 Validity Not Before: Sep 24 03:06:02 2026 GMT Not After : Sep 27 09:45:02 2026 GMT Subject: CN=2A2D7E29C76DA2DB918F1A1D3325CD00A21089CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4a:74:de:ee:63:19:d6:20:6f:09:6a:03:3d: 15:c1:0a:9c:1b:cb:a8:3d:62:cf:09:df:bb:7a:c1: 70:4f:a2:d3:54:ce:94:76:fe:33:2c:d5:4b:8e:ba: 68:5b:e1:96:ac:7b:be:43:3a:fe:a1:e4:01:5a:80: 79:aa:9e:a2:07:13:2c:27:cb:95:73:4a:5d:2e:97: ca:de:8a:da:37:a6:9e:c9:90:fe:97:07:02:b8:01: fe:4a:86:2d:ac:ed:f8:a7:c2:c7:58:8a:01:81:c4: 62:4e:12:9a:df:5d:bd:0f:38:6b:f8:4c:a5:dc:1f: 62:c9:ad:47:b7:c0:e7:7d:84:c5:68:3f:f4:db:95: 48:6c:2e:bd:23:d6:97:90:1f:f3:f2:7e:28:78:a2: fe:54:9b:78:c1:61:73:e6:b0:8c:72:96:d3:76:0a: b4:17:41:64:fe:a0:c3:5b:3e:c2:26:78:f4:34:9f: 57:1c:ce:97:fd:71:6c:7c:a1:60:9a:6b:29:87:9f: 8d:e7:69:d1:bb:df:f4:e2:0c:2b:22:92:64:21:9b: 33:f9:f9:19:55:b1:df:91:31:a6:1e:c9:3f:f1:85: 3f:fc:90:a0:1d:a5:43:35:3e:c1:6a:c1:2f:70:0f: 56:7d:57:e6:29:88:7e:5d:18:be:58:31:d8:7e:95: c5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2D:7E:29:C7:6D:A2:DB:91:8F:1A:1D:33:25:CD:00:A2:10:89:CF X509v3 Authority Key Identifier: keyid:2D:55:A0:41:FC:B7:F9:FF:73:65:E9:0A:7D:DA:85:42:D8:F3:17:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094791290421248001/0/2D55A041FCB7F9FF7365E90A7DDA8542D8F31756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:38:d9:fc:d5:0f:c2:f2:17:c0:8b:bf:f6:1b:ec:09:36:d2: 26:d4:32:94:2f:19:3e:ae:e0:5c:7d:c8:c7:9e:a6:96:cd:b3: 7b:a5:ca:5e:2c:64:4d:6b:1c:25:c0:d6:4e:cc:ad:48:eb:b6: 68:f5:f6:9a:b9:d2:29:a6:af:ec:e8:38:18:ae:39:2a:5e:1d: ee:9a:84:5a:5b:c9:47:f4:0b:ac:f1:d6:61:20:e1:57:2d:5a: 8f:eb:bf:10:9b:bc:10:dd:d6:68:24:d0:87:23:73:62:6f:bc: e1:fd:50:56:8b:ac:f4:c8:0e:7e:98:30:e1:14:53:0b:c4:86: 1d:64:88:f0:57:fc:eb:38:b3:38:54:40:e9:c8:78:7c:f8:b4: 57:53:68:de:04:a7:34:b3:0a:e7:d8:83:b0:9d:1a:82:88:d1: f0:74:32:2b:ad:47:ef:36:82:a7:72:a7:fb:a6:42:3c:df:6c: 18:ee:f5:9e:ce:5c:8e:02:b2:54:74:8a:7e:e7:6f:53:44:ac: 04:f5:f6:62:c2:7e:9d:fd:0c:a4:df:5b:30:66:85:f4:25:1e: 04:ce:e0:16:73:aa:ed:92:65:16:ea:90:da:15:16:cd:ac:ae: 26:8d:8f:7e:03:e5:95:dc:c1:5f:94:8a:03:a0:4e:83:68:2a: 0f:58:eb:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCEhjhg32WFIcTVb7Na3IRK2Pf1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJE OEYzMTc1NjAeFw0yNjA5MjQwMzA2MDJaFw0yNjA5MjcwOTQ1MDJaMDMxMTAvBgNV BAMTKDJBMkQ3RTI5Qzc2REEyREI5MThGMUExRDMzMjVDRDAwQTIxMDg5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgSnTe7mMZ1iBvCWoDPRXBCpwb y6g9Ys8J37t6wXBPotNUzpR2/jMs1UuOumhb4Zase75DOv6h5AFagHmqnqIHEywn y5VzSl0ul8reito3pp7JkP6XBwK4Af5Khi2s7finwsdYigGBxGJOEprfXb0POGv4 TKXcH2LJrUe3wOd9hMVoP/TblUhsLr0j1peQH/Pyfih4ov5Um3jBYXPmsIxyltN2 CrQXQWT+oMNbPsImePQ0n1cczpf9cWx8oWCaaymHn43nadG73/TiDCsikmQhmzP5 +RlVsd+RMaYeyT/xhT/8kKAdpUM1PsFqwS9wD1Z9V+YpiH5dGL5YMdh+lcWhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKi1+KcdtotuRjxodMyXNAKIQic8wHwYDVR0j BBgwFoAULVWgQfy3+f9zZekKfdqFQtjzF1YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDc5MTI5MDQyMTI0ODAwMS8wLzJENTVBMDQxRkNCN0Y5RkY3MzY1RTkwQTdEREE4 NTQyRDhGMzE3NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQ1NUEwNDFGQ0I3RjlGRjczNjVFOTBBN0REQTg1NDJEOEYzMTc1Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ3OTEyOTA0MjEyNDgwMDEvMC8yRDU1QTA0MUZDQjdG OUZGNzM2NUU5MEE3RERBODU0MkQ4RjMxNzU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjjZ/NUPwvIX wIu/9hvsCTbSJtQylC8ZPq7gXH3Ix56mls2ze6XKXixkTWscJcDWTsytSOu2aPX2 mrnSKaav7Og4GK45Kl4d7pqEWlvJR/QLrPHWYSDhVy1aj+u/EJu8EN3WaCTQhyNz Ym+84f1QVous9MgOfpgw4RRTC8SGHWSI8Ff86zizOFRA6ch4fPi0V1No3gSnNLMK 59iDsJ0agojR8HQyK61H7zaCp3Kn+6ZCPN9sGO71ns5cjgKyVHSKfudvU0SsBPX2 YsJ+nf0MpN9bMGaF9CUeBM7gFnOq7ZJlFuqQ2hUWzayuJo2PfgPlldzBX5SKA6BO g2gqD1jrvw== -----END CERTIFICATE-----Generated at Thu Sep 24 23:18:58 2026 by rpki-client