$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft File: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft (raw, json) Hash identifier: O5dwliEUjOrZWTfIsoCyRhgu0CKQmAHoaGp9h/xAOoc= Subject key identifier: E6:B9:23:F0:2E:36:C8:53:C5:28:EF:4B:C5:A0:41:BF:59:49:4B:AA Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Certificate issuer: /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Certificate serial: 57AF0023D14D59B41CECFAC37DD4446680C11F9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft Manifest number: CB Signing time: Sat 26 Sep 2026 07:53:21 +0000 Manifest this update: Sat 26 Sep 2026 07:48:21 +0000 Manifest next update: Tue 29 Sep 2026 19:45:21 +0000 Files and hashes: 1: 3130332e3137302e342e302f32342d3234203d3e2034383136.roa (hash: hSNLNQfMyyPIEy3FNApslXZYFlxGq5H4UAU40MPlMqM=) 2: 3130332e3137302e352e302f32342d3234203d3e2034383136.roa (hash: Z+WCsVa8vpGSdv/j12ozL1JGdG7SKuVWZI7M4QvuGFI=) 3: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl (hash: 50kKy7T04RIg9TRLmz5Jla3HwHLoby3X8psLwh9rBQ4=) 4: 3130332e3137302e342e302f32332d3233203d3e2034383136.roa (hash: YfS7Kt8clW/eJGF52X+YXAfT1z1Tx1XMXPtb2Qa9vKU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:af:00:23:d1:4d:59:b4:1c:ec:fa:c3:7d:d4:44:66:80:c1:1f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Validity Not Before: Sep 26 07:48:21 2026 GMT Not After : Sep 29 19:45:21 2026 GMT Subject: CN=E6B923F02E36C853C528EF4BC5A041BF59494BAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:de:17:53:77:e1:76:94:6c:5e:7d:b8:55: 4d:97:76:1b:05:00:00:5f:d7:5f:f9:76:d1:28:f7: f7:a7:1a:bc:94:c2:c8:38:64:62:a6:29:82:d0:c7: d7:ac:e9:04:df:a9:91:bc:62:1d:45:f6:f2:a9:01: b3:57:93:4f:26:78:b0:14:c0:9b:24:be:d0:04:a5: 3d:67:c1:2e:f7:9b:36:bf:08:86:2c:25:23:a3:3d: 91:2a:1d:2f:c8:8a:6f:2f:5c:34:9f:a9:21:6d:51: 01:34:e0:7f:65:a8:60:63:63:0f:d3:a4:6a:d8:e3: c3:5d:b3:2a:47:c0:1d:49:2f:48:f4:fc:13:80:40: 61:55:1a:0a:c1:b1:e1:ff:b1:1c:26:9a:51:ad:ac: 54:0f:b5:54:b5:32:fc:03:a7:bd:e7:7d:d3:ae:07: d0:e5:03:28:04:df:0e:98:96:93:5c:42:c7:23:42: 7d:f9:19:fa:13:98:86:fc:cb:7e:94:bd:f4:8a:7b: 1b:7f:ea:c3:a2:03:d0:5f:02:5a:ef:1a:6a:36:9c: 36:c6:9b:58:3d:c0:3d:0e:5f:99:a2:6f:65:d5:16: 0c:22:96:43:f3:04:3b:e1:ad:17:62:76:42:1e:de: c6:88:23:a9:40:84:c4:9a:ac:68:35:15:88:f3:4d: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B9:23:F0:2E:36:C8:53:C5:28:EF:4B:C5:A0:41:BF:59:49:4B:AA X509v3 Authority Key Identifier: keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:fc:7a:10:82:10:0b:f5:9f:60:da:b7:4c:6c:44:31:e6:e4: a6:d9:2f:fd:42:0f:87:c8:f3:64:51:37:5b:17:5d:d4:0c:12: 75:45:e5:f9:0d:4e:de:0f:31:66:76:d8:7a:95:1c:b2:4c:5e: fc:fa:6d:bc:25:40:af:0d:ed:dc:e7:d5:a7:4c:89:2e:ff:f7: 72:15:1f:e3:32:8c:1c:41:c2:b0:44:ed:63:2e:da:fc:30:01: f3:23:0b:93:6d:6b:e2:be:36:b9:ff:17:7f:37:d3:53:ac:50: f7:5a:02:76:ce:52:ba:2c:72:86:7a:f5:13:e7:e5:88:66:5b: 7c:ef:86:20:e0:0a:c9:aa:e6:f3:c7:75:ec:7d:09:5e:91:4c: 6a:b6:10:4b:e2:13:c3:75:17:24:b2:d9:29:13:f4:c3:08:79: c9:b6:27:d0:41:0c:2f:cf:34:92:ac:88:15:cb:57:35:38:9d: 1a:c0:cc:12:05:16:3a:18:8b:9a:a8:3c:d8:21:bd:f4:8d:e0: 11:7b:d8:e5:36:80:93:85:6e:d6:70:1f:dd:78:2e:10:1e:de: 24:ee:37:44:18:45:4c:95:2e:99:45:e6:6a:ed:e7:93:68:44: 9d:41:3d:c1:47:02:0f:2e:da:31:13:20:21:ea:37:14:fe:a9: 05:9f:8e:4b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV68AI9FNWbQc7PrDfdREZoDBH50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0 QTFCNDJFQzAeFw0yNjA5MjYwNzQ4MjFaFw0yNjA5MjkxOTQ1MjFaMDMxMTAvBgNV BAMTKEU2QjkyM0YwMkUzNkM4NTNDNTI4RUY0QkM1QTA0MUJGNTk0OTRCQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lN4XU3fhdpRsXn24VU2XdhsF AABf11/5dtEo9/enGryUwsg4ZGKmKYLQx9es6QTfqZG8Yh1F9vKpAbNXk08meLAU wJskvtAEpT1nwS73mza/CIYsJSOjPZEqHS/Iim8vXDSfqSFtUQE04H9lqGBjYw/T pGrY48NdsypHwB1JL0j0/BOAQGFVGgrBseH/sRwmmlGtrFQPtVS1MvwDp73nfdOu B9DlAygE3w6YlpNcQscjQn35GfoTmIb8y36UvfSKext/6sOiA9BfAlrvGmo2nDbG m1g9wD0OX5mib2XVFgwilkPzBDvhrRdidkIe3saII6lAhMSarGg1FYjzTWcBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5rkj8C42yFPFKO9LxaBBv1lJS6owHwYDVR0j BBgwFoAUoBVhla3PMyd22Wqc4tejbEobQuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMTc0NDY2MjgwNjUyOS8wL0EwMTU2MTk1QURDRjMzMjc3NkQ5NkE5Q0UyRDdB MzZDNEExQjQyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjE3NDQ2NjI4MDY1MjkvMC9BMDE1NjE5NUFEQ0Yz MzI3NzZEOTZBOUNFMkQ3QTM2QzRBMUI0MkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/x6EIIQC/Wf YNq3TGxEMebkptkv/UIPh8jzZFE3Wxdd1AwSdUXl+Q1O3g8xZnbYepUcskxe/Ppt vCVArw3t3OfVp0yJLv/3chUf4zKMHEHCsETtYy7a/DAB8yMLk21r4r42uf8XfzfT U6xQ91oCds5Suixyhnr1E+fliGZbfO+GIOAKyarm88d17H0JXpFMarYQS+ITw3UX JLLZKRP0wwh5ybYn0EEML880kqyIFctXNTidGsDMEgUWOhiLmqg82CG99I3gEXvY 5TaAk4Vu1nAf3XguEB7eJO43RBhFTJUumUXmau3nk2hEnUE9wUcCDy7aMRMgIeo3 FP6pBZ+OSw== -----END CERTIFICATE-----Generated at Sat Sep 26 20:37:16 2026 by rpki-client