$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft File: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft (raw, json) Hash identifier: O1bHAKyp7BvOvGaey6qP/zl8vc6Soir9F0nPUJVmtwE= Subject key identifier: A2:76:80:2C:AE:3E:0D:50:09:0C:95:E2:6F:9D:6F:80:27:1C:76:BC Authority key identifier: 2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B Certificate issuer: /CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Certificate serial: 246475CC679EE9E1BD31C8CF676BABF5761ACF6C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft Manifest number: CD Signing time: Tue 13 Oct 2026 18:58:13 +0000 Manifest this update: Tue 13 Oct 2026 18:53:13 +0000 Manifest next update: Fri 16 Oct 2026 19:17:13 +0000 Files and hashes: 1: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl (hash: vh8yPbr0eR8gabUqSjrKT46nSbov5IGTCZxgf1AyQo0=) 2: 3138302e3137382e3139322e302f31382d3332203d3e203633373138.roa (hash: p/FOxsVY6yCDcHHnlzBhiEH5nnmslBPLMVOfQrX5mgI=) 3: 3138302e3137382e3235322e302f32322d3332203d3e2034383337.roa (hash: YA2y5WDqbbqXlH3plbuoacVKmNM5TSdO8J/ShSoYXBU=) 4: 323430313a643932303a3a2f32382d313238203d3e203633373138.roa (hash: wqKyq4CT7ZBhjVas93N8o2f4ItHVxa4rAXSDsabJnzU=) 5: 3130332e3130352e3232302e302f32322d3332203d3e203633373138.roa (hash: UoMxgKtAhyszzVVZnBqAdDpPta7+jHjGEznfu4FR8Iw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 19:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:64:75:cc:67:9e:e9:e1:bd:31:c8:cf:67:6b:ab:f5:76:1a:cf:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Validity Not Before: Oct 13 18:53:13 2026 GMT Not After : Oct 16 19:17:13 2026 GMT Subject: CN=A276802CAE3E0D50090C95E26F9D6F80271C76BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:78:26:7b:37:f2:31:a4:d6:0f:0c:33:dc:cb: 2a:d7:ca:0b:a5:54:f3:07:95:91:10:dd:6c:1c:1a: 86:5f:b1:ab:a7:8c:5b:d8:71:f3:1e:c4:19:e8:86: 1b:2b:80:04:1b:eb:71:15:d5:59:24:73:a0:79:25: e2:96:fd:b1:a5:bb:d7:e4:67:88:e2:df:56:83:94: f7:1c:61:64:25:48:1f:f5:b6:e4:c3:d0:65:c1:82: 0a:38:7b:ba:a7:b1:f4:a0:bb:cd:97:b0:ad:01:66: 8b:4a:71:a5:da:95:74:20:77:1a:1f:aa:b3:e1:bb: 40:03:44:9e:28:6a:64:9b:81:ae:cb:aa:b4:f7:3e: 7a:86:3c:71:5c:ff:29:7b:b2:bb:39:bd:7d:36:cb: c4:82:ad:fe:52:b9:72:18:ef:08:39:6c:7f:be:40: c7:e2:4e:61:37:06:cc:2f:e9:39:d1:58:60:47:c0: 4e:29:f8:d8:89:14:72:b9:31:4e:24:e4:53:52:51: f7:61:78:8d:f2:18:81:eb:2c:e8:72:e8:53:c0:b0: 51:9e:37:f8:55:65:cf:15:2b:45:9d:a8:6f:7d:61: 8e:ad:2d:9e:5b:23:9d:05:db:1f:d9:14:22:0a:73: 76:a3:a9:6c:8d:da:2e:e2:ba:c0:3c:75:f1:ce:d0: 8a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:76:80:2C:AE:3E:0D:50:09:0C:95:E2:6F:9D:6F:80:27:1C:76:BC X509v3 Authority Key Identifier: keyid:2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a0:5d:71:a3:89:6c:3e:ad:b4:ba:a5:2e:e2:fa:e3:d0:68: 4c:5f:9c:43:22:f0:f6:cb:bb:3f:42:33:a3:d8:42:c1:4c:af: 23:61:71:f6:5a:26:40:0e:42:c6:90:d3:67:e9:e6:bc:e4:41: 82:93:23:41:a5:f1:15:ef:66:40:d3:de:ea:b9:0d:e6:3b:7f: be:6e:be:38:88:5a:42:46:54:cd:84:6f:cc:c6:4f:d7:fc:24: 35:e0:44:0e:74:00:36:32:34:ff:b3:b2:16:8c:81:3e:2f:d8: ef:14:7f:93:5f:8e:c7:80:aa:b0:11:74:d9:6a:0f:55:03:2c: 0e:c7:a3:5a:c3:90:a1:5c:2b:65:71:6a:69:8b:b8:6c:54:e1: 72:5c:f3:31:fb:da:f9:ed:c4:ad:4d:6b:5a:b2:e8:db:72:e0: 75:bd:cf:8a:4b:f3:e4:3a:01:6c:49:a7:d6:b2:33:ac:c6:60: 7b:1d:e8:18:9b:d3:b8:a7:08:f3:70:6a:81:d4:3c:5f:e9:b6: dd:63:09:62:b6:fd:eb:70:f9:b0:07:3d:ea:96:28:8d:54:79: 97:78:07:a8:dd:b8:b0:2b:e8:f3:b0:cc:85:d6:53:5a:23:cc: 93:b1:82:99:28:f6:8b:ab:dc:09:46:b4:63:a8:58:da:0a:7e: 82:6b:4f:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJGR1zGee6eG9McjPZ2ur9XYaz2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2 QzM4QTM0QjAeFw0yNjEwMTMxODUzMTNaFw0yNjEwMTYxOTE3MTNaMDMxMTAvBgNV BAMTKEEyNzY4MDJDQUUzRTBENTAwOTBDOTVFMjZGOUQ2RjgwMjcxQzc2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdeCZ7N/IxpNYPDDPcyyrXygul VPMHlZEQ3WwcGoZfsaunjFvYcfMexBnohhsrgAQb63EV1Vkkc6B5JeKW/bGlu9fk Z4ji31aDlPccYWQlSB/1tuTD0GXBggo4e7qnsfSgu82XsK0BZotKcaXalXQgdxof qrPhu0ADRJ4oamSbga7LqrT3PnqGPHFc/yl7srs5vX02y8SCrf5SuXIY7wg5bH++ QMfiTmE3Bswv6TnRWGBHwE4p+NiJFHK5MU4k5FNSUfdheI3yGIHrLOhy6FPAsFGe N/hVZc8VK0WdqG99YY6tLZ5bI50F2x/ZFCIKc3ajqWyN2i7iusA8dfHO0IrTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUonaALK4+DVAJDJXib51vgCccdrwwHwYDVR0j BBgwFoAUK7YXPYGJDkeJ4bS6ai46kWw4o0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzNjc2NzU4MzI1NjU3OC8wLzJCQjYxNzNEODE4OTBFNDc4OUUxQjRCQTZBMkUz QTkxNkMzOEEzNEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2QzM4QTM0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzY3Njc1ODMyNTY1NzgvMC8yQkI2MTczRDgxODkw RTQ3ODlFMUI0QkE2QTJFM0E5MTZDMzhBMzRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6BdcaOJbD6t tLqlLuL649BoTF+cQyLw9su7P0Izo9hCwUyvI2Fx9lomQA5CxpDTZ+nmvORBgpMj QaXxFe9mQNPe6rkN5jt/vm6+OIhaQkZUzYRvzMZP1/wkNeBEDnQANjI0/7OyFoyB Pi/Y7xR/k1+Ox4CqsBF02WoPVQMsDsejWsOQoVwrZXFqaYu4bFThclzzMfva+e3E rU1rWrLo23Lgdb3Pikvz5DoBbEmn1rIzrMZgex3oGJvTuKcI83BqgdQ8X+m23WMJ Yrb963D5sAc96pYojVR5l3gHqN24sCvo87DMhdZTWiPMk7GCmSj2i6vcCUa0Y6hY 2gp+gmtPNw== -----END CERTIFICATE-----Generated at Wed Oct 14 22:07:02 2026 by rpki-client