$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft File: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft (raw, json) Hash identifier: oyOroxYTf2dtoKau0IYQaWWuxy2YMMW5NfcqIPpBtps= Subject key identifier: 46:DD:50:49:87:23:88:01:4B:A7:C5:53:92:FA:31:3F:6C:9D:B0:D0 Authority key identifier: 25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE Certificate issuer: /CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Certificate serial: 753B0E8E3BE2F4BCF02908355BD0833EB64C833A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft Manifest number: BC Signing time: Sat 10 Oct 2026 20:09:54 +0000 Manifest this update: Sat 10 Oct 2026 20:04:54 +0000 Manifest next update: Tue 13 Oct 2026 23:42:54 +0000 Files and hashes: 1: 2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl (hash: Qj5bDJm195UE7o6MbGCtgxF2Jxe7NpA4vI1vJiYOch4=) 2: 3130332e39302e3135322e302f32342d3234203d3e203538353139.roa (hash: eNSDDIFaERWet2gtvMhXJGMxUdYweq9eQTGX6iMngvk=) 3: 3130332e34312e3233322e302f32342d3234203d3e203538343636.roa (hash: dFVSB8aOnwvTGNapkLqn2kL47R2dXV0mGH0IkW3w0p4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 23:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:3b:0e:8e:3b:e2:f4:bc:f0:29:08:35:5b:d0:83:3e:b6:4c:83:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2551AD75EA147DF44E8BAA1242F2741EF9EB60AE Validity Not Before: Oct 10 20:04:54 2026 GMT Not After : Oct 13 23:42:54 2026 GMT Subject: CN=46DD5049872388014BA7C55392FA313F6C9DB0D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:61:ac:d2:91:d5:61:97:db:a4:b1:cc:ba:de: 50:23:62:5b:c1:6d:84:3f:c3:9e:2b:f1:a3:3e:a5: 5e:09:65:9f:a5:3a:45:9f:19:e8:3e:19:f7:bf:0b: 85:2f:74:53:db:64:83:90:1b:ec:90:23:45:d4:f7: 4e:c3:80:4f:b8:8e:1c:cc:f2:d3:d6:c6:4c:e9:a4: ae:6e:10:94:77:2f:88:b6:35:7d:fc:a1:48:ec:11: c0:f6:3e:ec:55:07:9d:8c:9b:fa:78:b2:54:ff:eb: 2c:b7:6a:e6:3a:02:c9:3f:58:89:f7:57:bd:45:6f: 8c:96:c1:fa:12:90:30:a7:b3:52:66:90:f6:57:dd: 63:bc:37:dd:12:f7:ad:74:8b:88:7f:a6:57:70:60: 7c:35:02:b0:1b:59:88:96:fa:04:8c:f3:30:ba:7c: 83:43:be:70:13:27:26:a2:bb:3c:ba:5f:47:64:fe: 15:c1:52:3e:29:3a:0e:fb:38:82:fa:e1:96:20:ed: ed:a2:85:6e:2b:ef:27:cd:50:2c:63:32:e9:0b:90: ec:c6:5e:b3:12:75:d6:e2:66:c0:82:cd:d1:ce:b1: db:f1:4c:28:fe:99:63:45:8e:19:b9:2a:1a:28:a5: d3:c7:89:81:66:e2:7c:ca:18:69:ad:ca:be:d4:28: e1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DD:50:49:87:23:88:01:4B:A7:C5:53:92:FA:31:3F:6C:9D:B0:D0 X509v3 Authority Key Identifier: keyid:25:51:AD:75:EA:14:7D:F4:4E:8B:AA:12:42:F2:74:1E:F9:EB:60:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099889897193340929/0/2551AD75EA147DF44E8BAA1242F2741EF9EB60AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9c:29:72:ba:44:69:5d:99:a4:5d:25:bc:b4:19:5d:e5:0d: ec:97:ca:52:3b:26:49:3c:ca:cf:13:75:37:93:31:38:4f:25: 71:ae:35:04:0b:04:1b:45:cb:dc:19:41:28:07:59:f8:2f:f8: e4:30:cf:19:db:44:0b:60:c9:2d:94:cd:8f:36:cd:d2:4b:1b: 6c:6f:72:c3:eb:b0:c0:d2:b5:5c:c7:9c:47:1a:fb:d2:a1:07: fd:c7:de:cf:e1:1c:64:7e:d8:dd:57:6b:c7:74:07:61:87:5f: 4e:cb:e6:09:ad:e3:bf:36:aa:8e:e8:44:73:22:7f:e1:6b:1d: 34:ce:ca:72:96:f9:08:42:42:90:a1:98:5b:47:e2:ca:7b:20: 31:57:4a:0e:78:7a:9f:d9:fd:d1:f6:38:64:08:e5:63:77:6f: e5:50:5a:ed:b0:95:27:27:6b:17:ee:08:78:08:0b:27:7d:91: a7:8e:3a:74:ef:20:20:c5:b6:03:eb:0a:cf:d9:ce:54:9f:43: 7d:79:67:23:7b:b8:e7:ba:a7:aa:f8:2e:6d:81:ac:90:28:ee: ee:b1:7d:03:86:1f:ce:54:cf:65:c4:3b:11:29:aa:c5:0a:f3: f4:df:08:2b:09:66:cf:f2:5d:3d:98:2b:d1:74:b3:8d:0a:3c: 48:fe:c5:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdTsOjjvi9LzwKQg1W9CDPrZMgzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVG OUVCNjBBRTAeFw0yNjEwMTAyMDA0NTRaFw0yNjEwMTMyMzQyNTRaMDMxMTAvBgNV BAMTKDQ2REQ1MDQ5ODcyMzg4MDE0QkE3QzU1MzkyRkEzMTNGNkM5REIwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYazSkdVhl9ukscy63lAjYlvB bYQ/w54r8aM+pV4JZZ+lOkWfGeg+Gfe/C4UvdFPbZIOQG+yQI0XU907DgE+4jhzM 8tPWxkzppK5uEJR3L4i2NX38oUjsEcD2PuxVB52Mm/p4slT/6yy3auY6Ask/WIn3 V71Fb4yWwfoSkDCns1JmkPZX3WO8N90S9610i4h/pldwYHw1ArAbWYiW+gSM8zC6 fINDvnATJyaiuzy6X0dk/hXBUj4pOg77OIL64ZYg7e2ihW4r7yfNUCxjMukLkOzG XrMSddbiZsCCzdHOsdvxTCj+mWNFjhm5KhoopdPHiYFm4nzKGGmtyr7UKOFTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURt1QSYcjiAFLp8VTkvoxP2ydsNAwHwYDVR0j BBgwFoAUJVGtdeoUffROi6oSQvJ0HvnrYK4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg4OTg5NzE5MzM0MDkyOS8wLzI1NTFBRDc1RUExNDdERjQ0RThCQUExMjQyRjI3 NDFFRjlFQjYwQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjU1MUFENzVFQTE0N0RGNDRFOEJBQTEyNDJGMjc0MUVGOUVCNjBBRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4ODk4OTcxOTMzNDA5MjkvMC8yNTUxQUQ3NUVBMTQ3 REY0NEU4QkFBMTI0MkYyNzQxRUY5RUI2MEFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpwpcrpEaV2Z pF0lvLQZXeUN7JfKUjsmSTzKzxN1N5MxOE8lca41BAsEG0XL3BlBKAdZ+C/45DDP GdtEC2DJLZTNjzbN0ksbbG9yw+uwwNK1XMecRxr70qEH/cfez+EcZH7Y3Vdrx3QH YYdfTsvmCa3jvzaqjuhEcyJ/4WsdNM7Kcpb5CEJCkKGYW0fiynsgMVdKDnh6n9n9 0fY4ZAjlY3dv5VBa7bCVJydrF+4IeAgLJ32Rp446dO8gIMW2A+sKz9nOVJ9DfXln I3u457qnqvgubYGskCju7rF9A4YfzlTPZcQ7ESmqxQrz9N8IKwlmz/JdPZgr0XSz jQo8SP7FxA== -----END CERTIFICATE-----Generated at Mon Oct 12 08:10:41 2026 by rpki-client