$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft File: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft (raw, json) Hash identifier: kP+pcuBVdE+B0zcamMNu+mKCJKe3qEk5zuoGtZB7Rnw= Subject key identifier: 1B:D5:77:63:9B:5E:24:56:94:A0:AE:6B:B6:5D:B3:6A:79:A8:76:EE Authority key identifier: 53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24 Certificate issuer: /CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24 Certificate serial: 482593E8D3526B85802DF2EB71A77FFD0F8FFF46 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft Manifest number: 9D Signing time: Sun 11 Oct 2026 10:40:29 +0000 Manifest this update: Sun 11 Oct 2026 10:35:29 +0000 Manifest next update: Wed 14 Oct 2026 12:33:29 +0000 Files and hashes: 1: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl (hash: 8kSkCnJYvFMtBDtrxmC7MK2IUxhf+G/9JWVRrGmZiZw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 12:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:25:93:e8:d3:52:6b:85:80:2d:f2:eb:71:a7:7f:fd:0f:8f:ff:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24 Validity Not Before: Oct 11 10:35:29 2026 GMT Not After : Oct 14 12:33:29 2026 GMT Subject: CN=1BD577639B5E245694A0AE6BB65DB36A79A876EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:33:ac:62:fd:a0:77:00:65:81:7b:03:d9:f3: b9:88:6b:d4:6b:16:c7:46:4e:1f:1c:7a:65:ff:90: 40:fa:c5:b3:e2:bf:39:05:d4:60:e6:ff:d0:f5:c5: d7:a0:7d:b2:f7:79:74:d7:65:5e:f7:f7:bf:65:a3: ee:32:17:f0:1a:fc:19:13:10:02:e3:d2:42:6a:90: 56:32:5a:e1:54:c8:5a:99:01:b9:4e:d4:a6:a3:53: c4:ed:f6:fe:9c:d3:34:d2:d3:66:b1:17:fe:05:d0: 89:05:80:c3:87:96:96:75:d8:94:54:af:b9:18:8d: b3:fa:4d:b2:3b:99:c0:74:e9:d5:6f:28:3f:bb:2b: 81:c2:2d:30:4d:b7:5a:09:16:a1:3d:07:37:fd:59: 93:19:0c:01:6a:55:b4:b0:3b:75:dc:71:3c:eb:1c: 75:4b:1f:77:0c:55:b0:dc:f3:96:23:05:93:9c:7f: a8:f0:85:97:e3:c9:9f:42:7e:b4:20:37:6e:bb:fd: 12:03:b4:4b:0f:e3:28:2d:8d:1b:e3:22:33:64:50: f9:cf:d2:6c:c8:a1:89:68:51:6d:16:f4:65:03:6c: f0:95:cb:82:74:e3:08:26:a8:98:58:65:f4:87:c5: e9:54:57:91:ff:29:2e:db:8a:d7:cc:32:bd:b3:0e: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D5:77:63:9B:5E:24:56:94:A0:AE:6B:B6:5D:B3:6A:79:A8:76:EE X509v3 Authority Key Identifier: keyid:53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f0:e8:21:24:81:9a:75:46:8e:69:e6:ea:e7:86:39:25:77: b0:74:0b:50:dd:53:58:3f:78:10:eb:57:8b:76:d5:b0:09:aa: 2d:a9:85:fe:61:3d:74:5a:4f:19:c2:2d:c0:57:52:27:52:22: 72:38:ee:53:5f:e8:ca:ce:86:b5:3f:27:ed:ae:c0:c2:f8:3f: b7:fa:68:8f:13:b4:48:ae:b9:70:1e:58:17:45:ad:42:69:81: 07:d0:ba:0f:da:f4:44:d4:a8:a5:97:5e:3c:b6:27:72:9b:f5: 18:48:d2:22:6c:61:81:68:05:ee:44:2e:d3:e6:88:9a:ae:db: 59:e6:d2:86:ae:31:34:f5:7b:4b:47:1c:de:16:5e:e5:0c:3f: 67:13:78:df:aa:6b:d9:6f:10:f9:b2:b5:10:52:d9:8f:15:8f: 90:37:50:5f:76:28:ac:09:82:8f:31:57:45:13:0b:8d:32:8a: 65:d0:3e:72:45:6f:6b:19:30:15:8a:9d:42:e6:c3:05:0e:60: de:e8:0b:a3:53:d2:2b:5c:f4:b5:d0:99:e9:67:78:be:bf:cc: 80:20:61:01:0a:48:91:0e:26:95:1f:22:46:91:8a:ba:61:2e: 5e:48:df:a0:ba:5f:13:e3:8d:f2:a9:d8:ed:dd:c5:78:4e:f7: cc:1e:8d:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSCWT6NNSa4WALfLrcad//Q+P/0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1MTZGQTE0OTdDRkNDREJCRjI4RjJCREU5RkE0ODZG RTkwRkUyNDAeFw0yNjEwMTExMDM1MjlaFw0yNjEwMTQxMjMzMjlaMDMxMTAvBgNV BAMTKDFCRDU3NzYzOUI1RTI0NTY5NEEwQUU2QkI2NURCMzZBNzlBODc2RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZM6xi/aB3AGWBewPZ87mIa9Rr FsdGTh8cemX/kED6xbPivzkF1GDm/9D1xdegfbL3eXTXZV73979lo+4yF/Aa/BkT EALj0kJqkFYyWuFUyFqZAblO1KajU8Tt9v6c0zTS02axF/4F0IkFgMOHlpZ12JRU r7kYjbP6TbI7mcB06dVvKD+7K4HCLTBNt1oJFqE9Bzf9WZMZDAFqVbSwO3XccTzr HHVLH3cMVbDc85YjBZOcf6jwhZfjyZ9CfrQgN267/RIDtEsP4ygtjRvjIjNkUPnP 0mzIoYloUW0W9GUDbPCVy4J04wgmqJhYZfSHxelUV5H/KS7bitfMMr2zDvAvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUG9V3Y5teJFaUoK5rtl2zanmodu4wHwYDVR0j BBgwFoAUU1FvoUl8/M278o8r3p+khv6Q/iQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY2MzU1MDk3ODU1NTkyNS8xLzUzNTE2RkExNDk3Q0ZDQ0RCQkYyOEYyQkRFOUZB NDg2RkU5MEZFMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTM1MTZGQTE0OTdDRkNDREJCRjI4RjJCREU5RkE0ODZGRTkwRkUyNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NjM1NTA5Nzg1NTU5MjUvMS81MzUxNkZBMTQ5N0NG Q0NEQkJGMjhGMkJERTlGQTQ4NkZFOTBGRTI0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfDoISSBmnVG jmnm6ueGOSV3sHQLUN1TWD94EOtXi3bVsAmqLamF/mE9dFpPGcItwFdSJ1Iicjju U1/oys6GtT8n7a7Awvg/t/pojxO0SK65cB5YF0WtQmmBB9C6D9r0RNSopZdePLYn cpv1GEjSImxhgWgF7kQu0+aImq7bWebShq4xNPV7S0cc3hZe5Qw/ZxN436pr2W8Q +bK1EFLZjxWPkDdQX3YorAmCjzFXRRMLjTKKZdA+ckVvaxkwFYqdQubDBQ5g3ugL o1PSK1z0tdCZ6Wd4vr/MgCBhAQpIkQ4mlR8iRpGKumEuXkjfoLpfE+ON8qnY7d3F eE73zB6NSg== -----END CERTIFICATE-----Generated at Mon Oct 12 16:35:49 2026 by rpki-client