$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft File: B53E57671412C3144DC646263A3169FBAB466617.mft (raw, json) Hash identifier: oLRQcwyGlO03qr1lRRVz+t6vrqmsfoKhvm2cStKKiwE= Subject key identifier: 32:89:13:62:AE:EA:5A:80:FD:E8:56:D6:FD:81:37:4E:D1:2B:9C:69 Authority key identifier: B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 Certificate issuer: /CN=B53E57671412C3144DC646263A3169FBAB466617 Certificate serial: 29D529F641CE97E6A11408CAFF89C7232F17767A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft Manifest number: 59 Signing time: Fri 24 Jul 2026 03:00:12 +0000 Manifest this update: Fri 24 Jul 2026 02:55:12 +0000 Manifest next update: Sat 25 Jul 2026 04:06:12 +0000 Files and hashes: 1: 3130332e3235332e3230342e302f32322d3234203d3e203234343030.roa (hash: E4wR4NLFggrLxHJQdf1KzP2OMs6lbWCeIqkEqlDy23g=) 2: 3130332e3235332e3230342e302f32322d3234203d3e203137343238.roa (hash: ko7gCLi6CMLFIhxFKTT1cmJPl7Ml6iCxb4ojqre9A3Q=) 3: 3130332e3235332e3230342e302f32322d3234203d3e203137363231.roa (hash: miR+yOAxVwH6aRovAi7pmIbHENiIMw7vrr3vUC/C/ag=) 4: B53E57671412C3144DC646263A3169FBAB466617.crl (hash: kkUtNmDd2W1QZ9okeYY2Go2xr09NCMkpaSKODUrZHpA=) 5: 3130332e3235332e3230342e302f32322d3234203d3e2034383131.roa (hash: f3RcKA0n7bijmUgFzN1FVeb80vQjPy76qjvv4vuDzfQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d5:29:f6:41:ce:97:e6:a1:14:08:ca:ff:89:c7:23:2f:17:76:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B53E57671412C3144DC646263A3169FBAB466617 Validity Not Before: Jul 24 02:55:12 2026 GMT Not After : Jul 25 04:06:12 2026 GMT Subject: CN=32891362AEEA5A80FDE856D6FD81374ED12B9C69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4e:7c:ab:8c:4c:2e:6a:4a:51:2d:e3:5a:34: 79:70:a0:23:d7:ab:a4:c2:48:60:fc:56:4b:34:45: 02:d9:85:f3:2f:1d:5e:4d:84:c0:00:2c:2f:3a:21: 97:3d:42:35:e0:4b:f6:c5:0c:a5:be:39:fd:68:11: b4:20:ab:5a:41:8a:08:c7:e4:2a:2f:0f:55:1d:05: 51:24:13:f8:24:4e:e9:ac:41:51:63:94:20:55:99: aa:f3:c7:c4:ff:40:f8:b5:32:de:da:56:b4:34:28: a5:f4:57:5b:63:97:5e:63:75:e6:65:d9:94:66:e3: 93:19:50:ac:01:fc:bb:4e:71:47:85:41:48:62:fb: 12:78:41:d3:d7:12:90:a1:4a:19:d8:c7:9f:80:0c: 41:48:af:b6:66:76:eb:45:0d:03:a0:be:e8:b0:ce: 51:f9:11:f0:ab:48:00:ac:ab:d8:bb:6a:6c:da:87: 13:ed:eb:2e:0c:9b:55:29:07:cf:68:5b:69:c5:4f: bd:d2:dd:8f:3e:b0:0a:e4:55:08:e2:5f:7d:b4:7a: 32:11:5c:55:81:00:5f:66:24:d3:f8:bd:d8:89:cb: 76:2b:55:1c:e2:72:5c:bc:1d:47:10:1a:9a:70:e9: 45:e3:de:15:fb:df:b6:54:90:13:35:bc:7c:67:95: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:89:13:62:AE:EA:5A:80:FD:E8:56:D6:FD:81:37:4E:D1:2B:9C:69 X509v3 Authority Key Identifier: keyid:B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7e:08:5b:cf:ee:ad:9c:53:38:25:93:34:cd:10:56:a6:2d: c5:b8:51:4b:74:ef:4a:d4:1a:b1:1a:12:2c:66:b4:1c:b2:71: 4f:f0:9c:05:ca:79:5b:a6:ea:20:68:a6:02:08:72:d7:c0:2c: a0:24:12:f2:5b:d1:89:82:a4:a8:9a:0d:eb:ed:12:65:d7:95: 3f:1f:7f:e8:ac:32:85:65:91:bf:6e:7d:4e:43:a0:83:bf:c4: fb:e9:38:db:4c:28:4c:d2:ae:ed:fc:a4:7a:bd:ae:e8:13:a2: 96:e0:1a:21:4b:60:a5:e0:c9:4d:da:ca:d5:0a:ff:14:21:1b: ac:5b:5b:ad:2a:48:a3:bb:64:cf:2d:96:21:d2:36:6f:20:be: cb:da:b7:e6:50:0d:1c:ad:f8:f4:eb:cc:44:e0:44:1a:a0:45: d8:3b:ae:a4:05:1f:0f:9e:56:b3:f6:e8:1f:8a:69:31:85:af: c2:5b:69:88:de:16:c7:b9:3f:a9:d6:c6:cd:d7:46:1e:ba:36: 4a:c3:78:a1:75:b4:77:c5:85:d1:04:88:97:ef:7e:6f:f8:75: 30:61:f9:9d:cf:62:05:f7:db:60:b9:0b:8e:a0:4f:40:aa:71: 01:e1:3a:f6:2a:93:3a:1c:d3:5e:2b:0b:5a:d7:4f:6f:2b:c6: 22:79:fd:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKdUp9kHOl+ahFAjK/4nHIy8XdnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJB QjQ2NjYxNzAeFw0yNjA3MjQwMjU1MTJaFw0yNjA3MjUwNDA2MTJaMDMxMTAvBgNV BAMTKDMyODkxMzYyQUVFQTVBODBGREU4NTZENkZEODEzNzRFRDEyQjlDNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXTnyrjEwuakpRLeNaNHlwoCPX q6TCSGD8Vks0RQLZhfMvHV5NhMAALC86IZc9QjXgS/bFDKW+Of1oEbQgq1pBigjH 5CovD1UdBVEkE/gkTumsQVFjlCBVmarzx8T/QPi1Mt7aVrQ0KKX0V1tjl15jdeZl 2ZRm45MZUKwB/LtOcUeFQUhi+xJ4QdPXEpChShnYx5+ADEFIr7ZmdutFDQOgvuiw zlH5EfCrSACsq9i7amzahxPt6y4Mm1UpB89oW2nFT73S3Y8+sArkVQjiX320ejIR XFWBAF9mJNP4vdiJy3YrVRzicly8HUcQGppw6UXj3hX737ZUkBM1vHxnlXJ1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMokTYq7qWoD96FbW/YE3TtErnGkwHwYDVR0j BBgwFoAUtT5XZxQSwxRNxkYmOjFp+6tGZhcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTI5MTI2NTgyMTc2OTc0OS8wL0I1M0U1NzY3MTQxMkMzMTQ0REM2NDYyNjNBMzE2 OUZCQUI0NjY2MTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJBQjQ2NjYxNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkyOTEyNjU4MjE3Njk3NDkvMC9CNTNFNTc2NzE0MTJD MzE0NERDNjQ2MjYzQTMxNjlGQkFCNDY2NjE3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS34IW8/urZxT OCWTNM0QVqYtxbhRS3TvStQasRoSLGa0HLJxT/CcBcp5W6bqIGimAghy18AsoCQS 8lvRiYKkqJoN6+0SZdeVPx9/6KwyhWWRv259TkOgg7/E++k420woTNKu7fyker2u 6BOiluAaIUtgpeDJTdrK1Qr/FCEbrFtbrSpIo7tkzy2WIdI2byC+y9q35lANHK34 9OvMROBEGqBF2DuupAUfD55Ws/boH4ppMYWvwltpiN4Wx7k/qdbGzddGHro2SsN4 oXW0d8WF0QSIl+9+b/h1MGH5nc9iBffbYLkLjqBPQKpxAeE69iqTOhzTXisLWtdP byvGInn91w== -----END CERTIFICATE-----Generated at Fri Jul 24 13:26:51 2026 by rpki-client