$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft File: B0B537B0747D6013B06152AEE77D15203B1916FA.mft (raw, json) Hash identifier: r3qcT64uH49kW+QtaihAWwIAIjicmf3KXFKslmA7inw= Subject key identifier: 0A:76:41:58:4E:E1:85:C1:6A:F2:CD:73:C5:96:BE:CE:EC:EF:D9:16 Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA Certificate issuer: /CN=B0B537B0747D6013B06152AEE77D15203B1916FA Certificate serial: 538A41C9907D1B6CFF120A5B628AA998F8354A10 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft Manifest number: 68 Signing time: Mon 28 Sep 2026 05:40:25 +0000 Manifest this update: Mon 28 Sep 2026 05:35:25 +0000 Manifest next update: Thu 01 Oct 2026 09:19:25 +0000 Files and hashes: 1: 3231302e37362e3138342e302f32322d3232203d3e20313334373632.roa (hash: KBOVI2UBdbeXRbsHVeTV6sbjrU6doYtA6rDMtJTlq1U=) 2: 3231302e37362e3137362e302f32322d3232203d3e20313334373632.roa (hash: uCOWXNMePOZa/iksUWzRBEjUWdyxzN11zhwz3y1U4Ek=) 3: 3231302e37362e3138382e302f32322d3232203d3e20313334373632.roa (hash: zI6ePoI0y2Fm1sSqrrUkSajPorMwE/xAmExyk0kFlus=) 4: 3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa (hash: SrpaphldTts5AcZEbZ+7FmR5HxvlWebU1eK0VABiMKY=) 5: B0B537B0747D6013B06152AEE77D15203B1916FA.crl (hash: hAmhxZSyhd/SWGAlzeGchA8bhhOrk0HjkQKOS0LXVk4=) 6: 3231302e37362e3136382e302f32322d3232203d3e20313334373632.roa (hash: WkFPiKlYJz6jmeh4Y+K4Zer0JOq+QHQvGMcujzWOVz0=) 7: 3231302e37362e3138302e302f32322d3232203d3e20313334373632.roa (hash: ncGJvfVZz1aXP6VWJdrIhLgknTdYP6bRFVSX0ogc/kg=) 8: 3231302e37362e3136342e302f32322d3232203d3e20313334373632.roa (hash: S4Xiq+tsebEtfsCJHFrLqedmnsBo40vyHoPs4f0RABE=) 9: 3231302e37362e3137322e302f32322d3232203d3e20313334373632.roa (hash: EKUBeXes+M1jDCe7e1kc1oCmCgsBM6tO5sag3Ry34yY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 09:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8a:41:c9:90:7d:1b:6c:ff:12:0a:5b:62:8a:a9:98:f8:35:4a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA Validity Not Before: Sep 28 05:35:25 2026 GMT Not After : Oct 1 09:19:25 2026 GMT Subject: CN=0A7641584EE185C16AF2CD73C596BECEECEFD916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:88:11:9c:96:95:69:78:40:5d:44:31:83:8a: 35:da:1d:30:c6:b6:c0:6b:33:a9:af:29:f2:e8:08: b7:c2:72:f9:2f:6a:b3:fc:ca:03:0b:85:80:0f:2f: 94:6e:a0:00:0b:ba:f7:89:a0:c5:24:83:ab:21:da: 00:f1:4a:ea:2f:15:3a:51:45:40:38:ca:54:94:66: c9:6d:9f:ca:cf:f9:8e:df:d8:f4:d2:b0:47:47:4d: 1c:f8:9c:77:76:16:35:7a:3d:e8:7e:f9:1f:e7:fb: 7c:33:37:eb:f8:20:f0:45:fb:69:5c:0a:aa:09:ba: f4:ba:bc:2c:a8:77:6d:72:c3:17:6f:1d:a7:b2:35: 54:2e:4f:77:8d:ce:1b:51:ec:b5:d3:af:f8:86:4a: 5a:8c:ea:e2:59:a2:a5:4f:57:b6:7f:f4:a3:bc:ab: 5c:d7:d5:37:33:83:b3:37:49:72:a7:15:ff:6f:ae: bd:13:51:32:f2:d4:aa:27:bb:c6:c9:70:3e:8a:44: 29:ae:22:6d:7b:18:f6:ba:18:ae:b4:f7:8d:b4:57: 57:5d:79:32:7f:9e:97:24:c5:ab:6f:a3:6f:f5:cc: c8:fc:8f:ab:ad:41:09:df:8f:6c:c5:fb:b0:29:a9: 51:9c:be:fe:98:99:f5:5f:da:08:46:08:e8:02:f5: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:76:41:58:4E:E1:85:C1:6A:F2:CD:73:C5:96:BE:CE:EC:EF:D9:16 X509v3 Authority Key Identifier: keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:56:47:ff:55:a5:dc:52:13:bd:11:cc:26:37:56:7e:f5:87: a2:20:d2:11:ce:2b:d1:b3:18:f7:36:e5:d3:f1:ce:de:d7:f6: a2:d6:75:36:a9:ca:c9:3e:2e:37:d6:78:40:38:41:75:f2:b2: c4:27:0e:bc:fa:a8:22:f0:73:ab:20:cd:aa:71:6d:1c:26:79: bf:0a:27:a8:b1:0e:d6:35:74:e8:a2:cf:0d:f4:0e:2c:80:62: 83:62:7e:c9:06:f8:d8:90:88:34:6c:94:e2:12:21:72:36:72: 89:a7:dc:bd:52:19:ae:fb:65:6e:c3:c7:51:75:57:c3:1e:2e: ea:1b:04:d7:94:d2:df:55:fe:b1:ee:fe:f5:95:3a:07:95:b1: 3c:f6:b6:80:df:37:04:39:e3:a8:ab:57:95:78:a9:a6:ba:68: 14:47:63:a5:67:c4:7b:96:43:a5:0a:73:31:18:2a:2a:0f:00: 2f:eb:a7:4f:23:51:94:b9:30:2a:25:e6:70:2c:af:55:cd:53: e3:a1:cc:a3:34:e6:b5:d8:54:2b:04:4d:2f:0f:92:2d:61:ca: 60:f0:a7:06:a2:ae:33:a5:19:a9:05:7d:13:9c:1a:bb:84:cc: 79:66:22:d1:fe:a8:96:6d:ff:dd:2d:fb:4a:51:f9:16:a1:36: 1c:b8:38:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU4pByZB9G2z/EgpbYoqpmPg1ShAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAz QjE5MTZGQTAeFw0yNjA5MjgwNTM1MjVaFw0yNjEwMDEwOTE5MjVaMDMxMTAvBgNV BAMTKDBBNzY0MTU4NEVFMTg1QzE2QUYyQ0Q3M0M1OTZCRUNFRUNFRkQ5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQiBGclpVpeEBdRDGDijXaHTDG tsBrM6mvKfLoCLfCcvkvarP8ygMLhYAPL5RuoAALuveJoMUkg6sh2gDxSuovFTpR RUA4ylSUZsltn8rP+Y7f2PTSsEdHTRz4nHd2FjV6Peh++R/n+3wzN+v4IPBF+2lc CqoJuvS6vCyod21ywxdvHaeyNVQuT3eNzhtR7LXTr/iGSlqM6uJZoqVPV7Z/9KO8 q1zX1Tczg7M3SXKnFf9vrr0TUTLy1Konu8bJcD6KRCmuIm17GPa6GK609420V1dd eTJ/npckxatvo2/1zMj8j6utQQnfj2zF+7ApqVGcvv6YmfVf2ghGCOgC9QpXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCnZBWE7hhcFq8s1zxZa+zuzv2RYwHwYDVR0j BBgwFoAUsLU3sHR9YBOwYVKu530VIDsZFvowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjA2NTI5Mjk5NDgwNTc5Ny8wL0IwQjUzN0IwNzQ3RDYwMTNCMDYxNTJBRUU3N0Qx NTIwM0IxOTE2RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAzQjE5MTZGQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjIwNjUyOTI5OTQ4MDU3OTcvMC9CMEI1MzdCMDc0N0Q2 MDEzQjA2MTUyQUVFNzdEMTUyMDNCMTkxNkZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs1ZH/1Wl3FIT vRHMJjdWfvWHoiDSEc4r0bMY9zbl0/HO3tf2otZ1NqnKyT4uN9Z4QDhBdfKyxCcO vPqoIvBzqyDNqnFtHCZ5vwonqLEO1jV06KLPDfQOLIBig2J+yQb42JCINGyU4hIh cjZyiafcvVIZrvtlbsPHUXVXwx4u6hsE15TS31X+se7+9ZU6B5WxPPa2gN83BDnj qKtXlXipprpoFEdjpWfEe5ZDpQpzMRgqKg8AL+unTyNRlLkwKiXmcCyvVc1T46HM ozTmtdhUKwRNLw+SLWHKYPCnBqKuM6UZqQV9E5wau4TMeWYi0f6olm3/3S37SlH5 FqE2HLg4Vw== -----END CERTIFICATE-----Generated at Tue Sep 29 04:38:19 2026 by rpki-client