$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft File: 1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft (raw, json) Hash identifier: ha198qLW+hffHpRwe94qburoOhMtjRTekQRwA6JvuW0= Subject key identifier: E0:0D:73:19:C5:39:1B:86:C5:F7:E7:07:C8:B3:E3:2E:C7:54:AE:5A Authority key identifier: 15:57:B2:F7:8A:0F:8A:CA:63:B4:BE:D7:56:4D:19:B7:9B:69:FF:ED Certificate issuer: /CN=1557B2F78A0F8ACA63B4BED7564D19B79B69FFED Certificate serial: 5DBD5A4B5592D478DE542289EBA9BA88D87C7416 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft Manifest number: 0D Signing time: Sat 26 Sep 2026 03:33:08 +0000 Manifest this update: Sat 26 Sep 2026 03:28:08 +0000 Manifest next update: Tue 29 Sep 2026 04:53:08 +0000 Files and hashes: 1: 3132332e3130332e32342e302f32322d3232203d3e2034383038.roa (hash: FZPXOuuaRRXPhHCFo0zBvRgZoP26kE1/D9UKHQehW7I=) 2: 1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl (hash: iyCg8yqJTOnIjBu4rABrekPJsfMk361EH8ilsxW+otA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:bd:5a:4b:55:92:d4:78:de:54:22:89:eb:a9:ba:88:d8:7c:74:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1557B2F78A0F8ACA63B4BED7564D19B79B69FFED Validity Not Before: Sep 26 03:28:08 2026 GMT Not After : Sep 29 04:53:08 2026 GMT Subject: CN=E00D7319C5391B86C5F7E707C8B3E32EC754AE5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:82:1f:a6:26:57:5f:3c:f2:1c:f7:f1:9a:27: f1:16:59:cc:c0:f3:35:2c:f7:3f:81:b1:70:67:d5: 7e:72:ce:59:64:b6:c6:92:38:84:07:84:a5:1d:92: 44:c0:b2:98:9f:9e:e9:5a:92:44:80:28:dd:8e:c5: f0:1c:8f:17:27:d2:15:19:54:94:d2:77:cd:79:34: 8e:80:3a:95:30:82:df:b5:1e:8b:29:6c:f9:e1:23: 99:c4:bc:33:1c:1d:c2:2a:25:fa:ed:5c:c5:41:ca: 2a:ba:3c:d4:72:ca:6a:b1:e2:ac:a9:5d:b8:7c:fb: 95:74:69:22:3e:e7:d6:b7:0f:85:65:ee:95:89:54: dd:66:2f:10:ad:a9:8d:b4:71:63:51:39:8a:0a:c4: 96:44:a8:0e:b2:4a:ed:89:78:80:cd:fd:88:8e:7b: cb:78:4e:1e:ab:bc:4d:9a:a9:28:ca:fd:be:6e:19: 91:3a:6f:52:99:c8:4f:da:de:ae:19:8e:ab:e5:eb: d7:66:d4:af:2a:bd:ba:71:05:0f:04:29:85:ca:18: 05:bc:3a:9d:a2:09:18:36:e6:a3:86:b3:41:e5:b1: 16:5e:54:79:21:49:9f:e6:ed:1c:59:d7:8f:e1:b8: 2d:65:49:d4:2b:6d:4a:65:67:d6:b5:fe:ac:95:5a: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0D:73:19:C5:39:1B:86:C5:F7:E7:07:C8:B3:E3:2E:C7:54:AE:5A X509v3 Authority Key Identifier: keyid:15:57:B2:F7:8A:0F:8A:CA:63:B4:BE:D7:56:4D:19:B7:9B:69:FF:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:fe:d0:ea:0d:99:99:36:8c:e7:d0:dd:af:ce:c0:54:50:f5: ae:b1:9c:19:75:8e:ca:5d:e1:da:e4:63:75:3e:ef:e2:e2:ee: 2d:25:67:2b:56:ee:e0:c3:17:6b:87:01:1c:32:5b:10:8a:cc: 40:f0:56:55:9d:12:04:88:c7:d1:26:1d:fd:bf:9f:e2:e3:5c: ca:27:a9:3c:cf:f6:07:1a:5d:bf:46:1b:b7:58:97:15:b7:16: 5f:5a:f5:9b:33:d0:85:2d:22:f6:28:cf:14:80:08:79:5e:96: e1:98:51:77:1d:f9:4b:2e:d8:6a:a4:45:29:fb:7c:9a:36:18: 5d:34:7c:d0:ad:60:5b:9c:cb:66:46:37:48:b8:27:72:15:1a: 49:e3:fb:bd:70:bb:d2:be:9b:73:56:e9:49:8c:21:d8:a9:14: 14:cd:e6:1a:b8:f7:c3:4e:de:21:1f:f6:17:6d:be:0b:36:15: 55:e8:cb:43:50:97:26:ba:36:02:2e:59:a7:16:a8:cb:3d:58: 5a:b1:c6:63:88:8f:ce:ad:37:8e:2a:7e:83:7c:85:e7:54:00: 0f:dc:4b:df:37:7e:11:07:6e:61:59:32:6f:88:67:8f:6f:cc: 95:85:aa:84:77:ad:04:09:87:e8:4e:a6:69:96:4a:98:80:77: 8e:fb:fa:a5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXb1aS1WS1HjeVCKJ66m6iNh8dBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU1N0IyRjc4QTBGOEFDQTYzQjRCRUQ3NTY0RDE5Qjc5 QjY5RkZFRDAeFw0yNjA5MjYwMzI4MDhaFw0yNjA5MjkwNDUzMDhaMDMxMTAvBgNV BAMTKEUwMEQ3MzE5QzUzOTFCODZDNUY3RTcwN0M4QjNFMzJFQzc1NEFFNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIgh+mJldfPPIc9/GaJ/EWWczA 8zUs9z+BsXBn1X5yzllktsaSOIQHhKUdkkTAspifnulakkSAKN2OxfAcjxcn0hUZ VJTSd815NI6AOpUwgt+1HospbPnhI5nEvDMcHcIqJfrtXMVByiq6PNRyymqx4qyp Xbh8+5V0aSI+59a3D4Vl7pWJVN1mLxCtqY20cWNROYoKxJZEqA6ySu2JeIDN/YiO e8t4Th6rvE2aqSjK/b5uGZE6b1KZyE/a3q4Zjqvl69dm1K8qvbpxBQ8EKYXKGAW8 Op2iCRg25qOGs0HlsRZeVHkhSZ/m7RxZ14/huC1lSdQrbUplZ9a1/qyVWsrlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4A1zGcU5G4bF9+cHyLPjLsdUrlowHwYDVR0j BBgwFoAUFVey94oPispjtL7XVk0Zt5tp/+0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE0 Njk5ODI2MzEyODI2MDY1My8wLzE1NTdCMkY3OEEwRjhBQ0E2M0I0QkVENzU2NEQx OUI3OUI2OUZGRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTU1N0IyRjc4QTBGOEFDQTYzQjRCRUQ3NTY0RDE5Qjc5QjY5RkZFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNDY5OTgyNjMxMjgyNjA2NTMvMC8xNTU3QjJGNzhBMEY4 QUNBNjNCNEJFRDc1NjREMTlCNzlCNjlGRkVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARP7Q6g2ZmTaM 59Ddr87AVFD1rrGcGXWOyl3h2uRjdT7v4uLuLSVnK1bu4MMXa4cBHDJbEIrMQPBW VZ0SBIjH0SYd/b+f4uNcyiepPM/2Bxpdv0Ybt1iXFbcWX1r1mzPQhS0i9ijPFIAI eV6W4ZhRdx35Sy7YaqRFKft8mjYYXTR80K1gW5zLZkY3SLgnchUaSeP7vXC70r6b c1bpSYwh2KkUFM3mGrj3w07eIR/2F22+CzYVVejLQ1CXJro2Ai5Zpxaoyz1YWrHG Y4iPzq03jip+g3yF51QAD9xL3zd+EQduYVkyb4hnj2/MlYWqhHetBAmH6E6maZZK mIB3jvv6pQ== -----END CERTIFICATE-----Generated at Sat Sep 26 06:40:50 2026 by rpki-client