$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft File: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft (raw, json) Hash identifier: 1lniCKamxtGn2GhhfVIxcJNanAEdW6SxOqRYlbJs2ZI= Subject key identifier: 5A:28:A2:2D:4B:0D:8D:EA:90:2F:C7:73:F1:02:32:EF:15:CA:6F:D4 Authority key identifier: A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E Certificate issuer: /CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Certificate serial: 59BD443BC2334234228B504B975D40AA5E20DD46 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft Manifest number: AB Signing time: Wed 13 May 2026 07:51:02 +0000 Manifest this update: Wed 13 May 2026 07:46:02 +0000 Manifest next update: Thu 14 May 2026 11:13:02 +0000 Files and hashes: 1: A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl (hash: 1lCeL3FHH9jMpwcRqDUF0ttmA3iHQQmzXE1TSoVCdHk=) 2: AS0.roa (hash: MeUjvzlC8RfPCHIeXCPkR1JPOSKEr9L37VfQjU8gU4M=) 3: AS37965.roa (hash: Zd1CUN8SymdcYUZfg2FVfBZud46ZTvu+Aztzdvce9Hg=) 4: AS7468.roa (hash: AnejswKQngEHe/GvZggcui3l/xXJmHoF0SM59U5rA24=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:bd:44:3b:c2:33:42:34:22:8b:50:4b:97:5d:40:aa:5e:20:dd:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51408E97010BDB44146281B8A78BCFA4E0E4C5E Validity Not Before: May 13 07:46:02 2026 GMT Not After : May 14 11:13:02 2026 GMT Subject: CN=5A28A22D4B0D8DEA902FC773F10232EF15CA6FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:ec:66:50:bc:2a:04:a9:50:cd:6f:a3:75: bd:f0:4d:f1:d6:49:c2:5b:b2:79:3b:8b:f7:38:21: 31:28:f0:86:b8:ec:6b:fc:e9:83:06:bc:43:33:73: 53:ef:51:5d:b7:56:ed:bb:04:db:0c:e1:8c:ba:a4: 4f:c4:41:ec:d4:47:c5:78:40:d6:0a:7d:2b:09:ad: c2:57:3f:89:f3:59:56:eb:84:ac:45:26:aa:98:e0: fe:8d:96:1d:6b:05:eb:f9:9a:f8:f2:44:2e:bc:b9: 2c:13:65:97:98:9f:36:ad:c7:b3:f8:7d:f7:2d:a6: da:97:0b:5c:60:a8:35:74:77:38:cb:55:fb:ec:34: 3f:39:cd:65:86:ad:21:42:45:b0:fe:56:72:7a:69: eb:24:7f:ff:3a:27:d0:0b:b7:a1:bf:cd:5c:27:56: a4:c8:d5:2e:56:4c:7b:16:fc:56:98:a5:6b:d0:37: d4:0e:be:93:46:b6:b2:ba:1a:4b:fd:ec:f0:05:46: fe:65:cb:b7:31:40:e4:50:9b:fb:20:f9:f1:58:5b: 1f:97:2d:5d:fd:f1:af:b9:36:92:8e:db:0c:32:13: 82:ba:32:af:fb:15:80:7a:83:41:2d:6e:17:e8:2d: c0:e3:37:74:8e:5c:1d:e0:b9:d6:d7:d1:7e:05:fc: 8b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:28:A2:2D:4B:0D:8D:EA:90:2F:C7:73:F1:02:32:EF:15:CA:6F:D4 X509v3 Authority Key Identifier: keyid:A5:14:08:E9:70:10:BD:B4:41:46:28:1B:8A:78:BC:FA:4E:0E:4C:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/0/A51408E97010BDB44146281B8A78BCFA4E0E4C5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e2:3a:5e:db:3b:c2:f8:88:8b:f2:5f:cc:fc:ff:0d:ab:46: 19:e6:2c:d4:1d:5a:0c:6b:1c:be:50:32:62:95:c3:72:75:b6: d8:19:28:2f:6a:bd:4a:0f:73:40:20:2c:0e:1e:44:bf:bc:97: 3e:f3:55:99:52:0f:7b:02:f5:93:d6:c7:83:86:68:61:51:7f: 58:ae:9d:9c:09:00:0e:9f:aa:b2:8b:36:a5:fa:62:cc:99:80: 5a:ff:ba:53:3a:5b:3c:a3:e9:55:6b:34:7b:be:bc:40:a1:89: b0:89:f9:dd:6c:2b:5b:dd:57:70:80:c2:a2:62:88:fd:a5:c2: 77:45:42:19:a1:1c:35:7f:1c:25:53:32:d4:23:f2:5d:8c:83: 11:ec:a4:22:2d:f0:68:fc:6a:b6:39:60:cd:91:a1:91:25:cf: 9b:45:63:bc:08:89:01:40:14:89:c3:72:eb:06:6b:be:14:c7: 4e:02:3b:d3:49:bf:c4:0c:1b:2f:ca:97:07:1f:e6:45:ab:20: c4:ec:50:3a:66:69:2d:d4:b0:42:c1:3c:50:24:39:e1:25:e1: 32:aa:b4:e2:31:bf:9f:36:85:14:8e:3f:5c:dd:21:29:7e:11: 08:35:cd:b5:5d:b6:c3:d9:b4:01:dd:4c:6c:36:75:e3:70:d1: 01:70:2e:8b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWb1EO8IzQjQii1BLl11Aql4g3UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0 RTBFNEM1RTAeFw0yNjA1MTMwNzQ2MDJaFw0yNjA1MTQxMTEzMDJaMDMxMTAvBgNV BAMTKDVBMjhBMjJENEIwRDhERUE5MDJGQzc3M0YxMDIzMkVGMTVDQTZGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30exmULwqBKlQzW+jdb3wTfHW ScJbsnk7i/c4ITEo8Ia47Gv86YMGvEMzc1PvUV23Vu27BNsM4Yy6pE/EQezUR8V4 QNYKfSsJrcJXP4nzWVbrhKxFJqqY4P6Nlh1rBev5mvjyRC68uSwTZZeYnzatx7P4 ffctptqXC1xgqDV0dzjLVfvsND85zWWGrSFCRbD+VnJ6aeskf/86J9ALt6G/zVwn VqTI1S5WTHsW/FaYpWvQN9QOvpNGtrK6Gkv97PAFRv5ly7cxQORQm/sg+fFYWx+X LV398a+5NpKO2wwyE4K6Mq/7FYB6g0EtbhfoLcDjN3SOXB3gudbX0X4F/IubAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWiiiLUsNjeqQL8dz8QIy7xXKb9QwHwYDVR0j BBgwFoAUpRQI6XAQvbRBRigbini8+k4OTF4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8wL0E1MTQwOEU5NzAxMEJEQjQ0MTQ2MjgxQjhBNzhC Q0ZBNEUwRTRDNUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTUxNDA4RTk3MDEwQkRCNDQxNDYyODFCOEE3OEJDRkE0RTBFNEM1RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMC9BNTE0MDhFOTcwMTBC REI0NDE0NjI4MUI4QTc4QkNGQTRFMEU0QzVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuI6Xts7wviI i/JfzPz/DatGGeYs1B1aDGscvlAyYpXDcnW22BkoL2q9Sg9zQCAsDh5Ev7yXPvNV mVIPewL1k9bHg4ZoYVF/WK6dnAkADp+qsos2pfpizJmAWv+6UzpbPKPpVWs0e768 QKGJsIn53WwrW91XcIDComKI/aXCd0VCGaEcNX8cJVMy1CPyXYyDEeykIi3waPxq tjlgzZGhkSXPm0VjvAiJAUAUicNy6wZrvhTHTgI700m/xAwbL8qXBx/mRasgxOxQ OmZpLdSwQsE8UCQ54SXhMqq04jG/nzaFFI4/XN0hKX4RCDXNtV22w9m0Ad1MbDZ1 43DRAXAuiw== -----END CERTIFICATE-----Generated at Wed May 13 14:22:48 2026 by rpki-client