$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft File: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft (raw, json) Hash identifier: 5Py7avSYmJIHTPRpIKRHyz0B0FfF8ZNXeyFVdassewU= Subject key identifier: 89:9D:31:FF:FE:F3:4D:6D:8E:A9:CF:4E:A8:9B:30:27:EB:07:5B:0B Authority key identifier: A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 Certificate issuer: /CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Certificate serial: 1D080080326A8EB75CBE2695EBD3729CDC317F6F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft Manifest number: 98 Signing time: Wed 13 May 2026 17:26:05 +0000 Manifest this update: Wed 13 May 2026 17:21:05 +0000 Manifest next update: Thu 14 May 2026 21:11:05 +0000 Files and hashes: 1: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl (hash: rlgYrWHIpEMfGqbwf6ecIdq6AhRa3pfvVy4ynfokM+8=) 2: 3130332e3234302e3230302e302f32342d3234203d3e20313530343037.roa (hash: cwdedZumqbqU+LJf5oD66wPPzBjrkVCdrXnE2Lu+6bI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:08:00:80:32:6a:8e:b7:5c:be:26:95:eb:d3:72:9c:dc:31:7f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Validity Not Before: May 13 17:21:05 2026 GMT Not After : May 14 21:11:05 2026 GMT Subject: CN=899D31FFFEF34D6D8EA9CF4EA89B3027EB075B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:72:bf:17:d4:0c:83:b7:45:35:de:de:be:10: b1:43:7d:60:26:ac:7b:35:10:a6:6c:5e:ea:b6:76: 36:fa:c7:3b:3e:9f:fe:9c:57:d7:f7:02:77:05:3a: c1:57:05:88:da:b8:99:4c:c4:ff:44:c5:27:ec:8c: c0:51:eb:8d:c1:87:71:79:69:16:1b:d6:d4:6b:56: 54:ce:73:71:7f:8f:b4:45:16:ad:20:a0:df:ca:4b: fe:59:f8:76:f3:11:5d:f4:39:01:b4:08:29:63:85: 07:70:47:43:03:53:5c:50:c6:07:38:6c:23:3c:89: 47:f6:79:ff:27:04:49:37:64:72:16:56:12:53:89: 9d:6d:7f:50:88:b6:f5:a0:59:13:2d:54:2e:1a:35: 2d:1f:0c:fb:11:48:ef:5d:ac:bd:fe:9a:01:ea:ab: 6d:b1:4c:f8:fa:20:93:b5:fc:bc:83:75:cd:93:44: d6:27:ff:ea:f3:f8:8e:0e:b2:a5:c3:ad:51:f9:87: 64:de:a1:1e:a7:53:43:3f:e1:34:94:9a:d8:b2:df: 92:6a:6e:f2:93:ba:97:5c:f0:13:26:51:8e:48:17: b0:a7:86:5f:aa:8a:96:56:22:0c:4c:f8:9f:4b:a8: 36:d7:94:c4:21:39:73:2d:9f:d7:f0:29:f9:91:3a: 1b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9D:31:FF:FE:F3:4D:6D:8E:A9:CF:4E:A8:9B:30:27:EB:07:5B:0B X509v3 Authority Key Identifier: keyid:A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9e:65:36:9e:32:ec:e4:1b:b8:66:b2:e7:35:61:04:a0:9a: 8b:49:92:f4:b8:a1:bf:51:95:8a:c5:36:7f:e6:72:9b:cc:4f: e8:51:56:2a:7b:17:27:c4:d2:ee:0c:cd:52:96:fe:7f:5f:bf: 5b:c4:e2:f3:ac:f6:54:3a:9a:9a:f0:9c:89:79:ea:1c:65:ed: 51:57:92:af:91:c1:c0:98:20:c6:20:a9:92:85:eb:c8:f6:74: 1a:af:a0:ac:3e:68:54:6b:c6:19:a1:e7:ae:f4:e7:c5:12:88: 84:f8:61:43:47:b9:0b:04:5a:a1:7b:e8:7c:b6:27:eb:d1:4a: f3:38:7d:30:26:60:01:8a:9c:f2:0e:9f:5c:d4:e7:a1:25:60: b0:ec:d0:00:d1:8c:37:b9:b7:fe:0c:a1:40:a1:9f:b2:f5:99: 5a:ea:65:85:b0:23:08:f6:4c:93:de:55:83:70:71:e5:5d:72: 5f:f3:eb:66:d5:f1:03:6b:1b:20:9f:02:82:dd:20:50:eb:2d: 02:99:0f:83:06:e0:ee:d4:23:f7:c5:03:9a:9d:19:e4:cd:a2: f7:a5:40:67:9e:9e:38:8a:10:48:a7:ab:b1:c7:fa:07:db:7c: f6:83:5a:b0:17:4a:5c:ad:5a:5d:0a:58:d7:b6:57:98:e2:c1: d5:32:04:42 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHQgAgDJqjrdcviaV69NynNwxf28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJE Mzg2Q0EwMDAeFw0yNjA1MTMxNzIxMDVaFw0yNjA1MTQyMTExMDVaMDMxMTAvBgNV BAMTKDg5OUQzMUZGRkVGMzRENkQ4RUE5Q0Y0RUE4OUIzMDI3RUIwNzVCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/cr8X1AyDt0U13t6+ELFDfWAm rHs1EKZsXuq2djb6xzs+n/6cV9f3AncFOsFXBYjauJlMxP9ExSfsjMBR643Bh3F5 aRYb1tRrVlTOc3F/j7RFFq0goN/KS/5Z+HbzEV30OQG0CCljhQdwR0MDU1xQxgc4 bCM8iUf2ef8nBEk3ZHIWVhJTiZ1tf1CItvWgWRMtVC4aNS0fDPsRSO9drL3+mgHq q22xTPj6IJO1/LyDdc2TRNYn/+rz+I4OsqXDrVH5h2TeoR6nU0M/4TSUmtiy35Jq bvKTupdc8BMmUY5IF7Cnhl+qipZWIgxM+J9LqDbXlMQhOXMtn9fwKfmROhuZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiZ0x//7zTW2Oqc9OqJswJ+sHWwswHwYDVR0j BBgwFoAUpXc8Gp1g7eCIJxmt76QLG9OGygAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTk1Mzc5NC8wL0E1NzczQzFBOUQ2MEVERTA4ODI3MTlBREVGQTQw QjFCRDM4NkNBMDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJEMzg2Q0EwMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU5NTM3OTQvMC9BNTc3M0MxQTlENjBF REUwODgyNzE5QURFRkE0MEIxQkQzODZDQTAwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZ5lNp4y7OQb uGay5zVhBKCai0mS9Lihv1GVisU2f+Zym8xP6FFWKnsXJ8TS7gzNUpb+f1+/W8Ti 86z2VDqamvCciXnqHGXtUVeSr5HBwJggxiCpkoXryPZ0Gq+grD5oVGvGGaHnrvTn xRKIhPhhQ0e5CwRaoXvofLYn69FK8zh9MCZgAYqc8g6fXNTnoSVgsOzQANGMN7m3 /gyhQKGfsvWZWuplhbAjCPZMk95Vg3Bx5V1yX/PrZtXxA2sbIJ8Cgt0gUOstApkP gwbg7tQj98UDmp0Z5M2i96VAZ56eOIoQSKerscf6B9t89oNasBdKXK1aXQpY17ZX mOLB1TIEQg== -----END CERTIFICATE-----Generated at Wed May 13 20:57:53 2026 by rpki-client