$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft File: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft (raw, json) Hash identifier: 4tKcZHYpAEDodg6TdEGYg+T3QBiwVTMsbhzjQ8JPJc4= Subject key identifier: B3:30:B6:D6:9A:E9:88:36:8A:8A:43:AF:98:0A:85:36:68:ED:9F:7C Authority key identifier: A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 Certificate issuer: /CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Certificate serial: 1FFB6B3C739764DA0B57A98F034FF53855CC12AD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft Manifest number: 0139 Signing time: Mon 12 Oct 2026 06:36:44 +0000 Manifest this update: Mon 12 Oct 2026 06:31:44 +0000 Manifest next update: Thu 15 Oct 2026 16:28:44 +0000 Files and hashes: 1: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl (hash: FrthPVB/WwRHIH8mUYLwzHsVTTeSO8A4DI04nu6HfkE=) 2: 3130332e3234302e3230302e302f32342d3234203d3e20313530343037.roa (hash: cwdedZumqbqU+LJf5oD66wPPzBjrkVCdrXnE2Lu+6bI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fb:6b:3c:73:97:64:da:0b:57:a9:8f:03:4f:f5:38:55:cc:12:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Validity Not Before: Oct 12 06:31:44 2026 GMT Not After : Oct 15 16:28:44 2026 GMT Subject: CN=B330B6D69AE988368A8A43AF980A853668ED9F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:56:fd:66:67:e2:c6:ce:de:0e:e1:40:6b: 24:82:79:2b:97:02:32:2c:64:8e:b2:25:e7:c8:27: 0d:10:f7:a2:e5:ad:81:69:b5:67:1b:8d:a0:95:77: 9a:c4:c9:b8:2c:17:bb:17:95:01:02:3a:23:6a:c5: ee:46:e0:98:33:0d:28:d0:06:67:58:94:5b:7f:e6: 48:bf:f2:3d:db:23:f6:d3:ff:08:1e:b4:b5:8d:f3: 81:87:40:9f:b5:34:c9:86:0c:4f:8b:80:8a:07:45: 5a:81:8a:0c:af:97:d6:d6:e7:8d:8f:5e:e9:6d:33: 55:2a:54:45:d9:eb:a6:c6:3c:42:9d:3b:60:54:37: 3f:07:55:ce:a6:38:44:7c:36:76:f2:d3:21:c4:63: 63:c8:0c:b0:45:c3:11:92:ac:03:98:eb:68:b0:1c: 9f:35:29:7e:0a:12:94:83:ad:48:7c:bd:eb:da:bc: 83:bb:9a:48:20:79:60:89:24:64:16:cf:25:26:8a: 82:e7:41:ff:99:e8:36:ba:69:0f:9e:61:9d:0b:c9: c8:be:d9:cc:aa:43:24:7a:10:b5:95:75:f2:8b:9f: 19:38:0c:35:66:40:f9:4e:4b:10:ed:1e:18:ee:83: db:38:75:78:8b:5e:64:5f:b1:af:7e:37:a1:0e:8a: 60:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:30:B6:D6:9A:E9:88:36:8A:8A:43:AF:98:0A:85:36:68:ED:9F:7C X509v3 Authority Key Identifier: keyid:A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:36:93:92:9c:85:4b:ad:48:56:66:d7:ff:0e:af:20:d9:25: 9f:9b:35:2c:d8:63:91:46:90:8e:58:12:d9:92:b4:43:22:8b: 1a:4d:6e:6f:91:d0:aa:32:4a:49:50:ad:f3:70:3b:d7:bf:3e: 6e:07:2a:63:ac:33:3c:cc:f7:ce:49:5a:2c:47:61:32:10:a3: d2:71:4a:c6:8f:58:4c:63:a6:c4:8b:ca:29:89:b3:c9:6d:0b: 92:bc:60:dd:0e:2a:92:c6:65:fa:3b:fd:29:8e:19:c4:d1:29: 0b:40:e2:80:61:e1:c6:50:0e:18:c1:e3:f3:53:c3:81:03:40: 3e:ce:a1:06:47:b0:63:ec:cd:5b:a9:f3:4f:cb:89:36:98:a0: 0b:52:1d:a0:a8:01:75:c1:40:e8:00:cd:2f:06:49:54:93:4c: 24:55:27:85:2d:19:33:2b:9c:df:ef:de:4b:7b:fe:db:0d:9b: 46:5c:09:6c:bc:dc:9d:b2:84:dc:2c:56:3b:72:b1:1d:0a:2e: 94:2b:c8:4b:6a:18:6e:0c:de:75:5b:99:ec:15:37:d5:e4:31: c0:ab:f9:e3:e2:6c:8c:7a:7e:ad:49:18:bd:ca:1a:5a:4d:d4: cd:8c:24:a3:8c:99:c3:0c:f4:b3:98:4a:6c:15:cc:98:46:1c: f9:ff:d6:76 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUH/trPHOXZNoLV6mPA0/1OFXMEq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJE Mzg2Q0EwMDAeFw0yNjEwMTIwNjMxNDRaFw0yNjEwMTUxNjI4NDRaMDMxMTAvBgNV BAMTKEIzMzBCNkQ2OUFFOTg4MzY4QThBNDNBRjk4MEE4NTM2NjhFRDlGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8glb9Zmfixs7eDuFAaySCeSuX AjIsZI6yJefIJw0Q96LlrYFptWcbjaCVd5rEybgsF7sXlQECOiNqxe5G4JgzDSjQ BmdYlFt/5ki/8j3bI/bT/wgetLWN84GHQJ+1NMmGDE+LgIoHRVqBigyvl9bW542P XultM1UqVEXZ66bGPEKdO2BUNz8HVc6mOER8Nnby0yHEY2PIDLBFwxGSrAOY62iw HJ81KX4KEpSDrUh8vevavIO7mkggeWCJJGQWzyUmioLnQf+Z6Da6aQ+eYZ0Lyci+ 2cyqQyR6ELWVdfKLnxk4DDVmQPlOSxDtHhjug9s4dXiLXmRfsa9+N6EOimAHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUszC21prpiDaKikOvmAqFNmjtn3wwHwYDVR0j BBgwFoAUpXc8Gp1g7eCIJxmt76QLG9OGygAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTk1Mzc5NC8wL0E1NzczQzFBOUQ2MEVERTA4ODI3MTlBREVGQTQw QjFCRDM4NkNBMDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJEMzg2Q0EwMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU5NTM3OTQvMC9BNTc3M0MxQTlENjBF REUwODgyNzE5QURFRkE0MEIxQkQzODZDQTAwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzaTkpyFS61I VmbX/w6vINkln5s1LNhjkUaQjlgS2ZK0QyKLGk1ub5HQqjJKSVCt83A7178+bgcq Y6wzPMz3zklaLEdhMhCj0nFKxo9YTGOmxIvKKYmzyW0Lkrxg3Q4qksZl+jv9KY4Z xNEpC0DigGHhxlAOGMHj81PDgQNAPs6hBkewY+zNW6nzT8uJNpigC1IdoKgBdcFA 6ADNLwZJVJNMJFUnhS0ZMyuc3+/eS3v+2w2bRlwJbLzcnbKE3CxWO3KxHQoulCvI S2oYbgzedVuZ7BU31eQxwKv54+JsjHp+rUkYvcoaWk3UzYwko4yZwwz0s5hKbBXM mEYc+f/Wdg== -----END CERTIFICATE-----Generated at Mon Oct 12 10:37:52 2026 by rpki-client