$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft File: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft (raw, json) Hash identifier: ugxnPqVUybJefaW5waWAOjp/taZsv4N+nTelZZhqfL8= Subject key identifier: 1A:52:07:DA:E4:E5:E1:F2:B5:46:7A:F2:10:56:3D:5D:91:2C:82:AB Authority key identifier: A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 Certificate issuer: /CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Certificate serial: 6F0BCC48DC0681CB80EF4A0860C873B857F3AB62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft Manifest number: F6 Signing time: Fri 24 Jul 2026 03:00:12 +0000 Manifest this update: Fri 24 Jul 2026 02:55:12 +0000 Manifest next update: Sat 25 Jul 2026 03:22:12 +0000 Files and hashes: 1: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl (hash: FurpaqwszgxBPn4q67G6Oomd0+qK37egp7ajzz8pX/o=) 2: 3130332e3234302e3230302e302f32342d3234203d3e20313530343037.roa (hash: cwdedZumqbqU+LJf5oD66wPPzBjrkVCdrXnE2Lu+6bI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:0b:cc:48:dc:06:81:cb:80:ef:4a:08:60:c8:73:b8:57:f3:ab:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Validity Not Before: Jul 24 02:55:12 2026 GMT Not After : Jul 25 03:22:12 2026 GMT Subject: CN=1A5207DAE4E5E1F2B5467AF210563D5D912C82AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:c9:da:38:f5:fa:fb:e1:96:48:2f:8f:52: 90:ea:0c:be:19:72:25:d8:e7:6c:c6:00:a7:e5:a7: ba:b4:b4:06:65:6c:18:fb:e9:ac:d1:4c:9b:f6:6b: 98:de:04:8a:33:fe:af:56:51:53:05:89:79:33:00: 6b:5d:ce:fc:a5:14:57:4c:31:4b:df:dd:cd:0c:65: 67:4c:d1:55:a4:0b:26:f0:af:8c:ef:79:8c:8c:bd: da:e4:19:96:ae:f5:34:1c:30:df:f5:ac:3d:28:02: 80:66:ab:c5:c8:9c:68:72:cf:32:c9:22:a2:87:f3: 54:cf:4b:6a:8a:77:cf:a2:57:c3:4c:57:bc:15:1e: 8f:5b:d4:82:b7:75:32:01:e6:75:18:6f:8f:5d:07: d4:5c:e4:b9:61:8c:f2:e0:a2:7a:a8:b1:f6:ea:76: a7:61:94:a8:f9:7b:4a:f5:a8:f5:d6:07:e6:64:62: ed:a7:fe:90:52:e8:74:44:77:ec:44:bd:d8:71:3d: a8:65:0d:5a:f8:f2:8e:cf:93:72:f2:69:42:93:61: a3:44:8c:c0:f2:fb:7c:96:5d:d3:1f:aa:f3:a3:f2: 18:48:4a:27:8a:ee:41:ce:76:d7:0c:bc:47:d5:5e: 0b:4f:43:18:e7:e5:fa:8c:be:b6:d2:d7:10:d5:ec: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:52:07:DA:E4:E5:E1:F2:B5:46:7A:F2:10:56:3D:5D:91:2C:82:AB X509v3 Authority Key Identifier: keyid:A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:18:00:8e:df:85:af:c4:db:78:cf:a7:ba:3e:d9:9b:93:7f: 53:95:70:87:56:c8:7b:48:d1:c5:5b:74:0e:2c:37:32:08:d4: d1:b0:20:ce:e1:ed:33:72:4b:08:a8:9b:6b:22:00:3b:2b:4f: 06:03:ee:97:c4:13:3a:0a:ab:25:b8:bc:25:4c:28:11:81:3e: 9a:e6:7f:bd:ba:69:de:3b:e1:fc:07:25:ef:08:40:59:26:a1: 14:13:c6:38:d1:77:50:18:cf:ec:8a:93:f9:6c:64:d9:11:85: 40:d4:6c:c8:1f:9a:73:1b:04:64:41:54:b4:d1:3c:52:da:b5: 0a:14:b0:2b:8a:1f:43:18:6f:a1:f7:e1:73:5a:05:83:3c:e4: 9c:fc:6f:cb:c9:ce:38:32:07:57:f8:93:d6:b1:2e:46:2c:be: b6:9b:86:49:62:84:40:7a:68:a0:14:be:6b:18:71:6f:54:ff: b0:85:96:03:3d:ee:11:20:ad:fa:6c:af:79:55:12:85:96:75: dd:b1:4d:e0:38:95:4f:37:77:79:1b:10:13:af:3f:15:b3:d1: 88:a4:45:ed:aa:08:0b:6a:fd:84:27:77:c1:24:aa:49:7e:67: 17:16:0c:0d:68:61:b8:d5:b7:0e:7f:09:a5:45:a4:9c:bf:c0: 97:cc:09:a3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbwvMSNwGgcuA70oIYMhzuFfzq2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJE Mzg2Q0EwMDAeFw0yNjA3MjQwMjU1MTJaFw0yNjA3MjUwMzIyMTJaMDMxMTAvBgNV BAMTKDFBNTIwN0RBRTRFNUUxRjJCNTQ2N0FGMjEwNTYzRDVEOTEyQzgyQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvsnaOPX6++GWSC+PUpDqDL4Z ciXY52zGAKflp7q0tAZlbBj76azRTJv2a5jeBIoz/q9WUVMFiXkzAGtdzvylFFdM MUvf3c0MZWdM0VWkCybwr4zveYyMvdrkGZau9TQcMN/1rD0oAoBmq8XInGhyzzLJ IqKH81TPS2qKd8+iV8NMV7wVHo9b1IK3dTIB5nUYb49dB9Rc5LlhjPLgonqosfbq dqdhlKj5e0r1qPXWB+ZkYu2n/pBS6HREd+xEvdhxPahlDVr48o7Pk3LyaUKTYaNE jMDy+3yWXdMfqvOj8hhISieK7kHOdtcMvEfVXgtPQxjn5fqMvrbS1xDV7LnXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGlIH2uTl4fK1RnryEFY9XZEsgqswHwYDVR0j BBgwFoAUpXc8Gp1g7eCIJxmt76QLG9OGygAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTk1Mzc5NC8wL0E1NzczQzFBOUQ2MEVERTA4ODI3MTlBREVGQTQw QjFCRDM4NkNBMDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJEMzg2Q0EwMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU5NTM3OTQvMC9BNTc3M0MxQTlENjBF REUwODgyNzE5QURFRkE0MEIxQkQzODZDQTAwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBgAjt+Fr8Tb eM+nuj7Zm5N/U5Vwh1bIe0jRxVt0Diw3MgjU0bAgzuHtM3JLCKibayIAOytPBgPu l8QTOgqrJbi8JUwoEYE+muZ/vbpp3jvh/Acl7whAWSahFBPGONF3UBjP7IqT+Wxk 2RGFQNRsyB+acxsEZEFUtNE8Utq1ChSwK4ofQxhvoffhc1oFgzzknPxvy8nOODIH V/iT1rEuRiy+tpuGSWKEQHpooBS+axhxb1T/sIWWAz3uESCt+myveVUShZZ13bFN 4DiVTzd3eRsQE68/FbPRiKRF7aoIC2r9hCd3wSSqSX5nFxYMDWhhuNW3Dn8JpUWk nL/Al8wJow== -----END CERTIFICATE-----Generated at Fri Jul 24 16:44:05 2026 by rpki-client