$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft File: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft (raw, json) Hash identifier: oSi+z77SohWtELCH8Pxm2jroe8vS1y9eoT4ZiZDZ2JQ= Subject key identifier: 47:DB:C4:41:A6:9C:EB:D9:93:8F:9E:76:B5:CC:D0:12:64:7F:F7:79 Authority key identifier: A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 Certificate issuer: /CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Certificate serial: 68E463BA9A5B79A4CFAF994278BD4E1000CF016B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 17:03:28 +0000 Manifest this update: Thu 26 Mar 2026 16:58:28 +0000 Manifest next update: Fri 27 Mar 2026 21:01:28 +0000 Files and hashes: 1: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl (hash: 3h/RzV+yvLf2rbnnSF3iU9f694eLttreSRec8DPY/3Y=) 2: 3130332e3234302e3230302e302f32342d3234203d3e20313530343037.roa (hash: cwdedZumqbqU+LJf5oD66wPPzBjrkVCdrXnE2Lu+6bI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e4:63:ba:9a:5b:79:a4:cf:af:99:42:78:bd:4e:10:00:cf:01:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Validity Not Before: Mar 26 16:58:28 2026 GMT Not After : Mar 27 21:01:28 2026 GMT Subject: CN=47DBC441A69CEBD9938F9E76B5CCD012647FF779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:a4:e8:59:be:b6:05:17:8f:3b:09:c1:a8: d0:d3:de:f3:f0:e8:3a:bc:6a:bf:3d:d8:4e:bc:d9: 42:d4:26:d9:e8:a1:a2:4e:8e:73:26:04:74:3e:af: ec:3e:57:5a:54:73:82:3e:8f:09:c9:d3:61:96:cf: bc:bc:c8:31:33:0d:0f:4a:ad:93:05:48:73:e9:03: 33:f6:ca:4c:30:5e:c5:4a:02:32:98:fd:13:5d:35: 04:4c:ec:b0:1d:96:42:49:a0:56:92:a9:c6:20:dd: ec:c1:57:a3:6f:56:22:31:8d:10:f5:da:0d:75:a1: 0e:b5:1a:08:e5:df:79:cf:3b:0c:f6:b0:b8:0d:46: e9:24:0a:12:72:2f:3f:8f:39:c6:db:1d:5a:65:7c: 15:49:7d:00:df:97:25:9e:a6:cf:f0:a2:96:08:cb: ae:be:c7:b5:ee:24:65:33:f4:60:b9:d5:99:04:5a: 95:a2:ef:9a:e9:54:60:f6:ef:96:93:b8:94:7e:30: 2c:8c:8b:cd:e7:32:47:c7:8b:65:11:66:b1:d6:a4: 1f:8e:cd:6c:8c:14:9a:3b:55:69:b7:d2:42:95:60: 78:82:7c:c0:7a:ed:50:7e:80:36:b9:84:0a:95:11: 67:3c:2b:f4:28:72:ba:ca:7f:47:a3:2e:46:7f:43: 47:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DB:C4:41:A6:9C:EB:D9:93:8F:9E:76:B5:CC:D0:12:64:7F:F7:79 X509v3 Authority Key Identifier: keyid:A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c2:36:25:70:8b:69:4f:c4:28:ec:4c:31:58:e3:7b:56:08: 56:b5:ed:dd:71:2e:4f:50:51:d4:a0:74:cf:98:cb:0e:f9:4c: 95:72:11:06:e5:c8:2a:3e:ec:28:e9:8b:4a:7b:4f:3f:af:96: 2a:4f:0b:1d:45:a4:1c:e2:f2:11:fa:68:e7:49:77:d1:93:bb: 5e:3b:dc:b2:f1:8a:bc:da:18:30:45:2f:bf:1c:e7:2c:40:96: 05:60:e1:15:18:f7:c3:ed:27:51:69:57:ff:8e:90:00:e0:1f: c3:ec:c7:db:ae:a5:31:3a:b4:e1:d6:73:81:f4:3b:18:3d:a9: 69:09:2a:ac:8f:4a:7e:cc:39:0d:2a:2e:56:9c:2e:ae:ba:9f: 81:d3:ba:cb:c1:46:fc:2e:82:fd:f8:fb:58:ac:6d:89:de:f0: 7b:02:84:f4:66:d9:60:72:c4:49:8d:bb:d9:9c:cf:dd:70:17: 98:c0:27:90:e3:9f:b2:61:35:56:fb:af:bf:a6:81:9d:06:fd: 7f:d4:fc:99:48:a7:34:60:34:1e:27:6e:f9:ab:42:56:85:56: 70:52:be:a3:d5:e0:7a:bc:af:da:85:96:a0:9c:bc:83:20:bc: 75:81:4e:74:22:31:00:4c:b9:e7:8d:fe:bb:9e:82:4a:4b:35: ec:46:ed:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaORjuppbeaTPr5lCeL1OEADPAWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJE Mzg2Q0EwMDAeFw0yNjAzMjYxNjU4MjhaFw0yNjAzMjcyMTAxMjhaMDMxMTAvBgNV BAMTKDQ3REJDNDQxQTY5Q0VCRDk5MzhGOUU3NkI1Q0NEMDEyNjQ3RkY3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3k6ToWb62BRePOwnBqNDT3vPw 6Dq8ar892E682ULUJtnooaJOjnMmBHQ+r+w+V1pUc4I+jwnJ02GWz7y8yDEzDQ9K rZMFSHPpAzP2ykwwXsVKAjKY/RNdNQRM7LAdlkJJoFaSqcYg3ezBV6NvViIxjRD1 2g11oQ61Ggjl33nPOwz2sLgNRukkChJyLz+POcbbHVplfBVJfQDflyWeps/wopYI y66+x7XuJGUz9GC51ZkEWpWi75rpVGD275aTuJR+MCyMi83nMkfHi2URZrHWpB+O zWyMFJo7VWm30kKVYHiCfMB67VB+gDa5hAqVEWc8K/QocrrKf0ejLkZ/Q0dHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUR9vEQaac69mTj552tczQEmR/93kwHwYDVR0j BBgwFoAUpXc8Gp1g7eCIJxmt76QLG9OGygAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTk1Mzc5NC8wL0E1NzczQzFBOUQ2MEVERTA4ODI3MTlBREVGQTQw QjFCRDM4NkNBMDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJEMzg2Q0EwMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU5NTM3OTQvMC9BNTc3M0MxQTlENjBF REUwODgyNzE5QURFRkE0MEIxQkQzODZDQTAwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncI2JXCLaU/E KOxMMVjje1YIVrXt3XEuT1BR1KB0z5jLDvlMlXIRBuXIKj7sKOmLSntPP6+WKk8L HUWkHOLyEfpo50l30ZO7XjvcsvGKvNoYMEUvvxznLECWBWDhFRj3w+0nUWlX/46Q AOAfw+zH266lMTq04dZzgfQ7GD2paQkqrI9Kfsw5DSouVpwurrqfgdO6y8FG/C6C /fj7WKxtid7wewKE9GbZYHLESY272ZzP3XAXmMAnkOOfsmE1Vvuvv6aBnQb9f9T8 mUinNGA0Hidu+atCVoVWcFK+o9Xgeryv2oWWoJy8gyC8dYFOdCIxAEy5543+u56C Sks17Ebtog== -----END CERTIFICATE-----Generated at Fri Mar 27 01:55:11 2026 by rpki-client