$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft File: A5A7A22B773557BAF9107F52071E43CB56973E0C.mft (raw, json) Hash identifier: /L818Z2Rt4ckUyMlYfGgaPar2RrWw6FX6zGaaGLBCDM= Subject key identifier: A0:3E:22:E2:74:56:CF:15:B0:53:08:63:34:B8:FD:23:AE:04:39:9A Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C Certificate issuer: /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Certificate serial: 0DD84EC15F74D3520AC7351C3913B68DF6A5491A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft Manifest number: 94 Signing time: Fri 24 Jul 2026 07:40:38 +0000 Manifest this update: Fri 24 Jul 2026 07:35:38 +0000 Manifest next update: Sat 25 Jul 2026 10:56:38 +0000 Files and hashes: 1: 3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (hash: 9YRxcxYb/rcS3Fre/vxl+OluswVsgxbVE+vIx1aWSuc=) 2: 3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa (hash: qBnUcpTKG6VeUEPGz1MimxCSD4Q6edLlreoj3tdS5ps=) 3: 3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa (hash: sFd6ssXxC/BDyv1b99yz/NjXY9YA0f3bLOEKaZDzcTc=) 4: A5A7A22B773557BAF9107F52071E43CB56973E0C.crl (hash: H40wakhhFh4XCskcpP3qe4CXBsGJiwfC7mE0kNvTsro=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d8:4e:c1:5f:74:d3:52:0a:c7:35:1c:39:13:b6:8d:f6:a5:49:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Validity Not Before: Jul 24 07:35:38 2026 GMT Not After : Jul 25 10:56:38 2026 GMT Subject: CN=A03E22E27456CF15B053086334B8FD23AE04399A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e2:bc:c7:9e:96:fc:9f:6e:7a:02:f8:7a:b9: cb:e3:21:db:e6:ab:a7:2d:89:7f:2c:b8:b5:09:e5: 74:73:3e:fc:d6:eb:e0:a4:96:77:2d:3f:20:3c:11: 6d:6d:c8:9c:db:c8:aa:fa:65:30:d3:7e:6c:36:ad: 88:a8:ff:f2:8d:9e:a3:af:e3:68:77:44:f1:0d:67: f5:fa:a6:26:83:dc:d5:d7:ef:de:93:26:2c:13:24: eb:41:38:79:84:e4:27:9f:87:e7:fa:51:56:23:14: 98:93:e0:61:ff:5a:f5:09:20:5b:09:45:89:83:89: f2:b8:30:87:22:aa:87:32:7e:28:38:21:4a:ab:09: 1b:4a:c5:ef:08:01:56:52:1b:fa:38:53:6a:33:6e: 60:66:40:c0:9b:40:f1:f8:18:98:1d:e7:08:6f:6e: 54:36:ef:ad:75:62:ee:d6:e5:7e:15:67:79:4a:4d: cf:08:f0:16:23:14:21:46:21:fe:80:6a:56:1b:50: 51:32:4e:12:51:d6:13:19:22:21:3d:7d:88:cd:88: 61:48:dc:ed:1c:c5:6b:f7:27:ad:9a:c3:f0:9a:23: 63:24:5b:8e:97:ac:09:3a:d6:26:37:05:c1:74:0d: 5f:0c:e6:7b:0b:0f:ed:c4:19:9c:ce:cc:72:53:d5: 43:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3E:22:E2:74:56:CF:15:B0:53:08:63:34:B8:FD:23:AE:04:39:9A X509v3 Authority Key Identifier: keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:a6:a9:6a:a8:f2:40:d1:16:59:92:d2:15:00:d1:09:a8:2d: 19:1d:f5:a7:b1:c6:37:e0:f4:d8:df:ab:d6:f4:2e:8d:5d:cf: 9f:63:b7:24:44:05:b3:88:52:31:73:20:e5:29:e8:b6:1f:a4: bf:da:27:37:bc:d4:3d:67:28:5b:d1:bd:32:5c:14:4a:90:e9: a7:8c:cf:38:c2:b6:39:02:f4:68:79:06:24:26:ad:98:ac:dd: af:ad:ef:de:13:bf:46:d8:4e:84:f9:be:24:e3:4b:44:84:2e: 0f:00:bb:7d:25:f0:cc:5e:dc:8f:75:6c:46:f0:0c:2b:cd:97: 2a:3b:b5:72:ae:d4:9f:63:96:35:fd:9a:bd:64:e7:d6:b6:a1: cd:38:53:3e:18:d3:b9:ce:eb:69:71:95:88:de:dc:ff:d0:9b: 05:07:86:0e:ac:21:4c:a4:45:a5:98:13:b5:85:a3:e7:4f:af: 67:7f:b1:be:95:16:51:94:3a:7c:cc:74:f8:5d:2d:7d:a0:0c: 9b:f9:91:ef:b5:2b:42:0c:b1:88:de:28:7c:7d:c2:f0:32:86: 1f:e9:13:46:f2:99:ec:73:c4:70:5d:5a:52:25:af:f9:15:fd: bd:37:ac:01:71:7c:a6:8d:18:0d:54:76:8e:1f:bb:62:5f:b3: 63:bd:c2:af -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDdhOwV9001IKxzUcORO2jfalSRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1 Njk3M0UwQzAeFw0yNjA3MjQwNzM1MzhaFw0yNjA3MjUxMDU2MzhaMDMxMTAvBgNV BAMTKEEwM0UyMkUyNzQ1NkNGMTVCMDUzMDg2MzM0QjhGRDIzQUUwNDM5OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4rzHnpb8n256Avh6ucvjIdvm q6ctiX8suLUJ5XRzPvzW6+CklnctPyA8EW1tyJzbyKr6ZTDTfmw2rYio//KNnqOv 42h3RPENZ/X6piaD3NXX796TJiwTJOtBOHmE5Cefh+f6UVYjFJiT4GH/WvUJIFsJ RYmDifK4MIciqocyfig4IUqrCRtKxe8IAVZSG/o4U2ozbmBmQMCbQPH4GJgd5whv blQ27611Yu7W5X4VZ3lKTc8I8BYjFCFGIf6AalYbUFEyThJR1hMZIiE9fYjNiGFI 3O0cxWv3J62aw/CaI2MkW46XrAk61iY3BcF0DV8M5nsLD+3EGZzOzHJT1UPBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoD4i4nRWzxWwUwhjNLj9I64EOZowHwYDVR0j BBgwFoAUpaeiK3c1V7r5EH9SBx5Dy1aXPgwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg1NTMzMzQ4MzkwNTAyNi8wL0E1QTdBMjJCNzczNTU3QkFGOTEwN0Y1MjA3MUU0 M0NCNTY5NzNFMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1Njk3M0UwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NTUzMzM0ODM5MDUwMjYvMC9BNUE3QTIyQjc3MzU1 N0JBRjkxMDdGNTIwNzFFNDNDQjU2OTczRTBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6apaqjyQNEW WZLSFQDRCagtGR31p7HGN+D02N+r1vQujV3Pn2O3JEQFs4hSMXMg5Snoth+kv9on N7zUPWcoW9G9MlwUSpDpp4zPOMK2OQL0aHkGJCatmKzdr63v3hO/RthOhPm+JONL RIQuDwC7fSXwzF7cj3VsRvAMK82XKju1cq7Un2OWNf2avWTn1rahzThTPhjTuc7r aXGViN7c/9CbBQeGDqwhTKRFpZgTtYWj50+vZ3+xvpUWUZQ6fMx0+F0tfaAMm/mR 77UrQgyxiN4ofH3C8DKGH+kTRvKZ7HPEcF1aUiWv+RX9vTesAXF8po0YDVR2jh+7 Yl+zY73Crw== -----END CERTIFICATE-----Generated at Fri Jul 24 19:56:10 2026 by rpki-client