$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft File: A5A7A22B773557BAF9107F52071E43CB56973E0C.mft (raw, json) Hash identifier: Lvly7ylS/hPN8LITE8x9d8orZYMrBZSREFKSogFD0qo= Subject key identifier: 43:D0:FC:88:F3:58:07:A1:7C:62:12:B0:BF:1A:5E:DC:E0:C9:79:69 Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C Certificate issuer: /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Certificate serial: B70616FC0404EE7BAF1C3A7D8E8CAF634329A5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft Manifest number: 34 Signing time: Wed 13 May 2026 06:51:01 +0000 Manifest this update: Wed 13 May 2026 06:46:01 +0000 Manifest next update: Thu 14 May 2026 08:05:01 +0000 Files and hashes: 1: 3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa (hash: sFd6ssXxC/BDyv1b99yz/NjXY9YA0f3bLOEKaZDzcTc=) 2: 3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (hash: 9YRxcxYb/rcS3Fre/vxl+OluswVsgxbVE+vIx1aWSuc=) 3: A5A7A22B773557BAF9107F52071E43CB56973E0C.crl (hash: vlC1WH+YHQ563zS9TnCgss8EsTlbWG1WRAfkoUNBnvc=) 4: 3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa (hash: qBnUcpTKG6VeUEPGz1MimxCSD4Q6edLlreoj3tdS5ps=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b7:06:16:fc:04:04:ee:7b:af:1c:3a:7d:8e:8c:af:63:43:29:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Validity Not Before: May 13 06:46:01 2026 GMT Not After : May 14 08:05:01 2026 GMT Subject: CN=43D0FC88F35807A17C6212B0BF1A5EDCE0C97969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6f:8c:fd:38:54:b0:14:38:19:c0:8f:58:15: b3:9d:27:f2:95:d8:0e:a4:0b:6f:23:49:38:7a:b4: e6:76:71:c9:46:3e:ac:df:c1:69:54:04:16:2a:46: 05:a6:cb:83:ef:ae:40:88:a4:04:cb:04:b7:7e:26: 38:34:fb:47:84:f8:71:b6:64:8f:74:60:ba:a2:c9: 39:76:a9:93:bd:97:84:62:46:68:57:7b:f1:84:b1: ba:6b:58:ca:d0:a4:80:66:06:4d:59:d4:87:cb:eb: 04:73:21:2b:dd:23:e1:eb:27:31:cc:ba:64:d3:c7: 11:c9:da:3a:d8:32:96:49:7b:48:06:07:0d:9e:6e: f4:d7:04:8f:83:a5:7d:14:a1:ac:2e:a8:0e:19:d4: 42:66:98:e1:5b:f2:23:fa:07:3b:28:59:fe:84:40: 1e:2c:7b:9a:b3:f4:a4:b1:6d:ee:5d:60:dc:f2:3b: 5b:e0:2f:79:a9:1e:16:cc:e1:89:6e:37:2a:1e:bb: 83:f4:34:dd:7d:f2:9d:9e:6c:70:be:8f:22:de:82: 87:9f:df:5e:6c:42:e7:73:35:d6:2d:f2:58:04:d1: 2a:4d:a1:e3:7b:de:fa:c3:a9:a6:02:0f:f4:10:e8: bc:f4:28:21:ec:1d:26:7a:fc:04:4d:00:e4:ba:2c: 9b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D0:FC:88:F3:58:07:A1:7C:62:12:B0:BF:1A:5E:DC:E0:C9:79:69 X509v3 Authority Key Identifier: keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1f:39:72:66:24:fe:d6:e8:41:57:19:73:33:c6:6b:06:56: 31:ba:4e:6f:90:90:30:d0:63:5c:08:2b:9f:54:5d:06:26:b7: 82:33:fe:d2:68:37:ca:7a:7e:1e:79:44:3f:b6:10:b3:b4:c2: db:e5:ff:ec:31:55:ec:76:3e:27:a3:91:fd:89:85:71:fe:40: 7e:5f:cf:21:aa:71:c7:a5:4e:a4:41:8d:74:f8:5e:7c:da:2c: c8:59:52:cd:88:41:ec:9a:1e:23:e5:a3:f8:79:50:94:6a:1c: a2:40:78:ba:52:be:39:f5:a5:bf:8b:85:8d:49:91:48:4b:8e: aa:d8:d5:30:1b:37:d3:96:c1:13:eb:89:c9:5c:c8:6e:1c:c2: 24:c5:a0:5a:d2:85:e5:38:4c:5b:3b:3c:91:ea:b8:f6:fe:6e: ce:c1:17:41:ad:17:2b:87:e3:2e:61:af:bb:88:19:95:f8:26: fd:c1:87:5a:25:5a:d7:06:48:2a:5a:92:9d:b0:63:a6:e7:e9: b9:aa:e0:77:4b:ce:da:94:71:18:80:79:c0:6a:57:59:8c:b4: df:66:0c:22:6e:40:7f:be:b2:a8:47:cf:3e:fa:70:4e:de:e1: 44:a2:f7:c0:42:c7:dd:10:a9:80:29:d1:0a:e7:c4:31:eb:a2: be:ac:f6:69 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUALcGFvwEBO57rxw6fY6Mr2NDKaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1 Njk3M0UwQzAeFw0yNjA1MTMwNjQ2MDFaFw0yNjA1MTQwODA1MDFaMDMxMTAvBgNV BAMTKDQzRDBGQzg4RjM1ODA3QTE3QzYyMTJCMEJGMUE1RURDRTBDOTc5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRb4z9OFSwFDgZwI9YFbOdJ/KV 2A6kC28jSTh6tOZ2cclGPqzfwWlUBBYqRgWmy4PvrkCIpATLBLd+Jjg0+0eE+HG2 ZI90YLqiyTl2qZO9l4RiRmhXe/GEsbprWMrQpIBmBk1Z1IfL6wRzISvdI+HrJzHM umTTxxHJ2jrYMpZJe0gGBw2ebvTXBI+DpX0UoawuqA4Z1EJmmOFb8iP6BzsoWf6E QB4se5qz9KSxbe5dYNzyO1vgL3mpHhbM4YluNyoeu4P0NN198p2ebHC+jyLegoef 315sQudzNdYt8lgE0SpNoeN73vrDqaYCD/QQ6Lz0KCHsHSZ6/ARNAOS6LJv5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQ9D8iPNYB6F8YhKwvxpe3ODJeWkwHwYDVR0j BBgwFoAUpaeiK3c1V7r5EH9SBx5Dy1aXPgwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg1NTMzMzQ4MzkwNTAyNi8wL0E1QTdBMjJCNzczNTU3QkFGOTEwN0Y1MjA3MUU0 M0NCNTY5NzNFMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1Njk3M0UwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NTUzMzM0ODM5MDUwMjYvMC9BNUE3QTIyQjc3MzU1 N0JBRjkxMDdGNTIwNzFFNDNDQjU2OTczRTBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWB85cmYk/tbo QVcZczPGawZWMbpOb5CQMNBjXAgrn1RdBia3gjP+0mg3ynp+HnlEP7YQs7TC2+X/ 7DFV7HY+J6OR/YmFcf5Afl/PIapxx6VOpEGNdPhefNosyFlSzYhB7JoeI+Wj+HlQ lGocokB4ulK+OfWlv4uFjUmRSEuOqtjVMBs305bBE+uJyVzIbhzCJMWgWtKF5ThM Wzs8keq49v5uzsEXQa0XK4fjLmGvu4gZlfgm/cGHWiVa1wZIKlqSnbBjpufpuarg d0vO2pRxGIB5wGpXWYy032YMIm5Af76yqEfPPvpwTt7hRKL3wELH3RCpgCnRCufE Meuivqz2aQ== -----END CERTIFICATE-----Generated at Wed May 13 13:45:34 2026 by rpki-client