$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft File: 5ACF72DA32919503D15480832BA57EB063AE113B.mft (raw, json) Hash identifier: FG26SOwKfyn++f2SUuxoFeRmYmjd87YRUk9rCGehU2w= Subject key identifier: 40:22:05:49:28:7C:C0:CB:DB:71:BB:5D:31:1D:DF:DE:00:DF:F9:43 Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B Certificate serial: 7E16D2D0922F8896E77B8789A9EEF15428010D00 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft Manifest number: 28 Signing time: Wed 13 May 2026 07:36:02 +0000 Manifest this update: Wed 13 May 2026 07:31:02 +0000 Manifest next update: Thu 14 May 2026 07:44:02 +0000 Files and hashes: 1: 5ACF72DA32919503D15480832BA57EB063AE113B.crl (hash: pOnLheOHSV4NdypsoSSfmF0yUR/6jtQNyrWXIpyQ7ww=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:16:d2:d0:92:2f:88:96:e7:7b:87:89:a9:ee:f1:54:28:01:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B Validity Not Before: May 13 07:31:02 2026 GMT Not After : May 14 07:44:02 2026 GMT Subject: CN=40220549287CC0CBDB71BB5D311DDFDE00DFF943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:4a:aa:1c:fb:91:5f:13:7a:32:4b:ac:73: 69:48:c2:38:ff:30:48:5f:d9:7a:6c:b0:c5:18:e7: b8:c3:ae:16:8c:10:ec:62:5e:fd:66:60:19:42:ff: bd:6b:0e:ba:e2:82:bb:d4:ef:f5:a4:ac:4b:34:74: 77:5e:a9:4f:81:5e:f0:07:c0:d8:fe:e4:49:14:84: 66:c6:36:60:4c:15:2a:15:11:91:8e:48:9a:4c:a6: f6:30:41:b1:d0:a5:06:50:77:27:9a:8d:c5:4c:5e: 0f:64:8b:4b:7c:4b:84:e9:d6:67:be:64:84:cb:87: 70:60:77:3a:71:4e:4b:f7:99:d9:0e:49:e3:d3:3f: 7c:f8:9e:81:74:af:57:8f:6a:60:01:08:48:da:60: 69:43:98:86:5c:72:b0:04:a0:11:52:08:61:8c:4a: 62:ed:0c:1a:52:f3:3c:54:a0:3e:53:fb:f0:a2:e7: 15:70:71:a5:c0:7f:e8:d2:9a:15:66:12:62:97:4c: 39:91:87:b4:44:41:52:f8:aa:e9:a2:12:f0:3f:03: f7:62:22:9c:a8:67:fb:4a:15:8c:f1:f9:b9:02:78: 98:d8:0c:99:95:cc:eb:f1:4f:bf:d4:1e:18:a7:39: ac:dc:d2:87:ae:5a:37:43:37:8b:ad:01:9d:c0:94: 75:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:22:05:49:28:7C:C0:CB:DB:71:BB:5D:31:1D:DF:DE:00:DF:F9:43 X509v3 Authority Key Identifier: keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d3:80:9c:97:e2:9b:80:6e:84:1e:69:7d:ef:e0:a9:84:0e: 73:04:21:46:5d:fe:fb:08:ca:04:23:af:d4:2e:ef:c5:96:29: da:89:49:fa:e1:3f:1d:79:c0:13:fd:4d:68:0d:65:d2:72:ea: 09:29:2b:2e:70:c7:99:9b:d8:60:e0:75:ea:21:03:dc:90:96: c3:80:3a:e0:d9:29:aa:ce:d4:48:bd:d8:9c:74:0c:0a:84:35: 94:06:9b:9e:15:ec:a4:41:bf:2c:01:3a:a4:ac:51:0c:4d:69: a4:ef:24:fc:77:1b:30:a2:af:02:30:15:ed:d5:ab:ed:be:54: 58:77:ae:9a:3b:7d:37:1d:b7:9b:74:cb:d4:16:64:5e:a4:c6: 52:49:ce:50:67:fb:0b:19:e4:b3:02:d1:fb:77:6d:78:f0:5e: 3d:41:8d:c1:2d:18:43:62:1f:21:70:d7:ed:77:83:ca:57:0d: 49:d8:b2:c7:36:f5:14:4d:15:af:91:a3:f9:08:5e:63:6e:d9: 25:0a:bf:90:c3:ab:27:78:8f:49:89:c0:6c:37:41:9f:ac:18: 9f:e8:96:fb:8a:e0:17:96:ac:29:1c:38:c6:5a:cf:d9:b7:e5: f2:ef:fc:a6:be:fb:0a:c2:01:61:69:8e:c4:c0:ac:2e:f7:dc: 58:31:07:ec -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfhbS0JIviJbne4eJqe7xVCgBDQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2 M0FFMTEzQjAeFw0yNjA1MTMwNzMxMDJaFw0yNjA1MTQwNzQ0MDJaMDMxMTAvBgNV BAMTKDQwMjIwNTQ5Mjg3Q0MwQ0JEQjcxQkI1RDMxMURERkRFMDBERkY5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlEqqHPuRXxN6Mkusc2lIwjj/ MEhf2XpssMUY57jDrhaMEOxiXv1mYBlC/71rDrrigrvU7/WkrEs0dHdeqU+BXvAH wNj+5EkUhGbGNmBMFSoVEZGOSJpMpvYwQbHQpQZQdyeajcVMXg9ki0t8S4Tp1me+ ZITLh3BgdzpxTkv3mdkOSePTP3z4noF0r1ePamABCEjaYGlDmIZccrAEoBFSCGGM SmLtDBpS8zxUoD5T+/Ci5xVwcaXAf+jSmhVmEmKXTDmRh7REQVL4qumiEvA/A/di IpyoZ/tKFYzx+bkCeJjYDJmVzOvxT7/UHhinOazc0oeuWjdDN4utAZ3AlHW1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQCIFSSh8wMvbcbtdMR3f3gDf+UMwHwYDVR0j BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3 RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMS81QUNGNzJEQTMyOTE5 NTAzRDE1NDgwODMyQkE1N0VCMDYzQUUxMTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtOAnJfim4Bu hB5pfe/gqYQOcwQhRl3++wjKBCOv1C7vxZYp2olJ+uE/HXnAE/1NaA1l0nLqCSkr LnDHmZvYYOB16iED3JCWw4A64Nkpqs7USL3YnHQMCoQ1lAabnhXspEG/LAE6pKxR DE1ppO8k/HcbMKKvAjAV7dWr7b5UWHeumjt9Nx23m3TL1BZkXqTGUknOUGf7Cxnk swLR+3dtePBePUGNwS0YQ2IfIXDX7XeDylcNSdiyxzb1FE0Vr5Gj+QheY27ZJQq/ kMOrJ3iPSYnAbDdBn6wYn+iW+4rgF5asKRw4xlrP2bfl8u/8pr77CsIBYWmOxMCs LvfcWDEH7A== -----END CERTIFICATE-----Generated at Wed May 13 20:55:08 2026 by rpki-client