$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft File: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft (raw, json) Hash identifier: xZibJJx2NU42aP+6Ws7GTPi5j/KGpU5BiFS7aeSVtTQ= Subject key identifier: 61:D0:36:B8:09:67:D8:48:88:68:EF:87:EF:2C:08:7C:21:54:A1:49 Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45 Certificate issuer: /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145 Certificate serial: 7B8AC14F3B339439A9B718D173F927CD406FC752 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft Manifest number: 18 Signing time: Wed 13 May 2026 08:26:02 +0000 Manifest this update: Wed 13 May 2026 08:21:02 +0000 Manifest next update: Thu 14 May 2026 10:53:02 +0000 Files and hashes: 1: C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl (hash: 8mz6+LSlNH2USBw45Mvca5yzIcELL00TPDLOIyNzT6Y=) 2: 323430323a653734303a3a2f33322d313238203d3e20313331343930.roa (hash: piAYDv5bavK6nG+EpntkC7UhaP+bxhD5oR85/uJHKPY=) 3: 3130332e3131352e3132302e302f32322d3332203d3e20313331343930.roa (hash: DXmmEcsQIwatfPiE2yJiu3uUp/o2PhaL3pzjxIwQ9AQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8a:c1:4f:3b:33:94:39:a9:b7:18:d1:73:f9:27:cd:40:6f:c7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145 Validity Not Before: May 13 08:21:02 2026 GMT Not After : May 14 10:53:02 2026 GMT Subject: CN=61D036B80967D8488868EF87EF2C087C2154A149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a5:29:a9:cc:90:05:39:3d:d9:a4:80:75:ba: b6:62:cc:27:a0:63:e9:99:c5:a6:1b:9c:e1:df:df: d5:64:46:76:d4:cb:34:01:55:57:58:40:01:f6:82: c5:50:cd:c9:eb:14:94:a8:df:6a:7f:2a:8f:fa:6f: af:79:b2:43:e8:53:90:07:8b:3b:47:4b:25:20:f3: eb:39:11:19:56:85:e0:56:56:6f:60:23:12:d6:0b: f0:19:36:c1:ce:f7:f8:5a:93:ab:a1:55:08:35:d5: 27:53:50:22:65:4a:2e:68:8e:f2:42:7c:62:37:5f: 41:49:ab:6a:bc:22:27:aa:9a:91:cb:e1:c0:87:15: bf:e2:a1:74:0a:43:ac:fb:45:1f:7a:4f:c5:80:ac: d7:1b:03:f5:2c:6b:0b:8b:0d:aa:39:ce:79:9e:8a: a8:dd:3f:4f:e6:f7:7b:42:76:60:aa:df:84:02:1e: 0e:f1:38:cf:83:29:40:a2:85:48:13:79:db:e4:3f: 70:ad:f3:8b:0a:3d:3a:05:bf:4e:0f:90:1b:b6:3e: 9f:bb:db:0a:62:35:0c:84:c0:16:f6:f8:1c:1b:62: 58:ce:5e:a4:55:9b:35:af:84:bf:ce:5f:b2:27:8d: af:ac:10:08:f5:fc:ef:cd:bd:04:97:6d:62:cc:30: df:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D0:36:B8:09:67:D8:48:88:68:EF:87:EF:2C:08:7C:21:54:A1:49 X509v3 Authority Key Identifier: keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:58:03:08:02:52:19:64:cf:d8:b5:7a:79:69:73:10:d3:47: 53:51:17:f1:83:c0:7f:43:f0:2f:91:52:36:05:b6:f1:51:08: b4:ff:03:bc:32:ba:a7:64:47:70:0c:20:8c:22:ff:9b:83:e4: d0:9e:bc:ea:d6:6f:1b:bf:08:54:28:22:5f:c2:c8:12:2c:4e: 60:3e:b1:cf:cc:2c:13:1e:fe:9c:c1:f7:fd:46:8f:61:5e:93: 39:d3:ae:a6:b9:f0:a2:51:a4:f8:48:42:b2:c6:f7:e2:c6:72: 7b:24:73:f6:55:d6:84:e0:39:d1:7c:47:7c:5a:fe:b9:03:a1: 97:1d:a4:ed:5a:8d:5a:ec:1f:a9:ad:cd:3d:cf:93:ff:48:8b: 0d:2b:21:7f:75:ab:e0:8f:a0:75:42:d8:3f:e6:3c:5f:02:28: 51:b1:da:1e:b3:64:89:92:1d:fd:54:ad:e6:28:dc:26:7c:e7: df:08:e5:19:e7:e9:78:c8:96:ad:b8:ef:bc:7c:90:1d:ca:97: b9:1d:bc:c4:a4:44:a8:8f:2e:88:d6:ca:7e:92:6b:a0:d3:9b: e8:44:c6:34:3f:b0:86:97:6d:b7:e9:1d:56:6f:df:82:26:71: 98:ea:eb:d2:64:f6:32:f7:7e:7b:75:1c:1a:6b:b2:ef:37:e0: 27:28:8d:b2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe4rBTzszlDmptxjRc/knzUBvx1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGNzNEQUNDNUY2NTZDMDhEOEQyQzVERUM3MjU2Q0ZB NkY0MTE0NTAeFw0yNjA1MTMwODIxMDJaFw0yNjA1MTQxMDUzMDJaMDMxMTAvBgNV BAMTKDYxRDAzNkI4MDk2N0Q4NDg4ODY4RUY4N0VGMkMwODdDMjE1NEExNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopSmpzJAFOT3ZpIB1urZizCeg Y+mZxaYbnOHf39VkRnbUyzQBVVdYQAH2gsVQzcnrFJSo32p/Ko/6b695skPoU5AH iztHSyUg8+s5ERlWheBWVm9gIxLWC/AZNsHO9/hak6uhVQg11SdTUCJlSi5ojvJC fGI3X0FJq2q8IieqmpHL4cCHFb/ioXQKQ6z7RR96T8WArNcbA/UsawuLDao5znme iqjdP0/m93tCdmCq34QCHg7xOM+DKUCihUgTedvkP3Ct84sKPToFv04PkBu2Pp+7 2wpiNQyEwBb2+BwbYljOXqRVmzWvhL/OX7Inja+sEAj1/O/NvQSXbWLMMN+dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYdA2uAln2EiIaO+H7ywIfCFUoUkwHwYDVR0j BBgwFoAUxfc9rMX2VsCNjSxd7HJWz6b0EUUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk0ODg4NTY0OTU1NTQ1Ny8wL0M1RjczREFDQzVGNjU2QzA4RDhEMkM1REVDNzI1 NkNGQTZGNDExNDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzVGNzNEQUNDNUY2NTZDMDhEOEQyQzVERUM3MjU2Q0ZBNkY0MTE0NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5NDg4ODU2NDk1NTU0NTcvMC9DNUY3M0RBQ0M1RjY1 NkMwOEQ4RDJDNURFQzcyNTZDRkE2RjQxMTQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVgDCAJSGWTP 2LV6eWlzENNHU1EX8YPAf0PwL5FSNgW28VEItP8DvDK6p2RHcAwgjCL/m4Pk0J68 6tZvG78IVCgiX8LIEixOYD6xz8wsEx7+nMH3/UaPYV6TOdOuprnwolGk+EhCssb3 4sZyeyRz9lXWhOA50XxHfFr+uQOhlx2k7VqNWuwfqa3NPc+T/0iLDSshf3Wr4I+g dULYP+Y8XwIoUbHaHrNkiZId/VSt5ijcJnzn3wjlGefpeMiWrbjvvHyQHcqXuR28 xKREqI8uiNbKfpJroNOb6ETGND+whpdtt+kdVm/fgiZxmOrr0mT2Mvd+e3UcGmuy 7zfgJyiNsg== -----END CERTIFICATE-----Generated at Wed May 13 20:55:07 2026 by rpki-client