$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft File: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft (raw, json) Hash identifier: zN0LX3Sw5Vq/QFk+g/9YQMxTjAXaDBa2/TLyjqz10fQ= Subject key identifier: A2:AA:CB:DF:AD:D2:79:62:15:01:19:14:BC:E5:E0:E9:DE:7D:7E:4C Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 Certificate issuer: /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Certificate serial: 45A9C054082A56D70C93F4D467C0A6EB28141A38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft Manifest number: 4D Signing time: Fri 24 Jul 2026 11:21:04 +0000 Manifest this update: Fri 24 Jul 2026 11:16:04 +0000 Manifest next update: Sat 25 Jul 2026 13:48:04 +0000 Files and hashes: 1: 3130332e382e33352e302f32342d3234203d3e2034383337.roa (hash: GF8R9y/TBmc5cxAi05epTBCcdlrps0l6xAqDYhmKV9Q=) 2: 3130332e382e33342e302f32342d3234203d3e20313430373236.roa (hash: JCGd1C1Wf1E9+GLgPxZv3lXwNa0mqdnQIY/nBaByWFc=) 3: 3130332e382e33342e302f32332d3233203d3e2034383337.roa (hash: JWCpOL58jnfjNneX9gL3amLDhbCleye0c+pPylUKcKI=) 4: 3130332e382e33332e302f32342d3234203d3e2034383337.roa (hash: YN2Z3o5Y7Gs1S7UHATzST6JGQAtD++MguSN4QeeZ6+Q=) 5: 3130332e382e33322e302f32342d3234203d3e2034313334.roa (hash: wNOnwlciSCkgqRaqEPPKB6JorJz54eTYd07doS61EyM=) 6: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl (hash: R5RHe2y40Mz+iZqJsz88WVX4J7cyaXdGzzHRPl4chlY=) 7: 323430343a363530303a646362333a3a2f34382d3438203d3e2034383337.roa (hash: tHPg+UAtakOXb2bI4+bicsHKTUKZvXIfQ1aMjcpe3+E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a9:c0:54:08:2a:56:d7:0c:93:f4:d4:67:c0:a6:eb:28:14:1a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Validity Not Before: Jul 24 11:16:04 2026 GMT Not After : Jul 25 13:48:04 2026 GMT Subject: CN=A2AACBDFADD2796215011914BCE5E0E9DE7D7E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9d:be:65:90:17:34:c0:3c:22:8e:d6:f3:99: 7e:95:12:5a:e6:9b:0c:79:9b:8d:3a:b6:a0:c2:31: 08:9b:8b:d4:a9:e7:e9:f1:cc:a7:bb:32:2a:bb:91: 07:03:c8:78:d5:ef:90:86:05:62:dc:79:48:a7:83: 7c:8c:df:d0:f9:36:a8:86:be:5f:05:b5:86:fe:35: 17:da:6b:06:d1:dd:ef:3f:a4:a3:5a:cb:94:c7:37: 95:c6:8f:b6:d8:13:2e:32:f6:78:05:f2:83:06:1d: 5a:7f:a8:4b:dd:3f:5d:ab:a8:ac:03:7f:ef:47:35: 34:37:2a:0b:9a:42:e3:d1:07:9d:76:ad:ec:dc:0f: fd:e1:b4:61:ff:42:db:57:f1:fb:b2:57:35:5b:10: 15:74:8e:ed:5c:c8:fc:06:55:0f:58:cc:91:76:e0: 57:11:e0:d4:f1:0d:39:10:3f:0f:bf:1a:a8:37:f0: e9:2f:df:fd:96:60:10:ae:10:76:d7:f7:e6:a0:06: 19:0e:d8:e9:c4:3b:33:8b:aa:7a:ed:da:67:6e:c5: ab:2f:29:dd:57:78:88:9f:53:98:be:8e:ee:4f:36: 94:38:4a:24:8d:68:dc:ec:ba:8e:b3:43:7f:81:ab: 99:b5:51:18:71:6d:1b:61:c2:81:e1:df:8e:c2:fe: 22:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AA:CB:DF:AD:D2:79:62:15:01:19:14:BC:E5:E0:E9:DE:7D:7E:4C X509v3 Authority Key Identifier: keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1e:af:b9:43:91:5a:b7:72:2d:60:01:1c:ea:7e:c7:8c:59: b4:0d:a9:7d:31:65:43:30:e1:56:88:b0:dd:ad:d5:2d:2d:57: f1:d6:1d:7c:32:2d:ff:59:0e:dd:f3:ad:87:b4:bf:c1:7b:1d: 7b:73:cf:1e:0b:0d:16:e8:ed:41:38:5c:84:6c:54:54:88:56: ce:8e:e3:df:d9:e6:99:10:b2:78:66:8e:ec:78:c8:2b:a2:17: 9c:5c:b0:45:97:4f:d2:f5:7c:46:10:b6:86:93:e6:d5:65:de: 20:bc:27:81:05:2e:08:8a:80:01:67:3c:7f:08:a8:aa:26:0a: b4:a5:71:f3:ef:97:27:f7:4e:80:0d:9d:da:72:da:04:a9:e4: a8:f3:30:78:67:c4:b6:42:b0:51:6d:29:d2:60:f0:72:92:0e: df:df:99:83:b2:21:14:79:bb:f5:72:22:8f:e5:82:94:5b:ce: 79:0b:61:88:fa:e3:1f:0f:65:5f:33:e6:75:6c:4c:e2:2a:0a: aa:94:8b:3a:3f:26:d9:7c:e4:ee:7c:88:c5:af:5e:fb:a0:fa: c9:a4:82:e4:e9:52:42:9b:be:ab:fe:7d:7b:8f:b2:af:5d:17: c5:2e:bb:fd:bb:e5:6c:ea:b2:90:77:48:90:2b:ac:43:bc:bf: 3d:0e:3b:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURanAVAgqVtcMk/TUZ8Cm6ygUGjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEy QUQ4RDNEOTAeFw0yNjA3MjQxMTE2MDRaFw0yNjA3MjUxMzQ4MDRaMDMxMTAvBgNV BAMTKEEyQUFDQkRGQUREMjc5NjIxNTAxMTkxNEJDRTVFMEU5REU3RDdFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLnb5lkBc0wDwijtbzmX6VElrm mwx5m406tqDCMQibi9Sp5+nxzKe7Miq7kQcDyHjV75CGBWLceUing3yM39D5NqiG vl8FtYb+NRfaawbR3e8/pKNay5THN5XGj7bYEy4y9ngF8oMGHVp/qEvdP12rqKwD f+9HNTQ3KguaQuPRB512rezcD/3htGH/QttX8fuyVzVbEBV0ju1cyPwGVQ9YzJF2 4FcR4NTxDTkQPw+/Gqg38Okv3/2WYBCuEHbX9+agBhkO2OnEOzOLqnrt2mduxasv Kd1XeIifU5i+ju5PNpQ4SiSNaNzsuo6zQ3+Bq5m1URhxbRthwoHh347C/iK9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoqrL363SeWIVARkUvOXg6d59fkwwHwYDVR0j BBgwFoAUWoEBc6RyF+u2DJ/ZXIM7ASrY09kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjYyNDE3NzgzNzI0NDQzNS8wLzVBODEwMTczQTQ3MjE3RUJCNjBDOUZEOTVDODMz QjAxMkFEOEQzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEyQUQ4RDNEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2MjQxNzc4MzcyNDQ0MzUvMC81QTgxMDE3M0E0NzIx N0VCQjYwQzlGRDk1QzgzM0IwMTJBRDhEM0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARR6vuUORWrdy LWABHOp+x4xZtA2pfTFlQzDhVoiw3a3VLS1X8dYdfDIt/1kO3fOth7S/wXsde3PP HgsNFujtQThchGxUVIhWzo7j39nmmRCyeGaO7HjIK6IXnFywRZdP0vV8RhC2hpPm 1WXeILwngQUuCIqAAWc8fwioqiYKtKVx8++XJ/dOgA2d2nLaBKnkqPMweGfEtkKw UW0p0mDwcpIO39+Zg7IhFHm79XIij+WClFvOeQthiPrjHw9lXzPmdWxM4ioKqpSL Oj8m2Xzk7nyIxa9e+6D6yaSC5OlSQpu+q/59e4+yr10XxS67/bvlbOqykHdIkCus Q7y/PQ47PQ== -----END CERTIFICATE-----Generated at Fri Jul 24 14:46:12 2026 by rpki-client