$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft File: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft (raw, json) Hash identifier: bJmIdXQyLdlYyqYw7kT1gTr93UGOoC/utfe9U6YFZAQ= Subject key identifier: C5:C8:E9:31:F2:FC:54:1C:15:D4:01:60:C3:E7:0E:CD:7A:62:E9:13 Authority key identifier: A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 Certificate issuer: /CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Certificate serial: 79562709F9FD528A7FE88DDC3CDE7866B942FCB5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft Manifest number: FD Signing time: Wed 29 Jul 2026 10:59:13 +0000 Manifest this update: Wed 29 Jul 2026 10:54:13 +0000 Manifest next update: Thu 30 Jul 2026 11:08:13 +0000 Files and hashes: 1: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl (hash: fGde9s+GKFcviT+9Ba1G6oDb8pf38UuNbzr3gqohetA=) 2: 3130332e3234302e3230302e302f32342d3234203d3e20313530343037.roa (hash: cwdedZumqbqU+LJf5oD66wPPzBjrkVCdrXnE2Lu+6bI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:56:27:09:f9:fd:52:8a:7f:e8:8d:dc:3c:de:78:66:b9:42:fc:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Validity Not Before: Jul 29 10:54:13 2026 GMT Not After : Jul 30 11:08:13 2026 GMT Subject: CN=C5C8E931F2FC541C15D40160C3E70ECD7A62E913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:75:23:76:59:84:6c:e9:7e:36:c2:f7:32: 64:03:ed:07:77:a6:e8:ec:49:93:9d:2e:7b:da:16: 8e:a5:e7:d4:7e:08:c1:79:e4:79:bb:60:94:70:a9: 56:c3:ad:67:70:76:e6:4b:68:b2:3a:bf:db:a5:09: 0e:34:c5:67:91:f2:b3:41:cf:41:c3:69:36:12:29: 8a:6c:2e:8a:b8:a5:a9:ff:cb:6e:eb:a5:19:1c:59: 40:79:56:d1:b9:f4:1f:3e:4c:71:90:6b:dc:b7:84: 8d:42:f3:fc:5e:e6:2b:d6:d6:85:f5:8c:e2:b5:a7: 22:e2:b2:92:21:79:8a:88:fd:51:23:1c:16:4b:da: 97:fe:ed:77:14:a3:b9:3a:c6:b8:70:64:b2:13:20: eb:b8:dc:64:ed:d9:46:42:94:f0:6a:7a:b6:54:fc: e2:c4:b0:b0:9c:b5:49:f9:25:74:8a:d1:48:2d:f1: e0:f0:f4:22:cb:85:f1:a2:4d:9e:6b:53:5c:45:63: ba:ff:35:ac:f9:96:c1:55:18:94:62:53:8d:91:42: f8:c3:f0:cb:1d:96:83:29:ae:c3:a3:cf:db:47:c8: 9d:5f:dc:63:8c:c9:27:c7:ab:a5:80:20:b3:17:84: 6d:24:c7:29:c4:c5:2a:56:81:37:dc:fc:04:7f:ce: fe:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C8:E9:31:F2:FC:54:1C:15:D4:01:60:C3:E7:0E:CD:7A:62:E9:13 X509v3 Authority Key Identifier: keyid:A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:47:cb:5b:cf:df:10:50:10:dd:93:8f:02:4f:fc:d4:e0:87: 34:3c:47:ea:fe:ee:25:c3:c7:b6:a8:69:a0:09:f9:c1:f0:2a: 27:d6:3c:5e:ba:54:4c:ab:03:02:72:0a:82:16:ae:d4:1c:16: c0:f5:ed:f8:db:1b:c7:48:28:85:ab:1f:06:ea:36:c1:35:32: ce:9c:6c:b3:50:4a:b4:1e:e1:90:40:13:75:cd:cd:85:3d:fd: 65:b2:3d:bd:cb:14:f5:29:7d:12:06:ce:2d:f3:a8:8b:56:b5: 16:f8:08:2c:d7:05:1a:70:e5:48:66:d6:90:01:50:20:a6:8d: a7:15:c9:6e:a9:2b:f8:b4:a8:56:29:03:18:e3:24:16:7d:1d: 8d:5f:97:15:7f:b4:39:14:8a:39:96:b9:23:47:0b:a5:60:d0: 1b:ea:15:24:59:eb:8a:82:5d:5c:05:e3:d3:03:cb:58:80:b9: ee:ad:cb:ce:cc:18:c7:33:0e:bc:73:c0:0e:24:37:ea:16:41: c2:9c:74:64:ad:b8:1e:47:d8:80:e5:74:3a:90:a3:d9:05:eb: 39:70:ae:74:bc:b6:45:be:3d:f2:32:e5:a7:9c:ac:20:10:39: 01:a5:3a:89:29:a1:f6:58:22:95:09:18:8b:a9:97:ad:fe:e7: b5:8a:b5:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeVYnCfn9Uop/6I3cPN54ZrlC/LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJE Mzg2Q0EwMDAeFw0yNjA3MjkxMDU0MTNaFw0yNjA3MzAxMTA4MTNaMDMxMTAvBgNV BAMTKEM1QzhFOTMxRjJGQzU0MUMxNUQ0MDE2MEMzRTcwRUNEN0E2MkU5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRHUjdlmEbOl+NsL3MmQD7Qd3 pujsSZOdLnvaFo6l59R+CMF55Hm7YJRwqVbDrWdwduZLaLI6v9ulCQ40xWeR8rNB z0HDaTYSKYpsLoq4pan/y27rpRkcWUB5VtG59B8+THGQa9y3hI1C8/xe5ivW1oX1 jOK1pyLispIheYqI/VEjHBZL2pf+7XcUo7k6xrhwZLITIOu43GTt2UZClPBqerZU /OLEsLCctUn5JXSK0Ugt8eDw9CLLhfGiTZ5rU1xFY7r/Naz5lsFVGJRiU42RQvjD 8MsdloMprsOjz9tHyJ1f3GOMySfHq6WAILMXhG0kxynExSpWgTfc/AR/zv43AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxcjpMfL8VBwV1AFgw+cOzXpi6RMwHwYDVR0j BBgwFoAUpXc8Gp1g7eCIJxmt76QLG9OGygAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTk1Mzc5NC8wL0E1NzczQzFBOUQ2MEVERTA4ODI3MTlBREVGQTQw QjFCRDM4NkNBMDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJEMzg2Q0EwMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU5NTM3OTQvMC9BNTc3M0MxQTlENjBF REUwODgyNzE5QURFRkE0MEIxQkQzODZDQTAwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEfLW8/fEFAQ 3ZOPAk/81OCHNDxH6v7uJcPHtqhpoAn5wfAqJ9Y8XrpUTKsDAnIKghau1BwWwPXt +Nsbx0gohasfBuo2wTUyzpxss1BKtB7hkEATdc3NhT39ZbI9vcsU9Sl9EgbOLfOo i1a1FvgILNcFGnDlSGbWkAFQIKaNpxXJbqkr+LSoVikDGOMkFn0djV+XFX+0ORSK OZa5I0cLpWDQG+oVJFnrioJdXAXj0wPLWIC57q3LzswYxzMOvHPADiQ36hZBwpx0 ZK24HkfYgOV0OpCj2QXrOXCudLy2Rb498jLlp5ysIBA5AaU6iSmh9lgilQkYi6mX rf7ntYq1vQ== -----END CERTIFICATE-----Generated at Wed Jul 29 14:14:01 2026 by rpki-client