$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft File: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft (raw, json) Hash identifier: vZ1SMzG5Qyps6XnzVIKbvg8itn8r4Gl8iS++V+COSGw= Subject key identifier: 5D:7A:C3:E1:65:0F:DB:50:57:B6:FB:10:22:87:DC:0D:10:46:9E:9B Authority key identifier: A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 Certificate issuer: /CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Certificate serial: 748F3B2B2FB8C8D59F3F38ABBF950F79801E2CF3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 12:43:17 +0000 Manifest this update: Mon 02 Mar 2026 12:38:17 +0000 Manifest next update: Tue 03 Mar 2026 14:59:17 +0000 Files and hashes: 1: 3130332e3234302e3230302e302f32342d3234203d3e20313530343037.roa (hash: cwdedZumqbqU+LJf5oD66wPPzBjrkVCdrXnE2Lu+6bI=) 2: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl (hash: NHGrGYWJ5GFJE4G8/v3/rhBirUKf3jl5BOpqbHmH9l8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8f:3b:2b:2f:b8:c8:d5:9f:3f:38:ab:bf:95:0f:79:80:1e:2c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Validity Not Before: Mar 2 12:38:17 2026 GMT Not After : Mar 3 14:59:17 2026 GMT Subject: CN=5D7AC3E1650FDB5057B6FB102287DC0D10469E9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:12:56:7d:fd:11:60:67:15:73:c1:e3:41: ea:6b:1f:14:c0:31:cf:cc:93:d5:9b:76:dd:9f:a4: e8:28:b3:30:3d:c0:82:34:d0:e9:ba:7b:c0:ba:66: b3:0b:16:e5:16:5d:71:b6:46:59:24:3b:36:10:3e: e3:69:5b:09:74:3b:25:aa:a7:44:10:70:5b:ec:21: 76:74:61:cb:30:ae:ef:35:16:a2:58:a0:0e:67:ee: 75:d3:61:ca:e1:50:08:b5:1c:15:82:bb:c8:74:e6: 6a:08:d1:64:f8:f7:d8:38:d5:5c:12:b8:2a:28:96: 75:97:5f:96:1a:97:e9:eb:5a:ec:b3:4b:9d:c3:9d: b0:c5:a2:ef:a6:d2:30:b7:a8:5a:3d:ca:a3:82:cf: 51:c3:d1:65:6a:72:9f:4f:1c:f6:34:07:8c:f3:db: b7:55:aa:0f:de:42:e5:c6:20:4c:9e:3a:5b:c8:82: bb:cf:5c:15:2d:47:49:df:b0:89:12:e8:73:6b:44: a5:cc:70:76:f5:4e:22:74:c7:6f:ac:44:e3:e8:f3: 3b:9e:16:0b:90:53:c6:cf:bc:4b:1a:16:af:e2:4c: cb:5a:e2:2d:06:56:09:f4:b5:6d:0d:ba:6c:d4:7c: 34:70:96:11:63:5d:a1:91:87:69:3d:47:b5:e4:dd: b0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7A:C3:E1:65:0F:DB:50:57:B6:FB:10:22:87:DC:0D:10:46:9E:9B X509v3 Authority Key Identifier: keyid:A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e0:17:7e:22:3e:f5:76:e2:37:fd:53:e7:99:94:fd:67:fb: ad:62:fd:56:3f:f5:7c:f5:e6:bb:66:14:c6:92:53:77:62:1b: 32:73:81:b5:f8:34:b6:b4:76:db:f8:86:6f:ba:3c:e0:43:c8: 4b:0f:5d:1f:4f:d5:e4:82:87:58:de:e7:bb:b3:dd:86:05:1a: 15:bb:4d:a4:ec:ce:3a:19:64:26:fa:6c:20:4e:0a:d6:95:ad: 69:67:16:5f:6b:2e:fb:fa:05:7e:0c:9d:8f:73:e5:e7:5d:bb: 0b:36:b8:6d:79:75:b4:9f:46:ea:21:0a:27:c1:d3:c5:b2:9d: 30:1d:b9:c9:ed:f9:d7:6a:08:8f:c2:cc:d7:8b:46:32:cf:9e: f4:44:02:96:8b:aa:07:94:a5:36:ef:aa:05:f8:4b:0e:bc:16: 5e:f4:12:2e:90:7f:66:a3:d6:fc:63:5a:81:65:cb:4f:1d:53: 42:57:f0:a9:7b:ff:d9:74:76:50:75:14:4a:19:67:9c:af:22: 61:e4:97:2b:34:7c:1c:cb:35:67:09:74:17:99:fa:0b:69:f7: e0:0a:e9:b4:b3:36:f9:38:65:3a:10:f4:ef:a3:82:6d:e6:96: ba:aa:2d:c6:46:cc:e8:5e:5a:5a:09:e2:da:ec:c5:69:b2:71: e9:da:f1:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdI87Ky+4yNWfPzirv5UPeYAeLPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJE Mzg2Q0EwMDAeFw0yNjAzMDIxMjM4MTdaFw0yNjAzMDMxNDU5MTdaMDMxMTAvBgNV BAMTKDVEN0FDM0UxNjUwRkRCNTA1N0I2RkIxMDIyODdEQzBEMTA0NjlFOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiLhJWff0RYGcVc8HjQeprHxTA Mc/Mk9Wbdt2fpOgoszA9wII00Om6e8C6ZrMLFuUWXXG2RlkkOzYQPuNpWwl0OyWq p0QQcFvsIXZ0Ycswru81FqJYoA5n7nXTYcrhUAi1HBWCu8h05moI0WT499g41VwS uCoolnWXX5Yal+nrWuyzS53DnbDFou+m0jC3qFo9yqOCz1HD0WVqcp9PHPY0B4zz 27dVqg/eQuXGIEyeOlvIgrvPXBUtR0nfsIkS6HNrRKXMcHb1TiJ0x2+sROPo8zue FguQU8bPvEsaFq/iTMta4i0GVgn0tW0NumzUfDRwlhFjXaGRh2k9R7Xk3bDbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXXrD4WUP21BXtvsQIofcDRBGnpswHwYDVR0j BBgwFoAUpXc8Gp1g7eCIJxmt76QLG9OGygAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTk1Mzc5NC8wL0E1NzczQzFBOUQ2MEVERTA4ODI3MTlBREVGQTQw QjFCRDM4NkNBMDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJEMzg2Q0EwMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU5NTM3OTQvMC9BNTc3M0MxQTlENjBF REUwODgyNzE5QURFRkE0MEIxQkQzODZDQTAwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+AXfiI+9Xbi N/1T55mU/Wf7rWL9Vj/1fPXmu2YUxpJTd2IbMnOBtfg0trR22/iGb7o84EPISw9d H0/V5IKHWN7nu7PdhgUaFbtNpOzOOhlkJvpsIE4K1pWtaWcWX2su+/oFfgydj3Pl 5127Cza4bXl1tJ9G6iEKJ8HTxbKdMB25ye3512oIj8LM14tGMs+e9EQClouqB5Sl Nu+qBfhLDrwWXvQSLpB/ZqPW/GNagWXLTx1TQlfwqXv/2XR2UHUUShlnnK8iYeSX KzR8HMs1Zwl0F5n6C2n34ArptLM2+ThlOhD076OCbeaWuqotxkbM6F5aWgni2uzF abJx6drx3w== -----END CERTIFICATE-----Generated at Mon Mar 2 17:01:06 2026 by rpki-client