$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft File: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft (raw, json) Hash identifier: w2u1OZKvFD/2+GA4mcwvgS8LUIxZ7t45LnNJk4cbbZY= Subject key identifier: 99:56:E3:50:B2:C8:7C:F1:E5:39:EE:68:25:80:11:CF:0F:D8:F0:DC Authority key identifier: A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 Certificate issuer: /CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Certificate serial: 1E8B15345BB108BE4FE9F5E61CDF930198CC558B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft Manifest number: C0 Signing time: Sat 13 Jun 2026 06:21:19 +0000 Manifest this update: Sat 13 Jun 2026 06:16:19 +0000 Manifest next update: Sun 14 Jun 2026 06:28:19 +0000 Files and hashes: 1: 3130332e3234302e3230302e302f32342d3234203d3e20313530343037.roa (hash: cwdedZumqbqU+LJf5oD66wPPzBjrkVCdrXnE2Lu+6bI=) 2: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl (hash: 2qMmdEOfhr7KeLth7eCkTHtfJzXtMgxpm2nixSyu2jk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 06:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8b:15:34:5b:b1:08:be:4f:e9:f5:e6:1c:df:93:01:98:cc:55:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Validity Not Before: Jun 13 06:16:19 2026 GMT Not After : Jun 14 06:28:19 2026 GMT Subject: CN=9956E350B2C87CF1E539EE68258011CF0FD8F0DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e4:de:18:0a:cb:7f:de:32:d6:73:d6:3d:4c: 04:7c:35:5a:93:25:28:50:f7:aa:49:9d:a7:43:72: 6d:41:05:6c:ec:b6:36:a7:4d:fd:b9:6d:a6:1e:db: 63:f9:6f:b7:32:6f:0f:a9:8a:37:ec:e8:8b:90:06: 30:65:1d:33:40:b2:87:99:e6:21:03:05:a2:76:08: 67:88:df:22:a6:67:69:26:b9:cb:d5:b9:d4:90:a3: 17:9d:cf:03:bd:4b:13:9c:34:d6:90:9c:71:40:14: d0:d8:1b:d0:ec:9b:00:c9:7f:19:19:bb:8d:29:02: 74:2f:80:49:4a:ac:d5:8f:77:b2:c7:69:37:51:c7: 34:9b:b4:20:8a:e4:7e:6b:a9:b1:48:96:66:ca:2e: 8b:a3:49:9c:f4:76:66:89:e3:bc:d7:c6:23:7e:8c: 76:7a:75:29:af:76:86:64:7c:75:32:0f:8f:b1:7e: 34:91:41:fe:fe:fa:67:78:f0:ee:8b:80:14:17:1b: 2b:a2:df:73:5f:1a:6a:76:b4:9f:c3:00:ca:9d:31: 30:1f:b6:be:a6:af:6f:5f:30:45:f7:62:03:4e:75: 33:12:be:48:90:82:b9:66:f0:68:b9:2d:e8:75:d5: de:13:96:5d:6e:98:a1:fc:a0:0d:2b:29:8d:5b:5f: 03:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:56:E3:50:B2:C8:7C:F1:E5:39:EE:68:25:80:11:CF:0F:D8:F0:DC X509v3 Authority Key Identifier: keyid:A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a0:5e:36:2c:34:50:c8:00:02:54:49:d7:19:2e:e9:85:42: 92:6b:75:0d:29:7d:b2:fe:05:01:78:1f:b8:c4:e7:f1:2c:90: c1:e3:e2:43:55:2c:41:d3:18:8c:41:73:ae:94:89:0e:42:9b: fb:f9:92:fe:85:c0:75:6d:db:fe:ae:58:2b:b8:c8:86:b6:4f: 2e:00:20:14:a6:42:22:0c:89:c0:c2:b1:f1:e9:fc:47:07:94: 1c:05:4b:47:95:7b:62:a2:51:2c:c8:8c:57:c2:83:31:fe:e2: 6f:a3:e5:63:a1:87:62:aa:81:ae:7a:99:c9:94:56:b6:e2:d0: b6:39:61:23:78:ed:3a:37:cf:6b:c0:3e:03:36:ff:7c:3b:58: 06:6e:8c:69:ba:15:29:3c:2a:f9:19:31:d0:6d:02:c5:cf:cd: ea:04:48:20:a2:69:e6:9f:36:f9:a8:da:38:22:9b:45:95:39: 17:ab:0a:81:25:7d:14:3e:ef:2c:f2:50:f3:0a:15:e6:f4:27: e8:67:c0:68:f5:0b:06:04:ab:f8:39:7f:c1:8e:c8:43:f8:80: f3:ab:21:f8:e7:d7:e9:16:56:9b:87:8e:28:27:9a:2e:79:37: b7:b4:b0:df:e1:7f:2f:08:18:48:fe:13:aa:1e:49:f3:a5:28: 94:7d:0f:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHosVNFuxCL5P6fXmHN+TAZjMVYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJE Mzg2Q0EwMDAeFw0yNjA2MTMwNjE2MTlaFw0yNjA2MTQwNjI4MTlaMDMxMTAvBgNV BAMTKDk5NTZFMzUwQjJDODdDRjFFNTM5RUU2ODI1ODAxMUNGMEZEOEYwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr5N4YCst/3jLWc9Y9TAR8NVqT JShQ96pJnadDcm1BBWzstjanTf25baYe22P5b7cybw+pijfs6IuQBjBlHTNAsoeZ 5iEDBaJ2CGeI3yKmZ2kmucvVudSQoxedzwO9SxOcNNaQnHFAFNDYG9DsmwDJfxkZ u40pAnQvgElKrNWPd7LHaTdRxzSbtCCK5H5rqbFIlmbKLoujSZz0dmaJ47zXxiN+ jHZ6dSmvdoZkfHUyD4+xfjSRQf7++md48O6LgBQXGyui33NfGmp2tJ/DAMqdMTAf tr6mr29fMEX3YgNOdTMSvkiQgrlm8Gi5Leh11d4Tll1umKH8oA0rKY1bXwP1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmVbjULLIfPHlOe5oJYARzw/Y8NwwHwYDVR0j BBgwFoAUpXc8Gp1g7eCIJxmt76QLG9OGygAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTk1Mzc5NC8wL0E1NzczQzFBOUQ2MEVERTA4ODI3MTlBREVGQTQw QjFCRDM4NkNBMDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJEMzg2Q0EwMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU5NTM3OTQvMC9BNTc3M0MxQTlENjBF REUwODgyNzE5QURFRkE0MEIxQkQzODZDQTAwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6BeNiw0UMgA AlRJ1xku6YVCkmt1DSl9sv4FAXgfuMTn8SyQwePiQ1UsQdMYjEFzrpSJDkKb+/mS /oXAdW3b/q5YK7jIhrZPLgAgFKZCIgyJwMKx8en8RweUHAVLR5V7YqJRLMiMV8KD Mf7ib6PlY6GHYqqBrnqZyZRWtuLQtjlhI3jtOjfPa8A+Azb/fDtYBm6MaboVKTwq +Rkx0G0Cxc/N6gRIIKJp5p82+ajaOCKbRZU5F6sKgSV9FD7vLPJQ8woV5vQn6GfA aPULBgSr+Dl/wY7IQ/iA86sh+OfX6RZWm4eOKCeaLnk3t7Sw3+F/LwgYSP4Tqh5J 86UolH0PJw== -----END CERTIFICATE-----Generated at Sat Jun 13 21:26:04 2026 by rpki-client