$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft File: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft (raw, json) Hash identifier: DNc1cqHUSBkXpO+waTGqcxXt6ufN16Ts3P2xURwWBIk= Subject key identifier: 21:26:82:6B:8B:A3:19:DE:C3:A5:EB:36:E1:89:E0:DD:67:4B:17:BA Authority key identifier: A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 Certificate issuer: /CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Certificate serial: 4C269B296F9B559183AA5145546817BC9F8B632F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft Manifest number: 0130 Signing time: Tue 22 Sep 2026 16:24:37 +0000 Manifest this update: Tue 22 Sep 2026 16:19:37 +0000 Manifest next update: Fri 25 Sep 2026 17:45:37 +0000 Files and hashes: 1: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl (hash: FP0Q8sJxVRj+iyOyT04VDCeh99XG0sBhmDZiLlJkPUo=) 2: 3130332e3234302e3230302e302f32342d3234203d3e20313530343037.roa (hash: cwdedZumqbqU+LJf5oD66wPPzBjrkVCdrXnE2Lu+6bI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 17:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:26:9b:29:6f:9b:55:91:83:aa:51:45:54:68:17:bc:9f:8b:63:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Validity Not Before: Sep 22 16:19:37 2026 GMT Not After : Sep 25 17:45:37 2026 GMT Subject: CN=2126826B8BA319DEC3A5EB36E189E0DD674B17BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:bd:69:08:0d:f5:b9:d9:2c:f7:74:0e:81: 21:a2:1f:69:40:d1:58:fe:c4:8d:78:60:4a:31:ce: 72:06:e4:e0:53:7c:e9:dd:2f:03:82:59:a7:91:82: e5:ca:90:09:fe:e4:4c:25:b9:1e:e9:20:1c:a7:6e: 24:1c:81:2f:09:ab:5a:5f:31:a0:24:c3:86:35:03: b3:83:31:a1:b2:71:9b:8a:f3:21:c6:13:39:52:ad: 49:10:fc:5a:bb:83:ab:92:2d:94:d2:27:32:5c:29: 14:b5:f5:85:d5:4e:9c:4d:b9:6e:ef:da:35:34:88: ad:ab:88:0f:f8:d1:e9:99:59:25:d3:af:c3:7a:4e: 6a:b8:17:98:c3:76:62:0e:eb:46:d5:01:8a:fd:d2: 51:5d:64:88:71:32:78:cd:f0:05:19:ac:d6:45:57: 54:c8:5b:10:57:9b:8f:67:f1:79:f4:cb:86:e2:4f: 3c:17:3f:ce:54:94:f2:13:82:b2:bb:2b:13:7f:17: 27:6b:45:5b:37:5d:a3:1c:95:1c:b2:d5:6c:3c:eb: b2:de:23:f4:fb:cb:28:aa:f8:6e:5c:6d:5f:70:d3: e8:9a:05:7a:4b:f3:ad:a1:11:4f:63:21:75:cd:35: 90:67:a4:c5:d2:09:23:83:a6:f1:c9:0f:f8:ee:fe: a3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:26:82:6B:8B:A3:19:DE:C3:A5:EB:36:E1:89:E0:DD:67:4B:17:BA X509v3 Authority Key Identifier: keyid:A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7c:ce:c3:ed:56:4c:3c:7d:d7:4b:d5:53:5e:11:62:13:95: 39:62:b2:1b:a8:90:fe:68:1b:f0:39:88:df:55:3b:41:94:d6: 52:59:5b:44:36:b0:35:00:b8:7e:2a:ba:39:ba:61:dc:3a:4b: 6e:fc:e2:07:1f:e5:c4:f6:28:c2:70:3a:f8:2a:0e:f1:69:cc: 09:88:23:f7:19:58:52:df:30:a6:ac:a6:f0:00:0e:97:d6:15: c0:00:04:ec:e6:86:d3:89:74:d6:2e:3b:57:91:b8:f7:75:9a: 42:9c:e8:84:8c:4b:b5:82:c2:6e:13:c2:ce:6d:1f:31:44:4e: e8:96:a3:3c:34:3d:df:22:1a:9b:4e:89:dc:ff:70:54:c0:b8: 1b:8c:e2:b0:23:bd:e8:96:f3:04:f1:e0:40:e7:2d:76:bb:ed: 51:ad:07:80:86:12:e7:98:d7:3e:3d:65:65:f8:b5:3a:60:be: 9e:6a:32:fc:aa:a2:4e:02:d9:35:74:04:07:e8:11:11:d2:c6: ba:0f:32:ee:4e:a9:92:5c:c3:2d:5e:7b:b7:04:2e:2a:0c:73: 71:5f:98:2f:e4:cf:d2:f8:0c:35:cf:7c:a8:64:04:eb:40:c4: cd:ab:ba:f7:f2:15:5f:fd:18:b5:a8:f9:9d:8f:ce:41:64:c3: 30:77:42:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTCabKW+bVZGDqlFFVGgXvJ+LYy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJE Mzg2Q0EwMDAeFw0yNjA5MjIxNjE5MzdaFw0yNjA5MjUxNzQ1MzdaMDMxMTAvBgNV BAMTKDIxMjY4MjZCOEJBMzE5REVDM0E1RUIzNkUxODlFMERENjc0QjE3QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Db1pCA31udks93QOgSGiH2lA 0Vj+xI14YEoxznIG5OBTfOndLwOCWaeRguXKkAn+5EwluR7pIBynbiQcgS8Jq1pf MaAkw4Y1A7ODMaGycZuK8yHGEzlSrUkQ/Fq7g6uSLZTSJzJcKRS19YXVTpxNuW7v 2jU0iK2riA/40emZWSXTr8N6Tmq4F5jDdmIO60bVAYr90lFdZIhxMnjN8AUZrNZF V1TIWxBXm49n8Xn0y4biTzwXP85UlPITgrK7KxN/FydrRVs3XaMclRyy1Ww867Le I/T7yyiq+G5cbV9w0+iaBXpL862hEU9jIXXNNZBnpMXSCSODpvHJD/ju/qMpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUISaCa4ujGd7Dpes24Yng3WdLF7owHwYDVR0j BBgwFoAUpXc8Gp1g7eCIJxmt76QLG9OGygAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTk1Mzc5NC8wL0E1NzczQzFBOUQ2MEVERTA4ODI3MTlBREVGQTQw QjFCRDM4NkNBMDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJEMzg2Q0EwMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU5NTM3OTQvMC9BNTc3M0MxQTlENjBF REUwODgyNzE5QURFRkE0MEIxQkQzODZDQTAwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnzOw+1WTDx9 10vVU14RYhOVOWKyG6iQ/mgb8DmI31U7QZTWUllbRDawNQC4fiq6Obph3DpLbvzi Bx/lxPYownA6+CoO8WnMCYgj9xlYUt8wpqym8AAOl9YVwAAE7OaG04l01i47V5G4 93WaQpzohIxLtYLCbhPCzm0fMURO6JajPDQ93yIam06J3P9wVMC4G4zisCO96Jbz BPHgQOctdrvtUa0HgIYS55jXPj1lZfi1OmC+nmoy/KqiTgLZNXQEB+gREdLGug8y 7k6pklzDLV57twQuKgxzcV+YL+TP0vgMNc98qGQE60DEzau69/IVX/0Ytaj5nY/O QWTDMHdCcg== -----END CERTIFICATE-----Generated at Tue Sep 22 22:29:25 2026 by rpki-client