$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft File: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft (raw, json) Hash identifier: iEn4/Ihg+17Us2CxXmZTmTQUtV06MkZgNWA6XSApTQ0= Subject key identifier: E4:D6:A4:DE:63:CD:ED:3D:D4:BA:2B:AD:88:84:3E:03:86:ED:FF:4B Authority key identifier: A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 Certificate issuer: /CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Certificate serial: 23ACC4DCECE28A488E692DEC77226A21FD455242 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 13:29:43 +0000 Manifest this update: Fri 17 Apr 2026 13:24:43 +0000 Manifest next update: Sat 18 Apr 2026 16:54:43 +0000 Files and hashes: 1: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl (hash: XrVRuoNXUQ33+HRZ7VbyxNsWsRfCNcvp58tBNQy5NCI=) 2: 3130332e3234302e3230302e302f32342d3234203d3e20313530343037.roa (hash: cwdedZumqbqU+LJf5oD66wPPzBjrkVCdrXnE2Lu+6bI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ac:c4:dc:ec:e2:8a:48:8e:69:2d:ec:77:22:6a:21:fd:45:52:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Validity Not Before: Apr 17 13:24:43 2026 GMT Not After : Apr 18 16:54:43 2026 GMT Subject: CN=E4D6A4DE63CDED3DD4BA2BAD88843E0386EDFF4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:df:c5:d4:93:0d:64:33:4b:83:0c:8f:ce:51: d3:30:f7:61:86:81:84:6c:2e:8c:17:1d:8c:a6:d1: 0b:af:67:36:c8:03:45:15:cf:cd:d5:e1:cf:58:46: e8:8e:0a:1c:db:00:90:44:aa:be:ae:60:d0:71:43: a8:5c:93:70:f5:e0:72:d3:e8:1f:77:fc:a3:44:7c: 86:59:8b:08:22:7c:a0:6a:40:c0:5c:0d:b3:99:39: 33:12:65:d8:22:92:db:d1:c3:46:5f:e0:b8:b3:75: e2:91:36:4f:90:f5:ca:11:e8:c8:73:57:e7:a9:ad: 17:56:7a:4c:12:ab:b9:6a:aa:5f:a5:0c:23:71:8b: 9d:94:7d:5f:93:b1:6d:7e:e4:42:24:71:1b:66:d2: 52:26:bb:d0:76:f0:c3:42:a5:7a:34:3b:b8:92:cc: 5d:2c:4d:7a:1c:09:82:23:55:c4:cb:d2:d7:f9:78: 7a:99:90:ff:c7:f9:f3:3b:bc:dd:77:86:f0:65:38: 6c:4d:13:33:e1:a7:c4:67:c4:92:04:06:e1:ad:15: 40:61:4b:1b:e2:a2:6f:ae:8e:68:84:f7:01:75:13: 38:ed:75:b6:a9:ae:f3:4f:a1:55:5b:1f:e3:c6:6e: d0:06:51:3f:99:a7:77:d5:8f:bf:8b:cb:cc:da:3e: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D6:A4:DE:63:CD:ED:3D:D4:BA:2B:AD:88:84:3E:03:86:ED:FF:4B X509v3 Authority Key Identifier: keyid:A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:cd:4d:a3:7e:18:e4:ad:9e:7e:7a:08:97:37:9c:33:61:34: fb:7c:73:08:f8:8b:6f:ad:03:9c:27:c2:94:45:8f:e7:5e:3f: 5b:ea:ca:44:6a:ed:2b:26:16:07:bd:c0:fa:c6:8f:13:bd:a3: 49:00:54:4f:ad:5c:f3:a9:87:4f:2f:eb:cb:3b:f7:e3:96:5c: 04:b2:ee:bd:9c:21:55:eb:71:c6:cd:e7:89:4c:39:66:7a:b2: df:26:17:82:27:3d:df:c9:43:76:70:3f:6f:ba:a6:a3:16:30: 1d:80:60:21:43:7e:9f:65:65:b5:73:fd:54:b7:53:eb:f6:e5: 01:d1:87:da:b7:00:e4:41:bd:f0:6c:51:10:68:dd:ba:71:6d: df:b6:df:6e:55:58:31:1e:46:bc:af:e5:35:4b:23:eb:b4:82: be:f5:32:00:10:a3:a1:81:75:60:54:bf:35:4b:21:72:ce:8d: 87:95:79:00:d0:6c:4c:33:3c:ea:4b:b0:a2:06:f4:3c:f9:48: 63:2b:83:0f:4f:47:f4:b0:57:fd:d8:42:58:80:36:47:71:55: 36:e2:fe:17:70:d0:7d:11:0c:b0:06:d0:9b:f6:9a:bd:3d:bb: 64:84:8c:52:0a:21:18:9f:11:32:60:46:28:95:1f:3e:af:f9: 32:0b:86:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI6zE3OziikiOaS3sdyJqIf1FUkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJE Mzg2Q0EwMDAeFw0yNjA0MTcxMzI0NDNaFw0yNjA0MTgxNjU0NDNaMDMxMTAvBgNV BAMTKEU0RDZBNERFNjNDREVEM0RENEJBMkJBRDg4ODQzRTAzODZFREZGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm38XUkw1kM0uDDI/OUdMw92GG gYRsLowXHYym0QuvZzbIA0UVz83V4c9YRuiOChzbAJBEqr6uYNBxQ6hck3D14HLT 6B93/KNEfIZZiwgifKBqQMBcDbOZOTMSZdgiktvRw0Zf4LizdeKRNk+Q9coR6Mhz V+eprRdWekwSq7lqql+lDCNxi52UfV+TsW1+5EIkcRtm0lImu9B28MNCpXo0O7iS zF0sTXocCYIjVcTL0tf5eHqZkP/H+fM7vN13hvBlOGxNEzPhp8RnxJIEBuGtFUBh Sxviom+ujmiE9wF1EzjtdbaprvNPoVVbH+PGbtAGUT+Zp3fVj7+Ly8zaPortAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5Nak3mPN7T3UuiutiIQ+A4bt/0swHwYDVR0j BBgwFoAUpXc8Gp1g7eCIJxmt76QLG9OGygAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTk1Mzc5NC8wL0E1NzczQzFBOUQ2MEVERTA4ODI3MTlBREVGQTQw QjFCRDM4NkNBMDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJEMzg2Q0EwMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU5NTM3OTQvMC9BNTc3M0MxQTlENjBF REUwODgyNzE5QURFRkE0MEIxQkQzODZDQTAwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAac1No34Y5K2e fnoIlzecM2E0+3xzCPiLb60DnCfClEWP514/W+rKRGrtKyYWB73A+saPE72jSQBU T61c86mHTy/ryzv345ZcBLLuvZwhVetxxs3niUw5Znqy3yYXgic938lDdnA/b7qm oxYwHYBgIUN+n2VltXP9VLdT6/blAdGH2rcA5EG98GxREGjdunFt37bfblVYMR5G vK/lNUsj67SCvvUyABCjoYF1YFS/NUshcs6Nh5V5ANBsTDM86kuwogb0PPlIYyuD D09H9LBX/dhCWIA2R3FVNuL+F3DQfREMsAbQm/aavT27ZISMUgohGJ8RMmBGKJUf Pq/5MguGSg== -----END CERTIFICATE-----Generated at Fri Apr 17 23:36:01 2026 by rpki-client