$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft File: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft (raw, json) Hash identifier: G7jkq10EntHy947M2qnr4wZFzIDqUQKQraPau1Jl09k= Subject key identifier: B7:3F:6C:B8:B2:89:81:2D:9C:86:F6:E0:3F:B0:C6:8A:00:1C:2D:05 Authority key identifier: 5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C Certificate issuer: /CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Certificate serial: 1B18E8931DB8D0A54DE850B22B08354B12FDF32E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft Manifest number: 0E Signing time: Thu 16 Apr 2026 18:24:32 +0000 Manifest this update: Thu 16 Apr 2026 18:19:32 +0000 Manifest next update: Fri 17 Apr 2026 19:08:32 +0000 Files and hashes: 1: 5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl (hash: 1EGlEPaTY5a7TSzYNuS+/820kA4CapKky6jaO6ISULQ=) 2: 323430613a633030303a3a2f32302d3230203d3e20313337373236.roa (hash: P/uGAO3eiSum4zNic0X3psUc8CVrx9YxKsqMCgddi/U=) 3: 323430613a633063303a3a2f33322d3332203d3e20313337373236.roa (hash: 1at51nd0IGgOA4YH54G2tz7k8cmIIn93vu2nRO3kz4M=) 4: 3130332e3133302e3133322e302f32322d3232203d3e2030.roa (hash: FK6td7V83xHJimYsonXy6iGnkL28lgGxO82Pj8R5j/M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 17:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:18:e8:93:1d:b8:d0:a5:4d:e8:50:b2:2b:08:35:4b:12:fd:f3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C Validity Not Before: Apr 16 18:19:32 2026 GMT Not After : Apr 17 19:08:32 2026 GMT Subject: CN=B73F6CB8B289812D9C86F6E03FB0C68A001C2D05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e7:b9:9a:b3:7e:b0:c8:80:6e:50:25:2e:ff: 31:5b:23:5c:49:3d:f0:a2:7e:8e:c5:33:27:cd:36: b1:6d:50:f9:ae:cc:d2:7a:16:37:43:e7:bd:b3:2b: 83:30:a5:e6:1c:fe:00:16:53:0b:f1:f7:94:ba:36: be:4a:91:86:d0:f1:c4:6c:a4:9a:5f:11:81:21:d1: 7a:ff:fa:9a:d5:7a:1c:94:0f:96:ab:3b:d3:e9:28: 72:ae:49:40:44:e1:dd:48:72:e6:c2:10:83:a3:a3: 6d:c7:a9:7a:88:de:d2:aa:f9:64:aa:7d:1c:ca:6f: 88:43:6e:7f:9e:3d:b3:11:18:6c:a7:b4:5c:b2:c8: 22:df:03:d3:94:c5:c1:a1:d2:eb:90:06:99:01:c5: d9:66:52:ab:5e:d7:bc:4b:36:37:ed:10:6d:0f:f7: 6c:84:c8:64:3f:0e:19:a5:18:f3:e6:d4:60:b2:14: 22:ef:8a:56:fe:65:94:57:a5:4b:6f:c6:dd:b4:1f: 08:b8:e5:80:93:d8:4d:f4:49:74:70:f9:d8:e7:cf: dc:a5:84:b2:d5:52:b3:54:19:5d:27:99:7d:67:09: 72:f6:34:46:e9:37:c0:a6:f1:8c:4a:e1:8d:63:1a: b7:ba:36:7c:d0:a8:5d:cf:7e:9e:1b:c2:ef:ce:24: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3F:6C:B8:B2:89:81:2D:9C:86:F6:E0:3F:B0:C6:8A:00:1C:2D:05 X509v3 Authority Key Identifier: keyid:5B:AF:D5:2D:9F:B4:A3:7C:7A:13:82:A8:EF:CC:19:AC:1A:C8:F4:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094553714812780546/0/5BAFD52D9FB4A37C7A1382A8EFCC19AC1AC8F48C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5f:96:f9:c2:57:7c:f2:ff:17:04:de:c6:de:a2:1e:cd:0f: 8d:3b:4d:e4:9b:b9:48:22:bf:6e:3a:9e:f3:b0:20:21:4d:c7: 20:1c:9c:4c:72:a5:24:35:eb:e4:5b:77:ea:79:7e:17:12:f6: 7d:5c:c2:a4:91:f9:3b:15:ba:1f:74:2a:c8:d1:80:5f:7f:dc: ff:aa:f4:2d:4e:e8:98:d6:c2:1e:cb:ad:a6:8c:b4:b9:d9:aa: b3:fe:11:5a:b2:71:1d:14:b4:d8:76:9e:26:76:6a:58:61:9c: 11:10:54:e3:7b:3f:92:e7:48:f5:dc:fe:18:d2:28:33:e8:b6: 26:e7:17:17:57:7c:e4:63:22:12:91:5e:78:37:22:a5:a8:69: f1:a6:54:7a:d1:72:5c:d6:d7:ae:3d:a3:a0:53:c5:73:ef:ba: 63:8a:d5:05:48:0a:95:f9:e2:c8:bf:2d:18:35:90:b2:77:bb: 77:c7:70:ba:7d:cd:69:a5:37:73:ff:d3:85:90:e3:bb:12:ec: 43:45:f0:da:93:26:9d:fa:46:29:57:10:d8:e4:8d:26:ef:15: 44:b8:50:84:4b:17:a9:3f:25:0f:f8:a8:ee:f7:aa:4b:9e:a1: 35:2a:a1:5a:74:d3:e8:37:8f:25:71:2f:c9:c1:9a:90:e9:2f: 07:4d:ae:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGxjokx240KVN6FCyKwg1SxL98y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMx QUM4RjQ4QzAeFw0yNjA0MTYxODE5MzJaFw0yNjA0MTcxOTA4MzJaMDMxMTAvBgNV BAMTKEI3M0Y2Q0I4QjI4OTgxMkQ5Qzg2RjZFMDNGQjBDNjhBMDAxQzJEMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY57mas36wyIBuUCUu/zFbI1xJ PfCifo7FMyfNNrFtUPmuzNJ6FjdD572zK4MwpeYc/gAWUwvx95S6Nr5KkYbQ8cRs pJpfEYEh0Xr/+prVehyUD5arO9PpKHKuSUBE4d1IcubCEIOjo23HqXqI3tKq+WSq fRzKb4hDbn+ePbMRGGyntFyyyCLfA9OUxcGh0uuQBpkBxdlmUqte17xLNjftEG0P 92yEyGQ/DhmlGPPm1GCyFCLvilb+ZZRXpUtvxt20Hwi45YCT2E30SXRw+djnz9yl hLLVUrNUGV0nmX1nCXL2NEbpN8Cm8YxK4Y1jGre6NnzQqF3Pfp4bwu/OJMhFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtz9suLKJgS2chvbgP7DGigAcLQUwHwYDVR0j BBgwFoAUW6/VLZ+0o3x6E4Ko78wZrBrI9IwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MzcxNDgxMjc4MDU0Ni8wLzVCQUZENTJEOUZCNEEzN0M3QTEzODJBOEVGQ0Mx OUFDMUFDOEY0OEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUJBRkQ1MkQ5RkI0QTM3QzdBMTM4MkE4RUZDQzE5QUMxQUM4RjQ4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTM3MTQ4MTI3ODA1NDYvMC81QkFGRDUyRDlGQjRB MzdDN0ExMzgyQThFRkNDMTlBQzFBQzhGNDhDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1+W+cJXfPL/ FwText6iHs0PjTtN5Ju5SCK/bjqe87AgIU3HIBycTHKlJDXr5Ft36nl+FxL2fVzC pJH5OxW6H3QqyNGAX3/c/6r0LU7omNbCHsutpoy0udmqs/4RWrJxHRS02HaeJnZq WGGcERBU43s/kudI9dz+GNIoM+i2JucXF1d85GMiEpFeeDcipahp8aZUetFyXNbX rj2joFPFc++6Y4rVBUgKlfniyL8tGDWQsne7d8dwun3NaaU3c//ThZDjuxLsQ0Xw 2pMmnfpGKVcQ2OSNJu8VRLhQhEsXqT8lD/io7veqS56hNSqhWnTT6DePJXEvycGa kOkvB02u/w== -----END CERTIFICATE-----Generated at Thu Apr 16 23:52:09 2026 by rpki-client