$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft File: A5A7A22B773557BAF9107F52071E43CB56973E0C.mft (raw, json) Hash identifier: mUl+cjp2FYFTE1GEXZyo78whrh3rXlOF6zCwaTlb3Gc= Subject key identifier: 81:72:56:4F:35:D9:30:EF:F7:2E:00:FC:3E:0C:5F:FA:92:B3:96:8E Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C Certificate issuer: /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Certificate serial: 542D0FF803E1855DB6AB2C2624CF4EDBD15ACB3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft Manifest number: 9A Signing time: Tue 28 Jul 2026 22:12:51 +0000 Manifest this update: Tue 28 Jul 2026 22:07:51 +0000 Manifest next update: Thu 30 Jul 2026 01:38:51 +0000 Files and hashes: 1: 3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa (hash: sFd6ssXxC/BDyv1b99yz/NjXY9YA0f3bLOEKaZDzcTc=) 2: 3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa (hash: qBnUcpTKG6VeUEPGz1MimxCSD4Q6edLlreoj3tdS5ps=) 3: 3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (hash: 9YRxcxYb/rcS3Fre/vxl+OluswVsgxbVE+vIx1aWSuc=) 4: A5A7A22B773557BAF9107F52071E43CB56973E0C.crl (hash: BwqaWR6QMJ0MPIwmOL3vwP5kEtBSVsbrv/rBL4HEX+8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2d:0f:f8:03:e1:85:5d:b6:ab:2c:26:24:cf:4e:db:d1:5a:cb:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Validity Not Before: Jul 28 22:07:51 2026 GMT Not After : Jul 30 01:38:51 2026 GMT Subject: CN=8172564F35D930EFF72E00FC3E0C5FFA92B3968E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c0:8d:d2:35:c5:54:81:cb:5d:3f:5d:34:31: a7:31:e2:c4:d8:49:1e:cf:32:d6:96:24:37:01:ad: 28:1a:22:8e:2c:76:be:4f:76:6a:73:b2:38:36:7d: de:0d:e7:76:35:79:a3:c7:de:2f:cb:88:ca:25:ce: e7:a2:1a:46:01:c7:7a:4c:f5:c7:64:e7:c6:13:9a: 2a:ef:6f:d0:2e:d3:d7:7a:4d:19:c1:6d:df:96:0c: 23:70:ed:c9:49:a8:89:44:64:d3:2a:26:6f:03:6f: cc:50:78:6b:5f:7b:ca:18:4f:51:4d:de:2d:08:4c: 8e:0b:96:f0:00:ea:d3:47:b1:35:5e:64:9a:61:bd: 17:be:79:65:c0:1d:34:9d:a4:44:16:80:a4:66:72: 35:35:56:85:48:ef:e7:70:d8:e5:39:71:d5:5e:42: c3:91:01:1e:35:ea:cd:a7:05:61:39:0e:5c:9e:d9: 5a:7a:f9:22:ed:0f:d7:2b:77:f4:79:ff:5c:87:79: fb:3d:bf:fe:92:ae:b7:b7:c8:cf:6c:1b:4e:4c:6a: 0a:84:59:7a:29:ce:5d:db:6e:ab:91:f4:18:a7:44: 99:bf:30:70:46:9c:20:d1:5d:9c:2b:22:50:ce:14: 88:d0:e3:8c:f3:ec:2e:9f:51:71:18:89:4c:b3:f9: 52:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:72:56:4F:35:D9:30:EF:F7:2E:00:FC:3E:0C:5F:FA:92:B3:96:8E X509v3 Authority Key Identifier: keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ec:e9:73:a8:03:ce:29:8e:20:80:9c:0d:33:c0:ab:d7:73: b0:e6:1e:83:86:09:f6:a2:41:36:f0:7f:5a:dd:e8:9a:1d:00: c1:01:ab:1b:a2:7f:c8:44:83:4a:85:e8:7e:f6:2c:73:2d:d1: 66:3c:a1:64:39:2d:fe:4c:58:b9:2b:a5:65:19:ea:d9:b0:49: 0c:0f:8d:ee:f1:60:db:62:d9:87:42:10:7c:d2:ff:71:a7:62: c1:db:df:16:bf:8c:df:a1:98:16:6f:4d:4b:0a:17:9b:50:f0: 1c:6d:eb:0e:4c:23:d9:af:dd:a3:61:5f:de:a8:f7:b6:f3:21: ae:4c:87:01:6c:41:b6:21:7b:c2:d4:27:3d:fc:c5:c1:bb:97: 5f:76:ac:51:e0:52:0c:42:3c:2c:f2:bc:4d:6a:55:09:44:22: 02:25:f0:2b:20:d2:96:de:77:81:93:d2:e5:1d:29:fc:22:f7: 9c:7f:f7:3b:79:fa:9e:2c:a5:5a:68:b2:9f:3b:c6:81:f1:2a: dd:50:5f:92:6a:78:20:01:d4:13:f1:60:2c:f8:51:76:e0:2a: f4:3f:88:6c:9c:7c:82:88:ef:ac:99:5c:ac:ee:72:8f:e4:9c: 18:3d:f5:aa:d0:2e:08:97:dc:bc:4c:ab:9a:5e:b1:ad:db:da: 46:4a:cf:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVC0P+APhhV22qywmJM9O29Fayz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1 Njk3M0UwQzAeFw0yNjA3MjgyMjA3NTFaFw0yNjA3MzAwMTM4NTFaMDMxMTAvBgNV BAMTKDgxNzI1NjRGMzVEOTMwRUZGNzJFMDBGQzNFMEM1RkZBOTJCMzk2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCewI3SNcVUgctdP100Macx4sTY SR7PMtaWJDcBrSgaIo4sdr5Pdmpzsjg2fd4N53Y1eaPH3i/LiMolzueiGkYBx3pM 9cdk58YTmirvb9Au09d6TRnBbd+WDCNw7clJqIlEZNMqJm8Db8xQeGtfe8oYT1FN 3i0ITI4LlvAA6tNHsTVeZJphvRe+eWXAHTSdpEQWgKRmcjU1VoVI7+dw2OU5cdVe QsORAR416s2nBWE5Dlye2Vp6+SLtD9crd/R5/1yHefs9v/6Srre3yM9sG05MagqE WXopzl3bbquR9BinRJm/MHBGnCDRXZwrIlDOFIjQ44zz7C6fUXEYiUyz+VKhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgXJWTzXZMO/3LgD8Pgxf+pKzlo4wHwYDVR0j BBgwFoAUpaeiK3c1V7r5EH9SBx5Dy1aXPgwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg1NTMzMzQ4MzkwNTAyNi8wL0E1QTdBMjJCNzczNTU3QkFGOTEwN0Y1MjA3MUU0 M0NCNTY5NzNFMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1Njk3M0UwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NTUzMzM0ODM5MDUwMjYvMC9BNUE3QTIyQjc3MzU1 N0JBRjkxMDdGNTIwNzFFNDNDQjU2OTczRTBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOzpc6gDzimO IICcDTPAq9dzsOYeg4YJ9qJBNvB/Wt3omh0AwQGrG6J/yESDSoXofvYscy3RZjyh ZDkt/kxYuSulZRnq2bBJDA+N7vFg22LZh0IQfNL/cadiwdvfFr+M36GYFm9NSwoX m1DwHG3rDkwj2a/do2Ff3qj3tvMhrkyHAWxBtiF7wtQnPfzFwbuXX3asUeBSDEI8 LPK8TWpVCUQiAiXwKyDSlt53gZPS5R0p/CL3nH/3O3n6niylWmiynzvGgfEq3VBf kmp4IAHUE/FgLPhRduAq9D+IbJx8gojvrJlcrO5yj+ScGD31qtAuCJfcvEyrml6x rdvaRkrPzA== -----END CERTIFICATE-----Generated at Wed Jul 29 08:38:40 2026 by rpki-client