$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft File: A5A7A22B773557BAF9107F52071E43CB56973E0C.mft (raw, json) Hash identifier: KGvgW3Ax0We/ZYdbj1Cg/pktZL98SmfiVMTNc1RENOg= Subject key identifier: 03:20:A7:25:0E:EE:92:EB:A7:20:33:86:49:C2:E4:41:A2:31:DA:DA Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C Certificate issuer: /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Certificate serial: 333B0FC043FC6BEDED85ED8BD69389E86FB9DE5D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft Manifest number: 11 Signing time: Fri 17 Apr 2026 04:59:40 +0000 Manifest this update: Fri 17 Apr 2026 04:54:40 +0000 Manifest next update: Sat 18 Apr 2026 05:40:40 +0000 Files and hashes: 1: 3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa (hash: qBnUcpTKG6VeUEPGz1MimxCSD4Q6edLlreoj3tdS5ps=) 2: A5A7A22B773557BAF9107F52071E43CB56973E0C.crl (hash: 4Ovc5KpEL+gLGb2dapgd3g8WdMWbIpnDwFEzT5fL+P4=) 3: 3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (hash: 9YRxcxYb/rcS3Fre/vxl+OluswVsgxbVE+vIx1aWSuc=) 4: 3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa (hash: sFd6ssXxC/BDyv1b99yz/NjXY9YA0f3bLOEKaZDzcTc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:3b:0f:c0:43:fc:6b:ed:ed:85:ed:8b:d6:93:89:e8:6f:b9:de:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Validity Not Before: Apr 17 04:54:40 2026 GMT Not After : Apr 18 05:40:40 2026 GMT Subject: CN=0320A7250EEE92EBA720338649C2E441A231DADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a3:7f:15:8a:b9:40:d4:46:b6:d2:e7:27:60: d3:ee:a4:ae:fa:34:9c:b6:10:62:c6:4c:78:d2:56: ec:4d:15:90:ec:23:2f:71:50:1f:ed:29:10:db:92: 4a:40:12:40:6b:53:27:b3:34:83:12:dd:08:f5:a5: 4b:ee:b2:01:35:f2:10:28:59:46:5f:a9:14:e5:73: 37:76:6e:0c:b7:e0:c6:4b:cf:fc:f6:e9:f4:9d:37: ae:d5:b3:ae:7a:8f:32:6a:62:1e:64:63:69:8b:8d: dc:bc:d3:0b:d9:35:e0:aa:3d:30:cb:cd:cb:af:3c: 07:e3:b7:af:23:a6:0e:42:1e:c3:44:de:72:d1:34: 55:4a:56:5c:89:2b:04:ed:e1:7d:39:46:5f:58:68: 1e:b7:98:42:62:66:3b:06:2c:a8:96:1f:03:a5:ed: e3:c2:29:2b:af:05:f0:2d:d9:de:e4:10:ab:27:db: d3:7b:f4:46:84:27:12:71:a6:c5:70:d6:d6:25:39: bf:ed:fa:1a:2a:31:94:07:88:f4:f8:62:2e:04:fa: ba:5e:bc:89:28:10:90:35:2a:6f:78:42:cc:dc:2a: 1a:0a:0a:95:e9:77:ab:66:88:a1:61:3c:cd:6c:ce: 6e:a8:ca:12:6d:20:4f:85:6a:b6:4f:24:62:dc:bf: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:20:A7:25:0E:EE:92:EB:A7:20:33:86:49:C2:E4:41:A2:31:DA:DA X509v3 Authority Key Identifier: keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:fe:3d:3d:9c:af:85:3b:18:05:59:6f:a2:a0:75:7a:90:51: 0c:6a:1a:3b:4e:16:84:ea:99:a2:e7:2f:97:72:54:81:7f:b0: dc:8f:95:fc:26:9f:b9:a4:53:a2:5f:e8:27:10:23:33:7c:9b: ed:81:9f:54:fc:62:d9:2d:9a:45:59:d6:50:a1:9d:e4:c2:47: 4c:ea:5c:cd:ce:b1:47:61:9b:53:89:10:43:ff:40:b4:c6:eb: 7a:d4:19:c2:de:57:1c:30:89:7f:4a:d4:7a:29:14:58:7b:99: a2:03:5a:75:72:ac:35:f2:0e:f9:07:81:0f:fb:62:42:c9:31: d6:4c:44:f4:f2:2c:86:f7:8d:6f:89:c9:5a:c3:f8:81:e7:bd: 2c:8a:c3:17:e1:59:f4:4c:af:35:d8:9a:e2:99:2c:04:91:0f: a8:f7:fe:71:7d:84:33:1f:19:73:82:f6:7e:37:df:98:bd:f4: 7a:a4:86:94:23:e8:37:f7:13:d5:1f:75:43:de:b5:a2:90:d2: b7:06:7a:16:f6:b6:96:0f:8c:c4:67:77:45:7f:10:a3:c8:7a: f1:ed:19:2e:55:ec:07:d4:ce:c1:4b:9a:fe:73:b2:44:20:ff: 1e:00:c0:c8:0d:30:91:54:00:3e:e1:40:db:d3:53:97:81:40: 7e:97:77:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMzsPwEP8a+3the2L1pOJ6G+53l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1 Njk3M0UwQzAeFw0yNjA0MTcwNDU0NDBaFw0yNjA0MTgwNTQwNDBaMDMxMTAvBgNV BAMTKDAzMjBBNzI1MEVFRTkyRUJBNzIwMzM4NjQ5QzJFNDQxQTIzMURBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwo38VirlA1Ea20ucnYNPupK76 NJy2EGLGTHjSVuxNFZDsIy9xUB/tKRDbkkpAEkBrUyezNIMS3Qj1pUvusgE18hAo WUZfqRTlczd2bgy34MZLz/z26fSdN67Vs656jzJqYh5kY2mLjdy80wvZNeCqPTDL zcuvPAfjt68jpg5CHsNE3nLRNFVKVlyJKwTt4X05Rl9YaB63mEJiZjsGLKiWHwOl 7ePCKSuvBfAt2d7kEKsn29N79EaEJxJxpsVw1tYlOb/t+hoqMZQHiPT4Yi4E+rpe vIkoEJA1Km94QszcKhoKCpXpd6tmiKFhPM1szm6oyhJtIE+FarZPJGLcv5jnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAyCnJQ7ukuunIDOGScLkQaIx2towHwYDVR0j BBgwFoAUpaeiK3c1V7r5EH9SBx5Dy1aXPgwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg1NTMzMzQ4MzkwNTAyNi8wL0E1QTdBMjJCNzczNTU3QkFGOTEwN0Y1MjA3MUU0 M0NCNTY5NzNFMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1Njk3M0UwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NTUzMzM0ODM5MDUwMjYvMC9BNUE3QTIyQjc3MzU1 N0JBRjkxMDdGNTIwNzFFNDNDQjU2OTczRTBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcP49PZyvhTsY BVlvoqB1epBRDGoaO04WhOqZoucvl3JUgX+w3I+V/CafuaRTol/oJxAjM3yb7YGf VPxi2S2aRVnWUKGd5MJHTOpczc6xR2GbU4kQQ/9AtMbretQZwt5XHDCJf0rUeikU WHuZogNadXKsNfIO+QeBD/tiQskx1kxE9PIshveNb4nJWsP4gee9LIrDF+FZ9Eyv Ndia4pksBJEPqPf+cX2EMx8Zc4L2fjffmL30eqSGlCPoN/cT1R91Q961opDStwZ6 Fva2lg+MxGd3RX8Qo8h68e0ZLlXsB9TOwUua/nOyRCD/HgDAyA0wkVQAPuFA29NT l4FAfpd38Q== -----END CERTIFICATE-----Generated at Fri Apr 17 21:13:24 2026 by rpki-client