$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft File: 5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft (raw, json) Hash identifier: mlVppIQrvdN3n3CQwG8bbHZ7un2/C1wQch0TmINT4EA= Subject key identifier: 97:69:C4:16:0B:63:75:0D:49:60:51:91:25:79:45:31:7B:69:6D:84 Authority key identifier: 5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4 Certificate issuer: /CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4 Certificate serial: 47AED62254643D25786D15A80CF658BE3FE1F8CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft Manifest number: 54 Signing time: Wed 29 Jul 2026 12:19:20 +0000 Manifest this update: Wed 29 Jul 2026 12:14:20 +0000 Manifest next update: Thu 30 Jul 2026 14:37:20 +0000 Files and hashes: 1: 323430363a316534303a663031323a3a2f34372d3437203d3e2034383337.roa (hash: ocFBS+51pfXKI0lNf1ZYbOle2BhHxF8/x93CRD8hQsQ=) 2: 5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl (hash: VYZLXYViIt1leZ7mp5NKfItE7XNU7nySvlMTQcNEHBA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ae:d6:22:54:64:3d:25:78:6d:15:a8:0c:f6:58:be:3f:e1:f8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4 Validity Not Before: Jul 29 12:14:20 2026 GMT Not After : Jul 30 14:37:20 2026 GMT Subject: CN=9769C4160B63750D49605191257945317B696D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b9:e3:ba:e2:77:c7:7f:48:05:1f:dc:e5:9e: 43:4b:52:e8:bc:ac:b3:ad:34:10:c6:00:5f:a8:d7: f3:c3:79:b8:e6:86:4b:8c:dc:39:4c:e6:03:2b:c5: bc:33:37:ac:2b:d8:6b:12:c2:58:c9:d3:c7:41:8c: 9e:bf:bd:3b:de:9c:cb:7c:ab:7b:84:3c:b5:78:6f: 69:ec:69:41:02:3e:12:77:42:af:aa:89:06:09:49: db:db:70:1f:8d:25:2a:59:4b:09:70:8b:ff:8e:c4: bc:b4:95:3b:f9:84:29:5e:4f:cb:1d:dc:b8:af:28: 7e:b3:b7:2b:20:b7:bc:57:83:52:f0:f5:d1:83:f1: 87:e4:e1:ef:f3:2a:b3:23:32:e6:3d:97:5e:82:46: d0:e8:2c:00:ae:1e:d2:f1:46:4e:46:c7:27:55:2a: 6d:23:70:55:8f:54:e8:ef:3e:23:80:be:c0:3f:50: 58:66:23:8a:6b:d9:38:20:4b:5e:89:e1:69:b7:e2: 4b:43:14:cf:ac:68:8b:af:f0:fd:81:a2:ea:79:43: 31:00:ed:8c:0c:76:84:c4:79:55:61:95:83:74:a6: 5e:a1:1e:cd:cf:10:21:3d:03:a3:97:a7:e9:63:b7: c2:9c:c1:60:f8:79:27:d4:e1:36:16:42:11:fa:0a: 37:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:69:C4:16:0B:63:75:0D:49:60:51:91:25:79:45:31:7B:69:6D:84 X509v3 Authority Key Identifier: keyid:5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:25:51:fa:3b:b0:f2:2d:ab:54:00:b1:4a:ea:73:47:2d:74: 9e:55:e6:d0:5d:d5:ab:e3:df:6a:3d:60:c9:72:42:49:67:3e: de:58:3e:c5:55:00:43:fc:89:6d:87:30:a2:72:df:ff:eb:f7: 7f:81:e6:8c:c4:b8:b6:34:db:54:8f:dd:be:dd:96:7f:89:9a: 75:6a:eb:6d:eb:5d:19:01:5e:83:09:fe:98:8f:f1:b8:42:73: 1d:53:9c:0c:14:1c:78:ae:54:31:da:d3:23:00:cd:45:31:17: 00:cb:99:17:76:ac:a1:86:53:a6:4e:d4:7d:b7:44:85:0f:c8: 71:d3:3b:21:62:fc:57:8f:65:f3:e5:a4:ed:3f:5e:f4:a1:12: 4a:6a:fa:b3:e2:56:b1:55:f7:8d:72:5d:13:6a:de:57:97:c5: d6:fd:26:83:96:14:d2:c8:68:0a:5a:01:24:61:d0:3f:44:90: 1c:ad:0b:2a:ee:92:d5:ec:8f:41:99:ff:8a:3f:f8:ad:c3:d8: 57:f0:c8:86:98:3c:ae:73:a6:5e:ad:09:21:23:e4:1a:e8:18: 46:7a:0f:ef:77:a9:be:f6:e8:b3:5f:f2:1a:8d:90:10:13:bd: 5f:c2:2c:ca:ff:1f:7a:c2:7e:16:34:d0:51:86:7b:03:97:bb: 6e:36:37:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR67WIlRkPSV4bRWoDPZYvj/h+MowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExM0IwREU5QzhDMTY1RTFERjc0QjM3RUQ1RjA4QTAw REM3MDVGNDAeFw0yNjA3MjkxMjE0MjBaFw0yNjA3MzAxNDM3MjBaMDMxMTAvBgNV BAMTKDk3NjlDNDE2MEI2Mzc1MEQ0OTYwNTE5MTI1Nzk0NTMxN0I2OTZEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpueO64nfHf0gFH9zlnkNLUui8 rLOtNBDGAF+o1/PDebjmhkuM3DlM5gMrxbwzN6wr2GsSwljJ08dBjJ6/vTvenMt8 q3uEPLV4b2nsaUECPhJ3Qq+qiQYJSdvbcB+NJSpZSwlwi/+OxLy0lTv5hCleT8sd 3LivKH6ztysgt7xXg1Lw9dGD8Yfk4e/zKrMjMuY9l16CRtDoLACuHtLxRk5GxydV Km0jcFWPVOjvPiOAvsA/UFhmI4pr2TggS16J4Wm34ktDFM+saIuv8P2Boup5QzEA 7YwMdoTEeVVhlYN0pl6hHs3PECE9A6OXp+ljt8KcwWD4eSfU4TYWQhH6CjeLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl2nEFgtjdQ1JYFGRJXlFMXtpbYQwHwYDVR0j BBgwFoAUWhOw3pyMFl4d90s37V8IoA3HBfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjMwMDEzMzQ3MjUzNDU0OS8wLzVBMTNCMERFOUM4QzE2NUUxREY3NEIzN0VENUYw OEEwMERDNzA1RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUExM0IwREU5QzhDMTY1RTFERjc0QjM3RUQ1RjA4QTAwREM3MDVGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIzMDAxMzM0NzI1MzQ1NDkvMC81QTEzQjBERTlDOEMx NjVFMURGNzRCMzdFRDVGMDhBMDBEQzcwNUY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtCVR+juw8i2r VACxSupzRy10nlXm0F3Vq+Pfaj1gyXJCSWc+3lg+xVUAQ/yJbYcwonLf/+v3f4Hm jMS4tjTbVI/dvt2Wf4madWrrbetdGQFegwn+mI/xuEJzHVOcDBQceK5UMdrTIwDN RTEXAMuZF3asoYZTpk7UfbdEhQ/IcdM7IWL8V49l8+Wk7T9e9KESSmr6s+JWsVX3 jXJdE2reV5fF1v0mg5YU0shoCloBJGHQP0SQHK0LKu6S1eyPQZn/ij/4rcPYV/DI hpg8rnOmXq0JISPkGugYRnoP73epvvbos1/yGo2QEBO9X8Isyv8fesJ+FjTQUYZ7 A5e7bjY3QQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:08 2026 by rpki-client