$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft File: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft (raw, json) Hash identifier: Bfn+P98h79n6Ptcmvj7ve+amBj6Qugo6cI31DMAm0rE= Subject key identifier: 22:FB:19:C7:67:A1:09:99:16:DF:04:6E:B6:65:61:DE:89:F9:94:21 Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 Certificate issuer: /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Certificate serial: 659F6E3DB9729F706D06488CAEA0CF2FFD74A215 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft Manifest number: 53 Signing time: Wed 29 Jul 2026 03:23:17 +0000 Manifest this update: Wed 29 Jul 2026 03:18:17 +0000 Manifest next update: Thu 30 Jul 2026 03:45:17 +0000 Files and hashes: 1: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl (hash: tXOs/lvblu65TcJLj9DZksSLXWxjbm7JfbURCRG3iNg=) 2: 3130332e382e33342e302f32332d3233203d3e2034383337.roa (hash: JWCpOL58jnfjNneX9gL3amLDhbCleye0c+pPylUKcKI=) 3: 3130332e382e33342e302f32342d3234203d3e20313430373236.roa (hash: JCGd1C1Wf1E9+GLgPxZv3lXwNa0mqdnQIY/nBaByWFc=) 4: 3130332e382e33352e302f32342d3234203d3e2034383337.roa (hash: GF8R9y/TBmc5cxAi05epTBCcdlrps0l6xAqDYhmKV9Q=) 5: 3130332e382e33332e302f32342d3234203d3e2034383337.roa (hash: YN2Z3o5Y7Gs1S7UHATzST6JGQAtD++MguSN4QeeZ6+Q=) 6: 323430343a363530303a646362333a3a2f34382d3438203d3e2034383337.roa (hash: tHPg+UAtakOXb2bI4+bicsHKTUKZvXIfQ1aMjcpe3+E=) 7: 3130332e382e33322e302f32342d3234203d3e2034313334.roa (hash: wNOnwlciSCkgqRaqEPPKB6JorJz54eTYd07doS61EyM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9f:6e:3d:b9:72:9f:70:6d:06:48:8c:ae:a0:cf:2f:fd:74:a2:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Validity Not Before: Jul 29 03:18:17 2026 GMT Not After : Jul 30 03:45:17 2026 GMT Subject: CN=22FB19C767A1099916DF046EB66561DE89F99421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:59:0e:55:c6:3e:59:96:56:b2:c6:27:57: f1:d6:20:81:28:88:da:f4:ad:c2:a8:87:f6:dc:42: db:2e:ec:d6:23:b2:e4:e9:c3:dc:b7:fc:ee:45:af: b5:f9:38:a7:a0:70:8f:45:c7:57:7b:a8:9e:72:a4: c3:04:ad:d0:22:cb:d8:fe:1f:84:1e:e6:c5:7e:9b: 9b:79:84:3d:0d:49:c1:8c:e5:f1:30:95:05:73:95: 75:73:1b:c1:9f:8a:48:f9:97:17:88:83:14:53:76: f7:12:ed:55:98:b9:86:82:d3:6a:73:7b:ff:51:4a: cd:22:a6:b2:ed:45:4b:ad:ef:8f:e8:89:13:2c:82: 6a:f4:3c:e1:14:4f:c0:52:dc:ce:46:99:cb:21:75: c4:4a:ed:87:a9:21:2f:09:e5:b3:a6:25:f7:8a:ea: 34:43:d6:44:b3:7e:4b:2e:76:fc:1e:9b:97:ff:17: 6b:a5:68:3a:ea:f7:7c:d9:e5:81:64:4f:58:21:09: 24:63:98:a7:75:42:65:bc:b5:58:58:2a:05:81:c9: b9:e1:92:eb:01:22:91:8b:b2:56:cb:da:0e:da:7f: b8:36:23:13:bc:e1:0a:52:87:e9:21:97:bf:12:98: 98:87:27:99:65:67:43:ee:08:1a:1e:01:89:69:25: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FB:19:C7:67:A1:09:99:16:DF:04:6E:B6:65:61:DE:89:F9:94:21 X509v3 Authority Key Identifier: keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:56:c8:ba:e8:a9:1b:69:f6:6f:2a:2c:85:b4:57:c5:3f:19: 52:60:db:2e:7a:44:b3:fd:f7:e1:2e:16:e5:30:2d:2e:f7:a8: a9:7c:ca:27:e0:65:e5:96:8e:8c:0d:56:9e:19:ba:91:2d:8f: fc:8c:62:0b:a1:54:52:c8:8f:64:83:9d:58:43:b6:49:d1:6e: 15:2c:a7:4a:6f:d0:bb:71:4d:f9:33:67:fc:dd:51:ae:a4:98: b9:81:6d:6d:58:d6:3c:58:ee:21:f2:6b:74:38:66:ec:ef:06: 5c:12:f0:ee:9c:7f:1d:22:e4:0e:dd:cb:26:68:9b:78:d1:47: c2:5c:7a:41:57:ca:b7:8a:b4:18:95:af:e7:8a:ae:0c:f9:82: de:a0:87:07:b0:e0:9d:2b:98:1a:5d:45:85:d0:cd:82:a1:11: fd:78:45:88:4e:fb:ef:8a:ca:25:1a:ae:3e:17:00:d0:ed:7e: 57:cb:ee:4a:51:d6:bd:7a:b6:ac:64:f4:20:f6:8f:f0:58:60: d0:c1:7d:67:95:95:b2:40:2b:39:27:15:22:d0:e8:23:24:d0: 85:eb:07:20:2a:3f:67:93:60:e6:e7:98:85:05:b8:04:9d:11: 51:99:4f:e6:ae:05:74:0e:a1:e1:a8:9b:3d:3f:75:c7:2d:11: 94:74:27:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZZ9uPblyn3BtBkiMrqDPL/10ohUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEy QUQ4RDNEOTAeFw0yNjA3MjkwMzE4MTdaFw0yNjA3MzAwMzQ1MTdaMDMxMTAvBgNV BAMTKDIyRkIxOUM3NjdBMTA5OTkxNkRGMDQ2RUI2NjU2MURFODlGOTk0MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5k1kOVcY+WZZWssYnV/HWIIEo iNr0rcKoh/bcQtsu7NYjsuTpw9y3/O5Fr7X5OKegcI9Fx1d7qJ5ypMMErdAiy9j+ H4Qe5sV+m5t5hD0NScGM5fEwlQVzlXVzG8Gfikj5lxeIgxRTdvcS7VWYuYaC02pz e/9RSs0iprLtRUut74/oiRMsgmr0POEUT8BS3M5GmcshdcRK7YepIS8J5bOmJfeK 6jRD1kSzfksudvwem5f/F2ulaDrq93zZ5YFkT1ghCSRjmKd1QmW8tVhYKgWBybnh kusBIpGLslbL2g7af7g2IxO84QpSh+khl78SmJiHJ5llZ0PuCBoeAYlpJTm7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIvsZx2ehCZkW3wRutmVh3on5lCEwHwYDVR0j BBgwFoAUWoEBc6RyF+u2DJ/ZXIM7ASrY09kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjYyNDE3NzgzNzI0NDQzNS8wLzVBODEwMTczQTQ3MjE3RUJCNjBDOUZEOTVDODMz QjAxMkFEOEQzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEyQUQ4RDNEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2MjQxNzc4MzcyNDQ0MzUvMC81QTgxMDE3M0E0NzIx N0VCQjYwQzlGRDk1QzgzM0IwMTJBRDhEM0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx1bIuuipG2n2 byoshbRXxT8ZUmDbLnpEs/334S4W5TAtLveoqXzKJ+Bl5ZaOjA1Wnhm6kS2P/Ixi C6FUUsiPZIOdWEO2SdFuFSynSm/Qu3FN+TNn/N1RrqSYuYFtbVjWPFjuIfJrdDhm 7O8GXBLw7px/HSLkDt3LJmibeNFHwlx6QVfKt4q0GJWv54quDPmC3qCHB7DgnSuY Gl1FhdDNgqER/XhFiE7774rKJRquPhcA0O1+V8vuSlHWvXq2rGT0IPaP8Fhg0MF9 Z5WVskArOScVItDoIyTQhesHICo/Z5Ng5ueYhQW4BJ0RUZlP5q4FdA6h4aibPT91 xy0RlHQnuA== -----END CERTIFICATE-----Generated at Wed Jul 29 06:33:20 2026 by rpki-client