$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft File: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft (raw, json) Hash identifier: 3u8KMGor/k4RYo/7xsU2m39hJIXJpRppdS2XfR0vwLA= Subject key identifier: AF:39:F2:D4:0B:0D:FD:66:7D:66:50:85:83:1E:96:A7:3E:D4:27:C5 Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 Certificate issuer: /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Certificate serial: 14F4E3122649AFEE6BE89FB9A345EE01D4A679F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft Manifest number: 17 Signing time: Sat 13 Jun 2026 21:17:14 +0000 Manifest this update: Sat 13 Jun 2026 21:12:14 +0000 Manifest next update: Sun 14 Jun 2026 21:49:14 +0000 Files and hashes: 1: 3130332e382e33342e302f32342d3234203d3e20313430373236.roa (hash: JCGd1C1Wf1E9+GLgPxZv3lXwNa0mqdnQIY/nBaByWFc=) 2: 3130332e382e33342e302f32332d3233203d3e2034383337.roa (hash: JWCpOL58jnfjNneX9gL3amLDhbCleye0c+pPylUKcKI=) 3: 3130332e382e33332e302f32342d3234203d3e2034383337.roa (hash: YN2Z3o5Y7Gs1S7UHATzST6JGQAtD++MguSN4QeeZ6+Q=) 4: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl (hash: wto5tBvh2j2uUvy7nbTYIzN2PJmjPAg0IDxnQGjgT2A=) 5: 323430343a363530303a646362333a3a2f34382d3438203d3e2034383337.roa (hash: tHPg+UAtakOXb2bI4+bicsHKTUKZvXIfQ1aMjcpe3+E=) 6: 3130332e382e33352e302f32342d3234203d3e2034383337.roa (hash: GF8R9y/TBmc5cxAi05epTBCcdlrps0l6xAqDYhmKV9Q=) 7: 3130332e382e33322e302f32342d3234203d3e2034313334.roa (hash: wNOnwlciSCkgqRaqEPPKB6JorJz54eTYd07doS61EyM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f4:e3:12:26:49:af:ee:6b:e8:9f:b9:a3:45:ee:01:d4:a6:79:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Validity Not Before: Jun 13 21:12:14 2026 GMT Not After : Jun 14 21:49:14 2026 GMT Subject: CN=AF39F2D40B0DFD667D665085831E96A73ED427C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:ca:6e:f9:56:17:45:5b:d2:d9:18:27:7f: 47:25:43:1c:f7:af:50:da:94:bb:27:73:de:b9:27: 60:0c:42:1a:c3:23:b2:7f:27:c4:b9:95:26:28:17: 7c:52:8a:4a:5e:e9:b1:a2:2f:f7:5d:e9:d1:46:87: 15:d7:72:df:84:f2:5c:20:e2:54:5b:5f:03:0b:d0: 26:0f:e6:ec:89:9f:ab:ea:5a:97:12:02:cd:7b:92: 4a:9c:20:77:0f:d9:3f:86:36:97:bd:25:6f:3a:10: 2d:d4:c9:e1:81:5a:37:fe:77:98:cd:0e:1e:82:9e: 5d:14:8e:0e:af:95:19:ff:de:ed:c1:04:c2:f7:9f: 09:b8:3d:02:2a:56:0c:e7:bf:02:07:82:61:ea:7c: f1:e5:6a:e9:33:58:f6:7a:4d:2b:1f:4b:0c:03:00: a1:d1:26:3a:4f:42:9e:ba:7b:f0:a4:55:fb:eb:e6: a0:f6:94:a6:c9:76:23:37:c1:69:79:c8:e5:3a:ed: 82:8b:5f:df:d6:a9:a1:03:09:9c:48:5f:49:89:d3: ab:f3:b2:0a:2c:ee:05:dc:35:36:43:49:4d:50:cd: 09:40:7c:71:ad:06:32:1a:58:78:a9:76:4e:59:ef: 7a:31:cb:b3:0a:73:7d:ce:4d:13:31:49:84:66:ad: 3d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:39:F2:D4:0B:0D:FD:66:7D:66:50:85:83:1E:96:A7:3E:D4:27:C5 X509v3 Authority Key Identifier: keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5d:51:5e:3e:c8:ff:d8:6c:2e:7c:a2:fb:96:80:e5:04:23: 3e:1b:b6:dd:98:d6:19:1b:3b:05:40:9e:73:58:e9:03:eb:e0: 08:a4:77:ea:1d:a1:f2:63:22:6b:72:e4:57:89:e0:20:e4:e5: b1:83:57:f2:17:08:62:f3:41:38:16:39:16:80:54:e4:e3:c9: 24:ff:89:5d:f6:55:4a:51:5c:05:2c:a2:5a:1d:af:71:aa:ad: af:06:08:0a:e8:3e:8d:f2:53:32:f4:92:e5:64:0b:6b:87:8c: 12:6f:1f:5d:4e:9b:93:67:3e:38:15:e1:1d:5a:2d:88:c7:e0: 1e:f6:f4:69:90:fe:d6:c0:43:a2:49:73:10:b5:fb:1c:a7:ed: 56:41:1c:62:94:a5:c3:b9:fe:5f:79:34:6f:62:de:1b:41:da: 51:a9:a3:04:a1:a3:26:86:6e:f9:41:22:ac:15:5d:de:79:1c: ac:d8:25:bb:d7:6c:ed:73:d3:b5:aa:1e:3e:cc:fe:cd:d3:65: 86:f5:bf:20:8e:34:2c:49:18:7e:96:04:8b:60:57:a9:28:27: f2:68:c9:a5:dc:7e:6a:61:5b:3d:2d:63:d3:35:fa:4e:f3:c8: e4:c7:89:ea:dc:bc:df:0c:6b:06:35:25:fc:29:82:92:6f:22: 16:81:2a:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFPTjEiZJr+5r6J+5o0XuAdSmefgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEy QUQ4RDNEOTAeFw0yNjA2MTMyMTEyMTRaFw0yNjA2MTQyMTQ5MTRaMDMxMTAvBgNV BAMTKEFGMzlGMkQ0MEIwREZENjY3RDY2NTA4NTgzMUU5NkE3M0VENDI3QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4spu+VYXRVvS2Rgnf0clQxz3 r1DalLsnc965J2AMQhrDI7J/J8S5lSYoF3xSikpe6bGiL/dd6dFGhxXXct+E8lwg 4lRbXwML0CYP5uyJn6vqWpcSAs17kkqcIHcP2T+GNpe9JW86EC3UyeGBWjf+d5jN Dh6Cnl0Ujg6vlRn/3u3BBML3nwm4PQIqVgznvwIHgmHqfPHlaukzWPZ6TSsfSwwD AKHRJjpPQp66e/CkVfvr5qD2lKbJdiM3wWl5yOU67YKLX9/WqaEDCZxIX0mJ06vz sgos7gXcNTZDSU1QzQlAfHGtBjIaWHipdk5Z73oxy7MKc33OTRMxSYRmrT2NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrzny1AsN/WZ9ZlCFgx6Wpz7UJ8UwHwYDVR0j BBgwFoAUWoEBc6RyF+u2DJ/ZXIM7ASrY09kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjYyNDE3NzgzNzI0NDQzNS8wLzVBODEwMTczQTQ3MjE3RUJCNjBDOUZEOTVDODMz QjAxMkFEOEQzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEyQUQ4RDNEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2MjQxNzc4MzcyNDQ0MzUvMC81QTgxMDE3M0E0NzIx N0VCQjYwQzlGRDk1QzgzM0IwMTJBRDhEM0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjl1RXj7I/9hs Lnyi+5aA5QQjPhu23ZjWGRs7BUCec1jpA+vgCKR36h2h8mMia3LkV4ngIOTlsYNX 8hcIYvNBOBY5FoBU5OPJJP+JXfZVSlFcBSyiWh2vcaqtrwYICug+jfJTMvSS5WQL a4eMEm8fXU6bk2c+OBXhHVotiMfgHvb0aZD+1sBDoklzELX7HKftVkEcYpSlw7n+ X3k0b2LeG0HaUamjBKGjJoZu+UEirBVd3nkcrNglu9ds7XPTtaoePsz+zdNlhvW/ II40LEkYfpYEi2BXqSgn8mjJpdx+amFbPS1j0zX6TvPI5MeJ6ty83wxrBjUl/CmC km8iFoEqTg== -----END CERTIFICATE-----Generated at Sun Jun 14 01:29:05 2026 by rpki-client