$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft File: 5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft (raw, json) Hash identifier: 7dZ0qaGX0tAembzB826QzBPgYG5kJ9rvc1hXDeY33eo= Subject key identifier: CE:7A:BA:AB:B2:A8:C0:DE:7B:4C:D4:7F:8E:F3:33:9A:71:A9:19:6A Authority key identifier: 5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85 Certificate issuer: /CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885 Certificate serial: 0C3115C7AC08D9F07E9C5B0764351F0038F069BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft Manifest number: 3F Signing time: Tue 21 Jul 2026 06:08:08 +0000 Manifest this update: Tue 21 Jul 2026 06:03:08 +0000 Manifest next update: Wed 22 Jul 2026 06:10:08 +0000 Files and hashes: 1: 5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl (hash: rMw/x2ZWFxjZkApPfB0e6cpwUQ1u4XVjd57MBi2bO4o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 06:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:31:15:c7:ac:08:d9:f0:7e:9c:5b:07:64:35:1f:00:38:f0:69:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885 Validity Not Before: Jul 21 06:03:08 2026 GMT Not After : Jul 22 06:10:08 2026 GMT Subject: CN=CE7ABAABB2A8C0DE7B4CD47F8EF3339A71A9196A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:02:e1:a5:50:8f:24:51:93:a9:93:17:b6:ef: 16:92:62:99:13:1c:8a:9d:56:a5:ad:a3:e9:e2:e8: 38:f4:a7:5c:33:fa:42:88:20:cb:fe:19:81:9c:da: 05:48:cf:a4:b9:17:0e:ca:51:69:f4:6e:3c:fa:8f: e8:16:c4:09:ce:39:24:60:9e:27:45:c5:4b:02:f2: d3:34:4f:13:81:1c:b0:74:59:1a:cb:e0:75:65:37: 39:40:01:7f:1d:86:c3:d3:73:60:f5:18:cb:3c:5d: 92:b6:f5:c6:c0:9c:40:fc:df:bb:07:87:b7:17:ee: a0:2e:19:2c:fc:e7:22:af:8d:55:1d:04:74:db:f8: 2b:fd:fe:ec:42:26:54:77:8a:8c:ca:26:8f:a2:fd: 11:01:36:7b:2a:20:c1:31:e8:00:bd:b7:18:81:78: e4:93:21:66:b5:73:09:bb:03:28:18:79:4f:97:fd: 8e:8b:db:3a:cc:5a:9a:e3:09:0c:35:e6:2b:0e:98: d1:3c:d1:3a:3e:15:47:83:8d:9e:26:4a:24:92:46: cf:a9:8f:e1:ac:be:6c:af:28:43:d7:08:cb:2c:36: 0d:e6:a8:47:c3:e9:2e:98:76:14:78:8e:02:c5:0e: ad:d8:74:03:6f:68:27:e2:91:15:79:a8:73:69:01: 33:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:7A:BA:AB:B2:A8:C0:DE:7B:4C:D4:7F:8E:F3:33:9A:71:A9:19:6A X509v3 Authority Key Identifier: keyid:5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a2:9e:44:2c:af:6b:a0:b8:5b:be:0e:7c:a0:b6:ea:37:5d: 5b:64:c2:c9:06:f2:95:39:48:9c:e4:88:4d:f7:10:34:8d:d7: 30:7e:1f:62:91:88:8f:b8:ab:10:ce:3b:e3:ef:f9:35:06:d7: ad:ef:ae:03:19:2a:d9:6f:db:0f:c2:9e:db:18:0f:6f:e9:4f: 3b:b3:47:e0:38:27:3f:9c:b9:d8:03:04:0a:b1:9c:36:2f:26: 84:77:3f:f6:95:26:10:ff:55:6e:8f:14:45:1f:c2:8b:1d:8c: 2e:05:b3:5f:67:a5:35:03:0b:35:27:2a:86:2e:62:22:e2:d3: c2:22:69:ab:76:99:5a:1f:0b:6e:f0:ae:a9:b5:1f:cb:28:63: 05:22:15:4c:79:e1:9e:35:04:e5:09:06:2e:a0:54:1f:aa:40: da:4d:cb:00:b7:de:27:49:41:b4:d6:57:f4:a4:25:65:cd:16: 76:50:e8:8e:6f:ca:6d:af:15:a6:4b:eb:4a:a3:a8:4d:75:5f: 9f:b5:9d:54:ee:49:a9:3f:c3:c9:a9:d5:5c:41:75:af:78:c2: cb:d7:44:28:ae:e7:2b:32:eb:2c:b4:74:68:46:7a:ff:5f:b3: be:bc:50:dc:aa:6f:d1:67:c8:6e:f1:3c:87:2e:f3:19:b8:d2: 36:45:15:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDDEVx6wI2fB+nFsHZDUfADjwab0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE2MTEyQkY3Q0JFRTE1REE4QzAwQTg1NTZCNzc1NUFG QjQ0QTg4NTAeFw0yNjA3MjEwNjAzMDhaFw0yNjA3MjIwNjEwMDhaMDMxMTAvBgNV BAMTKENFN0FCQUFCQjJBOEMwREU3QjRDRDQ3RjhFRjMzMzlBNzFBOTE5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AuGlUI8kUZOpkxe27xaSYpkT HIqdVqWto+ni6Dj0p1wz+kKIIMv+GYGc2gVIz6S5Fw7KUWn0bjz6j+gWxAnOOSRg nidFxUsC8tM0TxOBHLB0WRrL4HVlNzlAAX8dhsPTc2D1GMs8XZK29cbAnED837sH h7cX7qAuGSz85yKvjVUdBHTb+Cv9/uxCJlR3iozKJo+i/REBNnsqIMEx6AC9txiB eOSTIWa1cwm7AygYeU+X/Y6L2zrMWprjCQw15isOmNE80To+FUeDjZ4mSiSSRs+p j+GsvmyvKEPXCMssNg3mqEfD6S6YdhR4jgLFDq3YdANvaCfikRV5qHNpATOHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUznq6q7KowN57TNR/jvMzmnGpGWowHwYDVR0j BBgwFoAUWmESv3y+4V2owAqFVrd1WvtEqIUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NjkxMDExMzA1MTkwMTk3Ny8xLzVBNjExMkJGN0NCRUUxNURBOEMwMEE4NTU2Qjc3 NTVBRkI0NEE4ODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNUE2MTEyQkY3Q0JFRTE1REE4QzAwQTg1NTZCNzc1NUFGQjQ0QTg4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTY5MTAxMTMwNTE5MDE5NzcvMS81QTYxMTJCRjdDQkVF MTVEQThDMDBBODU1NkI3NzU1QUZCNDRBODg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKKeRCyva6C4 W74OfKC26jddW2TCyQbylTlInOSITfcQNI3XMH4fYpGIj7irEM474+/5NQbXre+u Axkq2W/bD8Ke2xgPb+lPO7NH4DgnP5y52AMECrGcNi8mhHc/9pUmEP9Vbo8URR/C ix2MLgWzX2elNQMLNScqhi5iIuLTwiJpq3aZWh8LbvCuqbUfyyhjBSIVTHnhnjUE 5QkGLqBUH6pA2k3LALfeJ0lBtNZX9KQlZc0WdlDojm/Kba8VpkvrSqOoTXVfn7Wd VO5JqT/DyanVXEF1r3jCy9dEKK7nKzLrLLR0aEZ6/1+zvrxQ3Kpv0WfIbvE8hy7z GbjSNkUVpg== -----END CERTIFICATE-----Generated at Tue Jul 21 22:13:52 2026 by rpki-client