$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft File: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft (raw, json) Hash identifier: tlI74lLzM3LaSB6thRQReEnWvIg0eB/XBtfdnYI022Q= Subject key identifier: C9:EB:C9:97:EC:C6:9A:F3:E2:8F:14:C1:EA:D4:5A:0F:7F:49:E5:19 Authority key identifier: A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 Certificate issuer: /CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Certificate serial: 52C6A6AA47080D8AB1BB2DDE2A1E75AE807002F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft Manifest number: 67 Signing time: Mon 06 Apr 2026 06:53:56 +0000 Manifest this update: Mon 06 Apr 2026 06:48:56 +0000 Manifest next update: Tue 07 Apr 2026 09:26:56 +0000 Files and hashes: 1: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl (hash: Ng9fRUlQCEMrENYT1JFS0+PrlmMC2JRmtYA6up755rg=) 2: 3130332e3234302e3230302e302f32342d3234203d3e20313530343037.roa (hash: cwdedZumqbqU+LJf5oD66wPPzBjrkVCdrXnE2Lu+6bI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Apr 2026 06:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c6:a6:aa:47:08:0d:8a:b1:bb:2d:de:2a:1e:75:ae:80:70:02:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Validity Not Before: Apr 6 06:48:56 2026 GMT Not After : Apr 7 09:26:56 2026 GMT Subject: CN=C9EBC997ECC69AF3E28F14C1EAD45A0F7F49E519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:66:01:82:95:10:11:84:7e:e4:22:ac:91:44: 8e:61:1d:3c:bc:fe:9b:d7:d0:e4:1e:64:28:f3:1a: 61:6a:97:96:bf:65:f0:31:55:71:d8:21:82:33:3c: 07:b7:8a:6a:34:ac:cd:c5:31:ff:94:10:81:3d:f8: 92:76:4b:6a:81:0f:fa:88:d7:2f:74:e2:21:e0:3c: 09:6d:d4:f0:2b:c5:ac:ae:20:97:79:e6:c9:6c:2e: 80:c8:b5:3c:1d:cf:d7:5e:de:18:00:e7:e7:3a:14: e4:6f:bb:66:5e:c3:04:0f:2f:fa:00:c9:c7:91:25: 9d:d8:eb:34:d9:ab:55:1f:5a:2e:22:ea:ef:6f:77: 87:95:6d:4a:bc:1d:5e:10:36:8a:2d:9e:cd:1d:ae: f4:70:0f:b5:3f:c8:0b:84:7e:f5:f3:1a:5c:8c:f5: 08:a6:48:ca:e1:59:97:1f:a7:29:fe:51:b8:a9:7c: 4e:40:03:10:65:87:3f:f1:3f:29:db:f3:4a:3b:22: 8d:20:5b:e7:01:1a:ad:23:cb:80:75:d1:ed:f7:68: 04:30:4f:9c:b9:01:1a:6d:50:e9:3d:bc:ee:14:e8: c6:35:5d:80:a9:9d:45:cd:d6:fa:8a:60:47:56:e3: 0c:20:10:59:71:c0:20:c7:62:45:d5:ab:ed:5b:a2: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EB:C9:97:EC:C6:9A:F3:E2:8F:14:C1:EA:D4:5A:0F:7F:49:E5:19 X509v3 Authority Key Identifier: keyid:A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:7e:a1:05:97:7f:90:9f:11:d1:67:32:2f:1c:0a:78:64:af: 6a:d8:a2:a3:0c:1e:e0:4e:19:97:a6:3c:e9:0b:19:49:d9:ca: af:b3:f8:d0:8e:5d:7e:de:dd:48:59:30:5f:9c:44:e6:64:8d: 43:7b:63:28:3e:59:fd:81:4e:55:87:0e:7c:ab:a5:6e:15:90: 71:61:33:f9:e7:af:68:8d:15:88:58:6f:38:62:c4:f3:58:e3: 7a:42:c3:a7:4b:b3:34:10:8f:cd:f1:eb:a2:1a:83:d3:f5:48: 07:60:91:94:d5:fc:45:1c:30:13:c0:48:34:02:57:67:85:83: de:e8:18:48:be:6c:84:2e:9e:17:8a:16:3a:2e:1c:57:71:03: 95:67:b8:a8:ca:bc:5d:cb:bd:e6:65:3d:9c:da:93:55:ae:37: d9:6a:f6:28:79:3d:64:88:27:fd:03:0e:83:ce:e0:76:d9:1f: 3b:41:cc:53:6a:b5:a7:bd:f2:15:af:b1:06:68:57:34:06:35: f1:72:8c:51:ff:18:ca:f9:5f:67:c5:a1:ca:ae:e4:74:ae:9f: 73:24:da:f2:d8:b3:70:65:72:d4:d0:7d:44:a1:46:60:8b:a5: bd:a7:89:9c:2d:d1:7c:10:77:61:b6:49:ec:68:8b:db:a1:1f: f1:a9:d4:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUsamqkcIDYqxuy3eKh51roBwAvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJE Mzg2Q0EwMDAeFw0yNjA0MDYwNjQ4NTZaFw0yNjA0MDcwOTI2NTZaMDMxMTAvBgNV BAMTKEM5RUJDOTk3RUNDNjlBRjNFMjhGMTRDMUVBRDQ1QTBGN0Y0OUU1MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaZgGClRARhH7kIqyRRI5hHTy8 /pvX0OQeZCjzGmFql5a/ZfAxVXHYIYIzPAe3imo0rM3FMf+UEIE9+JJ2S2qBD/qI 1y904iHgPAlt1PArxayuIJd55slsLoDItTwdz9de3hgA5+c6FORvu2ZewwQPL/oA yceRJZ3Y6zTZq1UfWi4i6u9vd4eVbUq8HV4QNootns0drvRwD7U/yAuEfvXzGlyM 9QimSMrhWZcfpyn+UbipfE5AAxBlhz/xPynb80o7Io0gW+cBGq0jy4B10e33aAQw T5y5ARptUOk9vO4U6MY1XYCpnUXN1vqKYEdW4wwgEFlxwCDHYkXVq+1boopDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyevJl+zGmvPijxTB6tRaD39J5RkwHwYDVR0j BBgwFoAUpXc8Gp1g7eCIJxmt76QLG9OGygAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTk1Mzc5NC8wL0E1NzczQzFBOUQ2MEVERTA4ODI3MTlBREVGQTQw QjFCRDM4NkNBMDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJEMzg2Q0EwMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU5NTM3OTQvMC9BNTc3M0MxQTlENjBF REUwODgyNzE5QURFRkE0MEIxQkQzODZDQTAwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASH6hBZd/kJ8R 0WcyLxwKeGSvatiiowwe4E4Zl6Y86QsZSdnKr7P40I5dft7dSFkwX5xE5mSNQ3tj KD5Z/YFOVYcOfKulbhWQcWEz+eevaI0ViFhvOGLE81jjekLDp0uzNBCPzfHrohqD 0/VIB2CRlNX8RRwwE8BINAJXZ4WD3ugYSL5shC6eF4oWOi4cV3EDlWe4qMq8Xcu9 5mU9nNqTVa432Wr2KHk9ZIgn/QMOg87gdtkfO0HMU2q1p73yFa+xBmhXNAY18XKM Uf8YyvlfZ8Whyq7kdK6fcyTa8tizcGVy1NB9RKFGYIulvaeJnC3RfBB3YbZJ7GiL 26Ef8anUQQ== -----END CERTIFICATE-----Generated at Mon Apr 6 13:57:00 2026 by rpki-client