$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft File: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft (raw, json) Hash identifier: nO/EHA1k7SZiLnyMLq8K/jhK4DQqjNTCvr1ZHc+mN20= Subject key identifier: 64:29:BD:7F:ED:71:11:56:7D:97:8D:45:78:83:88:1A:E5:C2:97:2E Authority key identifier: A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 Certificate issuer: /CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Certificate serial: 1B80F9374149BAEAC5F4ABBA432D8DD300EC8A43 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft Manifest number: 013A Signing time: Wed 14 Oct 2026 16:29:21 +0000 Manifest this update: Wed 14 Oct 2026 16:24:21 +0000 Manifest next update: Sat 17 Oct 2026 21:08:21 +0000 Files and hashes: 1: 3130332e3234302e3230302e302f32342d3234203d3e20313530343037.roa (hash: cwdedZumqbqU+LJf5oD66wPPzBjrkVCdrXnE2Lu+6bI=) 2: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl (hash: xs6vJLfGG5E8E1FWCKmsnkSG7pNVrveKPptRsgNBkPI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 21:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:80:f9:37:41:49:ba:ea:c5:f4:ab:ba:43:2d:8d:d3:00:ec:8a:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Validity Not Before: Oct 14 16:24:21 2026 GMT Not After : Oct 17 21:08:21 2026 GMT Subject: CN=6429BD7FED7111567D978D457883881AE5C2972E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:19:de:d0:b9:d8:9c:93:b9:50:4e:b0:6f: 61:77:90:ac:47:4c:1c:e3:29:d7:95:ab:8e:1c:47: e8:1a:92:91:00:ac:3b:3b:f3:9e:02:a4:24:9b:52: 54:21:5f:4e:c7:81:86:26:af:5f:4e:99:f2:48:bb: df:bc:25:e6:18:9d:ca:25:57:bd:74:87:c1:43:50: ea:20:e0:0a:b5:b6:1b:05:e8:3e:b4:93:61:58:e4: ff:86:12:80:91:7b:28:89:52:3e:b5:10:e6:41:f2: 91:97:66:db:20:3e:35:e8:e9:c8:e3:d9:39:b0:79: 54:2b:53:10:04:e0:5a:57:62:40:5f:0f:ef:eb:5a: be:ca:70:b5:bc:54:b1:8d:7b:18:84:c3:2e:7b:c6: 73:06:d3:c0:90:07:56:f8:13:24:04:9a:f8:32:bc: 8c:fd:1a:6d:80:3a:75:20:9c:25:4c:7f:bd:f5:f0: 6e:84:e7:e5:9b:8a:da:bb:4c:ad:3a:4f:72:c4:b3: 82:d8:3d:2d:0e:f3:2d:6a:ad:24:57:5a:63:78:21: d6:68:49:66:b8:f9:5a:d0:c0:f1:40:ba:53:2f:9c: 2c:62:6e:35:bf:e4:5c:5e:ed:e1:99:eb:63:b5:e8: 6c:db:e5:0f:94:e3:aa:14:87:43:da:e3:0a:d9:e5: cc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:29:BD:7F:ED:71:11:56:7D:97:8D:45:78:83:88:1A:E5:C2:97:2E X509v3 Authority Key Identifier: keyid:A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b0:c1:cb:f4:11:8c:c6:eb:3d:84:42:3f:5a:06:df:b4:53: 57:27:8d:3b:9d:9a:87:8d:fd:ac:b5:17:7e:f7:a5:14:93:3a: ec:b8:8f:bc:c4:37:ac:dd:85:25:85:a4:3f:38:fc:5e:33:4a: 9a:1c:23:f7:06:91:dd:bf:2b:2f:1c:de:f6:0f:12:27:51:3d: e8:a7:df:7a:43:ff:56:7c:11:4b:4a:ea:86:1c:a3:ce:a6:a0: f0:77:bf:8b:cf:81:45:a0:8f:b4:6d:ff:87:97:2e:13:4b:1e: e1:14:90:46:7b:3e:b0:3c:94:3f:7d:f8:07:5f:74:4f:b9:f0: ee:9d:6a:77:e7:e7:b9:29:d1:05:4c:e1:dc:ee:97:1a:e4:1b: 73:f8:4a:08:9a:a0:cf:01:69:18:89:05:5b:53:46:6a:32:d3: 2e:0a:9c:52:9e:7f:4c:0b:e3:54:88:ff:3d:6b:53:47:17:b5: ef:21:56:73:63:7a:7b:78:c1:4d:2c:86:21:16:94:5c:9d:fa: 72:c5:71:d5:74:b7:8b:19:c7:42:20:8a:67:99:3d:99:a1:32: 7c:56:44:4a:18:e1:f5:a7:09:4e:b5:77:50:25:4b:1f:f7:09: 1b:aa:59:d0:62:e3:be:7c:7d:72:e2:a5:cc:9e:2e:d5:83:25: a8:99:03:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUG4D5N0FJuurF9Ku6Qy2N0wDsikMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJE Mzg2Q0EwMDAeFw0yNjEwMTQxNjI0MjFaFw0yNjEwMTcyMTA4MjFaMDMxMTAvBgNV BAMTKDY0MjlCRDdGRUQ3MTExNTY3RDk3OEQ0NTc4ODM4ODFBRTVDMjk3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmRne0LnYnJO5UE6wb2F3kKxH TBzjKdeVq44cR+gakpEArDs7854CpCSbUlQhX07HgYYmr19OmfJIu9+8JeYYncol V710h8FDUOog4Aq1thsF6D60k2FY5P+GEoCReyiJUj61EOZB8pGXZtsgPjXo6cjj 2TmweVQrUxAE4FpXYkBfD+/rWr7KcLW8VLGNexiEwy57xnMG08CQB1b4EyQEmvgy vIz9Gm2AOnUgnCVMf7318G6E5+Wbitq7TK06T3LEs4LYPS0O8y1qrSRXWmN4IdZo SWa4+VrQwPFAulMvnCxibjW/5Fxe7eGZ62O16Gzb5Q+U46oUh0Pa4wrZ5cxTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZCm9f+1xEVZ9l41FeIOIGuXCly4wHwYDVR0j BBgwFoAUpXc8Gp1g7eCIJxmt76QLG9OGygAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTk1Mzc5NC8wL0E1NzczQzFBOUQ2MEVERTA4ODI3MTlBREVGQTQw QjFCRDM4NkNBMDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJEMzg2Q0EwMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU5NTM3OTQvMC9BNTc3M0MxQTlENjBF REUwODgyNzE5QURFRkE0MEIxQkQzODZDQTAwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbDBy/QRjMbr PYRCP1oG37RTVyeNO52ah439rLUXfvelFJM67LiPvMQ3rN2FJYWkPzj8XjNKmhwj 9waR3b8rLxze9g8SJ1E96KffekP/VnwRS0rqhhyjzqag8He/i8+BRaCPtG3/h5cu E0se4RSQRns+sDyUP334B190T7nw7p1qd+fnuSnRBUzh3O6XGuQbc/hKCJqgzwFp GIkFW1NGajLTLgqcUp5/TAvjVIj/PWtTRxe17yFWc2N6e3jBTSyGIRaUXJ36csVx 1XS3ixnHQiCKZ5k9maEyfFZEShjh9acJTrV3UCVLH/cJG6pZ0GLjvnx9cuKlzJ4u 1YMlqJkDUQ== -----END CERTIFICATE-----Generated at Thu Oct 15 10:30:20 2026 by rpki-client