$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft File: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft (raw, json) Hash identifier: Z8TeQLclKxw5petcKVMYSEV3FQyKQxMRBTuPITGTaIE= Subject key identifier: C5:04:BC:D9:F2:76:4C:9D:7C:38:03:FB:3E:17:B1:79:CD:C9:38:94 Authority key identifier: A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 Certificate issuer: /CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Certificate serial: 5F628EE28FE45C036926114E56A578D095F5530F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft Manifest number: AD Signing time: Fri 29 May 2026 18:58:04 +0000 Manifest this update: Fri 29 May 2026 18:53:04 +0000 Manifest next update: Sat 30 May 2026 21:14:04 +0000 Files and hashes: 1: 3130332e3234302e3230302e302f32342d3234203d3e20313530343037.roa (hash: cwdedZumqbqU+LJf5oD66wPPzBjrkVCdrXnE2Lu+6bI=) 2: A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl (hash: XpbLAQRkDdj+bBeRIxWaCSVIQWhoCBtTKzFMzS7Cccs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:62:8e:e2:8f:e4:5c:03:69:26:11:4e:56:a5:78:d0:95:f5:53:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5773C1A9D60EDE0882719ADEFA40B1BD386CA00 Validity Not Before: May 29 18:53:04 2026 GMT Not After : May 30 21:14:04 2026 GMT Subject: CN=C504BCD9F2764C9D7C3803FB3E17B179CDC93894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8c:8c:5b:35:66:26:cc:a2:ea:5b:8b:63:e4: 0d:56:3a:c2:c2:b5:ff:9c:58:15:d8:12:fe:df:e5: 4a:ea:1a:f7:d0:d7:8f:de:c1:be:be:61:2e:64:33: 0e:e5:09:df:45:94:f4:aa:7e:62:4f:52:de:c0:db: 06:8f:74:46:98:15:19:44:fa:5e:28:31:b9:ee:2f: 27:e1:5a:4d:fb:44:b2:1b:a3:7c:fa:2d:7a:0b:23: 64:c4:6f:0a:51:3a:ba:3c:05:39:ce:6b:56:a8:41: dd:2c:5f:5a:55:76:04:d7:12:93:7e:9c:02:a6:6e: ea:c9:d2:da:1b:64:1a:3e:14:90:54:bc:1e:e0:eb: 9f:ef:f6:69:42:11:ac:aa:1d:90:66:8d:7b:9e:e7: 08:22:cf:39:23:e5:44:ee:6d:c9:0c:4e:82:19:6f: d3:42:62:a1:0a:a5:0e:58:7e:ce:da:1d:9e:ef:35: ca:fe:67:a1:2f:52:c1:d2:f4:9a:5c:bf:c8:fb:ae: 3f:1b:ee:be:34:b1:34:26:38:46:2a:02:eb:5f:ca: 49:5f:a4:89:50:7b:c3:ee:83:89:4f:6c:3c:b9:59: 74:b3:e9:ea:ef:ad:f2:fc:51:39:3d:f6:f4:12:f1: 15:d5:43:35:b6:bc:8b:65:bf:3a:54:8c:47:22:19: 56:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:04:BC:D9:F2:76:4C:9D:7C:38:03:FB:3E:17:B1:79:CD:C9:38:94 X509v3 Authority Key Identifier: keyid:A5:77:3C:1A:9D:60:ED:E0:88:27:19:AD:EF:A4:0B:1B:D3:86:CA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345953794/0/A5773C1A9D60EDE0882719ADEFA40B1BD386CA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:37:79:11:15:21:be:ef:fa:05:17:82:24:c3:08:29:7b:61: 92:57:17:67:72:2c:fd:c4:36:7a:f0:c0:a9:4c:36:4a:7c:4b: ad:72:c7:20:99:3b:a1:52:04:4a:ad:cf:30:e2:ec:11:6f:7b: c6:71:ef:70:49:df:d5:b8:7e:c5:72:c0:9b:32:75:68:e1:cf: 54:91:4c:0f:24:81:5f:9e:be:60:eb:81:ea:17:7e:3d:0b:d2: 0a:b3:27:2e:fa:3c:04:10:7d:fd:d7:03:5f:46:ef:3c:85:08: ce:ab:0b:3a:f2:c7:9c:ae:40:c3:7e:a9:41:11:4e:df:0f:90: 96:ce:1a:b4:86:f4:d6:5b:81:d7:ca:a3:6e:34:ed:db:87:6b: 2a:d2:6b:97:b5:5b:dd:d5:87:8d:1f:d8:7d:36:a3:de:aa:ac: 18:ad:8d:b3:15:e6:b1:70:05:07:00:cd:51:66:19:ed:ca:93: 19:5a:45:ca:5e:b6:90:54:6e:0a:86:64:4a:b2:a2:cb:a6:bf: 72:64:62:f7:d7:df:51:12:d3:1f:af:a6:5f:aa:37:57:01:d2: 28:68:95:41:82:33:3d:0a:db:87:bd:20:0d:d2:a5:73:47:0f: 0f:92:2b:fb:68:16:d4:3c:8f:f0:0b:63:cf:03:38:64:90:c2: 82:b8:f7:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX2KO4o/kXANpJhFOVqV40JX1Uw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJE Mzg2Q0EwMDAeFw0yNjA1MjkxODUzMDRaFw0yNjA1MzAyMTE0MDRaMDMxMTAvBgNV BAMTKEM1MDRCQ0Q5RjI3NjRDOUQ3QzM4MDNGQjNFMTdCMTc5Q0RDOTM4OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjIxbNWYmzKLqW4tj5A1WOsLC tf+cWBXYEv7f5UrqGvfQ14/ewb6+YS5kMw7lCd9FlPSqfmJPUt7A2waPdEaYFRlE +l4oMbnuLyfhWk37RLIbo3z6LXoLI2TEbwpROro8BTnOa1aoQd0sX1pVdgTXEpN+ nAKmburJ0tobZBo+FJBUvB7g65/v9mlCEayqHZBmjXue5wgizzkj5UTubckMToIZ b9NCYqEKpQ5Yfs7aHZ7vNcr+Z6EvUsHS9Jpcv8j7rj8b7r40sTQmOEYqAutfyklf pIlQe8Pug4lPbDy5WXSz6ervrfL8UTk99vQS8RXVQzW2vItlvzpUjEciGVbzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxQS82fJ2TJ18OAP7Phexec3JOJQwHwYDVR0j BBgwFoAUpXc8Gp1g7eCIJxmt76QLG9OGygAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTk1Mzc5NC8wL0E1NzczQzFBOUQ2MEVERTA4ODI3MTlBREVGQTQw QjFCRDM4NkNBMDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU3NzNDMUE5RDYwRURFMDg4MjcxOUFERUZBNDBCMUJEMzg2Q0EwMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU5NTM3OTQvMC9BNTc3M0MxQTlENjBF REUwODgyNzE5QURFRkE0MEIxQkQzODZDQTAwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjd5ERUhvu/6 BReCJMMIKXthklcXZ3Is/cQ2evDAqUw2SnxLrXLHIJk7oVIESq3PMOLsEW97xnHv cEnf1bh+xXLAmzJ1aOHPVJFMDySBX56+YOuB6hd+PQvSCrMnLvo8BBB9/dcDX0bv PIUIzqsLOvLHnK5Aw36pQRFO3w+Qls4atIb01luB18qjbjTt24drKtJrl7Vb3dWH jR/YfTaj3qqsGK2NsxXmsXAFBwDNUWYZ7cqTGVpFyl62kFRuCoZkSrKiy6a/cmRi 99ffURLTH6+mX6o3VwHSKGiVQYIzPQrbh70gDdKlc0cPD5Ir+2gW1DyP8AtjzwM4 ZJDCgrj3MQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:09 2026 by rpki-client