$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft File: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft (raw, json) Hash identifier: zvkKCwckmRkBDzMwIjaupqsZ9w+Q8DSK78tsZPvSotc= Subject key identifier: 5C:56:69:B5:31:7E:BA:23:1D:AE:4C:26:BF:CE:DF:A2:D2:A8:5D:24 Authority key identifier: 4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 Certificate issuer: /CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Certificate serial: 5A6B5CAC1B026D6ADD9374029D63FCAD97403FD6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft Manifest number: AC Signing time: Fri 29 May 2026 05:22:39 +0000 Manifest this update: Fri 29 May 2026 05:17:39 +0000 Manifest next update: Sat 30 May 2026 07:55:39 +0000 Files and hashes: 1: 3130332e3135302e3133302e302f32332d3234203d3e20333938373034.roa (hash: hdeNM6SZLBGxeR3CeiKy7jXN48yMDvfEKuvQ/eq47bE=) 2: 3130332e3135302e3133302e302f32332d3234203d3e20313331353330.roa (hash: KbpTkJkA7rPJjA6zPO2PXZ17GVAIcObqfuRiur//LIg=) 3: 3130332e3135302e3133302e302f32332d3234203d3e20313331343832.roa (hash: MVsUDZl3GgWRFvEnX6kV839tXO39pYXZBP9CEBaBJ30=) 4: 4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl (hash: P+hUoSPPaGlhLWtKtmOht+T8+ykDs/ywBiMddEZTPt8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6b:5c:ac:1b:02:6d:6a:dd:93:74:02:9d:63:fc:ad:97:40:3f:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5 Validity Not Before: May 29 05:17:39 2026 GMT Not After : May 30 07:55:39 2026 GMT Subject: CN=5C5669B5317EBA231DAE4C26BFCEDFA2D2A85D24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:16:90:0d:c7:85:37:80:eb:4a:a4:2b:a0:6f: 0a:10:b3:fa:de:f9:c7:ba:a8:11:c2:87:f2:2d:55: 96:1c:3d:ce:ee:b1:b7:d1:bf:9e:c1:cc:d3:b9:35: 5b:7f:a1:c0:36:bf:58:5f:53:c2:93:8c:10:3f:57: 4d:4d:58:5e:48:56:4e:c9:a1:7e:f7:27:f0:e1:e7: c2:84:f4:99:b2:7d:7b:54:cb:6b:3b:53:01:55:18: 7e:d2:a0:85:d2:76:9d:8a:f0:f5:ad:45:3e:13:4e: 85:8e:a1:2c:5c:dc:77:9e:5e:cf:db:12:ae:37:65: a8:cf:a8:b1:94:66:ad:ed:a9:a7:bb:dd:2b:e0:f7: d3:df:b8:43:d0:d9:c6:be:54:d7:35:29:eb:2e:ce: 87:93:33:13:e5:b7:d4:ed:ad:f6:4d:15:0c:8f:75: 96:8d:37:51:f2:4d:0e:fc:7b:bb:fc:ed:a2:93:03: 77:e1:ba:aa:e7:1e:eb:c4:84:7d:16:5e:01:af:e0: e8:b7:01:c3:e1:03:17:f6:ea:71:06:8d:4b:88:50: 3c:dc:98:d5:dc:5c:f7:72:df:50:14:33:b8:31:48: 6e:e2:4b:56:ea:45:b6:c8:e3:58:e7:d1:72:1d:65: a2:83:57:82:e1:63:50:a9:6e:75:52:4c:f8:84:61: e4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:56:69:B5:31:7E:BA:23:1D:AE:4C:26:BF:CE:DF:A2:D2:A8:5D:24 X509v3 Authority Key Identifier: keyid:4A:5A:30:DA:74:4E:A4:A4:20:6F:85:E7:7C:2D:6D:8F:0A:22:9A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721465857/0/4A5A30DA744EA4A4206F85E77C2D6D8F0A229AE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:48:0f:78:b8:4d:6b:23:02:7c:cf:0c:2d:75:37:b3:05:ea: bf:e8:09:f0:ad:9b:64:05:ea:d8:f7:f4:b2:dd:78:c4:45:65: 8d:47:09:d4:1a:31:1f:62:5a:b6:d0:8b:63:cd:93:89:41:da: 76:23:c4:61:04:97:79:a6:b9:cf:9d:1d:98:21:42:58:86:79: 84:84:c3:d2:df:ec:0a:c5:5d:32:70:1e:1e:6a:87:ad:1d:93: b7:1a:7a:74:1f:75:54:e6:00:d4:1d:ed:e3:a0:e8:6d:d0:37: d7:f0:c7:92:77:8e:53:4f:8b:5e:bc:81:02:f3:e8:7a:fc:72: 35:b6:bf:bd:2d:a1:6a:ad:f0:8f:f8:4d:70:e5:13:1c:50:d1: 92:b3:6b:df:fc:dd:08:eb:c3:2b:f2:f2:3e:9f:d7:b0:9f:19: 75:10:0a:b4:e4:d6:86:f8:f9:c1:6d:ef:bf:ff:68:c2:b6:d9: 2c:c5:29:79:ed:b5:6a:d3:ae:5c:a8:7b:e9:0e:de:a9:16:96: 5c:4c:98:cc:c2:bc:25:55:0a:c5:c0:75:a8:6b:a2:9d:62:62: f1:61:d3:bb:84:4c:9d:54:b1:49:b9:a5:f3:5a:53:cb:eb:67: 95:15:e2:63:fc:d4:e0:4b:67:8f:03:8c:40:86:2f:db:4d:a1: 85:b0:be:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWmtcrBsCbWrdk3QCnWP8rZdAP9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYw QTIyOUFFNTAeFw0yNjA1MjkwNTE3MzlaFw0yNjA1MzAwNzU1MzlaMDMxMTAvBgNV BAMTKDVDNTY2OUI1MzE3RUJBMjMxREFFNEMyNkJGQ0VERkEyRDJBODVEMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1FpANx4U3gOtKpCugbwoQs/re +ce6qBHCh/ItVZYcPc7usbfRv57BzNO5NVt/ocA2v1hfU8KTjBA/V01NWF5IVk7J oX73J/Dh58KE9JmyfXtUy2s7UwFVGH7SoIXSdp2K8PWtRT4TToWOoSxc3HeeXs/b Eq43ZajPqLGUZq3tqae73Svg99PfuEPQ2ca+VNc1KesuzoeTMxPlt9TtrfZNFQyP dZaNN1HyTQ78e7v87aKTA3fhuqrnHuvEhH0WXgGv4Oi3AcPhAxf26nEGjUuIUDzc mNXcXPdy31AUM7gxSG7iS1bqRbbI41jn0XIdZaKDV4LhY1CpbnVSTPiEYeQRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXFZptTF+uiMdrkwmv87fotKoXSQwHwYDVR0j BBgwFoAUSlow2nROpKQgb4XnfC1tjwoimuUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQ2NTg1Ny8wLzRBNUEzMERBNzQ0RUE0QTQyMDZGODVFNzdDMkQ2 RDhGMEEyMjlBRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEE1QTMwREE3NDRFQTRBNDIwNkY4NUU3N0MyRDZEOEYwQTIyOUFFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE0NjU4NTcvMC80QTVBMzBEQTc0NEVB NEE0MjA2Rjg1RTc3QzJENkQ4RjBBMjI5QUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAskgPeLhNayMC fM8MLXU3swXqv+gJ8K2bZAXq2Pf0st14xEVljUcJ1BoxH2JattCLY82TiUHadiPE YQSXeaa5z50dmCFCWIZ5hITD0t/sCsVdMnAeHmqHrR2Ttxp6dB91VOYA1B3t46Do bdA31/DHkneOU0+LXryBAvPoevxyNba/vS2haq3wj/hNcOUTHFDRkrNr3/zdCOvD K/LyPp/XsJ8ZdRAKtOTWhvj5wW3vv/9owrbZLMUpee21atOuXKh76Q7eqRaWXEyY zMK8JVUKxcB1qGuinWJi8WHTu4RMnVSxSbml81pTy+tnlRXiY/zU4EtnjwOMQIYv 202hhbC+iQ== -----END CERTIFICATE-----Generated at Fri May 29 22:05:33 2026 by rpki-client