$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft File: A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft (raw, json) Hash identifier: b3zlbbY9EC4rFn9olhr6vwWiEw0rDvh616CsB2G2GkE= Subject key identifier: C8:A0:36:0D:63:3D:29:5C:6B:F1:9F:87:B9:0A:26:A7:FE:0C:67:03 Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 Certificate issuer: /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Certificate serial: 2125CDDA9CBA5C467E7931DA6AF155F32766735B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft Manifest number: A7 Signing time: Mon 27 Apr 2026 17:28:49 +0000 Manifest this update: Mon 27 Apr 2026 17:23:49 +0000 Manifest next update: Tue 28 Apr 2026 18:27:49 +0000 Files and hashes: 1: 3133392e3232342e302e302f31362d3234203d3e203337393633.roa (hash: nfA+B4HJUdTdXpxBunZTC0Mmi3ww7Q0Bo7aWuz3zYNE=) 2: 34372e3131322e302e302f31362d3234203d3e203337393633.roa (hash: 9TzYa3+Sl+tIX8tXSaj70/Us2wMIqXbVo3JClonsi1M=) 3: 34372e3131322e302e302f31322d3234203d3e203337393633.roa (hash: XnzoRBbJbU4JSck0zmxm+ruNtxcM8ugi+pAaXFexVd8=) 4: 3133392e3139362e302e302f31362d3234203d3e203337393633.roa (hash: 19ycWnE82ngKdpq5CfFKBBUaYUxLiUYMUdelOP4EkI8=) 5: 3133392e3132392e302e302f31362d3234203d3e203337393633.roa (hash: lmfFy/NByxflwbukOBqf2t5cvYb0y1mEUQilr1j5wEw=) 6: 34372e3130302e302e302f31342d3234203d3e203337393633.roa (hash: ppj+TlXCIrAcPf1eMhGWrhP2Ij9TixTm3BfPz4IPvbI=) 7: 34372e39382e302e302f31352d3234203d3e203337393633.roa (hash: iwjVE24waqNRMxAnsWWloR6ZemTe2jtU1nDhdHBmFDE=) 8: 34372e3131332e302e302f31362d3234203d3e203337393633.roa (hash: Sc9B64EYbOlhHpRQn2hDIXOE8wTsYGOAnrQ1OGOsB2U=) 9: A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl (hash: fxzJoJLjPnN1YX2vein7ZlUxZ+G3zwPCT8bizv3IZn0=) 10: 34372e3131322e302e302f31352d3135203d3e203337393633.roa (hash: oc0h7t2xyM1D/ueNRTcOjQuhsadrMwiGPusBtoLIrSY=) 11: 34372e39362e302e302f31352d3234203d3e203337393633.roa (hash: qCOeajORd8EdADqBCDEKYOaZ9qR0x8mo50AIxKKf2kk=) 12: 34372e39322e302e302f31342d3234203d3e203337393633.roa (hash: d0QnujeLIiBwhkySIvzmuDq1uWWqMCzgEV4dGlw/0i4=) 13: 34372e3130342e302e302f31332d3234203d3e203337393633.roa (hash: rwAzS9Eef9SzzpYNpqYqgoG+OJgKFf8Bv5eIn0vr0Fs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 18:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:25:cd:da:9c:ba:5c:46:7e:79:31:da:6a:f1:55:f3:27:66:73:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Validity Not Before: Apr 27 17:23:49 2026 GMT Not After : Apr 28 18:27:49 2026 GMT Subject: CN=C8A0360D633D295C6BF19F87B90A26A7FE0C6703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:df:ed:8a:d9:cf:b3:b4:ec:f0:87:f4:be: 13:e2:a2:ce:fd:e8:8c:5a:86:9b:5e:e8:8d:42:43: 68:dc:48:99:56:1c:10:b7:a9:af:a5:f8:f7:a0:6e: 3f:64:a8:51:33:cf:cb:5a:5a:7b:ad:71:94:f8:c6: 6e:e2:8f:42:5d:2b:8a:1f:93:49:28:c7:33:1e:02: 58:f4:2f:75:de:6e:26:8f:39:5b:4c:7b:55:91:15: 8a:c6:dd:1f:f2:a0:e6:9d:25:45:be:62:8d:3f:a3: 77:bf:c7:db:f9:e6:66:8d:c2:ff:75:09:c3:5f:89: c3:1c:a4:ea:fc:b4:65:9f:62:21:cf:ca:f0:26:dd: 66:8f:dc:b1:20:19:11:b3:8d:94:52:82:d8:a2:b6: 5d:71:8e:d5:17:dc:a7:49:f0:d9:09:9e:d9:43:4a: 3f:ee:24:20:a6:ff:23:a7:6d:f9:70:4a:8a:2c:dd: 08:55:7f:11:ef:78:fa:24:80:49:56:40:c6:35:95: 07:bc:de:db:b3:30:8c:bf:a0:d3:ed:42:71:43:2a: f3:a9:c7:63:86:aa:75:36:34:ca:b7:bc:f8:b7:9b: fc:b1:65:32:23:a1:32:22:b9:13:6d:46:72:dc:9a: 46:5c:ae:2d:27:91:33:9d:02:a4:c6:39:1c:28:46: 26:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A0:36:0D:63:3D:29:5C:6B:F1:9F:87:B9:0A:26:A7:FE:0C:67:03 X509v3 Authority Key Identifier: keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:9b:43:c5:c6:f8:f4:fd:95:04:d6:1b:93:93:54:2a:8a:3b: 95:ca:9b:c3:ff:e0:c1:46:7a:c7:8d:e1:fb:20:f8:85:1e:e0: ad:2c:52:9c:14:47:fe:8b:ac:00:48:b1:83:81:60:b7:05:8a: 7e:73:20:29:33:3a:55:59:07:0f:64:85:3c:3e:7c:1f:6a:0d: ba:fe:88:51:4a:72:e9:ef:36:ab:46:f8:c1:d4:11:c9:95:a4: 53:af:42:d5:8c:db:84:83:27:82:79:44:e4:3c:bb:50:aa:3f: b1:b6:12:9c:4a:fa:6b:6d:71:f1:70:50:2e:f9:12:e5:54:0b: d9:da:14:f8:8a:10:62:38:5f:d5:e6:e3:e9:c8:ba:b5:8c:c4: c7:f2:cd:53:33:bb:96:ea:61:d8:f0:b1:4a:20:04:8b:eb:12: 64:be:84:6e:9b:b7:73:3a:c9:b0:13:3d:83:4c:9b:9b:d8:86: 8c:81:14:9a:f2:67:52:91:12:e7:99:63:a3:1b:04:28:50:1e: a5:99:f9:0a:2e:70:56:82:ca:46:f8:08:85:62:a3:c3:d8:bd: e3:59:68:ec:f4:e1:fe:e3:d7:fb:bc:83:56:19:d4:a7:59:81: b7:05:ff:d2:bf:a5:dd:65:e8:5e:b8:7a:19:2b:aa:c8:79:79: e3:96:86:33 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUISXN2py6XEZ+eTHaavFV8ydmc1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkx MkRGRDIyOTAeFw0yNjA0MjcxNzIzNDlaFw0yNjA0MjgxODI3NDlaMDMxMTAvBgNV BAMTKEM4QTAzNjBENjMzRDI5NUM2QkYxOUY4N0I5MEEyNkE3RkUwQzY3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBd/titnPs7Ts8If0vhPios79 6Ixahpte6I1CQ2jcSJlWHBC3qa+l+Pegbj9kqFEzz8taWnutcZT4xm7ij0JdK4of k0koxzMeAlj0L3XebiaPOVtMe1WRFYrG3R/yoOadJUW+Yo0/o3e/x9v55maNwv91 CcNficMcpOr8tGWfYiHPyvAm3WaP3LEgGRGzjZRSgtiitl1xjtUX3KdJ8NkJntlD Sj/uJCCm/yOnbflwSoos3QhVfxHvePokgElWQMY1lQe83tuzMIy/oNPtQnFDKvOp x2OGqnU2NMq3vPi3m/yxZTIjoTIiuRNtRnLcmkZcri0nkTOdAqTGORwoRibdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyKA2DWM9KVxr8Z+HuQomp/4MZwMwHwYDVR0j BBgwFoAUpbKxTZdRO2wMgrHlQHA+uRLf0ikwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8xL0E1QjJCMTREOTc1MTNCNkMwQzgyQjFFNTQwNzAz RUI5MTJERkQyMjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkxMkRGRDIyOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU4ODc2NDQwOTA2MzAxNDUvMS9BNUIyQjE0RDk3NTEz QjZDMEM4MkIxRTU0MDcwM0VCOTEyREZEMjI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy5tDxcb49P2V BNYbk5NUKoo7lcqbw//gwUZ6x43h+yD4hR7grSxSnBRH/ousAEixg4FgtwWKfnMg KTM6VVkHD2SFPD58H2oNuv6IUUpy6e82q0b4wdQRyZWkU69C1YzbhIMngnlE5Dy7 UKo/sbYSnEr6a21x8XBQLvkS5VQL2doU+IoQYjhf1ebj6ci6tYzEx/LNUzO7luph 2PCxSiAEi+sSZL6Ebpu3czrJsBM9g0ybm9iGjIEUmvJnUpES55ljoxsEKFAepZn5 Ci5wVoLKRvgIhWKjw9i941lo7PTh/uPX+7yDVhnUp1mBtwX/0r+l3WXoXrh6GSuq yHl545aGMw== -----END CERTIFICATE-----Generated at Tue Apr 28 09:03:02 2026 by rpki-client