$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft File: A5A7A22B773557BAF9107F52071E43CB56973E0C.mft (raw, json) Hash identifier: vQQ0pN9wj21gmLCwdiL0lhUGNBJUvWwM5G/3VpvyPTo= Subject key identifier: B1:6F:04:A4:0A:E7:9B:CF:A6:26:EC:E7:3B:CC:72:6B:B1:62:45:E8 Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C Certificate issuer: /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Certificate serial: 7EF41BE684452E313151A84FE7B423201FD34201 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft Manifest number: 06 Signing time: Mon 13 Apr 2026 06:09:17 +0000 Manifest this update: Mon 13 Apr 2026 06:04:17 +0000 Manifest next update: Tue 14 Apr 2026 06:48:17 +0000 Files and hashes: 1: 3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa (hash: WGwlggEA/VToCSJYpNCYp9yhY8Qy1CeB0bd66AUxvDk=) 2: 3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa (hash: lc6BFdBVJZeMuwzi+LIUpJbzD8i0tSIow5YY9TKap+c=) 3: A5A7A22B773557BAF9107F52071E43CB56973E0C.crl (hash: 2K5KZPTf2hPVkTlniJLtwKR235nW0xItzd99WcOlSYc=) 4: 3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (hash: UbZlXkYS5JD2w5tzhTcuVZs6ibTL03kUiETJDoBxygU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f4:1b:e6:84:45:2e:31:31:51:a8:4f:e7:b4:23:20:1f:d3:42:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Validity Not Before: Apr 13 06:04:17 2026 GMT Not After : Apr 14 06:48:17 2026 GMT Subject: CN=B16F04A40AE79BCFA626ECE73BCC726BB16245E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:b9:59:69:61:b5:f4:17:af:dd:0f:38:b1: c4:71:56:ac:8e:9b:22:a4:5d:5f:e4:c8:ad:26:d3: 9b:85:5a:c6:6d:85:8a:18:51:e4:6e:29:04:5f:da: 1c:ba:44:7d:a6:1a:4b:46:af:75:cb:71:c9:12:a5: 59:b7:cd:f8:e9:3a:45:06:1d:a8:90:d2:d7:28:3e: 47:96:40:99:3a:3d:fb:2c:1e:32:19:e8:c0:b8:6f: 4a:14:34:e7:1c:ea:6f:8e:f8:91:04:01:df:17:7a: f9:46:3e:b6:ca:07:73:25:83:14:68:5f:79:b4:64: 5a:6c:d4:39:1f:cb:32:34:5c:68:19:c5:6b:d3:75: 94:af:10:8c:17:c1:e2:7c:6b:d9:61:0e:cd:be:30: b2:89:15:27:a7:c2:8c:83:d2:29:8b:1a:46:6d:99: f1:da:86:58:99:09:f7:81:8c:2d:ff:09:63:79:e2: b2:72:6d:41:fd:d2:8d:9e:fe:17:bd:94:79:96:c1: 20:fd:10:16:d9:bb:27:5b:85:c7:c1:68:06:8b:80: 13:ee:63:19:9d:bb:c2:df:25:fb:52:06:ec:e5:fa: d4:1c:ac:0f:9f:33:c9:bd:39:72:1c:ba:8b:5d:86: 03:92:f0:e6:83:8e:6a:00:8e:a4:9e:f5:0d:65:4e: 20:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6F:04:A4:0A:E7:9B:CF:A6:26:EC:E7:3B:CC:72:6B:B1:62:45:E8 X509v3 Authority Key Identifier: keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:49:ea:e4:1e:b5:2a:f9:41:65:6d:a7:d7:f5:51:e6:5f:2e: d5:1f:96:9b:aa:06:8a:54:5d:3b:64:8a:0c:b3:f0:b7:b0:ed: 9f:0a:20:06:8a:5b:ee:17:a6:4d:eb:38:34:37:f6:57:59:75: ca:49:cc:d7:a6:71:53:15:f5:cc:2e:0b:63:43:5b:aa:51:79: e8:a3:3f:ce:6f:4c:ce:eb:79:57:3d:7b:1c:36:dd:81:d5:52: 03:73:04:f1:d6:80:cc:7b:88:6f:ee:f9:b3:00:76:bb:a8:09: 8d:c6:2e:c7:16:c1:10:0e:49:b1:9c:36:91:03:c4:14:30:a2: 3a:fc:5c:68:d4:db:b4:7d:49:73:62:75:44:73:24:8f:eb:36: 20:cf:53:30:24:d0:0c:92:31:61:43:5d:cb:57:54:a5:11:e3: 88:c4:d9:89:c8:ab:23:3f:8a:b4:bf:26:73:bb:f3:18:2b:6a: 39:8c:d0:cd:e8:1b:0a:4c:13:7a:78:7f:79:5d:2a:e8:ad:f7: e1:05:86:eb:09:45:b9:cd:fd:7d:06:d1:d4:cf:07:b8:89:49: 61:21:d5:f8:83:22:5d:bd:7c:23:f8:7b:c4:9f:c5:d7:52:b0: 59:d9:4a:30:c2:48:c8:5c:a4:ec:d8:d5:14:f1:c7:b6:c0:99: 43:3b:b8:67 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfvQb5oRFLjExUahP57QjIB/TQgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1 Njk3M0UwQzAeFw0yNjA0MTMwNjA0MTdaFw0yNjA0MTQwNjQ4MTdaMDMxMTAvBgNV BAMTKEIxNkYwNEE0MEFFNzlCQ0ZBNjI2RUNFNzNCQ0M3MjZCQjE2MjQ1RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoZblZaWG19Bev3Q84scRxVqyO myKkXV/kyK0m05uFWsZthYoYUeRuKQRf2hy6RH2mGktGr3XLcckSpVm3zfjpOkUG HaiQ0tcoPkeWQJk6PfssHjIZ6MC4b0oUNOcc6m+O+JEEAd8XevlGPrbKB3MlgxRo X3m0ZFps1DkfyzI0XGgZxWvTdZSvEIwXweJ8a9lhDs2+MLKJFSenwoyD0imLGkZt mfHahliZCfeBjC3/CWN54rJybUH90o2e/he9lHmWwSD9EBbZuydbhcfBaAaLgBPu Yxmdu8LfJftSBuzl+tQcrA+fM8m9OXIcuotdhgOS8OaDjmoAjqSe9Q1lTiAjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsW8EpArnm8+mJuznO8xya7FiRegwHwYDVR0j BBgwFoAUpaeiK3c1V7r5EH9SBx5Dy1aXPgwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg1NTMzMzQ4MzkwNTAyNi8wL0E1QTdBMjJCNzczNTU3QkFGOTEwN0Y1MjA3MUU0 M0NCNTY5NzNFMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1Njk3M0UwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NTUzMzM0ODM5MDUwMjYvMC9BNUE3QTIyQjc3MzU1 N0JBRjkxMDdGNTIwNzFFNDNDQjU2OTczRTBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEnq5B61KvlB ZW2n1/VR5l8u1R+Wm6oGilRdO2SKDLPwt7DtnwogBopb7hemTes4NDf2V1l1yknM 16ZxUxX1zC4LY0NbqlF56KM/zm9Mzut5Vz17HDbdgdVSA3ME8daAzHuIb+75swB2 u6gJjcYuxxbBEA5JsZw2kQPEFDCiOvxcaNTbtH1Jc2J1RHMkj+s2IM9TMCTQDJIx YUNdy1dUpRHjiMTZicirIz+KtL8mc7vzGCtqOYzQzegbCkwTenh/eV0q6K334QWG 6wlFuc39fQbR1M8HuIlJYSHV+IMiXb18I/h7xJ/F11KwWdlKMMJIyFyk7NjVFPHH tsCZQzu4Zw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:01:39 2026 by rpki-client