$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft File: A5A7A22B773557BAF9107F52071E43CB56973E0C.mft (raw, json) Hash identifier: lK6H6qYiQtHeLn2vqad9iwYLIrPoOJ5aF+I+gPNu+Lo= Subject key identifier: 31:A8:FE:5F:C7:47:C9:F4:4F:5C:49:51:C3:A3:22:D7:4A:37:E6:0F Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C Certificate issuer: /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Certificate serial: 14A7C2BE5233B0170A7D9CD1EC5923D7EFA1BD4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft Manifest number: 4A Signing time: Fri 29 May 2026 16:28:01 +0000 Manifest this update: Fri 29 May 2026 16:23:01 +0000 Manifest next update: Sat 30 May 2026 18:37:01 +0000 Files and hashes: 1: 3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa (hash: qBnUcpTKG6VeUEPGz1MimxCSD4Q6edLlreoj3tdS5ps=) 2: A5A7A22B773557BAF9107F52071E43CB56973E0C.crl (hash: PsMgkxQtK9nxuht4+QdpaLUt06Ob9XNTkETVaxXPEKM=) 3: 3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (hash: 9YRxcxYb/rcS3Fre/vxl+OluswVsgxbVE+vIx1aWSuc=) 4: 3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa (hash: sFd6ssXxC/BDyv1b99yz/NjXY9YA0f3bLOEKaZDzcTc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a7:c2:be:52:33:b0:17:0a:7d:9c:d1:ec:59:23:d7:ef:a1:bd:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C Validity Not Before: May 29 16:23:01 2026 GMT Not After : May 30 18:37:01 2026 GMT Subject: CN=31A8FE5FC747C9F44F5C4951C3A322D74A37E60F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9e:7d:d0:a3:99:f4:a3:dc:3a:1d:56:ec:02: 53:c2:84:79:13:b5:bf:cd:1d:ea:38:c2:05:1c:f3: 7a:49:61:a8:16:09:00:19:f5:a5:6d:ca:c9:0b:3c: c2:69:3e:3a:10:88:47:f3:76:2d:63:f9:66:ec:87: 6e:6c:43:ed:39:e9:eb:be:c7:0d:d5:05:77:17:68: 29:90:6c:80:f1:d8:74:ff:d2:21:ed:f6:4e:2a:ff: 64:ab:21:ab:9c:82:d3:32:b5:1c:54:e6:ea:af:d0: af:bc:56:8f:6f:f2:65:14:24:27:c0:2e:86:c9:52: a3:15:65:62:20:31:3f:fd:83:5e:a0:95:1b:2c:06: 92:f7:fb:7f:ea:65:a2:eb:76:fb:93:17:b5:c0:a0: 8d:ca:86:b4:89:76:88:c3:5d:2f:ce:8f:5c:5e:56: 0a:1d:05:36:43:29:fb:ba:04:9f:15:7f:ad:64:ab: 27:54:64:d6:0f:09:d4:87:e8:12:05:b1:33:48:ef: 8d:00:39:78:76:a6:4a:c7:6d:d0:83:ce:cf:8a:d3: 63:de:76:d9:e2:5a:14:72:df:61:d0:75:d6:16:bd: 5b:e3:c7:fb:50:4b:1b:96:51:cc:da:2e:af:7e:37: 0e:7e:38:e3:9b:a4:3e:67:3c:64:82:05:5c:08:7d: 95:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A8:FE:5F:C7:47:C9:F4:4F:5C:49:51:C3:A3:22:D7:4A:37:E6:0F X509v3 Authority Key Identifier: keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:bb:c7:33:ba:fe:01:3e:ab:0c:ee:2a:27:fd:a0:e3:34:ef: f7:ad:89:29:bf:3f:43:6b:a2:50:79:3f:65:75:be:17:72:be: 43:73:e3:e7:b9:fe:10:86:13:59:28:15:3f:70:52:b9:a4:49: 11:a7:1d:d2:83:6f:8b:92:6b:46:2b:35:b7:03:69:96:ec:35: 3d:a6:b6:68:10:52:a3:b1:54:d8:c4:a7:2e:89:2d:82:66:97: e4:76:21:94:c6:7b:89:af:af:f5:59:fe:ba:43:8e:f4:00:c0: 5f:81:3d:de:c6:ca:ca:48:7c:f4:9b:8d:1a:9e:06:7e:de:42: 61:41:75:e0:5f:e4:92:47:da:9d:75:50:62:f6:c0:c4:ce:8e: cc:62:61:77:41:87:92:16:74:8b:06:0d:45:ff:dc:9d:f6:4b: 28:a3:e9:44:f5:1c:65:20:ff:3f:53:a4:de:59:0e:22:e5:18: 51:9f:43:6f:23:6d:78:9c:80:87:52:f6:a3:5d:50:42:d6:4f: f0:cd:cb:ce:9e:2c:7f:15:d1:96:08:5c:b3:9f:60:2d:9f:77: 08:e6:1b:9f:b9:e8:41:06:25:e5:58:85:df:4a:e7:f1:e8:ef: 2d:41:4b:1e:15:ce:79:4e:54:68:a2:e5:7d:24:33:73:3b:8d: 6d:a1:c7:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFKfCvlIzsBcKfZzR7Fkj1++hvUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1 Njk3M0UwQzAeFw0yNjA1MjkxNjIzMDFaFw0yNjA1MzAxODM3MDFaMDMxMTAvBgNV BAMTKDMxQThGRTVGQzc0N0M5RjQ0RjVDNDk1MUMzQTMyMkQ3NEEzN0U2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpnn3Qo5n0o9w6HVbsAlPChHkT tb/NHeo4wgUc83pJYagWCQAZ9aVtyskLPMJpPjoQiEfzdi1j+Wbsh25sQ+056eu+ xw3VBXcXaCmQbIDx2HT/0iHt9k4q/2SrIaucgtMytRxU5uqv0K+8Vo9v8mUUJCfA LobJUqMVZWIgMT/9g16glRssBpL3+3/qZaLrdvuTF7XAoI3KhrSJdojDXS/Oj1xe VgodBTZDKfu6BJ8Vf61kqydUZNYPCdSH6BIFsTNI740AOXh2pkrHbdCDzs+K02Pe dtniWhRy32HQddYWvVvjx/tQSxuWUczaLq9+Nw5+OOObpD5nPGSCBVwIfZVtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMaj+X8dHyfRPXElRw6Mi10o35g8wHwYDVR0j BBgwFoAUpaeiK3c1V7r5EH9SBx5Dy1aXPgwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg1NTMzMzQ4MzkwNTAyNi8wL0E1QTdBMjJCNzczNTU3QkFGOTEwN0Y1MjA3MUU0 M0NCNTY5NzNFMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVBN0EyMkI3NzM1NTdCQUY5MTA3RjUyMDcxRTQzQ0I1Njk3M0UwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NTUzMzM0ODM5MDUwMjYvMC9BNUE3QTIyQjc3MzU1 N0JBRjkxMDdGNTIwNzFFNDNDQjU2OTczRTBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULvHM7r+AT6r DO4qJ/2g4zTv962JKb8/Q2uiUHk/ZXW+F3K+Q3Pj57n+EIYTWSgVP3BSuaRJEacd 0oNvi5JrRis1twNpluw1Paa2aBBSo7FU2MSnLoktgmaX5HYhlMZ7ia+v9Vn+ukOO 9ADAX4E93sbKykh89JuNGp4Gft5CYUF14F/kkkfanXVQYvbAxM6OzGJhd0GHkhZ0 iwYNRf/cnfZLKKPpRPUcZSD/P1Ok3lkOIuUYUZ9DbyNteJyAh1L2o11QQtZP8M3L zp4sfxXRlghcs59gLZ93COYbn7noQQYl5ViF30rn8ejvLUFLHhXOeU5UaKLlfSQz czuNbaHHNw== -----END CERTIFICATE-----Generated at Fri May 29 22:05:51 2026 by rpki-client