$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft File: 5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft (raw, json) Hash identifier: 61iiSmNpZCqIi/WGBGyrOglVgJ91h6kkOof2NA6fluM= Subject key identifier: 4C:8F:A6:66:75:D0:2D:23:83:95:5D:A1:3B:94:7C:89:F1:B0:AF:0C Authority key identifier: 5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4 Certificate issuer: /CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4 Certificate serial: 76092996C646A9ADB2A947F58185E94B09A9AA3B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft Manifest number: 02 Signing time: Fri 29 May 2026 03:37:31 +0000 Manifest this update: Fri 29 May 2026 03:32:31 +0000 Manifest next update: Sat 30 May 2026 06:19:31 +0000 Files and hashes: 1: 5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl (hash: nOFMBTSlah4IYirZnDpPCA1+WRvHAd46H6Y2bT4DDVc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 06:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:09:29:96:c6:46:a9:ad:b2:a9:47:f5:81:85:e9:4b:09:a9:aa:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4 Validity Not Before: May 29 03:32:31 2026 GMT Not After : May 30 06:19:31 2026 GMT Subject: CN=4C8FA66675D02D2383955DA13B947C89F1B0AF0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:b9:64:ba:68:83:47:4f:14:b6:66:e6:65: 3f:af:bc:bc:e1:57:c8:6a:ab:83:ff:bb:6b:93:ac: 95:1c:31:4f:e8:d8:1a:5a:26:b1:e7:3f:97:d8:cc: 31:de:5d:3b:05:21:01:2d:be:11:b2:79:a6:9d:be: 06:e7:9a:8f:3d:00:3a:a0:00:6d:03:e5:6e:51:2f: e9:f6:48:58:32:49:a1:44:c2:7d:dc:e3:3d:68:b9: 59:02:9a:6d:e2:08:18:47:22:e7:76:0d:e8:7e:16: c8:bf:a6:bc:35:4a:de:ce:1c:ae:ad:b6:51:d1:dc: 8e:92:30:80:f1:5b:77:5b:00:8b:c6:54:e4:16:ed: 1f:f2:f8:e4:c2:61:4d:3b:8e:b7:96:f7:44:f8:06: 42:5d:94:97:2b:97:95:25:df:5c:5e:a3:38:b1:41: eb:db:ad:11:44:43:9f:eb:16:69:54:cf:41:d2:21: 8a:1c:c2:a9:d5:10:b2:73:90:4f:cf:ba:d2:c7:6a: 4f:b3:c0:03:d4:57:a3:70:a9:d4:95:37:9f:87:81: aa:f9:60:9f:c8:1f:23:cc:4e:9d:10:43:22:8c:77: 95:9b:24:3b:3b:ee:1b:19:71:8c:4a:b6:75:32:88: 3c:42:9a:d3:bc:80:0f:e0:30:bd:91:8c:ed:af:77: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8F:A6:66:75:D0:2D:23:83:95:5D:A1:3B:94:7C:89:F1:B0:AF:0C X509v3 Authority Key Identifier: keyid:5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:b9:ca:1d:1f:90:ac:40:cd:7c:e8:85:a5:8c:60:2d:5b:0d: 2a:c1:7d:a8:a2:88:6e:17:f9:45:dc:b0:87:3b:f2:ab:f9:c9: 18:72:04:5e:89:f8:2b:f2:08:1b:f0:c8:74:ac:3b:00:0f:35: ce:59:c2:c4:03:37:18:87:64:4b:64:92:83:35:f6:2a:ef:04: e2:68:e6:a7:c2:a0:83:d8:7f:cd:ee:6a:95:89:d3:81:bd:48: da:1a:c8:c5:6e:a4:51:23:36:05:13:45:f6:c0:ed:57:4f:6a: 56:65:8b:fa:36:f7:74:25:3b:d0:22:44:c0:b2:4b:86:9b:aa: 36:74:af:5e:a5:21:be:b3:bc:0e:b5:86:09:63:09:0e:bb:b8: 38:45:8c:3f:81:3e:17:a9:0b:cd:11:3d:83:59:ba:20:88:98: f1:aa:12:17:37:62:34:2b:c5:0b:2e:bf:32:89:f5:e7:d0:62: 44:62:78:eb:ee:05:1d:81:dc:3a:75:13:38:89:d1:c4:c9:be: 42:5d:57:8e:3a:fa:72:b9:d4:39:80:fa:c6:1e:2e:c2:c6:d1: ef:e4:12:70:f5:ed:58:78:a3:24:ae:5d:6e:5b:c8:80:2c:3d: a4:42:49:8b:df:b3:d0:45:b3:31:45:24:c2:fd:2a:35:7b:b9: 54:6b:b1:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdgkplsZGqa2yqUf1gYXpSwmpqjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExM0IwREU5QzhDMTY1RTFERjc0QjM3RUQ1RjA4QTAw REM3MDVGNDAeFw0yNjA1MjkwMzMyMzFaFw0yNjA1MzAwNjE5MzFaMDMxMTAvBgNV BAMTKDRDOEZBNjY2NzVEMDJEMjM4Mzk1NURBMTNCOTQ3Qzg5RjFCMEFGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQblkumiDR08UtmbmZT+vvLzh V8hqq4P/u2uTrJUcMU/o2BpaJrHnP5fYzDHeXTsFIQEtvhGyeaadvgbnmo89ADqg AG0D5W5RL+n2SFgySaFEwn3c4z1ouVkCmm3iCBhHIud2Deh+Fsi/prw1St7OHK6t tlHR3I6SMIDxW3dbAIvGVOQW7R/y+OTCYU07jreW90T4BkJdlJcrl5Ul31xeozix QevbrRFEQ5/rFmlUz0HSIYocwqnVELJzkE/PutLHak+zwAPUV6NwqdSVN5+Hgar5 YJ/IHyPMTp0QQyKMd5WbJDs77hsZcYxKtnUyiDxCmtO8gA/gML2RjO2vdza1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTI+mZnXQLSODlV2hO5R8ifGwrwwwHwYDVR0j BBgwFoAUWhOw3pyMFl4d90s37V8IoA3HBfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjMwMDEzMzQ3MjUzNDU0OS8wLzVBMTNCMERFOUM4QzE2NUUxREY3NEIzN0VENUYw OEEwMERDNzA1RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUExM0IwREU5QzhDMTY1RTFERjc0QjM3RUQ1RjA4QTAwREM3MDVGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIzMDAxMzM0NzI1MzQ1NDkvMC81QTEzQjBERTlDOEMx NjVFMURGNzRCMzdFRDVGMDhBMDBEQzcwNUY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt7nKHR+QrEDN fOiFpYxgLVsNKsF9qKKIbhf5Rdywhzvyq/nJGHIEXon4K/IIG/DIdKw7AA81zlnC xAM3GIdkS2SSgzX2Ku8E4mjmp8Kgg9h/ze5qlYnTgb1I2hrIxW6kUSM2BRNF9sDt V09qVmWL+jb3dCU70CJEwLJLhpuqNnSvXqUhvrO8DrWGCWMJDru4OEWMP4E+F6kL zRE9g1m6IIiY8aoSFzdiNCvFCy6/Mon159BiRGJ46+4FHYHcOnUTOInRxMm+Ql1X jjr6crnUOYD6xh4uwsbR7+QScPXtWHijJK5dblvIgCw9pEJJi9+z0EWzMUUkwv0q NXu5VGuxKg== -----END CERTIFICATE-----Generated at Fri May 29 22:02:57 2026 by rpki-client