$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft File: 5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft (raw, json) Hash identifier: +di28h/WDpXLI7UyZPKMBequA6/nJ3PA4N/UedJ69As= Subject key identifier: F2:94:98:FC:0F:75:61:A5:F3:41:05:33:C9:AC:86:74:88:02:7C:B2 Authority key identifier: 5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4 Certificate issuer: /CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4 Certificate serial: 01764BD1D1B4CFD94E723C966C64D195D97FE08D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft Manifest number: 90 Signing time: Wed 14 Oct 2026 13:09:09 +0000 Manifest this update: Wed 14 Oct 2026 13:04:09 +0000 Manifest next update: Sat 17 Oct 2026 18:13:09 +0000 Files and hashes: 1: 5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl (hash: XX+FXjMVjQeWMzjmfuS/5B1hgnIsSt+92QpHvQUA598=) 2: 323430363a316534303a663031323a3a2f34372d3437203d3e2034383337.roa (hash: ocFBS+51pfXKI0lNf1ZYbOle2BhHxF8/x93CRD8hQsQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:76:4b:d1:d1:b4:cf:d9:4e:72:3c:96:6c:64:d1:95:d9:7f:e0:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4 Validity Not Before: Oct 14 13:04:09 2026 GMT Not After : Oct 17 18:13:09 2026 GMT Subject: CN=F29498FC0F7561A5F3410533C9AC867488027CB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:90:09:07:b6:7a:e6:46:1d:90:a6:4f:3f: 99:2e:8d:31:65:97:42:c4:a3:af:75:d8:32:35:5e: 18:49:d1:52:2b:12:96:05:73:e1:1a:85:8d:92:81: b7:f5:46:bf:ae:2b:f6:80:d5:15:b9:89:0d:e2:d2: e8:bd:52:ca:36:b7:a0:0c:3d:a6:ec:9a:99:10:1c: 10:f1:ff:ff:aa:74:3d:8a:ab:6b:28:ec:d6:60:f1: da:9a:e2:cd:2e:f4:1d:24:30:e6:50:60:33:e6:0c: 0e:63:51:f3:96:b5:d8:6c:b6:95:1b:dc:35:b3:58: ef:cf:02:28:3c:2d:65:98:39:5b:33:84:9f:a0:3f: 1b:9b:0d:c7:06:7b:2a:80:eb:0c:99:d1:df:e6:fd: 24:73:24:e1:2c:f2:ed:57:b5:83:9c:c8:df:09:7c: 91:98:21:7d:39:db:ea:4e:2d:58:4a:09:0f:fe:77: 70:89:f7:e7:f9:67:d2:5a:9b:10:c7:56:6c:28:11: ac:ed:37:4b:08:81:6d:27:c9:75:76:72:52:93:a1: b4:5f:f2:f6:87:a4:cb:f8:91:db:b1:e7:87:86:7e: 80:64:01:24:97:d8:68:8c:75:a6:8e:b8:46:e3:4d: 63:e1:7b:8e:27:83:14:bd:37:b3:e8:f0:f4:68:fd: f2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:94:98:FC:0F:75:61:A5:F3:41:05:33:C9:AC:86:74:88:02:7C:B2 X509v3 Authority Key Identifier: keyid:5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:df:51:f3:8e:07:66:a0:b4:4e:db:0c:42:6e:22:cd:19:9d: 37:6d:cc:df:e5:93:aa:bf:8d:3a:2b:af:09:27:f1:bd:23:79: c3:b1:75:c3:6f:b0:aa:4c:77:1d:b2:17:09:27:35:d3:ff:ea: 00:09:5e:d9:40:8f:e0:1c:8d:c5:10:db:5c:5b:ac:f9:bb:74: 00:b7:e4:e3:8c:cf:aa:3c:94:23:e2:ad:9a:b6:28:7f:b1:7a: 2d:7e:7e:b9:e6:fd:cc:c5:e1:c8:6a:34:ec:51:ba:7c:30:1c: 96:f5:ed:19:90:f6:12:54:00:1c:06:84:0f:ab:39:e8:10:61: 22:5d:ac:f4:d2:66:11:3b:cc:d6:47:95:4e:63:3f:a5:ba:4e: 4e:c5:79:00:e2:6c:b9:8a:16:a9:4b:de:a1:b1:62:08:4d:b5: 2e:82:87:54:7a:e7:01:5c:8c:13:dc:ff:0d:cf:55:24:29:74: fb:62:f1:39:bc:ee:e8:95:e3:09:af:46:a2:b3:55:e2:ab:0d: e8:81:d7:85:b7:72:34:a1:bd:34:b2:35:aa:d3:b6:b4:a1:f7: 1a:eb:fe:57:01:48:0e:c3:5e:d5:72:03:89:d3:d9:04:51:bb: fd:15:75:3a:be:06:e4:e7:e4:01:8d:47:10:11:a4:12:80:69: 03:15:2a:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAXZL0dG0z9lOcjyWbGTRldl/4I0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExM0IwREU5QzhDMTY1RTFERjc0QjM3RUQ1RjA4QTAw REM3MDVGNDAeFw0yNjEwMTQxMzA0MDlaFw0yNjEwMTcxODEzMDlaMDMxMTAvBgNV BAMTKEYyOTQ5OEZDMEY3NTYxQTVGMzQxMDUzM0M5QUM4Njc0ODgwMjdDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaL5AJB7Z65kYdkKZPP5kujTFl l0LEo6912DI1XhhJ0VIrEpYFc+EahY2Sgbf1Rr+uK/aA1RW5iQ3i0ui9Uso2t6AM PabsmpkQHBDx//+qdD2Kq2so7NZg8dqa4s0u9B0kMOZQYDPmDA5jUfOWtdhstpUb 3DWzWO/PAig8LWWYOVszhJ+gPxubDccGeyqA6wyZ0d/m/SRzJOEs8u1XtYOcyN8J fJGYIX052+pOLVhKCQ/+d3CJ9+f5Z9JamxDHVmwoEaztN0sIgW0nyXV2clKTobRf 8vaHpMv4kdux54eGfoBkASSX2GiMdaaOuEbjTWPhe44ngxS9N7Po8PRo/fJRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8pSY/A91YaXzQQUzyayGdIgCfLIwHwYDVR0j BBgwFoAUWhOw3pyMFl4d90s37V8IoA3HBfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjMwMDEzMzQ3MjUzNDU0OS8wLzVBMTNCMERFOUM4QzE2NUUxREY3NEIzN0VENUYw OEEwMERDNzA1RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUExM0IwREU5QzhDMTY1RTFERjc0QjM3RUQ1RjA4QTAwREM3MDVGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIzMDAxMzM0NzI1MzQ1NDkvMC81QTEzQjBERTlDOEMx NjVFMURGNzRCMzdFRDVGMDhBMDBEQzcwNUY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHt9R844HZqC0 TtsMQm4izRmdN23M3+WTqr+NOiuvCSfxvSN5w7F1w2+wqkx3HbIXCSc10//qAAle 2UCP4ByNxRDbXFus+bt0ALfk44zPqjyUI+KtmrYof7F6LX5+ueb9zMXhyGo07FG6 fDAclvXtGZD2ElQAHAaED6s56BBhIl2s9NJmETvM1keVTmM/pbpOTsV5AOJsuYoW qUveobFiCE21LoKHVHrnAVyME9z/Dc9VJCl0+2LxObzu6JXjCa9GorNV4qsN6IHX hbdyNKG9NLI1qtO2tKH3Guv+VwFIDsNe1XIDidPZBFG7/RV1Or4G5OfkAY1HEBGk EoBpAxUqDg== -----END CERTIFICATE-----Generated at Thu Oct 15 05:11:56 2026 by rpki-client