$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft File: 5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft (raw, json) Hash identifier: lbkE7uj9KPZaqlZTAONJ/SIioJ2jOntqj+qviFCY+r8= Subject key identifier: 45:C3:A4:A5:DF:5A:87:0C:E7:44:56:A7:8F:16:EE:64:CD:33:5F:C4 Authority key identifier: 5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4 Certificate issuer: /CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4 Certificate serial: 0186D83C6E0BF541D9EFAEA26B97849096A4A181 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft Manifest number: 40 Signing time: Tue 14 Jul 2026 09:30:59 +0000 Manifest this update: Tue 14 Jul 2026 09:25:59 +0000 Manifest next update: Wed 15 Jul 2026 10:02:59 +0000 Files and hashes: 1: 323430363a316534303a663031323a3a2f34372d3437203d3e2034383337.roa (hash: ocFBS+51pfXKI0lNf1ZYbOle2BhHxF8/x93CRD8hQsQ=) 2: 5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl (hash: Qa/t3Aw/Lg7ecT0EWfinqToCWY+u3ojm6rra4A+Oi7o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 10:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:d8:3c:6e:0b:f5:41:d9:ef:ae:a2:6b:97:84:90:96:a4:a1:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4 Validity Not Before: Jul 14 09:25:59 2026 GMT Not After : Jul 15 10:02:59 2026 GMT Subject: CN=45C3A4A5DF5A870CE74456A78F16EE64CD335FC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e8:92:47:06:5f:b9:31:a9:a6:ed:d2:66:50: 9a:e4:a2:8b:35:61:16:0f:3e:61:7b:8e:fb:81:4e: ed:60:5d:34:ae:66:a6:fe:e9:08:92:58:c1:83:e9: ac:a9:68:60:6b:fc:06:94:66:1b:f6:92:69:07:a1: 70:e6:0e:1e:01:48:90:53:00:c6:01:93:e2:7d:e0: 52:cc:9d:73:f0:0a:81:e9:d6:9b:c7:db:9a:d8:3f: 58:4a:50:8d:b1:b7:32:92:6d:dd:67:6d:b7:c1:6c: a9:e2:a5:36:ee:05:ad:31:3a:66:36:94:28:c4:ee: e6:a6:51:65:98:5b:c5:f3:56:08:93:16:91:38:34: b2:24:ba:56:c4:7f:24:43:ff:58:2e:2f:24:80:fc: 3a:b6:0c:11:60:a8:4f:06:38:20:b2:8d:b5:4a:1d: 0d:57:9b:05:eb:4e:11:5f:fd:0c:7a:f5:9b:8e:3e: 87:00:a0:4f:e2:73:a1:bd:71:83:8a:e9:b9:0b:10: 52:0b:e3:4d:68:b6:dc:fb:1f:06:ee:40:e9:5a:b6: 01:96:33:20:7a:70:94:e8:d0:77:0c:30:5e:da:c2: a5:47:b8:61:f9:2a:d0:ed:c2:59:53:a5:56:6c:02: d1:d1:25:9d:11:23:9e:86:1c:9c:2c:a5:1d:a5:e8: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C3:A4:A5:DF:5A:87:0C:E7:44:56:A7:8F:16:EE:64:CD:33:5F:C4 X509v3 Authority Key Identifier: keyid:5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:c6:d8:0e:d5:07:29:24:cc:31:b8:6e:47:dc:d0:e5:78:df: ce:7d:c0:98:a4:b3:88:ea:ca:b9:9d:0b:14:10:91:11:b9:62: 2a:ac:13:53:5e:53:ff:8c:c8:20:6f:80:08:bc:90:d9:04:6a: 37:0c:97:6c:d1:86:98:33:ce:1b:3c:19:4d:a4:03:a4:18:90: 47:6f:83:fc:01:14:6f:83:59:e4:e8:09:93:dd:47:d9:00:60: 6f:f4:b3:d8:a5:db:54:e0:91:d5:6c:6c:24:b6:89:16:aa:49: 13:90:86:74:7b:a0:69:05:bb:3c:40:2f:1a:da:fd:99:64:ae: ca:58:2c:bb:78:6f:fc:cf:0c:18:76:68:6f:3d:d6:69:71:08: 2a:3e:9b:c2:5b:e5:c1:a7:bb:e0:06:9a:60:87:f6:6c:0f:19: de:32:e8:b0:be:45:48:71:b9:4f:ce:68:b7:36:c0:f8:98:61: 56:41:2d:a6:64:3f:e6:42:6b:bb:1e:84:2d:bb:46:d4:ab:7c: c5:14:7e:0d:db:23:20:6e:53:c1:07:f9:50:e9:32:4c:25:8a: 29:38:73:45:e4:ad:b6:2b:15:a3:1f:69:72:b4:0f:3f:dc:b0: 19:51:41:b0:2e:49:fd:8d:98:41:7f:c6:a3:81:3e:25:77:5a: 6e:24:45:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAYbYPG4L9UHZ766ia5eEkJakoYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExM0IwREU5QzhDMTY1RTFERjc0QjM3RUQ1RjA4QTAw REM3MDVGNDAeFw0yNjA3MTQwOTI1NTlaFw0yNjA3MTUxMDAyNTlaMDMxMTAvBgNV BAMTKDQ1QzNBNEE1REY1QTg3MENFNzQ0NTZBNzhGMTZFRTY0Q0QzMzVGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ6JJHBl+5Mamm7dJmUJrkoos1 YRYPPmF7jvuBTu1gXTSuZqb+6QiSWMGD6aypaGBr/AaUZhv2kmkHoXDmDh4BSJBT AMYBk+J94FLMnXPwCoHp1pvH25rYP1hKUI2xtzKSbd1nbbfBbKnipTbuBa0xOmY2 lCjE7uamUWWYW8XzVgiTFpE4NLIkulbEfyRD/1guLySA/Dq2DBFgqE8GOCCyjbVK HQ1XmwXrThFf/Qx69ZuOPocAoE/ic6G9cYOK6bkLEFIL401ottz7HwbuQOlatgGW MyB6cJTo0HcMMF7awqVHuGH5KtDtwllTpVZsAtHRJZ0RI56GHJwspR2l6IOrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURcOkpd9ahwznRFanjxbuZM0zX8QwHwYDVR0j BBgwFoAUWhOw3pyMFl4d90s37V8IoA3HBfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjMwMDEzMzQ3MjUzNDU0OS8wLzVBMTNCMERFOUM4QzE2NUUxREY3NEIzN0VENUYw OEEwMERDNzA1RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUExM0IwREU5QzhDMTY1RTFERjc0QjM3RUQ1RjA4QTAwREM3MDVGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIzMDAxMzM0NzI1MzQ1NDkvMC81QTEzQjBERTlDOEMx NjVFMURGNzRCMzdFRDVGMDhBMDBEQzcwNUY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8bYDtUHKSTM MbhuR9zQ5Xjfzn3AmKSziOrKuZ0LFBCREbliKqwTU15T/4zIIG+ACLyQ2QRqNwyX bNGGmDPOGzwZTaQDpBiQR2+D/AEUb4NZ5OgJk91H2QBgb/Sz2KXbVOCR1WxsJLaJ FqpJE5CGdHugaQW7PEAvGtr9mWSuylgsu3hv/M8MGHZobz3WaXEIKj6bwlvlwae7 4AaaYIf2bA8Z3jLosL5FSHG5T85otzbA+JhhVkEtpmQ/5kJrux6ELbtG1Kt8xRR+ DdsjIG5TwQf5UOkyTCWKKThzReSttisVox9pcrQPP9ywGVFBsC5J/Y2YQX/Go4E+ JXdabiRFMA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:54 2026 by rpki-client