$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft File: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft (raw, json) Hash identifier: moZ7xbZHvBa1HO425jqHQ8dOatIOka2447BfK0jk1zI= Subject key identifier: 89:DA:0C:DB:DC:E3:DA:EA:14:BA:AD:F3:0C:98:5E:8A:BA:5D:09:F8 Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 Certificate issuer: /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Certificate serial: 71EAEC35D70EA2674A1BE91DB7D2FE1D23DBE6AF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft Manifest number: 7B Signing time: Fri 28 Aug 2026 06:48:11 +0000 Manifest this update: Fri 28 Aug 2026 06:43:11 +0000 Manifest next update: Mon 31 Aug 2026 13:04:11 +0000 Files and hashes: 1: 323430343a363530303a646362333a3a2f34382d3438203d3e2034383337.roa (hash: tHPg+UAtakOXb2bI4+bicsHKTUKZvXIfQ1aMjcpe3+E=) 2: 3130332e382e33322e302f32342d3234203d3e2034313334.roa (hash: wNOnwlciSCkgqRaqEPPKB6JorJz54eTYd07doS61EyM=) 3: 3130332e382e33342e302f32332d3233203d3e2034383337.roa (hash: JWCpOL58jnfjNneX9gL3amLDhbCleye0c+pPylUKcKI=) 4: 3130332e382e33352e302f32342d3234203d3e2034383337.roa (hash: GF8R9y/TBmc5cxAi05epTBCcdlrps0l6xAqDYhmKV9Q=) 5: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl (hash: nxIyGvxaQyGM2DWe/DmNXwzBsVYvCN7XHhkhOC0I/FU=) 6: 3130332e382e33342e302f32342d3234203d3e20313430373236.roa (hash: JCGd1C1Wf1E9+GLgPxZv3lXwNa0mqdnQIY/nBaByWFc=) 7: 3130332e382e33332e302f32342d3234203d3e2034383337.roa (hash: YN2Z3o5Y7Gs1S7UHATzST6JGQAtD++MguSN4QeeZ6+Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ea:ec:35:d7:0e:a2:67:4a:1b:e9:1d:b7:d2:fe:1d:23:db:e6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Validity Not Before: Aug 28 06:43:11 2026 GMT Not After : Aug 31 13:04:11 2026 GMT Subject: CN=89DA0CDBDCE3DAEA14BAADF30C985E8ABA5D09F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:37:d1:ee:1d:aa:7c:37:ee:02:78:51:ae:46: 79:bc:b3:7e:cd:ef:c0:4b:e2:4a:7a:7b:5f:4d:d4: a6:bd:08:76:6b:33:54:63:a5:91:ab:6d:e8:d5:a0: ae:4c:db:a1:cb:fe:fd:6b:0f:e2:ad:af:34:96:48: 70:c3:0b:65:3f:87:7d:fb:67:c2:c8:9a:2d:41:4d: 73:1d:fb:6b:88:39:6a:7b:5f:91:87:7b:bd:29:ab: d3:2c:70:ea:c5:e6:38:35:45:8d:49:b9:ea:f1:90: 71:d4:0b:38:5e:fc:90:91:c9:e9:8a:a5:eb:9d:ad: d3:0c:1f:30:a2:ab:65:d6:24:c5:4a:f6:64:ee:5d: 7c:f7:80:cf:db:88:4b:d9:44:0c:9c:59:8e:3a:b0: 90:97:b8:e9:f4:8d:f8:c8:6a:2c:ca:48:5a:0b:ee: 1e:af:b4:f2:78:33:b4:59:c9:0d:42:3d:ab:1a:49: 84:c9:0e:53:7f:82:9f:39:f0:e0:2b:21:66:ba:3a: c3:fc:10:2d:dc:cb:d3:ac:8b:f9:5c:d1:bc:a5:41: 99:41:8a:89:88:64:a7:1a:6b:98:e8:9a:74:07:83: f3:98:1c:ce:a8:86:a5:c1:b8:44:a5:89:dd:e1:b7: 1c:b8:50:e6:95:61:27:79:3e:3c:41:16:bf:25:17: 28:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DA:0C:DB:DC:E3:DA:EA:14:BA:AD:F3:0C:98:5E:8A:BA:5D:09:F8 X509v3 Authority Key Identifier: keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:12:bd:c2:c3:15:bb:90:1e:ea:24:53:b4:81:72:02:76:19: 0d:1d:96:95:29:30:3b:7d:63:c2:04:2e:79:c7:b3:c7:7e:d3: a6:ad:4d:b7:79:f2:25:23:4f:36:6b:88:43:61:5f:75:f9:52: 9a:1c:2f:c9:c9:7c:d0:28:e1:94:e6:5f:c8:f3:e7:de:17:93: e0:50:6b:bd:19:d9:78:31:8e:01:b0:09:b1:1e:45:b3:c6:03: 88:01:b0:77:77:e1:82:b7:30:8f:2c:d0:90:37:02:b9:e8:8a: fe:e3:21:f7:c6:b6:4f:0c:13:f8:a1:d5:3c:28:db:a6:85:90: 42:df:44:9e:3d:5e:31:e7:2a:6e:ea:3a:af:0e:20:70:f9:91: be:50:de:a1:01:75:9e:ef:24:8d:dd:c9:0c:0e:22:5b:2c:c3: a1:49:8f:e2:29:ab:b6:54:96:23:2b:48:46:ad:51:7f:30:e0: 4d:dc:99:59:2b:46:35:a9:a6:c1:bf:06:ad:e2:eb:c0:43:d1: 98:2a:ec:64:74:e1:98:4e:8e:0e:ad:05:52:ac:40:5b:b6:c3: 1f:cc:ca:84:ee:d8:c2:71:bb:86:c2:a4:bb:01:80:7a:07:39: 4d:d3:4b:ee:d4:33:81:44:91:22:29:f1:8e:57:5a:a9:aa:64: 7b:63:81:03 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcersNdcOomdKG+kdt9L+HSPb5q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEy QUQ4RDNEOTAeFw0yNjA4MjgwNjQzMTFaFw0yNjA4MzExMzA0MTFaMDMxMTAvBgNV BAMTKDg5REEwQ0RCRENFM0RBRUExNEJBQURGMzBDOTg1RThBQkE1RDA5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbN9HuHap8N+4CeFGuRnm8s37N 78BL4kp6e19N1Ka9CHZrM1RjpZGrbejVoK5M26HL/v1rD+KtrzSWSHDDC2U/h337 Z8LImi1BTXMd+2uIOWp7X5GHe70pq9MscOrF5jg1RY1JuerxkHHUCzhe/JCRyemK peudrdMMHzCiq2XWJMVK9mTuXXz3gM/biEvZRAycWY46sJCXuOn0jfjIaizKSFoL 7h6vtPJ4M7RZyQ1CPasaSYTJDlN/gp858OArIWa6OsP8EC3cy9Osi/lc0bylQZlB iomIZKcaa5jomnQHg/OYHM6ohqXBuESlid3htxy4UOaVYSd5PjxBFr8lFyhtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUidoM29zj2uoUuq3zDJheirpdCfgwHwYDVR0j BBgwFoAUWoEBc6RyF+u2DJ/ZXIM7ASrY09kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjYyNDE3NzgzNzI0NDQzNS8wLzVBODEwMTczQTQ3MjE3RUJCNjBDOUZEOTVDODMz QjAxMkFEOEQzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEyQUQ4RDNEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2MjQxNzc4MzcyNDQ0MzUvMC81QTgxMDE3M0E0NzIx N0VCQjYwQzlGRDk1QzgzM0IwMTJBRDhEM0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRK9wsMVu5Ae 6iRTtIFyAnYZDR2WlSkwO31jwgQuecezx37Tpq1Nt3nyJSNPNmuIQ2FfdflSmhwv ycl80CjhlOZfyPPn3heT4FBrvRnZeDGOAbAJsR5Fs8YDiAGwd3fhgrcwjyzQkDcC ueiK/uMh98a2TwwT+KHVPCjbpoWQQt9Enj1eMecqbuo6rw4gcPmRvlDeoQF1nu8k jd3JDA4iWyzDoUmP4imrtlSWIytIRq1RfzDgTdyZWStGNammwb8GreLrwEPRmCrs ZHThmE6ODq0FUqxAW7bDH8zKhO7YwnG7hsKkuwGAegc5TdNL7tQzgUSRIinxjlda qapke2OBAw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:56 2026 by rpki-client