$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft File: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft (raw, json) Hash identifier: boWxtH2zhG1HN3X2dOofBrKp1ZOd8JX21oQN8ZpHzEo= Subject key identifier: FF:B7:4E:72:6E:EF:45:92:03:24:9A:3C:C6:E3:12:59:96:73:56:CB Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 Certificate issuer: /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Certificate serial: 10865B04D5BC75D5C0D664D8FE60E58A3ACE0D2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft Manifest number: 02 Signing time: Fri 29 May 2026 06:36:47 +0000 Manifest this update: Fri 29 May 2026 06:31:47 +0000 Manifest next update: Sat 30 May 2026 09:06:47 +0000 Files and hashes: 1: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl (hash: 07cq3oyGJAEvlGk4HoGz5bPtzSSkSjsxrkSd5WDTuww=) 2: 323430343a363530303a646362333a3a2f34382d3438203d3e2034383337.roa (hash: tHPg+UAtakOXb2bI4+bicsHKTUKZvXIfQ1aMjcpe3+E=) 3: 3130332e382e33322e302f32342d3234203d3e2034313334.roa (hash: wNOnwlciSCkgqRaqEPPKB6JorJz54eTYd07doS61EyM=) 4: 3130332e382e33342e302f32342d3234203d3e20313430373236.roa (hash: JCGd1C1Wf1E9+GLgPxZv3lXwNa0mqdnQIY/nBaByWFc=) 5: 3130332e382e33342e302f32332d3233203d3e2034383337.roa (hash: JWCpOL58jnfjNneX9gL3amLDhbCleye0c+pPylUKcKI=) 6: 3130332e382e33352e302f32342d3234203d3e2034383337.roa (hash: GF8R9y/TBmc5cxAi05epTBCcdlrps0l6xAqDYhmKV9Q=) 7: 3130332e382e33332e302f32342d3234203d3e2034383337.roa (hash: YN2Z3o5Y7Gs1S7UHATzST6JGQAtD++MguSN4QeeZ6+Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:86:5b:04:d5:bc:75:d5:c0:d6:64:d8:fe:60:e5:8a:3a:ce:0d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Validity Not Before: May 29 06:31:47 2026 GMT Not After : May 30 09:06:47 2026 GMT Subject: CN=FFB74E726EEF459203249A3CC6E31259967356CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1a:c7:9f:40:49:5e:a4:49:b3:cf:69:c9:ff: 06:b5:4e:d8:e0:02:89:3f:a5:db:53:90:24:70:c2: 8e:07:69:5c:35:1f:9c:9d:af:97:36:a2:39:76:85: a6:d8:d6:c5:be:f6:a2:05:76:eb:16:4a:d1:41:aa: d6:4e:a5:a8:eb:37:ac:ad:0f:9e:7d:3c:ec:7e:b9: 44:33:fa:58:d5:e3:bc:3a:c6:32:b7:2f:b5:1b:26: b4:07:62:b9:ef:33:66:45:c3:8f:e1:09:9c:10:62: 61:3b:2d:f7:73:bb:13:40:55:81:d5:75:7c:46:04: ce:59:8a:80:1e:b2:e6:a5:de:47:c3:fe:d8:54:5a: 27:c5:de:f9:e3:b5:d7:4c:f1:15:d8:52:c1:75:d6: 2b:99:5e:a6:b3:0e:7a:5d:6a:af:1c:be:65:13:8e: 27:1f:ea:c0:e2:e8:a9:ef:5b:a1:24:52:6e:0a:d0: 68:f3:97:ba:f2:19:9c:9e:e3:c8:00:9d:e4:f6:fa: 4e:25:70:05:af:c7:d2:95:70:15:c7:90:bc:5f:75: 37:8e:d6:71:4d:c6:62:6f:67:e5:54:73:97:d8:f7: 45:1d:b6:46:28:b7:fe:bc:2c:c5:b7:01:42:f9:a7: 42:af:23:74:fd:7a:e9:76:9a:99:06:e7:47:5f:81: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B7:4E:72:6E:EF:45:92:03:24:9A:3C:C6:E3:12:59:96:73:56:CB X509v3 Authority Key Identifier: keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:38:53:f1:81:22:aa:5f:29:0d:f6:f6:db:e1:19:d9:cd:0c: 6e:c5:14:50:b6:11:2f:ed:63:e0:22:9f:c5:ae:e3:3b:c6:bb: b2:5b:e4:71:fe:e2:16:86:31:c4:d3:7a:5a:7d:f2:50:ca:60: 4c:c3:13:6c:f3:19:6f:31:07:b9:dd:7a:71:ce:e7:c7:8d:fe: 69:c4:11:8a:af:cd:09:09:be:13:c0:79:c6:43:26:5c:5e:f0: 32:15:c9:20:9d:23:a4:2d:3d:69:7d:3d:31:e3:f4:b9:f4:3a: aa:ca:45:72:9e:99:ec:d4:5f:e3:47:db:35:be:95:a8:70:3f: c9:b9:73:59:07:98:85:41:2b:e2:05:18:b2:7d:28:81:73:53: fd:a2:0e:d5:23:f4:7b:9d:9d:77:3c:71:ba:51:51:d7:a2:a6: 9c:a4:c4:11:36:f3:f8:16:fb:52:5e:72:8b:c3:df:86:6b:97: 18:44:28:62:94:64:43:ef:bb:6a:34:5a:bd:ee:09:f6:39:4e: 89:64:db:7b:14:da:16:a8:75:f9:d5:68:51:e4:cf:18:1f:bd: f3:8d:3b:5f:9b:2e:ae:a8:e2:27:71:aa:69:19:6d:8b:17:4c: 92:5b:c6:65:a1:c6:a6:5f:71:27:10:02:bb:7d:8c:63:57:3a: 10:65:bc:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEIZbBNW8ddXA1mTY/mDlijrODS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEy QUQ4RDNEOTAeFw0yNjA1MjkwNjMxNDdaFw0yNjA1MzAwOTA2NDdaMDMxMTAvBgNV BAMTKEZGQjc0RTcyNkVFRjQ1OTIwMzI0OUEzQ0M2RTMxMjU5OTY3MzU2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGsefQElepEmzz2nJ/wa1Ttjg Aok/pdtTkCRwwo4HaVw1H5ydr5c2ojl2habY1sW+9qIFdusWStFBqtZOpajrN6yt D559POx+uUQz+ljV47w6xjK3L7UbJrQHYrnvM2ZFw4/hCZwQYmE7LfdzuxNAVYHV dXxGBM5ZioAesual3kfD/thUWifF3vnjtddM8RXYUsF11iuZXqazDnpdaq8cvmUT jicf6sDi6KnvW6EkUm4K0Gjzl7ryGZye48gAneT2+k4lcAWvx9KVcBXHkLxfdTeO 1nFNxmJvZ+VUc5fY90UdtkYot/68LMW3AUL5p0KvI3T9eul2mpkG50dfgRJtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/7dOcm7vRZIDJJo8xuMSWZZzVsswHwYDVR0j BBgwFoAUWoEBc6RyF+u2DJ/ZXIM7ASrY09kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjYyNDE3NzgzNzI0NDQzNS8wLzVBODEwMTczQTQ3MjE3RUJCNjBDOUZEOTVDODMz QjAxMkFEOEQzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEyQUQ4RDNEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2MjQxNzc4MzcyNDQ0MzUvMC81QTgxMDE3M0E0NzIx N0VCQjYwQzlGRDk1QzgzM0IwMTJBRDhEM0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzhT8YEiql8p Dfb22+EZ2c0MbsUUULYRL+1j4CKfxa7jO8a7slvkcf7iFoYxxNN6Wn3yUMpgTMMT bPMZbzEHud16cc7nx43+acQRiq/NCQm+E8B5xkMmXF7wMhXJIJ0jpC09aX09MeP0 ufQ6qspFcp6Z7NRf40fbNb6VqHA/yblzWQeYhUEr4gUYsn0ogXNT/aIO1SP0e52d dzxxulFR16KmnKTEETbz+Bb7Ul5yi8PfhmuXGEQoYpRkQ++7ajRave4J9jlOiWTb exTaFqh1+dVoUeTPGB+98407X5surqjiJ3GqaRltixdMklvGZaHGpl9xJxACu32M Y1c6EGW8kw== -----END CERTIFICATE-----Generated at Fri May 29 22:03:39 2026 by rpki-client