$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft File: 5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft (raw, json) Hash identifier: ZDpCb2sX+PJi7erVghVWfIvIHQa7rbiymGsnfRMOiIQ= Subject key identifier: 5A:0A:06:75:ED:F0:85:6C:89:65:D8:F4:97:C8:7E:AC:93:72:C9:01 Authority key identifier: 5B:87:31:D8:20:0C:74:0F:2B:87:46:CC:3A:FF:45:FE:E6:A8:24:0E Certificate issuer: /CN=5B8731D8200C740F2B8746CC3AFF45FEE6A8240E Certificate serial: 3565A30EC3A053CDC33B530B5F195518AD9B6F9A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft Manifest number: 3B Signing time: Tue 14 Jul 2026 13:46:24 +0000 Manifest this update: Tue 14 Jul 2026 13:41:24 +0000 Manifest next update: Wed 15 Jul 2026 17:40:24 +0000 Files and hashes: 1: 5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.crl (hash: HJjmXtKztZmrpPUC5GYS6RSE5SpnbpexGsVKeJVEQTM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.crl rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 17:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:65:a3:0e:c3:a0:53:cd:c3:3b:53:0b:5f:19:55:18:ad:9b:6f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8731D8200C740F2B8746CC3AFF45FEE6A8240E Validity Not Before: Jul 14 13:41:24 2026 GMT Not After : Jul 15 17:40:24 2026 GMT Subject: CN=5A0A0675EDF0856C8965D8F497C87EAC9372C901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fe:3f:f6:df:93:e9:7d:53:e6:3f:35:e1:3d: 62:90:6f:fc:83:44:c5:c3:0b:5b:11:99:26:f1:05: 5c:32:e8:da:eb:6c:e3:e4:f7:e2:b7:b1:2f:1c:2d: b6:1f:97:15:9b:40:19:c5:4b:72:99:4b:02:2d:df: 61:ee:56:1c:ca:62:46:60:71:4c:9c:d2:9c:1b:0a: ff:e4:cf:50:48:28:53:4e:e4:99:c5:43:8e:6f:d0: 18:50:28:ae:5a:f8:fa:40:1e:08:b8:b6:21:d9:ef: 7c:5e:4b:c2:0d:1a:d0:22:8c:7f:99:a7:0f:1a:c2: 3b:48:58:f2:9d:85:bf:90:82:63:c8:7a:2d:8d:ca: 56:7f:35:cd:0b:6f:c4:90:09:27:a4:49:15:b0:0e: 03:cc:99:d3:06:52:1d:dd:b7:c8:81:7d:81:70:36: 62:30:37:a3:07:b3:c8:41:46:64:d9:e1:0f:1d:3a: 4d:35:d1:89:58:15:76:ea:c0:cc:83:20:90:12:4d: 89:0b:13:d4:a2:81:ac:e3:39:78:1f:2e:a1:b2:e0: a0:ad:13:aa:ab:5a:09:a8:12:1a:66:59:90:61:4c: 40:52:2c:ab:27:d6:7f:06:33:6c:05:e9:f1:83:a9: c2:90:20:43:01:46:dd:a8:5a:a4:07:42:03:c9:fd: 1e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0A:06:75:ED:F0:85:6C:89:65:D8:F4:97:C8:7E:AC:93:72:C9:01 X509v3 Authority Key Identifier: keyid:5B:87:31:D8:20:0C:74:0F:2B:87:46:CC:3A:FF:45:FE:E6:A8:24:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/1/5B8731D8200C740F2B8746CC3AFF45FEE6A8240E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:db:ec:e0:e5:15:d3:28:a7:53:2e:15:4f:d4:e6:25:53:23: 9d:87:19:43:31:c1:7a:50:e2:93:5c:5f:ee:f4:fe:9f:a2:e4: 7b:1e:b3:bb:3d:ca:2a:12:1d:63:6c:af:f4:35:45:de:3d:f6: 8f:c4:70:e9:4b:e6:54:eb:c7:04:21:38:36:55:12:87:74:f3: a7:dd:5d:36:5a:4a:90:e8:d5:41:2f:9a:f2:b9:0e:82:dd:31: 35:b1:09:f8:72:5d:74:12:ba:b6:73:20:03:7a:5e:13:f3:8a: 98:d9:5b:57:36:64:bc:24:ca:b9:c5:37:72:c4:b2:b5:ab:87: fb:51:98:43:cd:d9:90:6a:91:b3:d5:df:02:38:f3:b0:06:18: 66:a3:5b:84:11:ec:dd:cb:5b:49:0e:6a:3c:35:61:2e:83:b2: ff:7c:08:bc:50:f5:2f:57:a5:34:23:7d:10:2b:b5:37:1c:ab: ea:a4:96:23:60:8d:d9:7c:76:81:60:7a:c2:97:e2:b6:dd:f5: 31:cf:e0:50:03:bd:c6:01:7d:b8:bf:bd:32:b0:87:e4:6f:69: 35:cd:26:87:eb:cf:f3:f1:0d:80:6f:a3:03:0f:30:58:49:48: c8:ca:84:61:06:68:20:ec:f0:22:e4:55:47:7a:f7:c8:2a:2e: 27:99:49:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNWWjDsOgU83DO1MLXxlVGK2bb5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4NzMxRDgyMDBDNzQwRjJCODc0NkNDM0FGRjQ1RkVF NkE4MjQwRTAeFw0yNjA3MTQxMzQxMjRaFw0yNjA3MTUxNzQwMjRaMDMxMTAvBgNV BAMTKDVBMEEwNjc1RURGMDg1NkM4OTY1RDhGNDk3Qzg3RUFDOTM3MkM5MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/j/235PpfVPmPzXhPWKQb/yD RMXDC1sRmSbxBVwy6NrrbOPk9+K3sS8cLbYflxWbQBnFS3KZSwIt32HuVhzKYkZg cUyc0pwbCv/kz1BIKFNO5JnFQ45v0BhQKK5a+PpAHgi4tiHZ73xeS8INGtAijH+Z pw8awjtIWPKdhb+QgmPIei2NylZ/Nc0Lb8SQCSekSRWwDgPMmdMGUh3dt8iBfYFw NmIwN6MHs8hBRmTZ4Q8dOk010YlYFXbqwMyDIJASTYkLE9SigazjOXgfLqGy4KCt E6qrWgmoEhpmWZBhTEBSLKsn1n8GM2wF6fGDqcKQIEMBRt2oWqQHQgPJ/R6nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWgoGde3whWyJZdj0l8h+rJNyyQEwHwYDVR0j BBgwFoAUW4cx2CAMdA8rh0bMOv9F/uaoJA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzY0ODAyNjcyOTA1NDIyNy8xLzVCODczMUQ4MjAwQzc0MEYyQjg3NDZDQzNBRkY0 NUZFRTZBODI0MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUI4NzMxRDgyMDBDNzQwRjJCODc0NkNDM0FGRjQ1RkVFNkE4MjQwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2NDgwMjY3MjkwNTQyMjcvMS81Qjg3MzFEODIwMEM3 NDBGMkI4NzQ2Q0MzQUZGNDVGRUU2QTgyNDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzNvs4OUV0yin Uy4VT9TmJVMjnYcZQzHBelDik1xf7vT+n6Lkex6zuz3KKhIdY2yv9DVF3j32j8Rw 6UvmVOvHBCE4NlUSh3Tzp91dNlpKkOjVQS+a8rkOgt0xNbEJ+HJddBK6tnMgA3pe E/OKmNlbVzZkvCTKucU3csSytauH+1GYQ83ZkGqRs9XfAjjzsAYYZqNbhBHs3ctb SQ5qPDVhLoOy/3wIvFD1L1elNCN9ECu1Nxyr6qSWI2CN2Xx2gWB6wpfitt31Mc/g UAO9xgF9uL+9MrCH5G9pNc0mh+vP8/ENgG+jAw8wWElIyMqEYQZoIOzwIuRVR3r3 yCouJ5lJjw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:01:56 2026 by rpki-client