$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft File: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft (raw, json) Hash identifier: gpbGkuMu3tqvJAn03wctJ870P/fQfaoOFibV82VUOp0= Subject key identifier: 23:F4:6C:1F:39:78:64:D8:F2:85:38:70:5F:BB:85:29:58:D4:3B:2C Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Certificate serial: 188C5050F4EC8E614904B5E27FF329B1A4AE4E8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 07:33:16 +0000 Manifest this update: Mon 02 Mar 2026 07:28:16 +0000 Manifest next update: Tue 03 Mar 2026 10:51:16 +0000 Files and hashes: 1: 32372e3134342e302e302f31362d3234203d3e203137393639.roa (hash: SYPXnxeRtZ7noFu43LGfNAwPQXoAc39ePYXU17knFQc=) 2: 323430313a376530303a3a2f33322d3634203d3e203137393639.roa (hash: EdGOODlWG3ONCUozOTYrfpFlATRW8oodZdYBqM1SnNY=) 3: 3131372e35392e302e302f31362d3234203d3e203137393639.roa (hash: jqEdbt3MhK6Z7J07psMZQBv74go8mG34DhxeSdGowbk=) 4: 3231382e3234342e302e302f31392d3234203d3e203137393639.roa (hash: qIBIXAx+bxCxVuXrC5KPDpWcIbbQfaWsos9qY8Hyohk=) 5: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl (hash: Eyv1Vo04kT3S8PelJEHVsrM9780oqWMLbzaS2pxMbcs=) 6: 3132352e36322e302e302f31382d3234203d3e203137393639.roa (hash: HUI+HHCfEB2nbQeHqwwB6/Ms2ZiM/pUUCnk/LE3eDjc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8c:50:50:f4:ec:8e:61:49:04:b5:e2:7f:f3:29:b1:a4:ae:4e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Validity Not Before: Mar 2 07:28:16 2026 GMT Not After : Mar 3 10:51:16 2026 GMT Subject: CN=23F46C1F397864D8F28538705FBB852958D43B2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c5:f3:dd:d0:e1:9f:14:bf:67:2e:09:2d:53: 4b:b2:5a:2c:84:7d:ac:99:67:3f:5d:61:06:e2:28: 52:cf:e6:45:8b:07:eb:00:f4:19:c7:7e:d1:8b:b3: 94:f5:39:ac:06:f3:9e:8d:b6:26:96:e0:51:e2:07: 3a:7d:ca:a1:32:0d:c5:93:7e:9f:f6:01:11:91:a7: 2d:65:d0:9a:92:69:0d:7f:08:bb:cc:e3:c5:3a:18: f4:ce:d9:42:9f:89:d4:8b:c6:70:a8:15:6a:18:09: 9d:23:fb:53:eb:f8:bb:c1:cc:8a:22:5b:b1:d3:f1: e7:9a:de:3d:94:61:bd:51:d3:ab:60:f8:d2:ad:c3: 72:09:e5:ec:5a:3d:ac:4b:80:12:d9:c4:47:38:be: 48:de:36:1a:31:c6:8d:34:f9:75:fe:10:be:e8:c3: 2c:d6:70:56:58:d8:a4:8f:cf:b2:3f:7b:de:6e:d7: 38:e2:10:db:45:99:bd:1c:d9:10:7e:93:17:f9:e3: 15:5f:6d:fc:00:c3:1e:ce:ae:a6:ae:ec:a7:10:c5: 2a:f8:93:eb:78:b5:8b:93:9e:fc:6d:79:ee:e9:2b: 5d:ca:d3:2a:d6:76:ed:d0:e9:fa:56:3f:2e:5c:a0: 21:6f:ad:09:da:4d:a7:97:39:2d:83:07:11:89:f4: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F4:6C:1F:39:78:64:D8:F2:85:38:70:5F:BB:85:29:58:D4:3B:2C X509v3 Authority Key Identifier: keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:6c:95:06:09:5a:23:19:e4:39:1b:16:42:64:59:83:bd:7b: db:64:7c:6a:5a:86:bf:98:76:f4:38:70:ea:a5:18:16:e2:fb: e0:bb:63:32:a8:47:41:ca:b5:8b:0b:79:8f:67:00:ac:72:15: d7:37:f9:9f:1d:f8:29:9b:9a:7c:f9:ca:f1:ef:f5:c4:1e:db: 22:c5:41:62:8d:5b:22:13:26:af:0b:86:e9:eb:59:4a:23:27: ab:7f:99:de:c3:05:63:ff:a1:a0:b9:55:78:fd:a4:82:06:0e: fd:4c:a4:85:59:28:55:95:4b:a9:8b:2b:0f:de:a4:fc:7a:de: ea:54:b0:6f:07:9c:d5:25:27:f3:0f:43:44:a1:12:2b:3d:7a: f8:09:5f:ae:c4:e9:e8:9a:2b:7d:6a:a7:b9:57:40:e0:1d:6f: 42:78:e4:3c:62:41:e2:9a:7b:15:41:a3:5f:db:80:c3:8a:53: fe:ca:0d:2e:86:da:7e:83:5d:bd:63:32:d2:f4:29:01:39:47: 25:98:a8:9e:8c:ce:4a:29:0d:14:52:0e:b3:14:87:f3:53:f6: 2b:70:c7:e3:c5:55:d7:e7:0f:b4:23:ec:87:b0:b8:fe:ef:a5: c4:a7:2c:41:6c:0b:bf:1b:9a:e6:c7:f9:ae:c1:26:5f:b8:0e: ba:21:cc:06 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGIxQUPTsjmFJBLXif/MpsaSuTo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF Nzk5NUFFMDAeFw0yNjAzMDIwNzI4MTZaFw0yNjAzMDMxMDUxMTZaMDMxMTAvBgNV BAMTKDIzRjQ2QzFGMzk3ODY0RDhGMjg1Mzg3MDVGQkI4NTI5NThENDNCMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxfPd0OGfFL9nLgktU0uyWiyE fayZZz9dYQbiKFLP5kWLB+sA9BnHftGLs5T1OawG856NtiaW4FHiBzp9yqEyDcWT fp/2ARGRpy1l0JqSaQ1/CLvM48U6GPTO2UKfidSLxnCoFWoYCZ0j+1Pr+LvBzIoi W7HT8eea3j2UYb1R06tg+NKtw3IJ5exaPaxLgBLZxEc4vkjeNhoxxo00+XX+EL7o wyzWcFZY2KSPz7I/e95u1zjiENtFmb0c2RB+kxf54xVfbfwAwx7Orqau7KcQxSr4 k+t4tYuTnvxtee7pK13K0yrWdu3Q6fpWPy5coCFvrQnaTaeXOS2DBxGJ9K7zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI/RsHzl4ZNjyhThwX7uFKVjUOywwHwYDVR0j BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4Nzg0MDMvMC81N0ZCQzYwMkY4REQx QUEwNkQ0NUU3RjNGMTk5Mzk2OEU3OTk1QUUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWyVBglaIxnk ORsWQmRZg71722R8alqGv5h29Dhw6qUYFuL74LtjMqhHQcq1iwt5j2cArHIV1zf5 nx34KZuafPnK8e/1xB7bIsVBYo1bIhMmrwuG6etZSiMnq3+Z3sMFY/+hoLlVeP2k ggYO/UykhVkoVZVLqYsrD96k/Hre6lSwbwec1SUn8w9DRKESKz16+AlfrsTp6Jor fWqnuVdA4B1vQnjkPGJB4pp7FUGjX9uAw4pT/soNLobafoNdvWMy0vQpATlHJZio nozOSikNFFIOsxSH81P2K3DH48VV1+cPtCPsh7C4/u+lxKcsQWwLvxua5sf5rsEm X7gOuiHMBg== -----END CERTIFICATE-----Generated at Mon Mar 2 15:46:35 2026 by rpki-client