$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft File: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft (raw, json) Hash identifier: xcbM1l5bRh6RpkS98qgYgWWp5WIYh4mJqfX8K8xrMgw= Subject key identifier: FD:3D:DD:79:6B:07:D3:E6:EC:FD:1C:9E:F5:7C:4C:4F:30:47:93:8B Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Certificate serial: 6E9DEFE994ECA6BA1A0D6E75C00FEC6EA072926F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 17:14:43 +0000 Manifest this update: Fri 17 Apr 2026 17:09:43 +0000 Manifest next update: Sat 18 Apr 2026 18:24:43 +0000 Files and hashes: 1: 34322e35302e302e302f31362d3234203d3e203137393639.roa (hash: BU7824LM2GcqISfl9RQuaQpqoVPVFfmsdHGml4Pg4E8=) 2: 3230332e3136312e3139322e302f31392d3234203d3e203137393639.roa (hash: 5Tg0FQdSDq/Zu86whup67Wa88hxIMsyCZY10zhpGkNQ=) 3: 3132352e36322e302e302f31382d3234203d3e203137393639.roa (hash: HUI+HHCfEB2nbQeHqwwB6/Ms2ZiM/pUUCnk/LE3eDjc=) 4: 3131372e35392e302e302f31362d3234203d3e203137393639.roa (hash: jqEdbt3MhK6Z7J07psMZQBv74go8mG34DhxeSdGowbk=) 5: 34322e3132332e3132382e302f31372d3234203d3e203137393639.roa (hash: HJAEw0em6DXYtKjOb8eOjxjOleqPkWguwakB00hU4DQ=) 6: 323430313a376530303a3a2f33322d3634203d3e203137393639.roa (hash: EdGOODlWG3ONCUozOTYrfpFlATRW8oodZdYBqM1SnNY=) 7: 32372e3134342e302e302f31362d3234203d3e203137393639.roa (hash: SYPXnxeRtZ7noFu43LGfNAwPQXoAc39ePYXU17knFQc=) 8: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl (hash: gywDMrkjfjJBITsQrzf9qOPpejp0VPJ4yW9tgYFHNQ8=) 9: 3231382e3234342e302e302f31392d3234203d3e203137393639.roa (hash: qIBIXAx+bxCxVuXrC5KPDpWcIbbQfaWsos9qY8Hyohk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:9d:ef:e9:94:ec:a6:ba:1a:0d:6e:75:c0:0f:ec:6e:a0:72:92:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Validity Not Before: Apr 17 17:09:43 2026 GMT Not After : Apr 18 18:24:43 2026 GMT Subject: CN=FD3DDD796B07D3E6ECFD1C9EF57C4C4F3047938B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9a:d0:a3:19:9a:62:89:72:80:7b:36:c9:3e: 2d:89:d0:ef:4f:29:c8:f7:c3:8a:86:12:78:b0:b2: 38:ff:b9:6c:59:4d:d2:ff:9f:bb:b5:d5:1f:06:e5: 9a:9c:7e:8f:70:24:7a:83:20:9e:3d:96:25:b1:51: 6e:b7:04:94:2e:fa:a3:08:25:e2:7c:2b:bb:11:04: e2:0c:97:40:23:4a:a2:1e:a0:55:82:66:f4:d7:4b: a8:15:e4:9b:a7:e5:f9:8d:27:85:c0:7d:f7:f7:48: 41:38:bf:0b:da:86:93:bc:6a:fc:ce:05:eb:d2:ce: ac:6d:28:25:1b:7e:f4:f9:41:6e:bd:e8:b8:88:0f: 74:fc:bb:9c:e5:aa:fa:a0:63:c6:e6:43:13:75:38: 9b:ec:b4:3e:84:f0:78:fe:63:dc:85:0b:d5:02:63: 35:0b:ed:e3:b3:e5:61:f9:86:0c:20:fa:2e:ec:9d: c0:25:84:52:62:81:73:dd:42:68:f9:4d:1b:c3:4e: 99:4d:d2:8b:13:71:d4:83:a5:ea:4c:e4:e7:ce:ed: 62:96:e2:43:93:54:14:50:c2:d1:ca:8b:1f:3f:1f: 9b:1b:97:0d:16:9f:e8:12:a2:65:ec:63:46:98:1e: 29:0e:97:c7:2e:50:d4:11:dd:8d:50:f4:59:13:8f: 50:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3D:DD:79:6B:07:D3:E6:EC:FD:1C:9E:F5:7C:4C:4F:30:47:93:8B X509v3 Authority Key Identifier: keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:14:5c:96:e2:4f:29:d9:7c:8c:c1:04:9d:d0:bb:d0:f7:05: 84:f3:21:de:2e:0b:95:b5:8b:f9:61:a6:61:94:5f:7e:9b:94: 11:ea:75:d8:6e:20:fb:c9:25:74:f7:b9:1e:d1:c2:b8:83:a9: 17:9e:e6:da:ea:e6:c0:8b:cf:75:a7:fa:56:86:f1:0a:cf:06: 7b:a1:d9:b0:9c:38:68:db:d3:16:72:78:c1:1f:4e:8c:0d:eb: 95:61:a8:46:61:61:ee:08:c4:dd:6f:ee:10:8d:8a:0e:35:fd: 0d:23:f2:e1:d9:a8:b5:56:b6:3c:70:09:7b:5f:5b:08:00:cf: 8d:a0:e4:ad:ad:ec:4e:e6:e1:a5:ca:bb:b6:95:57:40:2e:7f: b2:f1:51:ff:e5:6e:73:b8:07:ae:ca:cb:c3:14:e5:75:97:01: f7:59:d3:6a:0b:05:64:d6:2e:f2:81:96:48:3d:f7:6b:71:e5: 94:d4:1d:43:c4:67:c3:b4:10:27:17:3f:4a:af:cf:a5:d7:bb: 50:96:22:66:1e:71:e2:c0:b8:61:8a:51:b0:61:2e:b2:85:81: 06:4a:83:08:50:b0:3f:09:52:dd:4f:5d:f3:63:2c:60:4d:f2: 48:a1:f2:92:f1:16:57:75:b0:81:e1:69:d1:85:a2:c6:f9:6b: a8:2b:d0:90 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbp3v6ZTsproaDW51wA/sbqBykm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF Nzk5NUFFMDAeFw0yNjA0MTcxNzA5NDNaFw0yNjA0MTgxODI0NDNaMDMxMTAvBgNV BAMTKEZEM0RERDc5NkIwN0QzRTZFQ0ZEMUM5RUY1N0M0QzRGMzA0NzkzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfmtCjGZpiiXKAezbJPi2J0O9P Kcj3w4qGEniwsjj/uWxZTdL/n7u11R8G5Zqcfo9wJHqDIJ49liWxUW63BJQu+qMI JeJ8K7sRBOIMl0AjSqIeoFWCZvTXS6gV5Jun5fmNJ4XAfff3SEE4vwvahpO8avzO BevSzqxtKCUbfvT5QW696LiID3T8u5zlqvqgY8bmQxN1OJvstD6E8Hj+Y9yFC9UC YzUL7eOz5WH5hgwg+i7sncAlhFJigXPdQmj5TRvDTplN0osTcdSDpepM5OfO7WKW 4kOTVBRQwtHKix8/H5sblw0Wn+gSomXsY0aYHikOl8cuUNQR3Y1Q9FkTj1C1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/T3deWsH0+bs/Rye9XxMTzBHk4swHwYDVR0j BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4Nzg0MDMvMC81N0ZCQzYwMkY4REQx QUEwNkQ0NUU3RjNGMTk5Mzk2OEU3OTk1QUUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxRcluJPKdl8 jMEEndC70PcFhPMh3i4LlbWL+WGmYZRffpuUEep12G4g+8kldPe5HtHCuIOpF57m 2urmwIvPdaf6VobxCs8Ge6HZsJw4aNvTFnJ4wR9OjA3rlWGoRmFh7gjE3W/uEI2K DjX9DSPy4dmotVa2PHAJe19bCADPjaDkra3sTubhpcq7tpVXQC5/svFR/+Vuc7gH rsrLwxTldZcB91nTagsFZNYu8oGWSD33a3HllNQdQ8Rnw7QQJxc/Sq/Ppde7UJYi Zh5x4sC4YYpRsGEusoWBBkqDCFCwPwlS3U9d82MsYE3ySKHykvEWV3WwgeFp0YWi xvlrqCvQkA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:29:24 2026 by rpki-client