$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft File: 573895035A5FB9C94F33AC71886002E21C9EE894.mft (raw, json) Hash identifier: h8hNiEqVxxHj4dB/Uj58Iz1vlkGWwytgksW1fdJW9F4= Subject key identifier: 5C:87:36:EC:52:CF:99:5B:A6:D1:52:86:75:0B:47:22:AC:12:CB:72 Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894 Certificate serial: 7179B4CE85DF0FE3FFB10424AD436AD353A9AAE7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft Manifest number: BB Signing time: Tue 28 Jul 2026 20:12:40 +0000 Manifest this update: Tue 28 Jul 2026 20:07:40 +0000 Manifest next update: Wed 29 Jul 2026 21:43:40 +0000 Files and hashes: 1: 3130332e32382e3230362e302f32332d3233203d3e20313430373236.roa (hash: 8m5Z2473gAfDygKKIMTPZZoF/YN4b82LVAUmDbsvaP8=) 2: 573895035A5FB9C94F33AC71886002E21C9EE894.crl (hash: c5/owgpZ3b3acuUNeGtlbtagys8wdie+6c+aEpxtjTw=) 3: 3130332e32382e3230342e302f32322d3232203d3e2034383337.roa (hash: 4ovutnbYXt86/kEfYgw8ke/Wu42w8twE0K37scXuaeU=) 4: 3130332e32382e3230342e302f32332d3233203d3e20313430373236.roa (hash: ElmDEEXzPwN9Tz6m15yNj5IQZVt4xL0tL9cteAsLsLs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:79:b4:ce:85:df:0f:e3:ff:b1:04:24:ad:43:6a:d3:53:a9:aa:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894 Validity Not Before: Jul 28 20:07:40 2026 GMT Not After : Jul 29 21:43:40 2026 GMT Subject: CN=5C8736EC52CF995BA6D15286750B4722AC12CB72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:85:b7:a1:7e:63:c6:6c:d6:1b:de:25:df: 21:82:04:bf:9a:0c:d8:af:c0:89:d5:d0:33:34:1f: 9e:8f:f2:8b:4d:f7:ee:ba:50:25:5d:0e:7f:2d:fb: e5:f4:0e:0e:33:0e:0a:33:89:96:bf:18:4d:b4:25: d4:71:a6:40:23:73:09:2e:3b:58:78:43:9d:40:64: 53:10:d5:fb:2c:1b:e6:45:34:3b:97:eb:e4:71:74: 6d:08:63:c8:7d:08:1a:1d:74:0b:4b:ff:b9:5f:f1: 93:07:69:aa:c5:59:8d:1f:d5:92:64:ad:e3:c8:79: a3:33:9f:3e:5b:71:a1:64:8f:4f:f6:37:08:8a:5d: 52:fb:11:2b:fe:61:61:af:f7:c3:96:62:44:d5:3d: a0:75:81:85:fb:16:f8:e7:1c:59:f5:f8:bf:49:ea: cf:f6:4b:3f:b8:26:c2:d2:90:a3:92:9c:0b:7a:97: 38:a9:35:aa:65:f6:cb:38:7e:10:cb:95:c5:11:d9: 34:31:83:43:ab:5a:85:93:b8:29:28:83:06:84:9e: 00:de:27:4b:72:5c:b0:87:ac:19:b5:fe:77:70:50: d7:c4:92:dd:53:2b:78:2d:a0:1d:6f:02:96:5b:e7: a6:be:d7:55:79:08:45:61:47:f5:10:7f:d8:ee:1a: 8f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:87:36:EC:52:CF:99:5B:A6:D1:52:86:75:0B:47:22:AC:12:CB:72 X509v3 Authority Key Identifier: keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:40:53:96:77:09:b0:bf:ac:75:18:eb:ee:fc:22:48:d0:4d: 1e:c5:d5:92:7e:eb:cb:00:f7:45:b3:7f:10:d3:8b:fe:0e:c6: 03:06:6d:a8:84:a2:ac:5c:2d:e5:21:ff:16:6c:b9:d5:b2:b9: bd:41:5c:f5:7b:7d:0e:3f:20:89:4f:e8:cb:2f:28:41:62:e4: d0:cd:35:aa:f7:87:d6:62:70:27:57:b3:3d:8c:24:67:4c:68: 04:ae:17:a8:d6:47:e7:a1:2a:ad:50:0b:d2:23:42:99:f0:0b: 41:ee:bb:c6:e3:5b:89:44:8f:c2:5e:a4:71:e5:da:d0:cc:c2: c3:c2:55:4a:a2:89:9d:bd:f8:51:79:f8:c8:fa:18:f2:e0:65: 23:e7:c1:59:12:fc:cd:51:62:df:94:4b:6e:c3:af:94:af:b7: 99:81:da:ac:6b:64:20:f6:b0:09:06:0c:f4:25:50:a1:7e:73: 8c:e2:cc:ed:f8:c0:8c:d1:47:c8:03:16:e2:c0:49:29:db:33: fb:2f:fb:9a:27:e8:6a:92:bd:83:0d:6a:b2:b5:44:57:2b:5b: 25:6a:08:cf:48:7a:e7:a3:4a:16:05:de:bc:8f:c7:cf:4c:6e: 92:04:98:71:46:73:54:f7:c7:f6:96:1a:43:15:6d:69:7d:8e: 85:40:90:29 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcXm0zoXfD+P/sQQkrUNq01OpqucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIx QzlFRTg5NDAeFw0yNjA3MjgyMDA3NDBaFw0yNjA3MjkyMTQzNDBaMDMxMTAvBgNV BAMTKDVDODczNkVDNTJDRjk5NUJBNkQxNTI4Njc1MEI0NzIyQUMxMkNCNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/YW3oX5jxmzWG94l3yGCBL+a DNivwInV0DM0H56P8otN9+66UCVdDn8t++X0Dg4zDgoziZa/GE20JdRxpkAjcwku O1h4Q51AZFMQ1fssG+ZFNDuX6+RxdG0IY8h9CBoddAtL/7lf8ZMHaarFWY0f1ZJk rePIeaMznz5bcaFkj0/2NwiKXVL7ESv+YWGv98OWYkTVPaB1gYX7FvjnHFn1+L9J 6s/2Sz+4JsLSkKOSnAt6lzipNapl9ss4fhDLlcUR2TQxg0OrWoWTuCkogwaEngDe J0tyXLCHrBm1/ndwUNfEkt1TK3gtoB1vApZb56a+11V5CEVhR/UQf9juGo/PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXIc27FLPmVum0VKGdQtHIqwSy3IwHwYDVR0j BBgwFoAUVziVA1pfuclPM6xxiGAC4hye6JQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 NDY2Njc5NzkwNDM2MzUyMy8wLzU3Mzg5NTAzNUE1RkI5Qzk0RjMzQUM3MTg4NjAw MkUyMUM5RUU4OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIxQzlFRTg5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODQ2NjY3OTc5MDQzNjM1MjMvMC81NzM4OTUwMzVBNUZC OUM5NEYzM0FDNzE4ODYwMDJFMjFDOUVFODk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUBTlncJsL+s dRjr7vwiSNBNHsXVkn7rywD3RbN/ENOL/g7GAwZtqISirFwt5SH/Fmy51bK5vUFc 9Xt9Dj8giU/oyy8oQWLk0M01qveH1mJwJ1ezPYwkZ0xoBK4XqNZH56EqrVAL0iNC mfALQe67xuNbiUSPwl6kceXa0MzCw8JVSqKJnb34UXn4yPoY8uBlI+fBWRL8zVFi 35RLbsOvlK+3mYHarGtkIPawCQYM9CVQoX5zjOLM7fjAjNFHyAMW4sBJKdsz+y/7 mifoapK9gw1qsrVEVytbJWoIz0h656NKFgXevI/Hz0xukgSYcUZzVPfH9pYaQxVt aX2OhUCQKQ== -----END CERTIFICATE-----Generated at Wed Jul 29 08:43:36 2026 by rpki-client