$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft File: 573895035A5FB9C94F33AC71886002E21C9EE894.mft (raw, json) Hash identifier: X6yjlI6ffVYE9CiVqkdmdTbAhpDJwiVdQ1NH+G+9l1M= Subject key identifier: 3D:DC:44:78:7C:02:50:6A:1D:D2:0C:34:E5:48:D6:30:5B:E8:17:B9 Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894 Certificate serial: 71CC38BB68F29CB2C7EF602CC14FB35C1A110921 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft Manifest number: F4 Signing time: Sat 03 Oct 2026 14:51:57 +0000 Manifest this update: Sat 03 Oct 2026 14:46:57 +0000 Manifest next update: Tue 06 Oct 2026 17:05:57 +0000 Files and hashes: 1: 3130332e32382e3230362e302f32332d3233203d3e20313430373236.roa (hash: 8m5Z2473gAfDygKKIMTPZZoF/YN4b82LVAUmDbsvaP8=) 2: 573895035A5FB9C94F33AC71886002E21C9EE894.crl (hash: wDUb9CNq0E39fu3YZL2paSLvsIC5TXdvSyBOxOv8QdU=) 3: 3130332e32382e3230342e302f32322d3232203d3e2034383337.roa (hash: 4ovutnbYXt86/kEfYgw8ke/Wu42w8twE0K37scXuaeU=) 4: 3130332e32382e3230342e302f32332d3233203d3e20313430373236.roa (hash: ElmDEEXzPwN9Tz6m15yNj5IQZVt4xL0tL9cteAsLsLs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 17:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cc:38:bb:68:f2:9c:b2:c7:ef:60:2c:c1:4f:b3:5c:1a:11:09:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894 Validity Not Before: Oct 3 14:46:57 2026 GMT Not After : Oct 6 17:05:57 2026 GMT Subject: CN=3DDC44787C02506A1DD20C34E548D6305BE817B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:af:be:bc:c9:31:59:e1:ab:16:4c:1e:ea:4b: 6b:da:15:f9:1f:28:1c:be:cc:22:6b:98:2d:82:01: 5f:6f:d2:61:e5:95:24:23:3d:94:76:14:9b:c0:f7: 21:40:1a:f5:8b:4f:60:05:20:9e:31:b0:48:d5:5d: 13:72:0b:07:ee:cb:5f:36:fe:1d:b1:e4:d3:16:58: 5e:5e:12:a7:17:8b:88:3e:9b:f1:0e:67:bf:9b:f1: 6f:40:14:01:f3:d8:fd:0e:ea:0a:b4:45:ce:db:2a: 92:38:41:b3:c2:93:70:10:ac:41:8c:2b:ff:ff:1c: 97:dd:15:fc:c3:1e:91:4c:97:97:49:7a:46:08:49: 5e:a1:40:dd:8b:bb:41:11:36:ef:03:13:f0:4f:d8: 9e:1e:9f:46:74:8f:23:b2:25:56:01:83:08:c1:e1: fe:18:99:db:2f:23:38:b0:c6:6f:b7:bd:fe:9a:94: ea:4b:ab:fd:a6:be:f1:80:fc:ff:f7:ae:64:b7:6b: 91:55:1c:cd:c2:ce:e0:95:0c:8d:d7:1c:a9:ca:21: 00:f5:6f:d2:70:e0:1d:88:9b:6b:bf:73:67:ab:9f: a2:39:30:5c:cc:a7:d0:74:92:52:ab:0b:8e:0d:73: 33:df:77:77:7c:25:8d:e5:a5:22:a8:88:c6:0a:c1: 9d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DC:44:78:7C:02:50:6A:1D:D2:0C:34:E5:48:D6:30:5B:E8:17:B9 X509v3 Authority Key Identifier: keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2c:65:b7:9f:3a:40:b0:75:c4:f4:41:a7:df:7e:0d:32:6a: 1d:5d:dd:60:2e:33:ee:89:dc:ab:23:4e:fb:b5:4a:81:49:e2: a1:ee:4c:d2:27:29:62:f5:fa:ba:e4:5b:7a:0a:06:4c:51:76: a9:ae:ad:b4:4c:2f:38:d5:22:a6:cb:be:f6:d5:d7:24:25:02: 54:4c:ad:2c:59:ef:ce:37:3e:a6:16:4a:c0:4c:39:f4:07:f8: e7:26:2c:cf:df:73:d6:5b:11:ca:19:7d:e8:ea:5a:fe:78:c4: a7:a8:24:bb:ce:f3:62:0d:8f:1a:83:55:4d:00:6e:89:f6:4c: c4:ca:b7:d3:1f:97:6c:1d:e1:50:cd:ec:93:0e:00:54:77:f8: 15:13:60:b9:69:ce:f7:8c:a4:74:16:d1:67:79:6e:e0:0a:37: 97:3e:56:60:6b:27:e4:4e:b0:77:56:9c:57:28:e9:b4:9d:0c: 9b:90:6c:9e:2e:2a:55:7f:78:82:56:6f:c0:f8:b0:de:ec:7f: 10:82:f6:61:42:3e:4d:fd:23:91:89:af:a1:47:05:9a:b6:3f: b7:09:91:65:b8:e1:7e:0f:2b:58:79:5d:02:3d:3f:71:43:71: b2:8e:7e:df:f8:ec:5a:b1:35:35:bf:79:e6:c8:35:58:91:34: 1d:8e:fb:5a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUccw4u2jynLLH72AswU+zXBoRCSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIx QzlFRTg5NDAeFw0yNjEwMDMxNDQ2NTdaFw0yNjEwMDYxNzA1NTdaMDMxMTAvBgNV BAMTKDNEREM0NDc4N0MwMjUwNkExREQyMEMzNEU1NDhENjMwNUJFODE3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCr768yTFZ4asWTB7qS2vaFfkf KBy+zCJrmC2CAV9v0mHllSQjPZR2FJvA9yFAGvWLT2AFIJ4xsEjVXRNyCwfuy182 /h2x5NMWWF5eEqcXi4g+m/EOZ7+b8W9AFAHz2P0O6gq0Rc7bKpI4QbPCk3AQrEGM K///HJfdFfzDHpFMl5dJekYISV6hQN2Lu0ERNu8DE/BP2J4en0Z0jyOyJVYBgwjB 4f4YmdsvIziwxm+3vf6alOpLq/2mvvGA/P/3rmS3a5FVHM3CzuCVDI3XHKnKIQD1 b9Jw4B2Im2u/c2ern6I5MFzMp9B0klKrC44NczPfd3d8JY3lpSKoiMYKwZ3HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPdxEeHwCUGod0gw05UjWMFvoF7kwHwYDVR0j BBgwFoAUVziVA1pfuclPM6xxiGAC4hye6JQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 NDY2Njc5NzkwNDM2MzUyMy8wLzU3Mzg5NTAzNUE1RkI5Qzk0RjMzQUM3MTg4NjAw MkUyMUM5RUU4OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIxQzlFRTg5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODQ2NjY3OTc5MDQzNjM1MjMvMC81NzM4OTUwMzVBNUZC OUM5NEYzM0FDNzE4ODYwMDJFMjFDOUVFODk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSxlt586QLB1 xPRBp99+DTJqHV3dYC4z7oncqyNO+7VKgUnioe5M0icpYvX6uuRbegoGTFF2qa6t tEwvONUipsu+9tXXJCUCVEytLFnvzjc+phZKwEw59Af45yYsz99z1lsRyhl96Opa /njEp6gku87zYg2PGoNVTQBuifZMxMq30x+XbB3hUM3skw4AVHf4FRNguWnO94yk dBbRZ3lu4Ao3lz5WYGsn5E6wd1acVyjptJ0Mm5Bsni4qVX94glZvwPiw3ux/EIL2 YUI+Tf0jkYmvoUcFmrY/twmRZbjhfg8rWHldAj0/cUNxso5+3/jsWrE1Nb955sg1 WJE0HY77Wg== -----END CERTIFICATE-----Generated at Sun Oct 4 22:51:04 2026 by rpki-client