$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft File: 573895035A5FB9C94F33AC71886002E21C9EE894.mft (raw, json) Hash identifier: NR+0UWC0TqTQESsACQ92yuFjLaNjEG5DdAgo/F1eZxc= Subject key identifier: 32:CB:7D:A3:9A:A3:F5:D0:EE:F2:DB:E1:33:EF:DB:57:79:54:5F:33 Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894 Certificate serial: 018BC7D8FCE62D3ACC11EED116D6FFD55B00ECCC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft Manifest number: 32 Signing time: Sat 18 Apr 2026 04:54:52 +0000 Manifest this update: Sat 18 Apr 2026 04:49:52 +0000 Manifest next update: Sun 19 Apr 2026 07:30:52 +0000 Files and hashes: 1: 573895035A5FB9C94F33AC71886002E21C9EE894.crl (hash: bNfKAH65JUTxluon8mFxMCyx1R+1q5ENMSqdiGeKvM8=) 2: 3130332e32382e3230342e302f32322d3232203d3e2033343333.roa (hash: S4LI7F5/nKJonKbl1JWtK8auVNwfL73FgDTRMFWqL1Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8b:c7:d8:fc:e6:2d:3a:cc:11:ee:d1:16:d6:ff:d5:5b:00:ec:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894 Validity Not Before: Apr 18 04:49:52 2026 GMT Not After : Apr 19 07:30:52 2026 GMT Subject: CN=32CB7DA39AA3F5D0EEF2DBE133EFDB5779545F33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:47:75:d3:72:08:2a:97:c0:5f:98:76:45: 65:e8:af:c5:af:34:c1:0f:c4:e9:ad:b5:92:9d:fb: 31:d5:7d:b8:0d:c7:e2:11:c0:e7:08:cd:d7:9b:37: 8a:a5:b2:09:3a:c8:dc:d0:55:7f:9d:f5:b1:33:20: 8a:89:1a:22:ab:6f:a4:51:46:c9:b2:82:18:e5:cc: 34:4d:e3:44:47:49:c1:24:43:8b:a3:3c:0b:d8:ff: 80:92:f7:84:04:79:55:ed:d3:ec:ba:48:60:ac:e4: 54:09:50:5f:ab:14:a9:ac:34:66:49:7b:67:a2:75: 04:bf:1a:74:e5:6c:59:58:ea:22:f2:a9:49:e1:c6: 83:8b:36:0c:e2:64:ca:c2:98:a9:bb:06:b5:f7:69: ac:ae:6a:08:d8:d7:0d:b4:3f:03:f3:86:b3:f3:a4: c9:2b:05:05:e9:28:3a:a1:3a:3d:92:ad:4e:ac:8a: d5:4c:d8:d0:b7:c4:7b:5f:0b:e1:04:d6:1f:57:30: 9c:bb:5f:b6:a8:db:d7:43:b8:fa:5b:ec:10:09:93: 20:44:1f:ef:48:c7:fd:31:be:69:9e:f0:ab:0a:1f: fb:8f:8a:7c:d4:ba:18:87:c6:65:7a:e4:a9:f0:d4: 04:e3:64:4e:4f:19:c1:66:ce:6a:98:c4:0a:7b:42: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CB:7D:A3:9A:A3:F5:D0:EE:F2:DB:E1:33:EF:DB:57:79:54:5F:33 X509v3 Authority Key Identifier: keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8c:a5:53:1a:c6:d1:32:d2:17:02:7c:a4:f2:d1:b0:cd:ca: 80:51:aa:dc:22:c6:c2:6d:be:9b:0a:c8:2e:70:52:53:11:af: 5f:db:a1:1f:34:d2:29:e8:71:e2:24:cd:90:8e:13:c5:cb:0c: 9a:c9:7b:ee:e5:47:e7:ab:d3:39:f7:12:fd:fb:fc:02:37:98: 4a:f2:74:9c:82:60:5b:31:14:da:23:d5:71:4e:17:da:44:b8: bc:f5:9e:e7:1c:f1:cf:3b:9f:ce:66:ff:06:07:4e:b2:80:d5: ff:ab:13:f7:8c:17:0f:03:33:b1:b7:f5:ad:47:59:c0:cd:07: 7e:2f:f4:3b:fd:04:b7:d7:72:07:7d:fb:69:5f:e8:b4:71:16: 17:0d:ae:6d:04:06:4b:48:8b:00:7f:08:17:db:af:ea:17:38: 8d:81:30:97:e6:cf:ae:c0:cd:aa:8f:34:6c:67:36:32:53:59: 6f:17:a3:60:53:58:64:48:07:03:87:53:35:15:59:d3:2b:d7: 6c:99:ea:af:34:ed:27:85:7f:b0:2d:3d:62:98:51:d2:bf:60: 74:f0:9c:28:a1:a6:62:12:fe:c5:09:26:ac:8e:be:71:4d:05: 47:1a:77:73:66:0f:08:32:60:8b:26:68:30:04:6e:ab:ab:07: f7:94:48:5a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAYvH2PzmLTrMEe7RFtb/1VsA7MwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIx QzlFRTg5NDAeFw0yNjA0MTgwNDQ5NTJaFw0yNjA0MTkwNzMwNTJaMDMxMTAvBgNV BAMTKDMyQ0I3REEzOUFBM0Y1RDBFRUYyREJFMTMzRUZEQjU3Nzk1NDVGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Vkd103IIKpfAX5h2RWXor8Wv NMEPxOmttZKd+zHVfbgNx+IRwOcIzdebN4qlsgk6yNzQVX+d9bEzIIqJGiKrb6RR RsmyghjlzDRN40RHScEkQ4ujPAvY/4CS94QEeVXt0+y6SGCs5FQJUF+rFKmsNGZJ e2eidQS/GnTlbFlY6iLyqUnhxoOLNgziZMrCmKm7BrX3aayuagjY1w20PwPzhrPz pMkrBQXpKDqhOj2SrU6sitVM2NC3xHtfC+EE1h9XMJy7X7ao29dDuPpb7BAJkyBE H+9Ix/0xvmme8KsKH/uPinzUuhiHxmV65Knw1ATjZE5PGcFmzmqYxAp7QiRLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMst9o5qj9dDu8tvhM+/bV3lUXzMwHwYDVR0j BBgwFoAUVziVA1pfuclPM6xxiGAC4hye6JQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 NDY2Njc5NzkwNDM2MzUyMy8wLzU3Mzg5NTAzNUE1RkI5Qzk0RjMzQUM3MTg4NjAw MkUyMUM5RUU4OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIxQzlFRTg5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODQ2NjY3OTc5MDQzNjM1MjMvMC81NzM4OTUwMzVBNUZC OUM5NEYzM0FDNzE4ODYwMDJFMjFDOUVFODk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4ylUxrG0TLS FwJ8pPLRsM3KgFGq3CLGwm2+mwrILnBSUxGvX9uhHzTSKehx4iTNkI4TxcsMmsl7 7uVH56vTOfcS/fv8AjeYSvJ0nIJgWzEU2iPVcU4X2kS4vPWe5xzxzzufzmb/BgdO soDV/6sT94wXDwMzsbf1rUdZwM0Hfi/0O/0Et9dyB337aV/otHEWFw2ubQQGS0iL AH8IF9uv6hc4jYEwl+bPrsDNqo80bGc2MlNZbxejYFNYZEgHA4dTNRVZ0yvXbJnq rzTtJ4V/sC09YphR0r9gdPCcKKGmYhL+xQkmrI6+cU0FRxp3c2YPCDJgiyZoMARu q6sH95RIWg== -----END CERTIFICATE-----Generated at Sat Apr 18 07:42:47 2026 by rpki-client