$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft File: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft (raw, json) Hash identifier: +vLDv7Q1QS34mwIhOBg8fBIwRp/W2Gw0fg1jPfWFksg= Subject key identifier: 80:3E:2F:2F:FE:8D:C7:2A:D3:D2:40:56:49:76:30:37:FD:20:8F:07 Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Certificate serial: 7E21BAE36C4F5405FDAE37F8914EFBCB8238147F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 06:54:17 +0000 Manifest this update: Mon 13 Apr 2026 06:49:17 +0000 Manifest next update: Tue 14 Apr 2026 07:46:17 +0000 Files and hashes: 1: 34322e3132332e3132382e302f31372d3234203d3e203137393639.roa (hash: HJAEw0em6DXYtKjOb8eOjxjOleqPkWguwakB00hU4DQ=) 2: 3131372e35392e302e302f31362d3234203d3e203137393639.roa (hash: jqEdbt3MhK6Z7J07psMZQBv74go8mG34DhxeSdGowbk=) 3: 323430313a376530303a3a2f33322d3634203d3e203137393639.roa (hash: EdGOODlWG3ONCUozOTYrfpFlATRW8oodZdYBqM1SnNY=) 4: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl (hash: Dyl2G61GSP8RMapZFplQmVQZmc6+W1e+r9iXKq+ePbk=) 5: 3132352e36322e302e302f31382d3234203d3e203137393639.roa (hash: HUI+HHCfEB2nbQeHqwwB6/Ms2ZiM/pUUCnk/LE3eDjc=) 6: 3230332e3136312e3139322e302f31392d3234203d3e203137393639.roa (hash: 5Tg0FQdSDq/Zu86whup67Wa88hxIMsyCZY10zhpGkNQ=) 7: 3231382e3234342e302e302f31392d3234203d3e203137393639.roa (hash: qIBIXAx+bxCxVuXrC5KPDpWcIbbQfaWsos9qY8Hyohk=) 8: 32372e3134342e302e302f31362d3234203d3e203137393639.roa (hash: SYPXnxeRtZ7noFu43LGfNAwPQXoAc39ePYXU17knFQc=) 9: 34322e35302e302e302f31362d3234203d3e203137393639.roa (hash: BU7824LM2GcqISfl9RQuaQpqoVPVFfmsdHGml4Pg4E8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:21:ba:e3:6c:4f:54:05:fd:ae:37:f8:91:4e:fb:cb:82:38:14:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Validity Not Before: Apr 13 06:49:17 2026 GMT Not After : Apr 14 07:46:17 2026 GMT Subject: CN=803E2F2FFE8DC72AD3D2405649763037FD208F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ec:93:a9:4b:68:c5:85:76:0e:a6:11:e7:dc: 2d:24:b3:be:e4:bf:44:ce:cf:cb:8d:7b:5c:4e:b0: d3:e5:61:67:c4:ae:09:3f:5f:74:f0:dd:0e:ca:94: ee:53:74:ea:95:7a:8c:aa:4a:e8:09:6e:6a:ce:90: b7:75:76:72:bb:d7:17:52:f8:ca:ef:aa:5a:b7:10: 38:ce:e5:de:bc:14:e5:ff:da:1f:bb:93:5b:c9:c3: f9:6d:aa:9d:ae:1f:47:45:7f:a0:a1:33:05:11:d3: e5:fe:43:b2:ce:45:39:f5:9d:e6:61:35:d6:24:9d: 74:ff:cc:4e:8c:0d:19:58:7a:11:04:77:24:3c:10: c7:49:a1:cb:ea:f1:1b:75:d5:ef:6d:90:54:00:f8: d4:43:00:c5:8e:63:dc:9f:96:d6:46:3c:08:7a:a1: e5:69:15:8f:a9:b4:04:d7:e0:4f:1c:9e:85:a7:70: 72:65:99:76:13:e3:63:7e:02:2f:c3:bc:1b:79:d0: 1c:54:f7:5d:7f:10:55:2c:d3:f4:e9:24:35:73:0a: 6d:1e:d5:7c:b7:67:46:93:14:34:a5:73:33:ee:9d: 4b:5f:7c:fc:26:b0:b6:ed:75:ca:27:e5:07:f3:45: 37:7d:f0:bd:c0:4a:25:3a:0d:ff:83:b5:cf:16:1f: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3E:2F:2F:FE:8D:C7:2A:D3:D2:40:56:49:76:30:37:FD:20:8F:07 X509v3 Authority Key Identifier: keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:19:92:92:55:6c:c8:39:1e:67:22:ec:41:f0:39:21:a7:d4: 0c:02:fe:55:86:93:47:e3:df:c9:f5:f3:17:b6:b3:c8:58:ee: 76:b5:08:82:a0:0b:6e:72:d2:ac:d5:a3:04:a6:ec:ef:06:3d: af:5d:09:95:9c:77:61:fb:99:e7:10:14:b0:19:55:79:cd:b3: 31:2f:88:9d:6b:8f:ae:dc:35:58:76:60:73:fa:ed:b0:34:70: 5d:d3:f2:57:51:78:e5:c2:88:bb:1e:b2:9c:3c:d0:27:8b:a5: 3a:af:76:77:2e:74:2d:c4:2d:cb:3f:04:2d:9e:cc:4c:bc:55: 49:cd:6c:ba:d7:92:7e:83:ad:1d:92:2a:bd:81:17:4a:98:5c: 9e:29:24:28:f4:5e:8e:d8:28:b8:84:fd:57:89:c2:66:21:7d: 39:d7:96:9b:e6:9c:4f:d3:14:f2:5b:26:93:67:df:59:1a:60: 4e:d7:0d:c8:05:d6:a1:23:18:79:4e:c2:77:9e:25:5d:c9:ba: 31:92:6b:ca:0a:e4:8d:7e:1c:4b:41:2a:a9:e0:fb:8a:26:f8: 4d:ff:48:0d:cd:ec:f3:8d:85:95:98:c7:be:8e:13:d6:db:33: f5:20:e7:1c:42:cc:68:1a:89:24:88:30:d6:99:3f:cf:b8:27: 0a:1c:52:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfiG642xPVAX9rjf4kU77y4I4FH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF Nzk5NUFFMDAeFw0yNjA0MTMwNjQ5MTdaFw0yNjA0MTQwNzQ2MTdaMDMxMTAvBgNV BAMTKDgwM0UyRjJGRkU4REM3MkFEM0QyNDA1NjQ5NzYzMDM3RkQyMDhGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47JOpS2jFhXYOphHn3C0ks77k v0TOz8uNe1xOsNPlYWfErgk/X3Tw3Q7KlO5TdOqVeoyqSugJbmrOkLd1dnK71xdS +Mrvqlq3EDjO5d68FOX/2h+7k1vJw/ltqp2uH0dFf6ChMwUR0+X+Q7LORTn1neZh NdYknXT/zE6MDRlYehEEdyQ8EMdJocvq8Rt11e9tkFQA+NRDAMWOY9yfltZGPAh6 oeVpFY+ptATX4E8cnoWncHJlmXYT42N+Ai/DvBt50BxU911/EFUs0/TpJDVzCm0e 1Xy3Z0aTFDSlczPunUtffPwmsLbtdcon5QfzRTd98L3ASiU6Df+Dtc8WH3f9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgD4vL/6NxyrT0kBWSXYwN/0gjwcwHwYDVR0j BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4Nzg0MDMvMC81N0ZCQzYwMkY4REQx QUEwNkQ0NUU3RjNGMTk5Mzk2OEU3OTk1QUUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsRmSklVsyDke ZyLsQfA5IafUDAL+VYaTR+PfyfXzF7azyFjudrUIgqALbnLSrNWjBKbs7wY9r10J lZx3YfuZ5xAUsBlVec2zMS+InWuPrtw1WHZgc/rtsDRwXdPyV1F45cKIux6ynDzQ J4ulOq92dy50LcQtyz8ELZ7MTLxVSc1suteSfoOtHZIqvYEXSphcnikkKPRejtgo uIT9V4nCZiF9OdeWm+acT9MU8lsmk2ffWRpgTtcNyAXWoSMYeU7Cd54lXcm6MZJr ygrkjX4cS0EqqeD7iib4Tf9IDc3s842FlZjHvo4T1tsz9SDnHELMaBqJJIgw1pk/ z7gnChxSjQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:52 2026 by rpki-client