$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft File: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft (raw, json) Hash identifier: ekSHovWqisVJ8wUJ6bMLLwVkLv2uThB5JlBY9Nyi1mo= Subject key identifier: 4B:E4:D4:C8:6C:56:3C:27:C7:68:6B:AF:80:01:86:73:44:AE:D0:82 Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Certificate serial: 142EC099588A206FA7DCEF5BE809A608A9BD64DE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft Manifest number: 2E Signing time: Sun 22 Feb 2026 15:07:30 +0000 Manifest this update: Sun 22 Feb 2026 15:02:30 +0000 Manifest next update: Mon 23 Feb 2026 17:03:30 +0000 Files and hashes: 1: 3231382e3234342e302e302f31392d3234203d3e203137393639.roa (hash: qIBIXAx+bxCxVuXrC5KPDpWcIbbQfaWsos9qY8Hyohk=) 2: 3131372e35392e302e302f31362d3234203d3e203137393639.roa (hash: jqEdbt3MhK6Z7J07psMZQBv74go8mG34DhxeSdGowbk=) 3: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl (hash: IAdzeH6LbOfp7IN0Istl6Tpdgx+nIXsn+21jzFic+NY=) 4: 3132352e36322e302e302f31382d3234203d3e203137393639.roa (hash: HUI+HHCfEB2nbQeHqwwB6/Ms2ZiM/pUUCnk/LE3eDjc=) 5: 32372e3134342e302e302f31362d3234203d3e203137393639.roa (hash: SYPXnxeRtZ7noFu43LGfNAwPQXoAc39ePYXU17knFQc=) 6: 323430313a376530303a3a2f33322d3634203d3e203137393639.roa (hash: EdGOODlWG3ONCUozOTYrfpFlATRW8oodZdYBqM1SnNY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:2e:c0:99:58:8a:20:6f:a7:dc:ef:5b:e8:09:a6:08:a9:bd:64:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Validity Not Before: Feb 22 15:02:30 2026 GMT Not After : Feb 23 17:03:30 2026 GMT Subject: CN=4BE4D4C86C563C27C7686BAF8001867344AED082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:3d:71:60:77:c8:73:27:7c:fa:01:49:95: 93:91:95:18:4c:62:e0:dc:f6:5e:d6:d5:cf:03:88: 41:32:ec:1c:bf:3c:78:19:a6:81:6d:24:53:37:0e: de:2e:11:b2:aa:b4:b8:b7:3e:d4:65:10:ab:7a:58: e8:fb:42:9a:f3:6b:7d:ec:a6:55:55:72:c2:7f:e3: 4c:c8:71:97:2d:88:2b:47:b2:15:5d:bd:75:5b:73: 3c:69:35:cc:64:40:ad:0a:4e:0a:f0:45:61:50:81: 41:cc:bf:c1:e5:0b:8d:eb:1c:f7:c8:e9:f7:8d:68: 6f:14:a0:19:e4:3a:c8:ca:21:00:57:2b:61:e6:31: 10:0d:60:af:d1:53:cf:5e:a0:02:b8:3b:06:9a:10: 5f:b7:93:b7:7f:66:15:67:c7:8c:ae:eb:47:c4:3a: e5:a2:3e:94:8f:50:9c:23:c7:a8:8d:f1:50:9c:3d: 60:4c:12:01:c4:16:a0:b6:40:25:d2:53:78:1d:ca: dc:e3:57:f8:70:79:9c:02:09:73:c9:7d:fa:1a:de: fe:eb:12:b3:8d:5d:8c:6f:e1:97:b3:f8:de:6f:cc: 2f:6e:3a:91:8c:8a:ad:8f:db:39:12:e6:5f:14:f3: c9:ac:43:39:9a:aa:82:36:48:0c:b7:15:0a:21:60: 40:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E4:D4:C8:6C:56:3C:27:C7:68:6B:AF:80:01:86:73:44:AE:D0:82 X509v3 Authority Key Identifier: keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:66:ef:e2:1a:73:3e:1a:a5:06:5d:58:b2:d3:c8:5d:02:fe: 75:31:33:8b:a5:ce:33:e4:3e:bc:f1:92:49:22:d3:3f:42:85: 63:79:c9:0c:d8:18:90:9b:4b:0c:c1:c2:d0:2f:a3:ab:eb:05: 98:c8:8c:52:65:7c:8d:a9:5b:d8:7e:44:0d:98:78:0b:ba:77: 9c:d8:3f:0f:7d:cd:5d:c3:fc:64:2d:81:34:28:7e:f0:44:f2: 99:ba:74:e8:2d:41:51:7e:f8:dd:2b:30:30:c5:f8:a3:8d:48: ac:86:6d:0c:15:e1:5b:73:f0:e7:01:2c:74:0b:e1:b0:26:47: 4e:0f:3d:6e:3d:98:95:b9:c4:e3:fa:cd:7a:ca:e9:1f:8c:31: 3b:0e:f7:b7:92:a0:ea:91:9f:33:5b:c0:c1:ae:5f:85:9b:f0: c9:64:8c:3c:8a:d0:f4:09:f0:3b:2c:f1:b6:3a:4e:47:6d:a7: 9b:13:95:fd:91:b7:f7:51:88:c1:6e:f0:4a:b0:39:55:e8:a0: ff:70:36:70:c5:33:31:db:ad:c6:08:ed:73:c0:c7:4e:c2:2f: b0:2e:77:d1:8a:d6:b2:ec:b9:b3:48:5d:81:e3:58:cf:ad:4e: 3c:00:9f:b5:75:24:f6:11:e2:46:bb:5e:19:a1:09:d6:11:7e: 5b:99:09:ee -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFC7AmViKIG+n3O9b6AmmCKm9ZN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF Nzk5NUFFMDAeFw0yNjAyMjIxNTAyMzBaFw0yNjAyMjMxNzAzMzBaMDMxMTAvBgNV BAMTKDRCRTRENEM4NkM1NjNDMjdDNzY4NkJBRjgwMDE4NjczNDRBRUQwODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfzT1xYHfIcyd8+gFJlZORlRhM YuDc9l7W1c8DiEEy7By/PHgZpoFtJFM3Dt4uEbKqtLi3PtRlEKt6WOj7Qprza33s plVVcsJ/40zIcZctiCtHshVdvXVbczxpNcxkQK0KTgrwRWFQgUHMv8HlC43rHPfI 6feNaG8UoBnkOsjKIQBXK2HmMRANYK/RU89eoAK4OwaaEF+3k7d/ZhVnx4yu60fE OuWiPpSPUJwjx6iN8VCcPWBMEgHEFqC2QCXSU3gdytzjV/hweZwCCXPJffoa3v7r ErONXYxv4Zez+N5vzC9uOpGMiq2P2zkS5l8U88msQzmaqoI2SAy3FQohYECXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUS+TUyGxWPCfHaGuvgAGGc0Su0IIwHwYDVR0j BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4Nzg0MDMvMC81N0ZCQzYwMkY4REQx QUEwNkQ0NUU3RjNGMTk5Mzk2OEU3OTk1QUUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmbv4hpzPhql Bl1YstPIXQL+dTEzi6XOM+Q+vPGSSSLTP0KFY3nJDNgYkJtLDMHC0C+jq+sFmMiM UmV8jalb2H5EDZh4C7p3nNg/D33NXcP8ZC2BNCh+8ETymbp06C1BUX743SswMMX4 o41IrIZtDBXhW3Pw5wEsdAvhsCZHTg89bj2YlbnE4/rNesrpH4wxOw73t5Kg6pGf M1vAwa5fhZvwyWSMPIrQ9AnwOyzxtjpOR22nmxOV/ZG391GIwW7wSrA5Veig/3A2 cMUzMdutxgjtc8DHTsIvsC530YrWsuy5s0hdgeNYz61OPACftXUk9hHiRrteGaEJ 1hF+W5kJ7g== -----END CERTIFICATE-----Generated at Mon Feb 23 02:21:48 2026 by rpki-client