$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft File: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft (raw, json) Hash identifier: 4BBU+FI19qy00Zv2IBBw+Hv4T64PJ5p0ZEfp7oLShGc= Subject key identifier: 39:B5:2F:30:43:13:3C:5A:39:98:6D:A9:AA:C0:2B:2D:91:3A:9D:A4 Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Certificate serial: 147A026208D8193348653961D5C5A954C897A1AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft Manifest number: AF Signing time: Fri 29 May 2026 11:02:48 +0000 Manifest this update: Fri 29 May 2026 10:57:48 +0000 Manifest next update: Sat 30 May 2026 11:35:48 +0000 Files and hashes: 1: 34322e35302e302e302f31362d3234203d3e203137393639.roa (hash: BU7824LM2GcqISfl9RQuaQpqoVPVFfmsdHGml4Pg4E8=) 2: 32372e3134342e302e302f31362d3234203d3e203137393639.roa (hash: SYPXnxeRtZ7noFu43LGfNAwPQXoAc39ePYXU17knFQc=) 3: 3131372e35392e302e302f31362d3234203d3e203137393639.roa (hash: jqEdbt3MhK6Z7J07psMZQBv74go8mG34DhxeSdGowbk=) 4: 3132352e36322e302e302f31382d3234203d3e203137393639.roa (hash: HUI+HHCfEB2nbQeHqwwB6/Ms2ZiM/pUUCnk/LE3eDjc=) 5: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl (hash: 0ozvgkYE7+WWUU2xLVD9UnLJ8uw/aVYJlnl1+7nfIAg=) 6: 34322e3132332e3132382e302f31372d3234203d3e203137393639.roa (hash: HJAEw0em6DXYtKjOb8eOjxjOleqPkWguwakB00hU4DQ=) 7: 323430313a376530303a3a2f33322d3634203d3e203137393639.roa (hash: EdGOODlWG3ONCUozOTYrfpFlATRW8oodZdYBqM1SnNY=) 8: 3230332e3136312e3139322e302f31392d3234203d3e203137393639.roa (hash: 5Tg0FQdSDq/Zu86whup67Wa88hxIMsyCZY10zhpGkNQ=) 9: 3231382e3234342e302e302f31392d3234203d3e203137393639.roa (hash: qIBIXAx+bxCxVuXrC5KPDpWcIbbQfaWsos9qY8Hyohk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:7a:02:62:08:d8:19:33:48:65:39:61:d5:c5:a9:54:c8:97:a1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Validity Not Before: May 29 10:57:48 2026 GMT Not After : May 30 11:35:48 2026 GMT Subject: CN=39B52F3043133C5A39986DA9AAC02B2D913A9DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:72:dc:ed:80:6b:32:c0:66:a3:0f:fd:4c: 0d:74:ea:30:41:75:6b:d1:b8:e1:5f:b5:aa:55:a0: c6:ba:6e:d6:66:d2:6f:7c:ba:8e:a0:fd:0b:8b:30: b6:c0:ec:2e:0b:54:92:eb:9f:d6:37:ab:2a:51:c0: 57:21:e5:f8:1f:bd:56:dc:3e:52:83:b3:13:ca:55: 08:fb:eb:59:7b:9c:ff:e0:f1:a6:e7:ac:67:72:e8: 24:6d:9b:f7:73:e8:78:06:2d:40:b2:aa:31:4b:d7: a7:48:06:78:11:e2:83:de:29:14:2c:15:89:bc:cb: 9d:b7:7c:5d:b9:16:fe:f5:e3:06:57:5d:6c:cf:ee: 76:16:3b:8f:5d:67:b3:a0:44:0d:7c:f3:d2:c8:ec: 92:53:84:d3:7f:9d:9f:7d:1f:72:29:a1:10:7d:ed: 65:6d:43:23:f8:f0:dc:03:4c:68:82:49:68:89:88: 3d:37:6c:b6:36:cc:95:37:22:98:0a:af:8f:9f:65: 2c:16:c5:c8:02:d1:0f:9c:01:66:7c:42:07:0a:4d: 06:c2:a8:c3:c4:8a:9a:0b:89:5f:9d:ed:b9:d3:06: 57:48:d1:4b:ec:50:50:bc:cc:76:11:80:8f:3b:47: 80:9b:b2:d9:50:1a:7c:66:62:8c:4d:f6:2c:4a:c0: d5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B5:2F:30:43:13:3C:5A:39:98:6D:A9:AA:C0:2B:2D:91:3A:9D:A4 X509v3 Authority Key Identifier: keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:4d:0c:00:85:c8:56:c0:39:1d:c3:12:b2:f2:74:75:ec:60: cf:41:a4:dc:cd:63:57:fd:d7:c3:fe:d7:75:06:9c:d9:7a:63: 56:be:3b:ee:99:e7:7a:53:b5:3f:64:58:3b:5a:06:e8:b1:6e: b6:9c:77:c5:c8:c5:a6:31:09:7c:6a:8a:0b:64:5f:1e:8d:20: 23:ad:62:10:92:bd:1f:ef:16:03:3e:fd:8e:55:25:4c:5b:ae: 99:9f:01:76:95:60:56:6b:40:6a:fc:39:1b:5d:49:58:86:db: bd:a3:0a:52:69:ec:c8:8a:c2:0b:1d:6f:c3:61:95:91:d8:38: 5e:12:79:61:2c:fe:b1:4d:c6:04:00:7f:99:6a:db:dc:39:d0: 11:ad:1e:6b:ac:de:1b:18:21:5f:55:c3:19:50:05:1d:86:14: f4:8b:0f:ba:03:21:90:85:72:8d:7d:93:ba:b6:ed:33:11:05: a8:f2:a9:16:12:53:1d:82:a0:4d:6d:45:45:5d:4c:de:a4:58: f5:92:6f:d6:0a:16:58:be:a7:65:f2:61:3e:df:87:65:2e:4a: c1:f6:d9:a0:fc:4c:d2:f5:cb:24:0e:68:0a:bf:2c:0a:ac:27: 57:26:74:eb:ee:39:d2:bb:80:e8:45:39:25:e8:7d:ad:bc:9f: 28:ac:93:1b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFHoCYgjYGTNIZTlh1cWpVMiXoa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF Nzk5NUFFMDAeFw0yNjA1MjkxMDU3NDhaFw0yNjA1MzAxMTM1NDhaMDMxMTAvBgNV BAMTKDM5QjUyRjMwNDMxMzNDNUEzOTk4NkRBOUFBQzAyQjJEOTEzQTlEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+nLc7YBrMsBmow/9TA106jBB dWvRuOFftapVoMa6btZm0m98uo6g/QuLMLbA7C4LVJLrn9Y3qypRwFch5fgfvVbc PlKDsxPKVQj761l7nP/g8abnrGdy6CRtm/dz6HgGLUCyqjFL16dIBngR4oPeKRQs FYm8y523fF25Fv714wZXXWzP7nYWO49dZ7OgRA1889LI7JJThNN/nZ99H3IpoRB9 7WVtQyP48NwDTGiCSWiJiD03bLY2zJU3IpgKr4+fZSwWxcgC0Q+cAWZ8QgcKTQbC qMPEipoLiV+d7bnTBldI0UvsUFC8zHYRgI87R4CbstlQGnxmYoxN9ixKwNVbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUObUvMEMTPFo5mG2pqsArLZE6naQwHwYDVR0j BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4Nzg0MDMvMC81N0ZCQzYwMkY4REQx QUEwNkQ0NUU3RjNGMTk5Mzk2OEU3OTk1QUUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApU0MAIXIVsA5 HcMSsvJ0dexgz0Gk3M1jV/3Xw/7XdQac2XpjVr477pnnelO1P2RYO1oG6LFutpx3 xcjFpjEJfGqKC2RfHo0gI61iEJK9H+8WAz79jlUlTFuumZ8BdpVgVmtAavw5G11J WIbbvaMKUmnsyIrCCx1vw2GVkdg4XhJ5YSz+sU3GBAB/mWrb3DnQEa0ea6zeGxgh X1XDGVAFHYYU9IsPugMhkIVyjX2TurbtMxEFqPKpFhJTHYKgTW1FRV1M3qRY9ZJv 1goWWL6nZfJhPt+HZS5KwfbZoPxM0vXLJA5oCr8sCqwnVyZ06+450ruA6EU5Jeh9 rbyfKKyTGw== -----END CERTIFICATE-----Generated at Fri May 29 22:05:22 2026 by rpki-client