$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft File: 573895035A5FB9C94F33AC71886002E21C9EE894.mft (raw, json) Hash identifier: WXuRXAdcOjAXyfaHo1y2cVjrN61tS7lMedNG3zCXUkI= Subject key identifier: 83:27:31:0B:6E:A6:2B:A9:D4:5B:32:BF:18:38:BC:F2:8D:0A:8F:16 Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894 Certificate serial: 661F072688A863411D7A67D6166360C7F479D5AB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft Manifest number: A8 Signing time: Tue 14 Jul 2026 12:21:14 +0000 Manifest this update: Tue 14 Jul 2026 12:16:14 +0000 Manifest next update: Wed 15 Jul 2026 12:43:14 +0000 Files and hashes: 1: 573895035A5FB9C94F33AC71886002E21C9EE894.crl (hash: JS/m3myoQE+g+IfxK/Kv+BLdgAinrUrpUjfUfBXUm5c=) 2: 3130332e32382e3230342e302f32322d3232203d3e2034383337.roa (hash: 4ovutnbYXt86/kEfYgw8ke/Wu42w8twE0K37scXuaeU=) 3: 3130332e32382e3230342e302f32332d3233203d3e20313430373236.roa (hash: ElmDEEXzPwN9Tz6m15yNj5IQZVt4xL0tL9cteAsLsLs=) 4: 3130332e32382e3230362e302f32332d3233203d3e20313430373236.roa (hash: 8m5Z2473gAfDygKKIMTPZZoF/YN4b82LVAUmDbsvaP8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1f:07:26:88:a8:63:41:1d:7a:67:d6:16:63:60:c7:f4:79:d5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894 Validity Not Before: Jul 14 12:16:14 2026 GMT Not After : Jul 15 12:43:14 2026 GMT Subject: CN=8327310B6EA62BA9D45B32BF1838BCF28D0A8F16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b3:a9:73:fb:11:59:d8:55:df:05:02:fa:10: be:40:3c:f3:92:b2:67:29:dc:1b:3f:62:d8:de:92: 1b:7c:46:8e:2c:1c:08:bc:e0:56:b9:65:1a:9d:1f: 3a:04:8a:42:c2:68:50:a6:bc:e5:65:db:b5:6f:74: a5:5e:41:f8:2d:6e:9d:1f:d0:4d:87:02:5c:e4:0e: f1:42:79:21:87:cf:b4:31:0e:0e:9d:ef:7b:ef:47: c2:b5:33:fb:96:4e:20:b5:13:98:7f:e6:6f:70:ee: f0:28:1e:a8:1d:b9:8d:b4:6d:f0:1e:57:ed:18:e7: 9f:5a:c6:c3:c6:f0:15:c9:23:97:6c:9a:14:3f:cb: 16:44:94:89:d0:27:19:40:0c:87:4a:b5:65:dd:f0: b0:aa:30:b2:54:46:df:6d:25:92:9e:75:2d:a1:c0: d2:6e:d7:c2:df:92:af:e5:11:c3:7d:58:3b:c4:13: 80:2c:f5:75:82:25:34:ea:be:db:51:a6:2b:81:5b: f2:6b:e4:83:8a:45:d2:55:4e:db:0f:e4:d7:82:f2: 00:16:94:30:76:d9:e6:90:55:ae:6b:00:20:a2:25: f0:a0:72:48:26:51:fb:72:09:11:f3:d8:b0:79:07: 4f:19:49:b5:eb:27:5f:af:85:df:11:c5:2d:6d:66: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:27:31:0B:6E:A6:2B:A9:D4:5B:32:BF:18:38:BC:F2:8D:0A:8F:16 X509v3 Authority Key Identifier: keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c9:50:f6:45:dd:45:86:42:b7:11:f8:71:d6:a6:46:2a:1e: 57:d0:c5:ac:44:ec:df:4d:4f:76:48:4a:ec:4c:e4:97:09:12: bf:18:a4:f1:ef:8d:d5:79:7a:37:8c:69:c0:da:3a:ef:b2:50: f2:e7:ff:7c:26:bf:22:e4:b1:06:02:e1:92:fb:12:de:ab:a1: af:fb:73:54:e1:cd:6b:42:a6:50:94:39:1d:fc:f2:a4:f1:27: f7:4c:dd:61:46:f6:01:53:15:5a:3c:ba:b0:c2:94:c5:b4:ad: 5f:90:5b:ad:47:ca:de:3a:28:07:80:a4:a1:6e:f9:e1:cf:72: b0:e2:8e:7e:8c:57:6e:1f:5c:f4:be:33:3c:8e:19:2d:b4:70: 89:66:f9:c7:a6:48:52:a7:11:69:6e:01:e8:3a:c6:3e:2f:39: 08:85:10:c2:74:3a:ef:3a:30:a6:8b:66:e3:4f:e7:b8:4a:ed: 77:34:f2:1e:a9:a9:7c:8b:28:00:a1:1e:b3:76:a6:aa:f7:85: 0a:87:f0:9b:67:c8:d3:91:8c:80:ba:cc:10:8a:ec:d9:e2:45: 28:13:1e:7a:45:ef:eb:54:96:d6:1a:a6:70:57:df:07:46:62: d3:bc:6f:df:45:ca:e0:38:ec:27:01:4a:d1:ca:d1:53:f5:49: 4e:22:1d:6a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZh8HJoioY0EdemfWFmNgx/R51aswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIx QzlFRTg5NDAeFw0yNjA3MTQxMjE2MTRaFw0yNjA3MTUxMjQzMTRaMDMxMTAvBgNV BAMTKDgzMjczMTBCNkVBNjJCQTlENDVCMzJCRjE4MzhCQ0YyOEQwQThGMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCas6lz+xFZ2FXfBQL6EL5APPOS smcp3Bs/Ytjekht8Ro4sHAi84Fa5ZRqdHzoEikLCaFCmvOVl27VvdKVeQfgtbp0f 0E2HAlzkDvFCeSGHz7QxDg6d73vvR8K1M/uWTiC1E5h/5m9w7vAoHqgduY20bfAe V+0Y559axsPG8BXJI5dsmhQ/yxZElInQJxlADIdKtWXd8LCqMLJURt9tJZKedS2h wNJu18Lfkq/lEcN9WDvEE4As9XWCJTTqvttRpiuBW/Jr5IOKRdJVTtsP5NeC8gAW lDB22eaQVa5rACCiJfCgckgmUftyCRHz2LB5B08ZSbXrJ1+vhd8RxS1tZmAtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgycxC26mK6nUWzK/GDi88o0KjxYwHwYDVR0j BBgwFoAUVziVA1pfuclPM6xxiGAC4hye6JQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 NDY2Njc5NzkwNDM2MzUyMy8wLzU3Mzg5NTAzNUE1RkI5Qzk0RjMzQUM3MTg4NjAw MkUyMUM5RUU4OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIxQzlFRTg5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODQ2NjY3OTc5MDQzNjM1MjMvMC81NzM4OTUwMzVBNUZC OUM5NEYzM0FDNzE4ODYwMDJFMjFDOUVFODk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKslQ9kXdRYZC txH4cdamRioeV9DFrETs301PdkhK7EzklwkSvxik8e+N1Xl6N4xpwNo677JQ8uf/ fCa/IuSxBgLhkvsS3quhr/tzVOHNa0KmUJQ5HfzypPEn90zdYUb2AVMVWjy6sMKU xbStX5BbrUfK3jooB4CkoW754c9ysOKOfoxXbh9c9L4zPI4ZLbRwiWb5x6ZIUqcR aW4B6DrGPi85CIUQwnQ67zowpotm40/nuErtdzTyHqmpfIsoAKEes3amqveFCofw m2fI05GMgLrMEIrs2eJFKBMeekXv61SW1hqmcFffB0Zi07xv30XK4DjsJwFK0crR U/VJTiIdag== -----END CERTIFICATE-----Generated at Tue Jul 14 20:14:37 2026 by rpki-client