$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft File: 573895035A5FB9C94F33AC71886002E21C9EE894.mft (raw, json) Hash identifier: gZKLmc6nr685dB4UZmza61G/YD1qasLFNuCgZkpCVOA= Subject key identifier: 08:82:A9:7E:06:E3:24:58:02:B6:71:E0:C1:CA:C4:CC:4C:09:2F:D6 Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894 Certificate serial: 06C45FCBF7B7E47BAC36EFAA243DFDBA8E0C3681 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft Manifest number: 2B Signing time: Mon 13 Apr 2026 04:39:17 +0000 Manifest this update: Mon 13 Apr 2026 04:34:17 +0000 Manifest next update: Tue 14 Apr 2026 07:13:17 +0000 Files and hashes: 1: 573895035A5FB9C94F33AC71886002E21C9EE894.crl (hash: 9tlABTfAQhqlnD98jdHVoN4j6hnjcEhb6DJyJPGRQ1Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c4:5f:cb:f7:b7:e4:7b:ac:36:ef:aa:24:3d:fd:ba:8e:0c:36:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894 Validity Not Before: Apr 13 04:34:17 2026 GMT Not After : Apr 14 07:13:17 2026 GMT Subject: CN=0882A97E06E3245802B671E0C1CAC4CC4C092FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:43:2e:f5:c5:ed:e3:5c:e4:94:b6:0b:12:9e: 71:87:cf:d5:1f:c6:67:89:cb:51:e2:eb:5f:4b:95: 3e:21:dc:06:d1:dc:2c:9d:27:5c:00:d2:4b:f9:85: b3:1e:40:c1:a3:0b:c9:35:83:ba:26:26:c9:6f:22: ee:e6:a0:18:be:b9:2c:3e:fd:16:ef:56:7d:d5:c9: 8f:cf:d2:29:82:e5:a9:f4:a5:a1:9b:e2:7a:a3:0e: 4c:c2:47:fa:e1:3c:80:90:16:0d:b0:6e:6e:22:a6: e9:e2:0b:f6:ed:de:ba:4f:c6:1e:73:e7:af:dc:42: e0:5f:a8:e0:bd:17:f8:19:75:84:1b:51:79:ab:04: bd:ce:3c:ae:8b:77:82:61:03:85:11:ca:c0:c2:76: 31:64:2a:8e:4f:27:b8:ea:16:a1:bb:17:e5:cb:5c: ac:4c:cc:8d:03:12:b2:3f:cd:2d:82:51:9c:06:35: 9a:d6:44:7a:5b:98:8f:ea:20:4e:b5:05:6d:ba:a7: 48:c7:cb:22:20:dd:f7:35:42:80:de:3d:f6:72:52: 3b:c3:fd:bd:41:29:7c:69:d8:ce:a2:73:a5:9e:9c: 1c:96:e2:d7:73:1b:c4:d2:b7:e4:a5:4c:23:78:9f: 67:3d:b9:5c:d9:0d:b1:aa:c0:54:9c:af:ce:41:95: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:82:A9:7E:06:E3:24:58:02:B6:71:E0:C1:CA:C4:CC:4C:09:2F:D6 X509v3 Authority Key Identifier: keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:df:d5:7b:2b:2c:74:dc:e1:0d:6f:d2:2b:e3:69:1b:4c:54: 77:21:7f:11:1b:a9:c9:31:75:26:86:ef:e6:01:32:c4:21:e6: 2c:60:87:6a:3c:b0:4f:d4:6d:13:5f:05:d6:82:26:be:ff:c1: 7c:c7:94:7e:e5:90:23:01:f8:30:ef:04:ff:b3:9b:df:af:c9: 0c:36:a9:1a:ff:b6:60:ba:6a:75:2d:7f:3a:b1:7a:e4:75:4c: 74:17:6b:b4:2d:07:b5:0d:9f:23:b9:d4:1b:ea:e9:fd:88:9d: 06:68:71:35:38:f0:c4:e6:60:36:29:49:2a:95:96:6b:c0:ff: 8e:79:98:68:64:a9:5c:3e:ed:bf:d5:28:61:17:cd:d0:ae:5a: d0:c7:79:51:02:46:01:b4:79:3b:d5:95:5e:de:ef:5b:1a:02: 47:40:81:6a:05:72:0f:3d:63:12:02:10:9a:9d:b6:be:06:b3: 21:2f:7d:a7:76:84:70:4b:9c:71:a0:46:a6:cc:a6:8e:4e:88: d4:fb:5a:ed:40:f1:c8:e0:b6:04:05:85:ac:36:7b:1f:73:21: 74:97:e7:73:a6:97:71:37:67:47:6b:c6:35:e7:94:50:e6:f5: 98:ee:a9:dd:3a:c3:4f:1d:91:05:5b:2d:63:7c:ff:82:5c:61: 65:38:39:e9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBsRfy/e35HusNu+qJD39uo4MNoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIx QzlFRTg5NDAeFw0yNjA0MTMwNDM0MTdaFw0yNjA0MTQwNzEzMTdaMDMxMTAvBgNV BAMTKDA4ODJBOTdFMDZFMzI0NTgwMkI2NzFFMEMxQ0FDNENDNEMwOTJGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZQy71xe3jXOSUtgsSnnGHz9Uf xmeJy1Hi619LlT4h3AbR3CydJ1wA0kv5hbMeQMGjC8k1g7omJslvIu7moBi+uSw+ /RbvVn3VyY/P0imC5an0paGb4nqjDkzCR/rhPICQFg2wbm4ipuniC/bt3rpPxh5z 56/cQuBfqOC9F/gZdYQbUXmrBL3OPK6Ld4JhA4URysDCdjFkKo5PJ7jqFqG7F+XL XKxMzI0DErI/zS2CUZwGNZrWRHpbmI/qIE61BW26p0jHyyIg3fc1QoDePfZyUjvD /b1BKXxp2M6ic6WenByW4tdzG8TSt+SlTCN4n2c9uVzZDbGqwFScr85BldsnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCIKpfgbjJFgCtnHgwcrEzEwJL9YwHwYDVR0j BBgwFoAUVziVA1pfuclPM6xxiGAC4hye6JQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 NDY2Njc5NzkwNDM2MzUyMy8wLzU3Mzg5NTAzNUE1RkI5Qzk0RjMzQUM3MTg4NjAw MkUyMUM5RUU4OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIxQzlFRTg5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODQ2NjY3OTc5MDQzNjM1MjMvMC81NzM4OTUwMzVBNUZC OUM5NEYzM0FDNzE4ODYwMDJFMjFDOUVFODk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnN/VeyssdNzh DW/SK+NpG0xUdyF/ERupyTF1Jobv5gEyxCHmLGCHajywT9RtE18F1oImvv/BfMeU fuWQIwH4MO8E/7Ob36/JDDapGv+2YLpqdS1/OrF65HVMdBdrtC0HtQ2fI7nUG+rp /YidBmhxNTjwxOZgNilJKpWWa8D/jnmYaGSpXD7tv9UoYRfN0K5a0Md5UQJGAbR5 O9WVXt7vWxoCR0CBagVyDz1jEgIQmp22vgazIS99p3aEcEuccaBGpsymjk6I1Pta 7UDxyOC2BAWFrDZ7H3MhdJfnc6aXcTdnR2vGNeeUUOb1mO6p3TrDTx2RBVstY3z/ glxhZTg56Q== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:46 2026 by rpki-client