$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft File: 573895035A5FB9C94F33AC71886002E21C9EE894.mft (raw, json) Hash identifier: Dw8M1yRT8giFo+F9GCzK9yReiPMo7wDgAFeE3yDdpWY= Subject key identifier: F5:CE:69:3F:0C:31:86:27:D5:F8:D2:66:E2:8F:A1:49:7F:72:CA:76 Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894 Certificate serial: 44DF27816DEDED160CB195099F9C3348C5E28F14 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft Manifest number: 6A Signing time: Fri 29 May 2026 08:16:57 +0000 Manifest this update: Fri 29 May 2026 08:11:57 +0000 Manifest next update: Sat 30 May 2026 10:04:57 +0000 Files and hashes: 1: 3130332e32382e3230342e302f32322d3232203d3e2034383337.roa (hash: 4ovutnbYXt86/kEfYgw8ke/Wu42w8twE0K37scXuaeU=) 2: 573895035A5FB9C94F33AC71886002E21C9EE894.crl (hash: S2VYOl5wx5TRDxMkp39xSqSV1sjwi0sBq3izvPzUAM8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:df:27:81:6d:ed:ed:16:0c:b1:95:09:9f:9c:33:48:c5:e2:8f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894 Validity Not Before: May 29 08:11:57 2026 GMT Not After : May 30 10:04:57 2026 GMT Subject: CN=F5CE693F0C318627D5F8D266E28FA1497F72CA76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:30:59:fe:fa:e3:08:51:4f:db:36:55:37:03: fc:22:7b:e6:d8:76:2e:4f:0a:16:92:f8:9a:4f:d4: f6:89:83:13:2d:50:19:bd:fc:20:db:29:e7:8e:68: e7:7b:7c:fc:fb:73:5a:0a:5e:69:90:b9:e5:f1:0e: 96:4b:90:11:2b:89:bf:3b:71:8a:f9:ea:a7:6e:96: c8:81:b7:a7:3a:45:71:7e:ff:f1:dd:ba:f4:3a:04: 6b:b4:58:28:e9:b2:44:6c:f5:77:a0:05:84:f4:ea: f3:b4:aa:8b:de:3c:de:0c:e3:31:45:53:32:b8:d4: 0a:31:d2:89:ee:67:29:50:ac:3f:6f:71:a9:23:06: 28:f6:dc:6b:d9:ef:70:0c:b1:05:e3:83:19:b5:97: 1f:0d:43:95:d5:a2:a5:51:c4:9f:66:c5:c9:5c:9a: 89:c8:9a:75:6a:2f:db:7e:bc:ef:ea:89:7a:16:6b: c4:e1:4f:19:a0:ee:e4:8d:41:c6:33:db:bd:75:82: 09:ee:e9:6c:df:e3:dc:e7:76:8c:e1:e4:9b:12:8a: ca:15:cd:72:80:e2:49:b7:d9:4a:55:97:bf:ac:c9: 9b:28:7d:1f:cd:81:96:89:03:17:bd:ee:b1:63:11: da:f0:f0:4f:bb:3d:5d:b7:94:54:bc:26:14:5d:87: 76:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CE:69:3F:0C:31:86:27:D5:F8:D2:66:E2:8F:A1:49:7F:72:CA:76 X509v3 Authority Key Identifier: keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:39:2d:03:0c:f4:58:4c:b9:fd:ee:53:ed:18:7f:58:f7:fe: 07:59:bd:67:05:6f:d6:37:51:c8:00:8b:34:2e:e6:6d:1c:1f: 9d:ec:9a:25:db:32:74:84:6c:b9:84:f7:df:41:3d:ee:d7:7b: 57:bc:8f:9f:6d:9b:7c:78:52:f9:bc:56:3c:0a:f9:e7:a3:89: 70:aa:cb:ac:d8:4d:87:80:02:88:24:72:e4:11:43:dd:6f:0a: 65:9b:18:76:22:4a:25:a1:67:c8:b1:54:92:04:eb:d8:3e:c0: 9c:70:87:bd:bc:e0:13:1f:be:58:00:e8:4c:08:a8:c9:19:98: 7d:b6:74:09:32:15:96:66:a1:99:f4:3d:39:05:2d:de:2d:5a: df:bd:f0:1f:38:9d:87:79:c7:ff:80:2e:0a:1d:0d:80:0d:67: a9:42:ea:60:2e:f3:a7:f8:63:6e:68:39:30:3f:d1:6a:f8:54: 1f:c1:18:06:76:ef:76:87:c0:46:39:10:80:62:60:b9:12:09: 20:72:1e:43:bf:2f:e7:53:2c:0d:ba:c1:a5:6f:5e:46:d7:f0: dd:9a:6c:39:df:c9:4c:4e:9e:8a:7a:16:f7:3c:d7:6d:0a:b6: 28:ac:3f:e8:a0:16:1d:b2:9f:48:fc:0e:94:17:91:f8:e0:2d: 11:11:fd:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURN8ngW3t7RYMsZUJn5wzSMXijxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIx QzlFRTg5NDAeFw0yNjA1MjkwODExNTdaFw0yNjA1MzAxMDA0NTdaMDMxMTAvBgNV BAMTKEY1Q0U2OTNGMEMzMTg2MjdENUY4RDI2NkUyOEZBMTQ5N0Y3MkNBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPMFn++uMIUU/bNlU3A/wie+bY di5PChaS+JpP1PaJgxMtUBm9/CDbKeeOaOd7fPz7c1oKXmmQueXxDpZLkBErib87 cYr56qdulsiBt6c6RXF+//HduvQ6BGu0WCjpskRs9XegBYT06vO0qovePN4M4zFF UzK41Aox0onuZylQrD9vcakjBij23GvZ73AMsQXjgxm1lx8NQ5XVoqVRxJ9mxclc monImnVqL9t+vO/qiXoWa8ThTxmg7uSNQcYz2711ggnu6Wzf49zndozh5JsSisoV zXKA4km32UpVl7+syZsofR/NgZaJAxe97rFjEdrw8E+7PV23lFS8JhRdh3alAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9c5pPwwxhifV+NJm4o+hSX9yynYwHwYDVR0j BBgwFoAUVziVA1pfuclPM6xxiGAC4hye6JQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 NDY2Njc5NzkwNDM2MzUyMy8wLzU3Mzg5NTAzNUE1RkI5Qzk0RjMzQUM3MTg4NjAw MkUyMUM5RUU4OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIxQzlFRTg5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODQ2NjY3OTc5MDQzNjM1MjMvMC81NzM4OTUwMzVBNUZC OUM5NEYzM0FDNzE4ODYwMDJFMjFDOUVFODk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjktAwz0WEy5 /e5T7Rh/WPf+B1m9ZwVv1jdRyACLNC7mbRwfneyaJdsydIRsuYT330E97td7V7yP n22bfHhS+bxWPAr556OJcKrLrNhNh4ACiCRy5BFD3W8KZZsYdiJKJaFnyLFUkgTr 2D7AnHCHvbzgEx++WADoTAioyRmYfbZ0CTIVlmahmfQ9OQUt3i1a373wHzidh3nH /4AuCh0NgA1nqULqYC7zp/hjbmg5MD/RavhUH8EYBnbvdofARjkQgGJguRIJIHIe Q78v51MsDbrBpW9eRtfw3ZpsOd/JTE6einoW9zzXbQq2KKw/6KAWHbKfSPwOlBeR +OAtERH9Vw== -----END CERTIFICATE-----Generated at Fri May 29 22:05:32 2026 by rpki-client