$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft File: 573895035A5FB9C94F33AC71886002E21C9EE894.mft (raw, json) Hash identifier: b8uh/4TEhxVek9lZyylV2B+gemiJC2+tAf2fLI1Jcyg= Subject key identifier: 4E:BC:18:94:D7:2F:C2:7F:22:A1:B5:68:46:98:52:F5:AA:BD:41:68 Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894 Certificate serial: 686F35E62A4FF586C534A7A0392E943F279D34BF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft Manifest number: F9 Signing time: Wed 14 Oct 2026 10:08:55 +0000 Manifest this update: Wed 14 Oct 2026 10:03:55 +0000 Manifest next update: Sat 17 Oct 2026 16:41:55 +0000 Files and hashes: 1: 3130332e32382e3230362e302f32332d3233203d3e20313430373236.roa (hash: 8m5Z2473gAfDygKKIMTPZZoF/YN4b82LVAUmDbsvaP8=) 2: 573895035A5FB9C94F33AC71886002E21C9EE894.crl (hash: Ztcp2X54vCWKXcMeSuKK7jjVVfay1tlBYJXWIiQU/a4=) 3: 3130332e32382e3230342e302f32322d3232203d3e2034383337.roa (hash: 4ovutnbYXt86/kEfYgw8ke/Wu42w8twE0K37scXuaeU=) 4: 3130332e32382e3230342e302f32332d3233203d3e20313430373236.roa (hash: ElmDEEXzPwN9Tz6m15yNj5IQZVt4xL0tL9cteAsLsLs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:6f:35:e6:2a:4f:f5:86:c5:34:a7:a0:39:2e:94:3f:27:9d:34:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894 Validity Not Before: Oct 14 10:03:55 2026 GMT Not After : Oct 17 16:41:55 2026 GMT Subject: CN=4EBC1894D72FC27F22A1B568469852F5AABD4168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:5e:20:b3:e8:0a:ad:dd:c4:96:65:35:a3: c6:31:15:dd:3c:85:84:52:5c:f7:9e:25:4e:50:92: 0e:c2:96:51:36:a8:53:6e:f4:c6:13:d6:63:a8:f8: be:0a:c8:66:61:33:37:ac:7b:36:a2:4d:ac:5c:b4: d0:c7:09:6e:fd:12:bc:dc:60:11:97:5d:0c:80:db: a4:12:8d:a5:96:a9:4a:8e:4c:01:d3:52:aa:73:9a: aa:52:63:41:62:e7:d6:70:74:1d:fc:03:ac:52:07: a2:f0:42:95:0a:b7:0a:a5:70:0c:53:cc:f8:09:0a: 47:d5:08:c1:89:ab:43:a6:96:b6:2f:38:68:50:cb: bd:9c:67:05:5b:37:cc:1d:e9:ef:3a:90:58:25:3c: 21:8b:27:59:00:bb:ab:e1:3c:92:36:85:b9:ca:7a: 25:f4:fa:fb:32:55:c7:14:62:4c:95:96:fc:00:18: a2:35:7c:5d:3c:b2:10:98:85:27:8b:95:d8:c1:57: 0c:5c:7b:be:ec:f8:04:7e:2d:ff:6f:5a:54:08:0d: 85:04:60:ff:a3:26:15:8a:ad:c2:a9:75:1d:35:98: 4a:76:d7:80:bc:d7:19:56:8a:f1:60:e5:82:c1:cf: 98:af:ff:a2:f7:76:a2:68:73:f4:ab:55:83:5b:15: 33:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BC:18:94:D7:2F:C2:7F:22:A1:B5:68:46:98:52:F5:AA:BD:41:68 X509v3 Authority Key Identifier: keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b1:e4:f9:6f:13:9c:c4:7f:e2:c9:68:d5:1b:e1:ce:07:89: 4e:b2:1e:8e:8c:c5:92:68:8d:d2:ee:6a:81:53:1d:f1:d5:2a: 04:74:ef:58:bf:78:c3:76:48:89:c6:8f:49:e9:22:49:c3:62: 29:70:fa:4b:4f:3e:44:d3:0a:93:67:ea:e4:b9:3f:d9:9b:7a: dc:73:be:24:82:9a:6c:3b:66:7f:6e:1d:8d:c2:ac:87:5f:54: f3:f7:60:14:e9:2a:ca:37:67:b0:cb:90:b3:4e:30:d4:4e:03: d2:72:f1:fb:b3:b6:3a:76:31:17:80:92:ed:18:b8:8b:bc:06: 22:32:68:0e:eb:eb:31:6f:81:6d:06:20:e3:30:3d:a2:46:3f: ca:b9:91:76:61:7f:c0:b8:67:87:2b:d1:ec:10:79:00:df:86: 32:c3:84:c5:19:a3:47:4c:ab:88:9d:f9:59:25:f0:1f:d9:7f: 06:0a:8e:38:8c:ba:2e:a5:d7:05:74:8d:65:6d:ed:4c:ae:ad: a4:96:c7:1e:79:2b:60:b4:02:8a:56:03:71:09:af:27:54:88: 26:0e:1b:4a:94:68:16:4b:83:51:fe:95:07:a1:0f:b6:fa:1f: ce:1f:5b:0d:78:15:92:26:dc:49:75:66:d4:d1:e9:1e:30:77: a0:1e:62:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaG815ipP9YbFNKegOS6UPyedNL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIx QzlFRTg5NDAeFw0yNjEwMTQxMDAzNTVaFw0yNjEwMTcxNjQxNTVaMDMxMTAvBgNV BAMTKDRFQkMxODk0RDcyRkMyN0YyMkExQjU2ODQ2OTg1MkY1QUFCRDQxNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc8F4gs+gKrd3ElmU1o8YxFd08 hYRSXPeeJU5Qkg7CllE2qFNu9MYT1mOo+L4KyGZhMzesezaiTaxctNDHCW79Erzc YBGXXQyA26QSjaWWqUqOTAHTUqpzmqpSY0Fi59ZwdB38A6xSB6LwQpUKtwqlcAxT zPgJCkfVCMGJq0OmlrYvOGhQy72cZwVbN8wd6e86kFglPCGLJ1kAu6vhPJI2hbnK eiX0+vsyVccUYkyVlvwAGKI1fF08shCYhSeLldjBVwxce77s+AR+Lf9vWlQIDYUE YP+jJhWKrcKpdR01mEp214C81xlWivFg5YLBz5iv/6L3dqJoc/SrVYNbFTOFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTrwYlNcvwn8iobVoRphS9aq9QWgwHwYDVR0j BBgwFoAUVziVA1pfuclPM6xxiGAC4hye6JQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 NDY2Njc5NzkwNDM2MzUyMy8wLzU3Mzg5NTAzNUE1RkI5Qzk0RjMzQUM3MTg4NjAw MkUyMUM5RUU4OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIxQzlFRTg5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODQ2NjY3OTc5MDQzNjM1MjMvMC81NzM4OTUwMzVBNUZC OUM5NEYzM0FDNzE4ODYwMDJFMjFDOUVFODk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLHk+W8TnMR/ 4slo1RvhzgeJTrIejozFkmiN0u5qgVMd8dUqBHTvWL94w3ZIicaPSekiScNiKXD6 S08+RNMKk2fq5Lk/2Zt63HO+JIKabDtmf24djcKsh19U8/dgFOkqyjdnsMuQs04w 1E4D0nLx+7O2OnYxF4CS7Ri4i7wGIjJoDuvrMW+BbQYg4zA9okY/yrmRdmF/wLhn hyvR7BB5AN+GMsOExRmjR0yriJ35WSXwH9l/BgqOOIy6LqXXBXSNZW3tTK6tpJbH HnkrYLQCilYDcQmvJ1SIJg4bSpRoFkuDUf6VB6EPtvofzh9bDXgVkibcSXVm1NHp HjB3oB5iLw== -----END CERTIFICATE-----Generated at Thu Oct 15 05:56:51 2026 by rpki-client