$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft File: 573895035A5FB9C94F33AC71886002E21C9EE894.mft (raw, json) Hash identifier: ycYt7EJL9orS/7VIxIATKgkh5MIJSyV9dMBdB47IWS0= Subject key identifier: 0C:B2:5C:03:65:FC:1B:8B:73:F5:DF:A9:8C:A1:C1:3A:31:78:D9:64 Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894 Certificate serial: 55DD006B62A84DC275F6A6ABD0C8AF708F77520F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft Manifest number: E4 Signing time: Fri 28 Aug 2026 06:48:03 +0000 Manifest this update: Fri 28 Aug 2026 06:43:03 +0000 Manifest next update: Mon 31 Aug 2026 15:22:03 +0000 Files and hashes: 1: 573895035A5FB9C94F33AC71886002E21C9EE894.crl (hash: 5BqCpM+BrGFs9P/PiuJSKbm+vdnTCH/IhtKhSuD2PNM=) 2: 3130332e32382e3230362e302f32332d3233203d3e20313430373236.roa (hash: 8m5Z2473gAfDygKKIMTPZZoF/YN4b82LVAUmDbsvaP8=) 3: 3130332e32382e3230342e302f32322d3232203d3e2034383337.roa (hash: 4ovutnbYXt86/kEfYgw8ke/Wu42w8twE0K37scXuaeU=) 4: 3130332e32382e3230342e302f32332d3233203d3e20313430373236.roa (hash: ElmDEEXzPwN9Tz6m15yNj5IQZVt4xL0tL9cteAsLsLs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:dd:00:6b:62:a8:4d:c2:75:f6:a6:ab:d0:c8:af:70:8f:77:52:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894 Validity Not Before: Aug 28 06:43:03 2026 GMT Not After : Aug 31 15:22:03 2026 GMT Subject: CN=0CB25C0365FC1B8B73F5DFA98CA1C13A3178D964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:c5:b3:9b:1a:57:57:ab:b9:b7:75:f6:5a: f0:96:89:f5:58:e8:03:85:a4:20:73:29:22:cd:b5: 5c:c8:86:2f:a6:29:8f:63:6d:48:33:03:c0:a9:3f: aa:8d:8a:ce:b5:03:e7:f9:77:43:5b:cd:95:c2:c2: 45:1c:26:e3:5b:7a:b6:8c:3c:42:bf:bc:1a:6b:8d: 9f:00:cf:08:3e:01:b4:9a:75:20:38:f2:f8:e2:e1: 3c:cc:e5:3a:19:48:c1:b6:fe:d4:41:8e:84:6a:84: 70:6b:0f:dd:fc:51:77:0f:f4:78:97:4a:04:15:ad: 8f:de:f4:fa:34:d9:95:7f:f3:b1:eb:76:c2:80:e9: e9:d0:b8:b6:a6:ee:14:9b:ca:f6:4c:31:20:1d:10: 69:0d:76:6d:0c:3e:1b:1b:de:4f:f6:bf:59:47:12: 6b:5d:c9:13:df:e0:f6:a9:2a:0d:1f:d6:98:dd:54: 62:61:f9:7f:d7:fb:06:46:f9:2a:c8:8a:e3:fd:84: 5b:56:b8:8a:25:c5:83:9c:bf:7c:77:2d:97:c1:ee: 3a:47:2a:2b:29:c6:99:9c:c9:cb:94:22:1c:20:f2: 8b:53:50:88:b5:fa:e6:47:1e:ce:25:72:d4:ad:3a: a1:eb:d7:40:c3:e8:88:fd:34:b9:60:b8:c6:88:6a: 27:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B2:5C:03:65:FC:1B:8B:73:F5:DF:A9:8C:A1:C1:3A:31:78:D9:64 X509v3 Authority Key Identifier: keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2d:ac:5b:0f:42:e4:df:3d:4f:74:c0:dd:97:0c:23:90:c7: aa:c4:00:25:28:c0:67:ce:e3:9e:75:42:e9:03:41:98:29:e6: 83:03:a2:16:8c:40:71:ed:f9:e3:b8:ad:73:24:19:28:48:b7: e5:4e:bb:a1:d5:04:6c:56:05:0f:03:e2:4e:fd:a6:1a:74:af: c0:4e:53:2b:13:43:44:bd:c1:f4:66:a0:bf:c2:6a:b0:bc:7d: fd:b6:b8:04:04:1d:04:4b:cd:aa:55:05:fd:3e:b8:51:49:60: a2:74:46:ee:5e:b7:b1:83:36:a1:d8:23:38:d6:17:cb:61:0d: 36:24:be:91:40:45:05:bd:da:51:e7:f4:ec:70:6d:39:23:a9: df:e3:4c:4c:2e:aa:04:8a:73:2d:72:41:f2:a4:f1:87:46:ec: 9e:ff:1a:63:84:fa:12:dc:90:f7:4f:2a:11:2e:03:b3:bd:e1: 0a:69:d9:db:43:97:62:67:72:72:d3:4d:b8:f4:f2:2c:b6:85: 69:01:5a:1b:ec:51:af:a7:cf:a5:c0:ed:f3:84:ac:74:0d:d9: 5b:9c:b0:82:fa:49:b7:06:f4:47:ff:ae:30:6b:ae:13:c5:b5: 68:c5:6b:61:5e:22:57:59:38:c7:05:3c:1f:58:ff:92:ce:dc: 10:cd:cb:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVd0Aa2KoTcJ19qar0MivcI93Ug8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIx QzlFRTg5NDAeFw0yNjA4MjgwNjQzMDNaFw0yNjA4MzExNTIyMDNaMDMxMTAvBgNV BAMTKDBDQjI1QzAzNjVGQzFCOEI3M0Y1REZBOThDQTFDMTNBMzE3OEQ5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2y8WzmxpXV6u5t3X2WvCWifVY 6AOFpCBzKSLNtVzIhi+mKY9jbUgzA8CpP6qNis61A+f5d0NbzZXCwkUcJuNberaM PEK/vBprjZ8Azwg+AbSadSA48vji4TzM5ToZSMG2/tRBjoRqhHBrD938UXcP9HiX SgQVrY/e9Po02ZV/87HrdsKA6enQuLam7hSbyvZMMSAdEGkNdm0MPhsb3k/2v1lH EmtdyRPf4PapKg0f1pjdVGJh+X/X+wZG+SrIiuP9hFtWuIolxYOcv3x3LZfB7jpH KispxpmcycuUIhwg8otTUIi1+uZHHs4lctStOqHr10DD6Ij9NLlguMaIaieHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDLJcA2X8G4tz9d+pjKHBOjF42WQwHwYDVR0j BBgwFoAUVziVA1pfuclPM6xxiGAC4hye6JQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 NDY2Njc5NzkwNDM2MzUyMy8wLzU3Mzg5NTAzNUE1RkI5Qzk0RjMzQUM3MTg4NjAw MkUyMUM5RUU4OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIxQzlFRTg5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODQ2NjY3OTc5MDQzNjM1MjMvMC81NzM4OTUwMzVBNUZC OUM5NEYzM0FDNzE4ODYwMDJFMjFDOUVFODk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGy2sWw9C5N89 T3TA3ZcMI5DHqsQAJSjAZ87jnnVC6QNBmCnmgwOiFoxAce3547itcyQZKEi35U67 odUEbFYFDwPiTv2mGnSvwE5TKxNDRL3B9Gagv8JqsLx9/ba4BAQdBEvNqlUF/T64 UUlgonRG7l63sYM2odgjONYXy2ENNiS+kUBFBb3aUef07HBtOSOp3+NMTC6qBIpz LXJB8qTxh0bsnv8aY4T6EtyQ908qES4Ds73hCmnZ20OXYmdyctNNuPTyLLaFaQFa G+xRr6fPpcDt84SsdA3ZW5ywgvpJtwb0R/+uMGuuE8W1aMVrYV4iV1k4xwU8H1j/ ks7cEM3L6g== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:41 2026 by rpki-client