$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft File: 57B973F8727F1165368D1DA3F1858FD7660A4960.mft (raw, json) Hash identifier: jm7IwRELjkBgH1qNPNpro0YcERw21cF8GKqs+dKT8AQ= Subject key identifier: 4B:B4:11:59:7E:4F:66:4A:16:39:CC:82:7E:E6:4B:34:B3:3E:0C:CE Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Certificate serial: 515A92AE8F4294406C3F5B4C773C9344A2B65922 Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft Manifest number: 0B Signing time: Thu 21 May 2026 06:39:05 +0000 Manifest this update: Thu 21 May 2026 06:34:05 +0000 Manifest next update: Fri 22 May 2026 07:10:05 +0000 Files and hashes: 1: 323430613a613734393a3a2f33322d3332203d3e20313434353135.roa (hash: hOjAHo/m6/oaaV05MMvfkV4irh4bo+PbCgvlzLAudTg=) 2: 57B973F8727F1165368D1DA3F1858FD7660A4960.crl (hash: 2z4rQEJrbhBmY/yOSVTT/scHf1IfR1eqEoXOtciaAL4=) Validation: OK Signature path: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 06:40:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5a:92:ae:8f:42:94:40:6c:3f:5b:4c:77:3c:93:44:a2:b6:59:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960 Validity Not Before: May 21 06:34:05 2026 GMT Not After : May 22 07:10:05 2026 GMT Subject: CN=4BB411597E4F664A1639CC827EE64B34B33E0CCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9c:f4:4f:bb:b4:fe:13:33:92:01:2f:7e:81: 31:a2:bd:1c:5d:07:93:89:d5:b3:fe:c3:de:75:7a: c0:62:ee:ed:e7:30:08:1b:be:f6:dc:38:64:7b:ff: 7c:a0:fe:5e:cf:9e:a3:0b:cb:1d:57:2e:1c:8d:70: 00:ff:4a:b1:22:e3:87:09:65:f7:6b:03:bd:e6:96: 51:c0:e5:76:d4:02:05:59:00:58:a8:ec:fd:ee:ed: 53:45:eb:1c:49:c9:26:e6:79:e2:d5:15:22:00:a6: cc:0a:36:70:3b:61:c1:2e:4b:a5:5a:1b:5d:17:04: 3a:ad:6b:f8:55:0d:37:8d:47:5c:ee:40:5c:f6:84: df:6d:c7:36:36:5d:9b:12:65:ba:fd:a1:f1:15:70: c2:3c:61:fd:0c:93:94:de:6e:68:d1:4e:36:b9:0c: b0:74:26:a2:72:12:a4:62:18:5f:86:83:b5:2b:26: 2d:c3:87:50:22:36:20:75:5c:5a:65:5d:9a:2d:2f: 96:e9:40:82:da:73:9d:4b:5c:b2:1c:f6:2d:57:a1: 96:05:c5:9f:3b:e3:ae:75:e8:6e:17:36:32:2b:80: 09:e1:9d:4d:a6:b0:df:8f:ec:64:ba:58:fc:a1:45: e2:71:ec:70:da:7f:99:ee:81:c3:e1:9d:8e:38:18: 29:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B4:11:59:7E:4F:66:4A:16:39:CC:82:7E:E6:4B:34:B3:3E:0C:CE X509v3 Authority Key Identifier: keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer Subject Information Access: Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d7:34:64:de:bb:d3:c2:33:52:bd:48:82:bc:73:a1:98:e8: 85:2b:32:85:8e:26:db:16:98:b3:46:77:21:df:95:c1:40:a6: 29:99:eb:48:6f:d0:0c:cd:f1:3c:9f:8d:12:25:21:85:d3:cd: 3b:67:3b:1c:ed:be:5c:8e:e0:cf:ae:f8:41:c4:0a:28:25:64: 7c:89:95:87:e4:6a:fa:cb:65:c1:8c:c9:fd:37:08:81:79:11: 46:25:1f:e0:d2:c9:06:24:8e:d3:21:40:e3:32:33:9a:ec:83: 8d:d9:b5:50:86:57:a3:f8:59:66:84:05:81:2f:82:29:6c:44: cc:aa:cc:7b:b8:18:a8:8e:10:ca:4b:eb:a8:f5:f0:f7:ef:71: 31:87:97:ec:e6:6f:f6:80:3a:b8:74:6b:6a:3f:be:88:a5:87: d3:ef:72:9d:96:f5:25:6c:f7:58:cf:7a:2f:d3:17:35:9e:8d: a8:0a:93:22:32:73:2d:3b:33:3f:a4:13:37:11:23:d0:f5:f2: a8:73:62:60:7d:9c:48:1d:46:21:c8:5b:78:20:06:3f:c8:d2: 9f:a2:9a:1f:a3:f2:26:c5:b2:7d:cb:20:a1:fc:ee:f8:c4:f1: d9:35:12:8a:c8:f2:a2:b9:f5:9e:91:f1:a3:71:8f:3d:cb:b9: 45:e6:f6:6b -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUUVqSro9ClEBsP1tMdzyTRKK2WSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2 NjBBNDk2MDAeFw0yNjA1MjEwNjM0MDVaFw0yNjA1MjIwNzEwMDVaMDMxMTAvBgNV BAMTKDRCQjQxMTU5N0U0RjY2NEExNjM5Q0M4MjdFRTY0QjM0QjMzRTBDQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCInPRPu7T+EzOSAS9+gTGivRxd B5OJ1bP+w951esBi7u3nMAgbvvbcOGR7/3yg/l7PnqMLyx1XLhyNcAD/SrEi44cJ ZfdrA73mllHA5XbUAgVZAFio7P3u7VNF6xxJySbmeeLVFSIApswKNnA7YcEuS6Va G10XBDqta/hVDTeNR1zuQFz2hN9txzY2XZsSZbr9ofEVcMI8Yf0Mk5TebmjRTja5 DLB0JqJyEqRiGF+Gg7UrJi3Dh1AiNiB1XFplXZotL5bpQILac51LXLIc9i1XoZYF xZ8746516G4XNjIrgAnhnU2msN+P7GS6WPyhReJx7HDaf5nugcPhnY44GCmlAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUS7QRWX5PZkoWOcyCfuZLNLM+DM4wHwYDVR0j BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5 NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE QTNGMTg1OEZENzY2MEE0OTYwLmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUH MAuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w LzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5NjAubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBt1zRk3rvTwjNSvUiCvHOhmOiFKzKFjibbFpizRnch35XBQKYpmetIb9AM zfE8n40SJSGF0807Zzsc7b5cjuDPrvhBxAooJWR8iZWH5Gr6y2XBjMn9NwiBeRFG JR/g0skGJI7TIUDjMjOa7ION2bVQhlej+FlmhAWBL4IpbETMqsx7uBiojhDKS+uo 9fD373Exh5fs5m/2gDq4dGtqP76IpYfT73KdlvUlbPdYz3ov0xc1no2oCpMiMnMt OzM/pBM3ESPQ9fKoc2JgfZxIHUYhyFt4IAY/yNKfopofo/ImxbJ9yyCh/O74xPHZ NRKKyPKiufWekfGjcY89y7lF5vZr -----END CERTIFICATE-----Generated at Thu May 21 13:56:00 2026 by rpki-client