$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft File: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft (raw, json) Hash identifier: 337oWHZDoaB11r1YTP9gnYKfyx222/wLr+IHXe3Gff4= Subject key identifier: D0:78:EB:34:83:02:58:54:4D:E2:0D:16:3C:3E:FD:3D:BB:80:A1:11 Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Certificate serial: 4BA7D9518A0F2919E6292A9BC5148720B324D052 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 19:48:28 +0000 Manifest this update: Thu 26 Mar 2026 19:43:28 +0000 Manifest next update: Fri 27 Mar 2026 20:00:28 +0000 Files and hashes: 1: 323430313a376530303a3a2f33322d3634203d3e203137393639.roa (hash: EdGOODlWG3ONCUozOTYrfpFlATRW8oodZdYBqM1SnNY=) 2: 57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl (hash: +QXumXETZoyglceuJMq+YXycS3bW6a3fYOU3tzeV4tU=) 3: 3131372e35392e302e302f31362d3234203d3e203137393639.roa (hash: jqEdbt3MhK6Z7J07psMZQBv74go8mG34DhxeSdGowbk=) 4: 3132352e36322e302e302f31382d3234203d3e203137393639.roa (hash: HUI+HHCfEB2nbQeHqwwB6/Ms2ZiM/pUUCnk/LE3eDjc=) 5: 32372e3134342e302e302f31362d3234203d3e203137393639.roa (hash: SYPXnxeRtZ7noFu43LGfNAwPQXoAc39ePYXU17knFQc=) 6: 3231382e3234342e302e302f31392d3234203d3e203137393639.roa (hash: qIBIXAx+bxCxVuXrC5KPDpWcIbbQfaWsos9qY8Hyohk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a7:d9:51:8a:0f:29:19:e6:29:2a:9b:c5:14:87:20:b3:24:d0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Validity Not Before: Mar 26 19:43:28 2026 GMT Not After : Mar 27 20:00:28 2026 GMT Subject: CN=D078EB34830258544DE20D163C3EFD3DBB80A111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:89:3f:db:0b:f3:f4:17:5f:54:55:7d:07:3c: 97:04:16:9f:1d:22:a7:f6:15:1f:cd:25:9b:5b:ab: a2:79:49:56:e6:75:9d:e7:ec:e1:d2:f2:fd:77:eb: 77:9a:c5:e8:81:10:ac:42:ce:52:fc:11:3d:7a:49: bc:0f:a1:95:df:4f:87:76:15:9b:6e:b2:73:85:99: b9:38:f1:54:8d:57:4e:1e:21:dc:40:a5:ec:7b:4f: a2:aa:f4:3a:9f:5e:94:01:af:5d:a1:19:5e:78:be: c6:a4:fe:58:c9:10:ae:15:ae:40:19:4c:c2:45:85: 83:7d:0b:95:b4:27:84:a4:2d:10:66:b3:c9:e8:a5: ec:49:f3:33:a0:24:aa:3f:14:bd:02:a6:f6:9b:8c: 18:dd:39:f2:4d:40:0b:8f:9d:8a:86:58:ae:48:9d: 41:41:49:ed:a9:30:82:08:f5:b7:a0:a8:7b:7b:b0: 79:d1:66:dd:28:7c:90:83:60:28:66:0a:02:58:7d: 3f:b9:40:7a:e6:06:58:12:7f:83:87:a6:46:fb:4c: 88:f5:da:88:2b:82:ba:26:bf:59:46:25:21:99:89: 9f:42:5a:15:44:8b:f8:3b:8a:db:84:f6:a9:02:b6: 06:a7:d7:da:e9:f8:40:4e:e1:1a:0f:47:79:66:43: bd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:78:EB:34:83:02:58:54:4D:E2:0D:16:3C:3E:FD:3D:BB:80:A1:11 X509v3 Authority Key Identifier: keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:90:04:1d:9a:33:22:6d:4e:3a:6f:26:fe:52:5f:fc:fd:d3: 32:af:4a:a3:cb:a4:fe:de:90:75:9f:e6:f5:a2:82:0e:af:57: c7:4a:46:93:41:c8:34:6c:9d:3d:5c:2b:fd:0e:4b:47:aa:db: a1:d3:16:d9:d9:12:d5:1a:ae:5e:30:f3:0f:d5:7f:51:fd:d9: ae:a8:a3:cc:c8:c4:59:8f:d8:60:02:94:7b:df:c4:a8:52:4f: 41:49:b7:96:73:0f:e9:d0:32:5e:45:87:24:50:f2:54:5a:88: cc:d7:4a:ee:d7:f7:5f:bd:a5:fb:34:a8:6a:92:9f:5e:51:31: dd:ad:8f:60:50:b0:d7:1a:8d:dc:a5:58:ea:de:2b:16:e1:c9: c1:45:f3:90:7f:93:46:56:9e:39:0d:96:8f:61:67:b1:bd:34: db:34:a6:41:f1:8b:eb:52:71:0b:9d:5d:50:3a:eb:6f:22:fb: c3:96:9d:29:e0:59:dd:8a:68:d9:91:53:20:3b:5d:9f:cd:f3: 84:17:a3:4f:ce:ca:a2:cd:02:ed:66:79:81:e2:8b:f8:36:4d: 8f:b9:67:2b:bb:03:37:c2:c8:55:5a:fb:22:f0:6d:86:5f:64: 5b:9f:f3:31:20:82:93:87:bb:a5:a6:b3:e6:2a:ef:fe:95:d3: 56:23:58:bb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS6fZUYoPKRnmKSqbxRSHILMk0FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF Nzk5NUFFMDAeFw0yNjAzMjYxOTQzMjhaFw0yNjAzMjcyMDAwMjhaMDMxMTAvBgNV BAMTKEQwNzhFQjM0ODMwMjU4NTQ0REUyMEQxNjNDM0VGRDNEQkI4MEExMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjiT/bC/P0F19UVX0HPJcEFp8d Iqf2FR/NJZtbq6J5SVbmdZ3n7OHS8v1363eaxeiBEKxCzlL8ET16SbwPoZXfT4d2 FZtusnOFmbk48VSNV04eIdxApex7T6Kq9DqfXpQBr12hGV54vsak/ljJEK4VrkAZ TMJFhYN9C5W0J4SkLRBms8nopexJ8zOgJKo/FL0CpvabjBjdOfJNQAuPnYqGWK5I nUFBSe2pMIII9begqHt7sHnRZt0ofJCDYChmCgJYfT+5QHrmBlgSf4OHpkb7TIj1 2ogrgromv1lGJSGZiZ9CWhVEi/g7ituE9qkCtgan19rp+EBO4RoPR3lmQ73NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0HjrNIMCWFRN4g0WPD79PbuAoREwHwYDVR0j BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc4Nzg0MDMvMC81N0ZCQzYwMkY4REQx QUEwNkQ0NUU3RjNGMTk5Mzk2OEU3OTk1QUUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJAEHZozIm1O Om8m/lJf/P3TMq9Ko8uk/t6QdZ/m9aKCDq9Xx0pGk0HINGydPVwr/Q5LR6rbodMW 2dkS1RquXjDzD9V/Uf3ZrqijzMjEWY/YYAKUe9/EqFJPQUm3lnMP6dAyXkWHJFDy VFqIzNdK7tf3X72l+zSoapKfXlEx3a2PYFCw1xqN3KVY6t4rFuHJwUXzkH+TRlae OQ2Wj2Fnsb002zSmQfGL61JxC51dUDrrbyL7w5adKeBZ3Ypo2ZFTIDtdn83zhBej T87Kos0C7WZ5geKL+DZNj7lnK7sDN8LIVVr7IvBthl9kW5/zMSCCk4e7paaz5irv /pXTViNYuw== -----END CERTIFICATE-----Generated at Fri Mar 27 06:22:11 2026 by rpki-client