$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft File: 573895035A5FB9C94F33AC71886002E21C9EE894.mft (raw, json) Hash identifier: w95s+fUQYlY2/C/MVIk8gEe6WrbFRlRGIA9+TspI5Pk= Subject key identifier: 3E:1E:FE:CC:CD:CB:D3:3E:F9:4C:A7:36:F4:89:4F:A4:B2:FF:31:AD Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894 Certificate serial: 6A5986FBF9D23F0CF51110B7DF9F8B1DA0F369D2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft Manifest number: B5 Signing time: Fri 24 Jul 2026 05:25:27 +0000 Manifest this update: Fri 24 Jul 2026 05:20:27 +0000 Manifest next update: Sat 25 Jul 2026 06:23:27 +0000 Files and hashes: 1: 3130332e32382e3230342e302f32332d3233203d3e20313430373236.roa (hash: ElmDEEXzPwN9Tz6m15yNj5IQZVt4xL0tL9cteAsLsLs=) 2: 3130332e32382e3230362e302f32332d3233203d3e20313430373236.roa (hash: 8m5Z2473gAfDygKKIMTPZZoF/YN4b82LVAUmDbsvaP8=) 3: 3130332e32382e3230342e302f32322d3232203d3e2034383337.roa (hash: 4ovutnbYXt86/kEfYgw8ke/Wu42w8twE0K37scXuaeU=) 4: 573895035A5FB9C94F33AC71886002E21C9EE894.crl (hash: K7Fe/C9UF1ps7C+Y4Y4qy9s5fyTrf0HmB/W7XAiLhBs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:59:86:fb:f9:d2:3f:0c:f5:11:10:b7:df:9f:8b:1d:a0:f3:69:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894 Validity Not Before: Jul 24 05:20:27 2026 GMT Not After : Jul 25 06:23:27 2026 GMT Subject: CN=3E1EFECCCDCBD33EF94CA736F4894FA4B2FF31AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:23:f0:22:d6:21:14:ef:ac:f4:ae:94:23:d0: ea:18:78:35:dd:8c:ae:e7:e7:bf:e5:11:ad:91:bd: bc:db:47:03:8b:10:d4:e1:24:12:56:7f:72:14:3b: af:c1:b3:c1:cb:65:86:d6:e0:3e:20:61:25:70:06: 19:34:28:04:5d:85:44:98:33:03:3f:24:dc:5b:ba: da:f4:ce:7f:b7:f4:aa:a2:ad:4f:4b:37:1a:c0:04: e8:59:ba:1a:2b:cb:8a:8a:90:17:37:ce:34:ba:bd: b7:a9:0a:d9:86:cb:2c:e1:c7:ef:54:0a:28:3a:25: 99:ca:28:ea:34:ac:d7:25:20:aa:b8:d0:1a:3f:ff: d9:10:ab:1a:79:c9:8e:24:d3:35:75:b6:85:3a:fc: 52:e9:b0:4d:02:78:e7:8f:a4:10:5c:f1:8d:db:2e: 0c:85:ac:d9:6e:01:54:18:0b:5d:55:37:dc:fa:a4: 8a:2b:3f:21:d8:7a:84:2e:c3:7f:d0:12:17:9f:67: af:26:8c:ea:bb:e9:bc:e0:f7:d4:50:97:f9:5e:08: a4:6b:98:a5:6d:27:b5:ae:fd:78:74:ca:48:e3:16: 05:6e:19:c3:be:f1:3b:f7:9e:b6:66:5b:c8:15:d8: f1:17:49:84:46:cc:c2:d0:34:63:3c:cf:f5:e0:95: f4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1E:FE:CC:CD:CB:D3:3E:F9:4C:A7:36:F4:89:4F:A4:B2:FF:31:AD X509v3 Authority Key Identifier: keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:6b:15:ff:43:46:cc:5e:55:93:90:fd:08:a7:ab:a5:a8:95: 7a:11:39:25:bf:95:af:6b:e5:a5:de:af:f5:35:5b:1b:1e:9f: 35:dd:73:c2:07:13:f0:77:7e:8a:93:06:5a:b6:fb:e3:f8:d1: 61:ec:1f:27:e1:1e:25:c8:cd:55:e6:3b:1a:85:23:55:47:e0: 51:97:80:4e:b0:7e:d3:7b:4e:67:b3:34:0a:54:a2:ae:4d:c7: 78:58:77:60:60:88:60:1e:68:27:a9:11:3e:3e:d5:09:2d:aa: e8:28:e5:31:53:0d:ef:ae:a5:bc:2d:37:6f:68:c6:27:22:28: 09:a3:ab:c4:5e:7b:1a:3a:79:65:b7:76:b1:33:5c:da:47:46: fe:cd:2b:af:a9:e6:4e:6b:86:25:2e:cd:f1:1b:20:7c:a9:c8: fc:ff:83:e0:bf:5c:8f:72:3a:76:4f:37:db:cb:34:69:e5:4e: c7:9b:7a:3c:1c:d4:eb:f0:4c:99:34:f9:63:bf:94:8c:3d:99: 03:23:2e:8e:97:3e:9b:58:cc:75:c0:b0:78:69:be:5e:4a:78: d6:a3:33:e0:b1:a8:f6:32:2f:16:ac:ad:88:09:33:b1:cb:84: 13:55:bb:99:27:95:8f:f8:21:23:b5:82:b6:a6:ed:e9:fc:1e: e2:d0:e1:e1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUalmG+/nSPwz1ERC335+LHaDzadIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIx QzlFRTg5NDAeFw0yNjA3MjQwNTIwMjdaFw0yNjA3MjUwNjIzMjdaMDMxMTAvBgNV BAMTKDNFMUVGRUNDQ0RDQkQzM0VGOTRDQTczNkY0ODk0RkE0QjJGRjMxQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiI/Ai1iEU76z0rpQj0OoYeDXd jK7n57/lEa2RvbzbRwOLENThJBJWf3IUO6/Bs8HLZYbW4D4gYSVwBhk0KARdhUSY MwM/JNxbutr0zn+39KqirU9LNxrABOhZuhory4qKkBc3zjS6vbepCtmGyyzhx+9U Cig6JZnKKOo0rNclIKq40Bo//9kQqxp5yY4k0zV1toU6/FLpsE0CeOePpBBc8Y3b LgyFrNluAVQYC11VN9z6pIorPyHYeoQuw3/QEhefZ68mjOq76bzg99RQl/leCKRr mKVtJ7Wu/Xh0ykjjFgVuGcO+8Tv3nrZmW8gV2PEXSYRGzMLQNGM8z/XglfRhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPh7+zM3L0z75TKc29IlPpLL/Ma0wHwYDVR0j BBgwFoAUVziVA1pfuclPM6xxiGAC4hye6JQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 NDY2Njc5NzkwNDM2MzUyMy8wLzU3Mzg5NTAzNUE1RkI5Qzk0RjMzQUM3MTg4NjAw MkUyMUM5RUU4OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIxQzlFRTg5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODQ2NjY3OTc5MDQzNjM1MjMvMC81NzM4OTUwMzVBNUZC OUM5NEYzM0FDNzE4ODYwMDJFMjFDOUVFODk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGsV/0NGzF5V k5D9CKerpaiVehE5Jb+Vr2vlpd6v9TVbGx6fNd1zwgcT8Hd+ipMGWrb74/jRYewf J+EeJcjNVeY7GoUjVUfgUZeATrB+03tOZ7M0ClSirk3HeFh3YGCIYB5oJ6kRPj7V CS2q6CjlMVMN766lvC03b2jGJyIoCaOrxF57Gjp5Zbd2sTNc2kdG/s0rr6nmTmuG JS7N8RsgfKnI/P+D4L9cj3I6dk8328s0aeVOx5t6PBzU6/BMmTT5Y7+UjD2ZAyMu jpc+m1jMdcCweGm+Xkp41qMz4LGo9jIvFqytiAkzscuEE1W7mSeVj/ghI7WCtqbt 6fwe4tDh4Q== -----END CERTIFICATE-----Generated at Fri Jul 24 11:53:45 2026 by rpki-client