$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft File: 573895035A5FB9C94F33AC71886002E21C9EE894.mft (raw, json) Hash identifier: yhdT92lLAu6HHIMv3pPu5V4pjz4Bk1MWKUcubwNXBOA= Subject key identifier: 76:EB:40:96:3E:4E:25:8B:A0:8F:39:7D:FD:B7:8B:6C:DB:1D:12:A1 Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894 Certificate serial: 3445FE93462CA8941DF17BE2A35C2145015EE53B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft Manifest number: 13 Signing time: Thu 26 Mar 2026 08:18:28 +0000 Manifest this update: Thu 26 Mar 2026 08:13:28 +0000 Manifest next update: Fri 27 Mar 2026 09:43:28 +0000 Files and hashes: 1: 573895035A5FB9C94F33AC71886002E21C9EE894.crl (hash: zjY4RbbmaZyxvxAgXrUsMbjD0qua7NvMGkpkfsqGsvs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:45:fe:93:46:2c:a8:94:1d:f1:7b:e2:a3:5c:21:45:01:5e:e5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894 Validity Not Before: Mar 26 08:13:28 2026 GMT Not After : Mar 27 09:43:28 2026 GMT Subject: CN=76EB40963E4E258BA08F397DFDB78B6CDB1D12A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0d:45:38:42:04:85:58:7a:cb:37:cb:6d:01: f2:12:25:0f:d3:b1:c8:3f:28:b1:40:2a:5f:87:f9: 2c:2e:02:e4:a7:7a:40:f2:15:11:e7:c0:9d:08:76: aa:93:02:70:d0:89:55:69:63:1c:ff:98:c0:e5:21: da:25:55:94:a9:10:bc:b9:c3:69:0e:93:ab:8c:71: b7:db:2e:90:65:f4:43:80:7a:e5:51:d8:5d:79:b5: af:0e:06:ac:c7:ec:7b:50:78:12:6a:39:b5:65:5f: 81:a4:85:09:25:12:ae:22:03:43:a8:25:12:54:2f: 37:1a:e0:39:f8:97:08:b6:6e:24:a0:da:13:f4:95: 71:7f:75:59:6f:23:06:3a:3d:01:bf:7d:aa:dd:39: 46:bc:16:f3:9f:78:f0:11:ac:cf:17:1a:73:1b:2f: c0:21:fb:e5:02:d3:ed:13:f3:83:64:89:01:56:9b: b9:67:f6:52:ac:4c:8d:c6:d7:84:aa:79:d2:a2:30: 12:cc:eb:0a:d4:51:4e:23:30:fb:9a:bb:14:d3:d9: 3d:64:44:90:af:b8:62:0d:b5:48:df:23:1d:4f:c1: e3:d7:bd:b2:e9:37:a8:24:37:08:5f:09:e0:34:af: 91:1b:b4:6b:95:3d:35:ec:fe:b5:78:ad:22:03:fe: 64:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:EB:40:96:3E:4E:25:8B:A0:8F:39:7D:FD:B7:8B:6C:DB:1D:12:A1 X509v3 Authority Key Identifier: keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:41:ca:2e:25:b4:a0:c5:bf:98:58:20:cd:62:90:18:17:e8: 73:50:11:67:1d:02:d7:74:b1:2f:09:b1:7a:ef:2d:0c:a1:14: be:a5:25:02:ba:5c:d0:8a:63:34:da:8e:0d:bf:93:7b:11:10: 7e:92:67:61:7d:4a:5b:a6:0e:e9:d5:c0:2e:c7:f5:cd:0d:15: 62:9b:d3:cf:b2:b9:d4:01:4c:3c:08:15:8a:55:2f:f5:b0:2f: 20:61:0f:9a:c5:54:8f:a0:26:ae:ed:68:28:b7:4d:87:f4:09: b9:bd:e3:8c:ed:e2:93:9e:81:97:d1:2b:92:47:ba:91:78:6a: 50:e2:94:2c:ee:f2:4e:36:a2:02:2d:0a:26:6c:90:7a:a0:e7: 6e:5f:d5:22:90:91:ad:5d:6d:5f:0a:71:c4:73:ee:76:a6:5d: bc:8f:89:24:0c:b0:61:b5:88:61:dd:2c:c0:f9:80:13:f9:01: e1:d0:c3:b6:49:ee:0b:e3:85:0c:70:8a:75:10:77:d7:6e:d5: 54:01:3c:a6:da:c0:4e:71:b7:df:5b:ea:0e:9e:da:ca:33:f0: 87:f8:1d:ea:75:67:61:95:59:9f:62:d9:61:f2:a0:e5:cc:52: 5f:a9:ef:3b:8e:53:52:10:a4:ce:df:75:00:72:07:05:98:63: 52:4b:28:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNEX+k0YsqJQd8Xvio1whRQFe5TswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIx QzlFRTg5NDAeFw0yNjAzMjYwODEzMjhaFw0yNjAzMjcwOTQzMjhaMDMxMTAvBgNV BAMTKDc2RUI0MDk2M0U0RTI1OEJBMDhGMzk3REZEQjc4QjZDREIxRDEyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQDUU4QgSFWHrLN8ttAfISJQ/T scg/KLFAKl+H+SwuAuSnekDyFRHnwJ0IdqqTAnDQiVVpYxz/mMDlIdolVZSpELy5 w2kOk6uMcbfbLpBl9EOAeuVR2F15ta8OBqzH7HtQeBJqObVlX4GkhQklEq4iA0Oo JRJULzca4Dn4lwi2biSg2hP0lXF/dVlvIwY6PQG/fardOUa8FvOfePARrM8XGnMb L8Ah++UC0+0T84NkiQFWm7ln9lKsTI3G14SqedKiMBLM6wrUUU4jMPuauxTT2T1k RJCvuGINtUjfIx1PwePXvbLpN6gkNwhfCeA0r5EbtGuVPTXs/rV4rSID/mRzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdutAlj5OJYugjzl9/beLbNsdEqEwHwYDVR0j BBgwFoAUVziVA1pfuclPM6xxiGAC4hye6JQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 NDY2Njc5NzkwNDM2MzUyMy8wLzU3Mzg5NTAzNUE1RkI5Qzk0RjMzQUM3MTg4NjAw MkUyMUM5RUU4OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIxQzlFRTg5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODQ2NjY3OTc5MDQzNjM1MjMvMC81NzM4OTUwMzVBNUZC OUM5NEYzM0FDNzE4ODYwMDJFMjFDOUVFODk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokHKLiW0oMW/ mFggzWKQGBfoc1ARZx0C13SxLwmxeu8tDKEUvqUlArpc0IpjNNqODb+TexEQfpJn YX1KW6YO6dXALsf1zQ0VYpvTz7K51AFMPAgVilUv9bAvIGEPmsVUj6Amru1oKLdN h/QJub3jjO3ik56Bl9Erkke6kXhqUOKULO7yTjaiAi0KJmyQeqDnbl/VIpCRrV1t XwpxxHPudqZdvI+JJAywYbWIYd0swPmAE/kB4dDDtknuC+OFDHCKdRB3127VVAE8 ptrATnG331vqDp7ayjPwh/gd6nVnYZVZn2LZYfKg5cxSX6nvO45TUhCkzt91AHIH BZhjUksobQ== -----END CERTIFICATE-----Generated at Fri Mar 27 03:22:51 2026 by rpki-client