$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft File: 573895035A5FB9C94F33AC71886002E21C9EE894.mft (raw, json) Hash identifier: hBimCHw1Jdi8xd9nUJARJ6uzJoM4toTPjmX7JWkjl70= Subject key identifier: 45:70:19:47:B7:51:10:C0:E3:D9:82:8A:08:50:F7:0E:CE:57:E7:09 Authority key identifier: 57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 Certificate issuer: /CN=573895035A5FB9C94F33AC71886002E21C9EE894 Certificate serial: 7815C50C84ED0E8319FEC75D5EBF57BDC6F36385 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft Manifest number: F7 Signing time: Fri 09 Oct 2026 22:43:55 +0000 Manifest this update: Fri 09 Oct 2026 22:38:55 +0000 Manifest next update: Tue 13 Oct 2026 08:39:55 +0000 Files and hashes: 1: 3130332e32382e3230362e302f32332d3233203d3e20313430373236.roa (hash: 8m5Z2473gAfDygKKIMTPZZoF/YN4b82LVAUmDbsvaP8=) 2: 3130332e32382e3230342e302f32322d3232203d3e2034383337.roa (hash: 4ovutnbYXt86/kEfYgw8ke/Wu42w8twE0K37scXuaeU=) 3: 573895035A5FB9C94F33AC71886002E21C9EE894.crl (hash: TRo1LytFPT1VDpi98FSJvppemZBElMcB4oPXiL6KN/M=) 4: 3130332e32382e3230342e302f32332d3233203d3e20313430373236.roa (hash: ElmDEEXzPwN9Tz6m15yNj5IQZVt4xL0tL9cteAsLsLs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 08:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:15:c5:0c:84:ed:0e:83:19:fe:c7:5d:5e:bf:57:bd:c6:f3:63:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573895035A5FB9C94F33AC71886002E21C9EE894 Validity Not Before: Oct 9 22:38:55 2026 GMT Not After : Oct 13 08:39:55 2026 GMT Subject: CN=45701947B75110C0E3D9828A0850F70ECE57E709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:56:2c:20:ea:30:1b:48:18:d6:f9:4f:21: 0f:40:16:08:1f:87:48:6d:2e:c5:7c:c2:c9:e3:c4: 8f:32:05:94:69:88:ab:15:d0:a1:97:28:97:cd:c7: ae:b6:75:d4:a7:54:b3:a4:74:69:a7:b3:24:cf:61: d2:a8:06:68:1b:a5:d4:a8:19:06:42:43:54:62:b4: cb:aa:1f:b8:d6:3d:5f:35:85:9a:40:12:1a:18:e8: 8d:4a:a1:12:95:37:a1:7f:5f:21:e4:ca:52:6c:1d: d4:9c:4b:bd:a8:2c:e0:32:95:f1:5a:51:01:21:ba: 44:bc:64:47:2f:68:56:74:9e:36:56:30:6d:b2:2f: d5:db:b3:c6:11:09:c9:0a:d6:5c:75:30:6b:7f:a6: 80:33:35:0b:40:9f:79:6e:12:dd:e2:eb:85:02:5c: 19:ae:a5:ca:d1:c2:61:07:27:9b:b6:cf:6f:05:6e: e4:1c:13:7c:93:da:42:e6:8e:98:95:a4:9d:a9:00: c8:5e:e5:ef:9e:e1:53:85:50:7e:eb:f5:be:86:fa: ad:94:cf:8b:53:3d:8b:d0:13:52:59:6a:d6:ac:d8: a6:35:46:3b:e2:e7:82:7a:6a:9a:0b:35:39:50:8f: 97:17:31:41:70:f2:d1:a0:ea:37:4a:44:22:b7:ff: 40:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:70:19:47:B7:51:10:C0:E3:D9:82:8A:08:50:F7:0E:CE:57:E7:09 X509v3 Authority Key Identifier: keyid:57:38:95:03:5A:5F:B9:C9:4F:33:AC:71:88:60:02:E2:1C:9E:E8:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/573895035A5FB9C94F33AC71886002E21C9EE894.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1084666797904363523/0/573895035A5FB9C94F33AC71886002E21C9EE894.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:09:38:a8:57:36:03:df:19:6a:cc:86:8b:b5:6b:35:2b:8b: 1c:df:02:e8:bc:33:7f:6d:bd:32:4a:1a:44:81:71:09:b6:b4: f5:0d:8f:c2:1f:a1:a6:58:4f:90:62:8f:5b:9e:b5:2a:83:c5: 22:99:12:00:87:5b:e4:eb:be:cf:79:ec:01:81:e5:1b:4d:81: f9:42:cc:bb:11:ec:14:80:d1:3f:b7:cd:2f:5c:18:1a:36:d6: a7:fb:d0:fb:bd:ce:8d:40:6e:ca:d0:a7:3e:81:fb:2d:8e:66: 44:2b:23:79:f1:27:5b:f3:38:49:fc:77:8c:08:c2:e5:c5:0c: 33:24:64:76:f1:a1:65:2c:61:d1:34:a1:cb:b8:fc:e9:eb:75: 6c:da:36:6d:52:34:20:52:76:fa:20:e3:fa:be:d0:cc:f4:3e: 27:d7:fa:aa:12:22:69:0f:dd:d4:c3:6c:5e:b1:f0:e8:bb:dc: 80:2b:6d:e7:2b:c6:ad:e2:76:1e:88:1e:44:f5:77:03:05:3f: f8:0e:71:bf:9a:12:70:ae:25:ba:78:ba:df:10:a8:56:50:d5: 57:78:0b:d1:07:85:a2:80:7e:6f:b7:8d:aa:f0:15:81:0f:0c: d7:d3:29:ca:b2:71:e7:10:b1:ec:8b:3a:72:21:41:69:c9:97: ad:34:e9:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeBXFDITtDoMZ/sddXr9XvcbzY4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIx QzlFRTg5NDAeFw0yNjEwMDkyMjM4NTVaFw0yNjEwMTMwODM5NTVaMDMxMTAvBgNV BAMTKDQ1NzAxOTQ3Qjc1MTEwQzBFM0Q5ODI4QTA4NTBGNzBFQ0U1N0U3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjelYsIOowG0gY1vlPIQ9AFggf h0htLsV8wsnjxI8yBZRpiKsV0KGXKJfNx662ddSnVLOkdGmnsyTPYdKoBmgbpdSo GQZCQ1RitMuqH7jWPV81hZpAEhoY6I1KoRKVN6F/XyHkylJsHdScS72oLOAylfFa UQEhukS8ZEcvaFZ0njZWMG2yL9Xbs8YRCckK1lx1MGt/poAzNQtAn3luEt3i64UC XBmupcrRwmEHJ5u2z28FbuQcE3yT2kLmjpiVpJ2pAMhe5e+e4VOFUH7r9b6G+q2U z4tTPYvQE1JZatas2KY1Rjvi54J6apoLNTlQj5cXMUFw8tGg6jdKRCK3/0DbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURXAZR7dREMDj2YKKCFD3Ds5X5wkwHwYDVR0j BBgwFoAUVziVA1pfuclPM6xxiGAC4hye6JQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 NDY2Njc5NzkwNDM2MzUyMy8wLzU3Mzg5NTAzNUE1RkI5Qzk0RjMzQUM3MTg4NjAw MkUyMUM5RUU4OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTczODk1MDM1QTVGQjlDOTRGMzNBQzcxODg2MDAyRTIxQzlFRTg5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODQ2NjY3OTc5MDQzNjM1MjMvMC81NzM4OTUwMzVBNUZC OUM5NEYzM0FDNzE4ODYwMDJFMjFDOUVFODk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAk4qFc2A98Z asyGi7VrNSuLHN8C6Lwzf229MkoaRIFxCba09Q2Pwh+hplhPkGKPW561KoPFIpkS AIdb5Ou+z3nsAYHlG02B+ULMuxHsFIDRP7fNL1wYGjbWp/vQ+73OjUBuytCnPoH7 LY5mRCsjefEnW/M4Sfx3jAjC5cUMMyRkdvGhZSxh0TShy7j86et1bNo2bVI0IFJ2 +iDj+r7QzPQ+J9f6qhIiaQ/d1MNsXrHw6LvcgCtt5yvGreJ2HogeRPV3AwU/+A5x v5oScK4luni63xCoVlDVV3gL0QeFooB+b7eNqvAVgQ8M19MpyrJx5xCx7Is6ciFB acmXrTTp6g== -----END CERTIFICATE-----Generated at Sat Oct 10 15:59:17 2026 by rpki-client