$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft File: FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft (raw, json) Hash identifier: dCF3usIla4uUSOiAgkOLuXgcj3muc2KKtgOmai5JxF4= Subject key identifier: 1E:FD:E8:94:8A:DB:B1:62:42:98:0B:E2:2C:48:81:CB:3C:F8:0A:59 Authority key identifier: FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D Certificate issuer: /CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D Certificate serial: 565B1FD1272EEE410E86AF9EED4DDE3299D4816D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft Manifest number: 8D Signing time: Wed 29 Jul 2026 10:14:05 +0000 Manifest this update: Wed 29 Jul 2026 10:09:05 +0000 Manifest next update: Thu 30 Jul 2026 12:25:05 +0000 Files and hashes: 1: 323430373a396263303a3a2f33322d3332203d3e20313436373436.roa (hash: Oy/Z6kZQu3MFqdajWzdr4HEF6jg7aYQKFEno2tldjJE=) 2: 3130332e3136392e36322e302f32332d3233203d3e20313436373436.roa (hash: K+igfdpX4dyqlaiPGaiQ/D+ne2AyiTVYoQO5bTIdUK8=) 3: FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl (hash: fwXwuHfAU2yH+UOXzYoWJxcd/cQ5VDhduaSTLzMdUAo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 12:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5b:1f:d1:27:2e:ee:41:0e:86:af:9e:ed:4d:de:32:99:d4:81:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D Validity Not Before: Jul 29 10:09:05 2026 GMT Not After : Jul 30 12:25:05 2026 GMT Subject: CN=1EFDE8948ADBB16242980BE22C4881CB3CF80A59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:e2:28:40:3b:ad:e6:36:a5:5b:d4:26:26: 8b:7b:fc:38:ff:91:70:3b:86:da:c6:fc:96:c7:09: 97:28:b2:bf:5c:f9:b0:29:e0:3d:31:50:61:3f:0c: 06:44:a6:d7:f0:55:f5:5b:6b:5e:71:74:a7:f0:be: a4:00:dd:9e:69:7d:a1:ae:08:05:5d:3d:40:22:3c: ad:01:c5:1c:54:72:36:7d:88:1c:ec:5e:f3:82:ec: 86:2f:85:81:0a:33:f7:08:d6:fd:1c:c4:47:a8:73: 41:37:c0:51:ce:fb:40:dc:4f:cd:00:9d:8c:f4:14: ec:17:e5:43:e5:5c:4b:29:bb:5b:60:9e:b3:f2:d1: 70:a2:55:8c:e0:9d:7b:47:ab:08:3e:d1:b5:a4:d7: fd:8d:21:cf:f9:13:da:cf:3f:23:d6:f3:a3:06:bb: 7c:17:cd:72:6a:00:20:26:da:c4:0a:3d:80:f8:a4: e0:3a:25:8b:ba:fd:1f:26:8d:59:74:bd:63:d8:a1: ad:c4:33:1a:0f:1c:77:2d:7c:c6:93:90:d5:6b:be: 02:9c:7f:15:9a:38:5e:60:a6:51:3f:c9:9a:3d:c4: b0:68:dd:be:6b:bb:75:fb:05:93:aa:b6:a2:0a:62: 05:ec:a8:b7:14:f2:a5:a9:4a:12:0c:93:be:92:c0: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FD:E8:94:8A:DB:B1:62:42:98:0B:E2:2C:48:81:CB:3C:F8:0A:59 X509v3 Authority Key Identifier: keyid:FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:05:3b:c2:78:7c:42:4c:63:27:f8:b4:07:2f:92:c0:83:e4: fa:04:3b:37:b9:2d:a1:fe:0d:80:ab:07:ad:14:45:fc:1d:02: a2:da:9f:df:32:0e:fa:81:01:bb:90:f0:f4:ff:ff:69:58:03: 62:19:cc:8b:32:6e:40:f4:3d:6a:f5:6e:9f:5e:65:ec:17:26: 50:ec:6e:2c:4e:41:0d:19:65:d7:7e:23:73:de:f4:e6:4b:ab: 94:bb:75:49:bb:67:d8:ac:4a:f1:f5:a0:8d:28:2c:60:9f:ad: 03:e0:52:27:ae:34:c0:0c:63:76:4f:fb:9f:c9:44:3b:12:15: 78:d2:6f:dc:21:1b:de:e9:b6:a4:04:3a:4b:e6:56:2f:8e:f4: e7:00:1d:e8:05:5e:c8:c8:ce:b4:ca:da:d6:94:c9:f3:83:e4: 70:25:51:95:8f:2a:4a:a4:48:a8:77:34:47:4a:c5:9f:a9:9a: 7a:20:a6:0c:02:d8:9c:0b:2d:d8:f7:c2:e0:82:92:e7:a1:70: a2:fb:cb:fb:e9:b6:74:94:63:b5:f0:f3:e0:7d:25:a2:f9:89: c6:26:03:63:fb:e2:38:87:87:9e:9f:11:6b:7e:77:4b:ec:71: 5b:f8:20:25:43:99:0e:61:fa:09:f3:bf:07:51:b2:58:9b:00: e1:42:29:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVlsf0Scu7kEOhq+e7U3eMpnUgW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFEMEFENUNDNThGQjRCMzI3MTU2OUExNkM4MDVBNTNB QjRBMjcwRDAeFw0yNjA3MjkxMDA5MDVaFw0yNjA3MzAxMjI1MDVaMDMxMTAvBgNV BAMTKDFFRkRFODk0OEFEQkIxNjI0Mjk4MEJFMjJDNDg4MUNCM0NGODBBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjOIoQDut5jalW9QmJot7/Dj/ kXA7htrG/JbHCZcosr9c+bAp4D0xUGE/DAZEptfwVfVba15xdKfwvqQA3Z5pfaGu CAVdPUAiPK0BxRxUcjZ9iBzsXvOC7IYvhYEKM/cI1v0cxEeoc0E3wFHO+0DcT80A nYz0FOwX5UPlXEspu1tgnrPy0XCiVYzgnXtHqwg+0bWk1/2NIc/5E9rPPyPW86MG u3wXzXJqACAm2sQKPYD4pOA6JYu6/R8mjVl0vWPYoa3EMxoPHHctfMaTkNVrvgKc fxWaOF5gplE/yZo9xLBo3b5ru3X7BZOqtqIKYgXsqLcU8qWpShIMk76SwAi7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHv3olIrbsWJCmAviLEiByzz4ClkwHwYDVR0j BBgwFoAU+tCtXMWPtLMnFWmhbIBaU6tKJw0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njc2MTQ1Mzk3MDQ1NjU3OC8wL0ZBRDBBRDVDQzU4RkI0QjMyNzE1NjlBMTZDODA1 QTUzQUI0QTI3MEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkFEMEFENUNDNThGQjRCMzI3MTU2OUExNkM4MDVBNTNBQjRBMjcwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3NjE0NTM5NzA0NTY1NzgvMC9GQUQwQUQ1Q0M1OEZC NEIzMjcxNTY5QTE2QzgwNUE1M0FCNEEyNzBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwQU7wnh8Qkxj J/i0By+SwIPk+gQ7N7ktof4NgKsHrRRF/B0Cotqf3zIO+oEBu5Dw9P//aVgDYhnM izJuQPQ9avVun15l7BcmUOxuLE5BDRll134jc9705kurlLt1Sbtn2KxK8fWgjSgs YJ+tA+BSJ640wAxjdk/7n8lEOxIVeNJv3CEb3um2pAQ6S+ZWL4705wAd6AVeyMjO tMra1pTJ84PkcCVRlY8qSqRIqHc0R0rFn6maeiCmDALYnAst2PfC4IKS56FwovvL ++m2dJRjtfDz4H0lovmJxiYDY/viOIeHnp8Ra353S+xxW/ggJUOZDmH6CfO/B1Gy WJsA4UIpWw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:02 2026 by rpki-client