$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft File: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft (raw, json) Hash identifier: Sd1KtHEBDqUPI/gZczIyFgPNy6yrOy54veqUDN9l1Ds= Subject key identifier: 1F:C0:BE:21:51:F1:0A:23:17:48:17:19:25:AB:38:0B:B7:F9:3C:BF Authority key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA Certificate issuer: /CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Certificate serial: 3C944DE4A50F774E499522B7DD20EE96457F0C8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft Manifest number: 2F Signing time: Sat 13 Jun 2026 20:22:13 +0000 Manifest this update: Sat 13 Jun 2026 20:17:13 +0000 Manifest next update: Sun 14 Jun 2026 20:28:13 +0000 Files and hashes: 1: 3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa (hash: WbMaWG6apBa3pSCbnJ8kgOTdT0aFXm7oFZYtZD4puOQ=) 2: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl (hash: QfQMTaVm31PRs/uuDoImQ1QL6fvvFQDAILVUY52vJYc=) 3: 3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa (hash: pCJukIqUYrgHCj5Ju2oMUnrFjBuF4DtRmejZ+EtNDu0=) 4: 323430333a363734303a3a2f34382d3438203d3e2034383038.roa (hash: xVjIIll3PePJXngcsv3lCke4SgWX61LJmNnDtNzxkZU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:94:4d:e4:a5:0f:77:4e:49:95:22:b7:dd:20:ee:96:45:7f:0c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Validity Not Before: Jun 13 20:17:13 2026 GMT Not After : Jun 14 20:28:13 2026 GMT Subject: CN=1FC0BE2151F10A231748171925AB380BB7F93CBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:4b:70:a1:c7:86:fc:a6:b3:c3:c7:49:99: 43:20:15:e7:82:7f:05:55:4a:c4:e6:e8:b5:25:d4: 19:1d:07:be:e4:89:82:4c:2d:81:c4:b1:53:59:a3: 4d:87:d5:57:be:fc:2f:0b:fd:16:8b:65:4c:cf:ab: 8d:d2:ab:d9:f9:3b:f5:bf:d4:72:3d:e9:8d:6f:6c: 5f:ff:3f:09:b9:02:e8:78:ce:d2:c2:56:73:eb:83: 82:36:68:17:5f:d1:58:8d:32:40:ff:a3:2b:dc:29: a8:4e:5d:ab:3d:6b:72:c5:d8:3a:52:63:34:16:92: 2a:fe:87:90:ab:01:dd:46:cb:1b:09:ea:b1:bd:96: 49:9c:1f:c5:46:36:c4:df:45:a3:35:5e:ac:3b:fd: 0b:be:b7:c1:cc:03:dc:45:ac:24:02:71:30:bf:71: e2:31:47:c0:6e:4a:45:83:36:85:a2:96:0b:f2:91: fb:25:28:01:d6:46:c2:d0:54:66:ea:c1:e1:b3:15: 50:20:63:02:7a:0b:e7:fe:ec:e9:95:f5:2c:ad:6a: 11:5b:3e:e0:da:58:c7:db:ab:f7:5b:5d:de:a6:87: 7e:1a:46:da:98:09:65:9e:39:51:77:c0:fc:df:0f: c1:20:34:3e:ce:a5:25:cc:f3:6c:e0:0f:bb:fe:d6: 7e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C0:BE:21:51:F1:0A:23:17:48:17:19:25:AB:38:0B:B7:F9:3C:BF X509v3 Authority Key Identifier: keyid:FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e0:94:1f:98:a4:47:1f:21:d7:e9:66:5e:15:7c:64:83:4c: 60:75:57:74:04:39:c5:f5:0e:ab:e5:de:e8:27:bc:fd:0e:1c: de:d5:22:72:01:ac:0b:6b:97:dc:32:19:54:f9:f9:61:1f:f2: 87:66:3e:98:4c:cb:f6:8c:19:da:0c:54:30:f2:75:b6:63:ff: fe:9c:56:14:80:33:0a:e8:04:63:e7:3a:27:d8:fd:39:04:e5: 13:6e:f5:81:9b:4c:02:62:94:89:67:99:c8:57:92:b8:28:37: 0c:4d:b6:36:8e:ad:97:fd:ec:63:09:ff:dc:7a:00:32:7f:03: bd:91:87:a4:bd:0a:95:d0:12:f1:a1:7d:e5:6d:2c:a8:75:1e: a1:dc:ad:25:34:40:69:75:5c:21:72:5b:67:16:d6:4f:0e:4d: 8c:1b:b2:e8:07:2c:55:27:9c:7e:6c:58:fc:3c:27:5e:d0:8d: 0b:d9:ee:48:75:09:e8:60:2d:57:b4:45:a0:87:a8:24:dd:df: da:d5:b9:49:07:93:91:61:04:0b:fb:2d:d5:3f:5c:1e:17:38: 66:5a:c8:88:05:d6:8d:b3:26:aa:1c:d2:84:aa:c4:21:5f:1b: 8f:72:bb:62:83:fe:3a:b3:19:af:34:6b:f6:2f:72:9e:be:67: 92:6d:02:b6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPJRN5KUPd05JlSK33SDulkV/DI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0 MzY0QkFFQTAeFw0yNjA2MTMyMDE3MTNaFw0yNjA2MTQyMDI4MTNaMDMxMTAvBgNV BAMTKDFGQzBCRTIxNTFGMTBBMjMxNzQ4MTcxOTI1QUIzODBCQjdGOTNDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7EtwoceG/Kazw8dJmUMgFeeC fwVVSsTm6LUl1BkdB77kiYJMLYHEsVNZo02H1Ve+/C8L/RaLZUzPq43Sq9n5O/W/ 1HI96Y1vbF//Pwm5Auh4ztLCVnPrg4I2aBdf0ViNMkD/oyvcKahOXas9a3LF2DpS YzQWkir+h5CrAd1GyxsJ6rG9lkmcH8VGNsTfRaM1Xqw7/Qu+t8HMA9xFrCQCcTC/ ceIxR8BuSkWDNoWilgvykfslKAHWRsLQVGbqweGzFVAgYwJ6C+f+7OmV9SytahFb PuDaWMfbq/dbXd6mh34aRtqYCWWeOVF3wPzfD8EgND7OpSXM82zgD7v+1n4JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUH8C+IVHxCiMXSBcZJas4C7f5PL8wHwYDVR0j BBgwFoAU+kU68/SrFmVR/UwyLV/SOENkuuowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1NTI5NTczMTIzNjg3NS8wL0ZBNDUzQUYzRjRBQjE2NjU1MUZENEMzMjJENUZE MjM4NDM2NEJBRUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0MzY0QkFFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTUyOTU3MzEyMzY4NzUvMC9GQTQ1M0FGM0Y0QUIx NjY1NTFGRDRDMzIyRDVGRDIzODQzNjRCQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAueCUH5ikRx8h 1+lmXhV8ZINMYHVXdAQ5xfUOq+Xe6Ce8/Q4c3tUicgGsC2uX3DIZVPn5YR/yh2Y+ mEzL9owZ2gxUMPJ1tmP//pxWFIAzCugEY+c6J9j9OQTlE271gZtMAmKUiWeZyFeS uCg3DE22No6tl/3sYwn/3HoAMn8DvZGHpL0KldAS8aF95W0sqHUeodytJTRAaXVc IXJbZxbWTw5NjBuy6AcsVSecfmxY/DwnXtCNC9nuSHUJ6GAtV7RFoIeoJN3f2tW5 SQeTkWEEC/st1T9cHhc4ZlrIiAXWjbMmqhzShKrEIV8bj3K7YoP+OrMZrzRr9i9y nr5nkm0Ctg== -----END CERTIFICATE-----Generated at Sat Jun 13 23:25:47 2026 by rpki-client