$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft File: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft (raw, json) Hash identifier: 4fyy5fESKXADWRjw+G1VsOYPTQoYCCr4zF0jWaHLfck= Subject key identifier: 40:06:F3:41:88:76:5C:BB:B6:17:5B:DE:01:1E:71:C2:52:4A:46:3F Authority key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA Certificate issuer: /CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Certificate serial: 054D598E41C695B400570C377A057353A0D46A70 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft Manifest number: 6B Signing time: Tue 28 Jul 2026 15:27:08 +0000 Manifest this update: Tue 28 Jul 2026 15:22:08 +0000 Manifest next update: Wed 29 Jul 2026 17:27:08 +0000 Files and hashes: 1: 3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa (hash: WbMaWG6apBa3pSCbnJ8kgOTdT0aFXm7oFZYtZD4puOQ=) 2: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl (hash: RgMLbto1Xafo66gHD48u+wibeNQe1tfau4vb9DjPEIs=) 3: 3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa (hash: pCJukIqUYrgHCj5Ju2oMUnrFjBuF4DtRmejZ+EtNDu0=) 4: 323430333a363734303a3a2f34382d3438203d3e2034383038.roa (hash: xVjIIll3PePJXngcsv3lCke4SgWX61LJmNnDtNzxkZU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:4d:59:8e:41:c6:95:b4:00:57:0c:37:7a:05:73:53:a0:d4:6a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Validity Not Before: Jul 28 15:22:08 2026 GMT Not After : Jul 29 17:27:08 2026 GMT Subject: CN=4006F34188765CBBB6175BDE011E71C2524A463F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:68:79:89:2d:27:59:93:77:ed:15:86:b8:7d: 85:aa:e0:8b:f2:9a:0a:3d:40:31:fe:eb:aa:6e:5a: 5f:0e:0e:be:0e:77:2c:c0:fa:e2:02:34:93:65:27: 8c:49:0b:86:7d:47:29:d6:36:f1:a5:ed:3c:6f:37: 2b:49:2f:19:a2:7d:f2:70:87:bf:11:88:9e:77:46: 3b:5f:1c:eb:91:77:60:61:95:53:0d:ce:33:90:f2: cb:3d:f6:b7:0d:55:37:d7:72:95:13:e9:d8:8a:a6: cc:45:5c:9b:46:39:1a:b2:11:d6:f6:78:6f:dd:8e: 09:53:45:b9:78:68:32:bc:ca:33:45:44:0c:eb:1a: ce:a4:56:41:b5:14:52:79:27:99:4c:fa:a0:04:21: 49:88:e2:34:f2:37:58:61:7a:51:ca:8d:70:ae:b3: 36:21:a8:a7:1a:7a:f6:79:1c:79:07:17:f8:4e:96: d3:00:91:7c:89:ef:6f:83:1e:77:31:48:14:22:08: 84:63:fd:0f:cc:e0:54:55:55:26:a4:cf:b6:77:da: b2:9a:03:1e:4a:3d:fa:a7:93:2c:42:ae:a5:cf:f1: 07:24:11:55:5d:3f:33:c3:aa:57:19:fa:60:09:48: 58:ca:46:79:f8:4d:86:94:2c:21:d4:37:4d:36:4c: 22:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:06:F3:41:88:76:5C:BB:B6:17:5B:DE:01:1E:71:C2:52:4A:46:3F X509v3 Authority Key Identifier: keyid:FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:59:b4:95:70:45:db:39:cb:d8:8b:34:de:b2:ac:89:6a:c4: 04:89:1f:73:f7:18:5d:16:a6:2d:c7:32:01:23:a4:5e:16:14: 79:cd:00:60:b7:15:4e:7f:4e:9e:f7:f8:7c:55:e3:7b:3e:9b: cf:14:ba:8c:a5:12:b1:1a:2e:e2:74:6e:10:0f:6f:aa:69:05: eb:67:83:f3:c6:69:a7:b8:ad:71:52:f3:5e:02:19:76:fd:3d: 7a:72:53:6c:6b:80:ea:84:f2:cc:ca:17:0d:be:fc:d3:54:4f: 80:82:6e:9d:55:bf:11:07:bb:69:ad:ab:11:1d:6a:60:0a:a2: e8:ef:de:e3:4e:ec:78:a0:7a:41:a3:b9:71:50:a0:60:42:d2: 71:7a:3d:01:3b:af:37:f4:4d:85:08:39:ca:90:29:02:4c:36: 0e:1a:59:c3:5f:0b:4a:fc:0b:e7:d6:78:e4:a7:84:d7:7c:b4: fe:c1:92:52:b0:1f:70:48:28:0b:e8:09:1e:25:21:37:c5:d2: 71:6f:82:9e:89:50:4c:8a:f7:4f:33:ea:3b:7d:4d:f5:66:40: c5:be:b3:72:25:4e:63:0f:28:ea:96:7d:de:d7:09:c2:ed:53: 31:81:c4:c1:fd:a8:6d:1e:11:cf:cc:52:46:80:ef:b2:72:c1: 61:0a:f8:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBU1ZjkHGlbQAVww3egVzU6DUanAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0 MzY0QkFFQTAeFw0yNjA3MjgxNTIyMDhaFw0yNjA3MjkxNzI3MDhaMDMxMTAvBgNV BAMTKDQwMDZGMzQxODg3NjVDQkJCNjE3NUJERTAxMUU3MUMyNTI0QTQ2M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaHmJLSdZk3ftFYa4fYWq4Ivy mgo9QDH+66puWl8ODr4OdyzA+uICNJNlJ4xJC4Z9RynWNvGl7TxvNytJLxmiffJw h78RiJ53RjtfHOuRd2BhlVMNzjOQ8ss99rcNVTfXcpUT6diKpsxFXJtGORqyEdb2 eG/djglTRbl4aDK8yjNFRAzrGs6kVkG1FFJ5J5lM+qAEIUmI4jTyN1hhelHKjXCu szYhqKcaevZ5HHkHF/hOltMAkXyJ72+DHncxSBQiCIRj/Q/M4FRVVSakz7Z32rKa Ax5KPfqnkyxCrqXP8QckEVVdPzPDqlcZ+mAJSFjKRnn4TYaULCHUN002TCKtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQAbzQYh2XLu2F1veAR5xwlJKRj8wHwYDVR0j BBgwFoAU+kU68/SrFmVR/UwyLV/SOENkuuowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1NTI5NTczMTIzNjg3NS8wL0ZBNDUzQUYzRjRBQjE2NjU1MUZENEMzMjJENUZE MjM4NDM2NEJBRUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0MzY0QkFFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTUyOTU3MzEyMzY4NzUvMC9GQTQ1M0FGM0Y0QUIx NjY1NTFGRDRDMzIyRDVGRDIzODQzNjRCQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlm0lXBF2znL 2Is03rKsiWrEBIkfc/cYXRamLccyASOkXhYUec0AYLcVTn9Onvf4fFXjez6bzxS6 jKUSsRou4nRuEA9vqmkF62eD88Zpp7itcVLzXgIZdv09enJTbGuA6oTyzMoXDb78 01RPgIJunVW/EQe7aa2rER1qYAqi6O/e407seKB6QaO5cVCgYELScXo9ATuvN/RN hQg5ypApAkw2DhpZw18LSvwL59Z45KeE13y0/sGSUrAfcEgoC+gJHiUhN8XScW+C nolQTIr3TzPqO31N9WZAxb6zciVOYw8o6pZ93tcJwu1TMYHEwf2obR4Rz8xSRoDv snLBYQr4mQ== -----END CERTIFICATE-----Generated at Wed Jul 29 04:10:52 2026 by rpki-client