$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft File: FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft (raw, json) Hash identifier: jipXnabmYc7WiDQuFgAaWKS0saJOpkyA3Cr0kMwOAew= Subject key identifier: F4:B0:7A:62:76:D7:08:31:EE:43:78:A8:84:88:27:96:02:20:9C:18 Authority key identifier: FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9 Certificate issuer: /CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9 Certificate serial: 62B85CA16FDA65419469584673FC479366A37D6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft Manifest number: 78 Signing time: Wed 29 Jul 2026 10:54:12 +0000 Manifest this update: Wed 29 Jul 2026 10:49:12 +0000 Manifest next update: Thu 30 Jul 2026 12:09:12 +0000 Files and hashes: 1: AS24139.roa (hash: qdYkjvhQ+XXRS0M+IDlpLknRxmi951UHbBDsRT0lR9I=) 2: FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl (hash: oA7LhEESTzID49+yCUobOlyaGD7vTYE/UrOl8Pi64XE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 12:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b8:5c:a1:6f:da:65:41:94:69:58:46:73:fc:47:93:66:a3:7d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9 Validity Not Before: Jul 29 10:49:12 2026 GMT Not After : Jul 30 12:09:12 2026 GMT Subject: CN=F4B07A6276D70831EE4378A88488279602209C18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:a6:c4:16:ae:09:74:f3:d7:1a:dc:df:a7: 69:62:a6:59:e6:1e:e3:91:7c:1f:84:c2:84:12:d4: 4c:dd:24:f0:80:1d:5f:61:58:ca:99:53:41:61:cf: ba:f2:69:c6:75:9f:f1:68:9d:d9:f9:da:9f:a2:6e: 90:2f:42:08:a3:04:04:e6:d3:df:61:d6:f3:ff:19: 90:34:12:3a:e4:26:c7:da:b7:5a:d7:51:d9:48:a2: 98:77:15:37:b1:96:9e:be:75:c0:ab:9d:e6:d6:33: 9a:9b:b3:11:e3:f9:e8:f8:99:2d:7a:e7:bc:cf:0e: b0:d6:38:87:a5:a8:db:e2:62:0e:3a:ea:6c:f2:44: 71:c9:e7:cd:d4:06:1b:a7:6d:ed:87:3f:35:61:80: a1:7a:80:40:8e:2a:5f:a4:38:db:f2:64:59:17:0e: 13:2e:de:04:94:34:cc:8c:50:12:aa:26:03:bc:56: 70:2e:79:3c:18:e2:15:75:7b:db:ee:7e:43:3e:07: 39:f1:e3:41:b6:a1:a6:df:63:96:75:6d:62:ea:1a: e8:ac:54:90:3e:51:1a:36:24:c0:27:b3:d3:9b:7a: af:e6:83:be:fc:e5:a9:8b:b6:71:65:4c:22:3c:7d: dc:36:d7:a3:91:7a:56:20:cc:87:36:6f:cb:9b:24: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B0:7A:62:76:D7:08:31:EE:43:78:A8:84:88:27:96:02:20:9C:18 X509v3 Authority Key Identifier: keyid:FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:16:04:d3:a9:c3:cc:99:0c:32:a3:9b:0d:05:cc:ff:c9:55: ab:c1:af:fe:08:de:2a:40:ef:ec:ee:5a:6b:d7:9a:f5:61:4f: c6:56:a1:c1:95:a7:1b:72:84:2b:20:c8:1b:e4:eb:5b:68:ac: 85:51:8d:47:d6:03:ab:fc:6e:b4:0e:c9:b1:38:39:a7:f2:fc: b2:26:c6:a7:48:01:30:9d:fc:86:6e:dd:d5:ef:4e:0f:35:fd: cc:9c:44:27:d0:62:4a:87:63:55:60:ef:17:9e:09:53:82:ed: 55:07:2e:52:8f:9a:94:fd:38:71:a0:1d:f4:6f:18:90:56:07: 4f:be:53:67:f6:1f:48:fe:55:a7:98:c2:98:19:a2:2f:88:8e: 60:40:53:06:1c:63:79:10:8d:c7:b3:7b:83:0c:6d:23:28:53: 31:a0:94:82:da:53:af:05:57:4d:9b:60:88:f6:d7:54:ca:2c: cc:da:ad:d1:6c:c6:8b:98:1d:7c:62:5f:05:b6:49:01:08:1f: 33:7d:06:0f:ed:50:d5:a4:7b:32:62:2c:26:ff:85:ed:ab:a1: 3f:6a:e0:43:78:5e:76:23:aa:f8:7d:67:57:62:0b:e5:69:4f: ad:1f:2c:80:5e:52:94:b1:56:01:6c:61:a7:1c:83:86:f9:d5: 25:73:b0:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYrhcoW/aZUGUaVhGc/xHk2ajfW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU4MTMxRDdEQkExNjRGOERGMkQxOTUxQUMxMjk5ODg0 MjIzRTZBOTAeFw0yNjA3MjkxMDQ5MTJaFw0yNjA3MzAxMjA5MTJaMDMxMTAvBgNV BAMTKEY0QjA3QTYyNzZENzA4MzFFRTQzNzhBODg0ODgyNzk2MDIyMDlDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHqbEFq4JdPPXGtzfp2liplnm HuORfB+EwoQS1EzdJPCAHV9hWMqZU0Fhz7ryacZ1n/Fondn52p+ibpAvQgijBATm 099h1vP/GZA0EjrkJsfat1rXUdlIoph3FTexlp6+dcCrnebWM5qbsxHj+ej4mS16 57zPDrDWOIelqNviYg466mzyRHHJ583UBhunbe2HPzVhgKF6gECOKl+kONvyZFkX DhMu3gSUNMyMUBKqJgO8VnAueTwY4hV1e9vufkM+Bznx40G2oabfY5Z1bWLqGuis VJA+URo2JMAns9Obeq/mg7785amLtnFlTCI8fdw216ORelYgzIc2b8ubJGa1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9LB6YnbXCDHuQ3iohIgnlgIgnBgwHwYDVR0j BBgwFoAU/oEx19uhZPjfLRlRrBKZiEIj5qkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjQ1ODEzMjE3Mjc2NzI1MS8wL0ZFODEzMUQ3REJBMTY0RjhERjJEMTk1MUFDMTI5 OTg4NDIyM0U2QTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkU4MTMxRDdEQkExNjRGOERGMkQxOTUxQUMxMjk5ODg0MjIzRTZBOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY0NTgxMzIxNzI3NjcyNTEvMC9GRTgxMzFEN0RCQTE2 NEY4REYyRDE5NTFBQzEyOTk4ODQyMjNFNkE5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRYE06nDzJkM MqObDQXM/8lVq8Gv/gjeKkDv7O5aa9ea9WFPxlahwZWnG3KEKyDIG+TrW2ishVGN R9YDq/xutA7JsTg5p/L8sibGp0gBMJ38hm7d1e9ODzX9zJxEJ9BiSodjVWDvF54J U4LtVQcuUo+alP04caAd9G8YkFYHT75TZ/YfSP5Vp5jCmBmiL4iOYEBTBhxjeRCN x7N7gwxtIyhTMaCUgtpTrwVXTZtgiPbXVMoszNqt0WzGi5gdfGJfBbZJAQgfM30G D+1Q1aR7MmIsJv+F7auhP2rgQ3hediOq+H1nV2IL5WlPrR8sgF5SlLFWAWxhpxyD hvnVJXOwDg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:45 2026 by rpki-client