$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft File: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft (raw, json) Hash identifier: R24UspHfh6brSuTmFFVdqL89BoxdDWRuksepEvFoI40= Subject key identifier: ED:1A:BF:FA:54:63:1E:29:54:02:84:51:85:60:EE:AB:34:B4:86:3B Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A Certificate issuer: /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Certificate serial: 3E28A723F1A86AC7BC502779B501A8E9BE99EC33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft Manifest number: 82 Signing time: Mon 28 Sep 2026 13:05:45 +0000 Manifest this update: Mon 28 Sep 2026 13:00:45 +0000 Manifest next update: Thu 01 Oct 2026 14:00:45 +0000 Files and hashes: 1: 3231382e3234302e3138312e302f32342d3234203d3e203435303538.roa (hash: StpUKUs1rVFrd/wGnvAcrta3zI5qiSifu4/J6otxOY8=) 2: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl (hash: bSMaokt3gwBqtSWPlHSAtDfrCYaE+oUYDc+cPr4n2wk=) 3: 3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa (hash: FXhv9P90uZTHbPWO0WwQi96WGpHYA4LPw6mGXuxuRKE=) 4: 3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa (hash: Cni/r/Zja/reOMYwwWQACpwTbRJuZT4t4DhHsOzNIAY=) 5: 3231382e3234302e3138342e302f32342d3234203d3e2034383038.roa (hash: 8W97xzHc9MQctO7ZNjByi6LZvr1KI8kDZ7yXZdszjxI=) 6: 3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa (hash: W1PuJ+HbUt/iBs+gWvlRS8Ed7W25ywxjxjnRjdpuULE=) 7: 3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa (hash: Oerta/6FyO4G7xGB/2MOZsxBA07vpNkvtKeF+Hda6yU=) 8: 3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa (hash: ZZ0ylrxDB0RtarHxxpZzISxuiZqcj7poY8afyFg+hwM=) 9: 3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa (hash: jJXMVgde2pxbfq2NcR3+ZwHj4k6TJr3LdkEaBURBLXc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:28:a7:23:f1:a8:6a:c7:bc:50:27:79:b5:01:a8:e9:be:99:ec:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Validity Not Before: Sep 28 13:00:45 2026 GMT Not After : Oct 1 14:00:45 2026 GMT Subject: CN=ED1ABFFA54631E29540284518560EEAB34B4863B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9e:73:d1:99:95:cc:35:52:1e:62:1c:25:44: 30:65:63:8c:b2:c6:30:b8:34:f4:cf:0c:6e:2b:6e: 7c:a7:a8:00:1c:eb:fc:cf:ef:a5:00:a8:15:f7:92: 7c:54:ad:8e:dd:a4:63:ef:f5:4b:a7:60:df:d2:ed: 5c:10:e7:77:d8:75:20:45:ff:21:a8:c7:2f:d0:fa: 5d:06:cb:56:55:bd:b1:04:85:54:53:d6:48:10:c0: 88:2f:f2:d4:3c:a0:ab:a2:52:68:2c:a5:5a:d4:c1: e4:c1:fb:21:0e:bc:f1:e8:cf:ee:c0:77:bd:d8:af: d6:33:cb:9b:e6:a9:48:4c:7d:ff:d4:62:ce:6a:03: 95:c7:4d:57:f1:c9:96:6a:10:c3:49:a7:ec:9b:82: dc:1e:31:ef:93:bf:bb:fb:60:ca:62:92:3f:07:fd: 35:2e:2a:71:b8:86:86:3d:a1:44:b9:c0:c3:e4:0a: 9d:23:25:b1:34:4b:c4:ab:6f:27:06:2e:78:08:eb: ba:a5:0b:89:69:f8:77:77:6f:49:bc:e5:1e:f1:74: dd:f3:c1:f1:14:78:cf:59:0f:5f:56:ea:8b:48:fd: 60:ed:d6:6d:3f:55:b0:6d:6b:a3:1d:40:24:73:1d: db:e7:cb:46:2f:8c:42:08:19:64:4f:3c:2a:ff:e6: 7c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1A:BF:FA:54:63:1E:29:54:02:84:51:85:60:EE:AB:34:B4:86:3B X509v3 Authority Key Identifier: keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:39:56:fe:e8:ea:a6:ff:50:24:78:88:26:e8:39:07:76:ef: 1b:fc:eb:b5:48:33:43:79:30:cf:66:39:a1:75:60:ce:32:c2: 20:c8:a2:7a:f0:30:3b:c2:55:6f:21:1b:07:19:6b:0e:f0:16: 0d:14:23:b1:b8:d9:3e:4d:ac:3d:35:11:c5:c1:fd:48:45:32: 95:cd:3e:30:ca:80:0f:88:23:b5:20:52:00:bf:6d:84:d5:f8: a6:8d:c3:1c:1a:61:93:39:36:92:f8:d7:0e:5f:cd:e7:5a:f6: 8f:64:8a:10:e8:b5:fb:58:b8:6b:0e:5b:b3:3c:83:7c:44:c1: 54:3c:fc:bf:dd:46:38:a5:a3:f6:9c:fb:5a:9f:6c:06:a4:1a: 75:3f:f2:6c:44:41:89:83:eb:d5:24:c0:cb:2f:6a:0e:74:8c: 04:02:45:7f:b1:9d:ad:ea:b1:40:0f:9f:3b:fd:a8:58:21:5c: 4e:09:24:ab:ef:72:ca:49:65:7f:76:78:8e:a1:cd:e8:79:af: 2e:87:1f:32:48:81:80:85:ed:12:b5:74:d7:ff:d2:ec:13:ff: 3e:9b:b8:76:b2:bd:0c:34:bf:24:ff:51:32:fc:f6:27:fc:de: 07:35:36:b4:7f:f5:f8:87:8e:37:b2:36:f1:dc:d8:23:bc:95: 58:44:2a:f2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPiinI/Goase8UCd5tQGo6b6Z7DMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4 QzgzRkY2QTAeFw0yNjA5MjgxMzAwNDVaFw0yNjEwMDExNDAwNDVaMDMxMTAvBgNV BAMTKEVEMUFCRkZBNTQ2MzFFMjk1NDAyODQ1MTg1NjBFRUFCMzRCNDg2M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbnnPRmZXMNVIeYhwlRDBlY4yy xjC4NPTPDG4rbnynqAAc6/zP76UAqBX3knxUrY7dpGPv9UunYN/S7VwQ53fYdSBF /yGoxy/Q+l0Gy1ZVvbEEhVRT1kgQwIgv8tQ8oKuiUmgspVrUweTB+yEOvPHoz+7A d73Yr9Yzy5vmqUhMff/UYs5qA5XHTVfxyZZqEMNJp+ybgtweMe+Tv7v7YMpikj8H /TUuKnG4hoY9oUS5wMPkCp0jJbE0S8SrbycGLngI67qlC4lp+Hd3b0m85R7xdN3z wfEUeM9ZD19W6otI/WDt1m0/VbBta6MdQCRzHdvny0YvjEIIGWRPPCr/5nznAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7Rq/+lRjHilUAoRRhWDuqzS0hjswHwYDVR0j BBgwFoAU/NxSLCl3pCwOGpkgQPWEDIyD/2owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0NjU4OTY4OTUyODM0Ny8wL0ZDREM1MjJDMjk3N0E0MkMwRTFBOTkyMDQwRjU4 NDBDOEM4M0ZGNkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4QzgzRkY2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDY1ODk2ODk1MjgzNDcvMC9GQ0RDNTIyQzI5NzdB NDJDMEUxQTk5MjA0MEY1ODQwQzhDODNGRjZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTlW/ujqpv9Q JHiIJug5B3bvG/zrtUgzQ3kwz2Y5oXVgzjLCIMiievAwO8JVbyEbBxlrDvAWDRQj sbjZPk2sPTURxcH9SEUylc0+MMqAD4gjtSBSAL9thNX4po3DHBphkzk2kvjXDl/N 51r2j2SKEOi1+1i4aw5bszyDfETBVDz8v91GOKWj9pz7Wp9sBqQadT/ybERBiYPr 1STAyy9qDnSMBAJFf7GdreqxQA+fO/2oWCFcTgkkq+9yykllf3Z4jqHN6HmvLocf MkiBgIXtErV01//S7BP/Ppu4drK9DDS/JP9RMvz2J/zeBzU2tH/1+IeON7I28dzY I7yVWEQq8g== -----END CERTIFICATE-----Generated at Tue Sep 29 17:53:30 2026 by rpki-client