$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft File: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft (raw, json) Hash identifier: pdnG8z/+Ym1WVKkt6dI8bj6cYrmBslRAL+JCg677Q+8= Subject key identifier: DB:A9:5B:F4:2B:43:F1:D1:8E:EC:55:AD:F8:17:A7:20:F9:99:6B:20 Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A Certificate issuer: /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Certificate serial: 4447355CA4671118C9D6D1FEBCD25FB391D3697E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft Manifest number: 4B Signing time: Tue 28 Jul 2026 18:12:28 +0000 Manifest this update: Tue 28 Jul 2026 18:07:28 +0000 Manifest next update: Wed 29 Jul 2026 21:43:28 +0000 Files and hashes: 1: 3231382e3234302e3138342e302f32342d3234203d3e2034383038.roa (hash: 8W97xzHc9MQctO7ZNjByi6LZvr1KI8kDZ7yXZdszjxI=) 2: 3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa (hash: ZZ0ylrxDB0RtarHxxpZzISxuiZqcj7poY8afyFg+hwM=) 3: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl (hash: gch2IYT+jfJJp0f0AuinZ7QEk56+VD+TJACbACtdcFA=) 4: 3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa (hash: jJXMVgde2pxbfq2NcR3+ZwHj4k6TJr3LdkEaBURBLXc=) 5: 3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa (hash: W1PuJ+HbUt/iBs+gWvlRS8Ed7W25ywxjxjnRjdpuULE=) 6: 3231382e3234302e3138312e302f32342d3234203d3e203435303538.roa (hash: StpUKUs1rVFrd/wGnvAcrta3zI5qiSifu4/J6otxOY8=) 7: 3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa (hash: FXhv9P90uZTHbPWO0WwQi96WGpHYA4LPw6mGXuxuRKE=) 8: 3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa (hash: Cni/r/Zja/reOMYwwWQACpwTbRJuZT4t4DhHsOzNIAY=) 9: 3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa (hash: Oerta/6FyO4G7xGB/2MOZsxBA07vpNkvtKeF+Hda6yU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:47:35:5c:a4:67:11:18:c9:d6:d1:fe:bc:d2:5f:b3:91:d3:69:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Validity Not Before: Jul 28 18:07:28 2026 GMT Not After : Jul 29 21:43:28 2026 GMT Subject: CN=DBA95BF42B43F1D18EEC55ADF817A720F9996B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:38:41:cc:64:fc:d5:79:75:94:e7:00:52: 5c:09:96:bd:76:76:85:1a:06:58:d8:80:1e:6c:9d: 4a:16:9a:40:33:72:aa:17:19:31:55:1a:6a:5c:f6: 16:d8:32:99:84:bb:ea:a4:ef:5c:1b:ab:aa:c4:c3: b0:9e:85:bf:e6:75:73:c4:52:e1:e9:84:dc:6b:02: 10:ef:47:9b:f7:b9:98:33:93:25:8c:5d:40:af:0c: 38:f2:05:ae:45:cf:b5:27:55:70:c6:f0:d8:72:f5: 73:d5:46:15:fa:a3:3c:9c:fc:aa:12:fd:d0:6f:92: c9:fe:06:ac:e0:5b:0c:2b:7b:c0:da:5c:b7:b2:be: 9b:b9:fb:72:2a:4d:f7:13:b0:df:a9:cd:27:37:7b: 6d:ee:9b:36:96:82:1a:b5:39:46:1b:d3:9f:0c:80: 7d:51:c8:0e:bf:f3:8d:e5:ab:45:d9:c2:36:e0:31: 42:26:59:f6:33:24:fa:8c:0b:5b:2d:ea:ed:11:c1: 13:42:62:58:42:7d:9d:15:d4:bf:20:69:e8:29:15: 50:2a:52:c3:d4:a1:dd:b9:c6:e5:26:0e:a6:2c:5b: d1:9b:1a:21:6a:4a:1a:cc:31:eb:ed:d5:6f:64:11: cf:dd:a8:ec:f4:69:c8:eb:9a:d5:21:cb:24:6f:1b: 58:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A9:5B:F4:2B:43:F1:D1:8E:EC:55:AD:F8:17:A7:20:F9:99:6B:20 X509v3 Authority Key Identifier: keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:6e:24:36:54:03:ed:f5:80:92:aa:e8:d2:f9:4a:3b:a6:22: 5c:c8:c5:fc:36:2e:bb:2a:15:2f:c7:f7:25:e8:86:e0:c8:c8: cb:6f:08:31:d0:18:d0:2d:41:82:c7:f6:87:39:97:8d:fa:28: 34:d4:66:9b:ed:95:03:4e:5e:91:8b:90:e3:c9:73:c3:b2:e9: 47:8b:b6:0f:c2:09:96:7b:67:8c:84:ae:61:87:dc:5a:f3:fc: f5:f0:c5:c5:ff:50:01:10:7a:09:89:f7:85:59:96:8b:7f:e9: a9:cf:8c:13:d6:36:1f:67:d4:bc:ab:55:82:ed:9b:9e:28:2c: 8b:09:5e:61:59:13:20:64:b3:4e:80:3f:a8:e7:2c:40:18:71: 65:93:5c:51:aa:f4:cd:5a:77:52:00:af:a3:d2:72:8e:dc:34: ea:3c:85:e2:6f:63:e8:6d:61:22:5a:58:48:b1:ec:b3:73:3c: 4d:97:91:6e:11:14:0a:12:e1:e9:9f:7e:ad:98:f5:6c:33:c3: d0:64:2c:87:15:ef:f5:61:e1:ed:ec:0a:26:97:0d:96:a9:2f: 9a:62:eb:15:2a:dd:79:d8:63:90:14:dc:93:f1:f8:22:ed:62: 6b:f3:40:25:23:30:9e:77:b5:df:7a:99:ce:25:b7:48:3c:a0: 41:88:a4:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUREc1XKRnERjJ1tH+vNJfs5HTaX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4 QzgzRkY2QTAeFw0yNjA3MjgxODA3MjhaFw0yNjA3MjkyMTQzMjhaMDMxMTAvBgNV BAMTKERCQTk1QkY0MkI0M0YxRDE4RUVDNTVBREY4MTdBNzIwRjk5OTZCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRThBzGT81Xl1lOcAUlwJlr12 doUaBljYgB5snUoWmkAzcqoXGTFVGmpc9hbYMpmEu+qk71wbq6rEw7Cehb/mdXPE UuHphNxrAhDvR5v3uZgzkyWMXUCvDDjyBa5Fz7UnVXDG8Nhy9XPVRhX6ozyc/KoS /dBvksn+BqzgWwwre8DaXLeyvpu5+3IqTfcTsN+pzSc3e23umzaWghq1OUYb058M gH1RyA6/843lq0XZwjbgMUImWfYzJPqMC1st6u0RwRNCYlhCfZ0V1L8gaegpFVAq UsPUod25xuUmDqYsW9GbGiFqShrMMevt1W9kEc/dqOz0acjrmtUhyyRvG1j3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU26lb9CtD8dGO7FWt+BenIPmZayAwHwYDVR0j BBgwFoAU/NxSLCl3pCwOGpkgQPWEDIyD/2owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0NjU4OTY4OTUyODM0Ny8wL0ZDREM1MjJDMjk3N0E0MkMwRTFBOTkyMDQwRjU4 NDBDOEM4M0ZGNkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4QzgzRkY2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDY1ODk2ODk1MjgzNDcvMC9GQ0RDNTIyQzI5NzdB NDJDMEUxQTk5MjA0MEY1ODQwQzhDODNGRjZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZG4kNlQD7fWA kqro0vlKO6YiXMjF/DYuuyoVL8f3JeiG4MjIy28IMdAY0C1Bgsf2hzmXjfooNNRm m+2VA05ekYuQ48lzw7LpR4u2D8IJlntnjISuYYfcWvP89fDFxf9QARB6CYn3hVmW i3/pqc+ME9Y2H2fUvKtVgu2bnigsiwleYVkTIGSzToA/qOcsQBhxZZNcUar0zVp3 UgCvo9Jyjtw06jyF4m9j6G1hIlpYSLHss3M8TZeRbhEUChLh6Z9+rZj1bDPD0GQs hxXv9WHh7ewKJpcNlqkvmmLrFSrdedhjkBTck/H4Iu1ia/NAJSMwnne133qZziW3 SDygQYikJw== -----END CERTIFICATE-----Generated at Wed Jul 29 04:12:19 2026 by rpki-client