$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft File: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft (raw, json) Hash identifier: V0K5IPytqTNGdOS4jrGhZTuSLBWPBSYM4iV8/YqcKkY= Subject key identifier: 64:32:49:B6:AD:0D:48:BA:0F:55:05:72:3E:7E:8D:F7:B7:19:9E:0E Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Certificate serial: 0E476DF2E834DFCEE43ADA79CF246FA115F4ACDC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft Manifest number: BA Signing time: Fri 29 May 2026 09:32:46 +0000 Manifest this update: Fri 29 May 2026 09:27:46 +0000 Manifest next update: Sat 30 May 2026 10:09:46 +0000 Files and hashes: 1: FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl (hash: /i8rBdQ51jlF+pmZ8geu1j1RS5/HEI0ZLq2KPLr5pc4=) 2: 35392e3135332e342e302f32322d3232203d3e203233373731.roa (hash: hJm80eD3+1RYco3NedeMKPdGx6HVdNmV1+q701sCOjw=) 3: 3230322e3135302e31362e302f32342d3234203d3e203233373731.roa (hash: 4nSDIdrKoirhy4/lofcC8XojyhLo+RKbXmB8JjLmvg8=) 4: 3138322e38302e302e302f31362d3136203d3e203233373731.roa (hash: SL8ao5mBDRj9SKwrevD5m3zw7PU4gwinAemJl8YZrnI=) 5: 3132342e32322e302e302f31352d3135203d3e203233373731.roa (hash: No0KbpPfVclt6n566p70/nKn/lYy7MLgaeZGGN9EsL8=) 6: 3132342e34372e33372e302f32342d3234203d3e203233373731.roa (hash: XuTsL6FFmlhdq/DaiDoVMBr4LMcVY3+mp6PXtl8RjVc=) 7: 3230322e3135302e31372e302f32342d3234203d3e203233373731.roa (hash: 57U/AvSIL5L4DGLo2mYNp31Z2gNo8RToLZ7Vv1j0H7M=) 8: 3130332e3139372e3232382e302f32322d3232203d3e203233373731.roa (hash: XI6Tl/z1obuaHt4nr4OODzX7qb5AWUYtD4JUb20nlbU=) 9: 3230322e3135302e32372e302f32342d3234203d3e203233373731.roa (hash: pMIkgXSvnS+fjKcM78SyYZBSI45Dga3NdAM06tCX0ks=) 10: 3231302e38372e3138392e302f32342d3234203d3e203233373731.roa (hash: Ee8aaz92ZWetKtYyAk620slb7NqU3K/ZZBj9lrXc9ss=) 11: 323430353a653630303a3a2f33322d3332203d3e203233373731.roa (hash: Quwo34P1yk5lnDzL2AIAnFyu/C4TVuKKwePH2w3hTbA=) 12: 3231302e38372e3132382e302f31382d3138203d3e203233373731.roa (hash: 73nD2biTe93D7wl91pXsUDEKYvk6QJ/2HOTT6UVpNlA=) 13: 3230322e3135302e31362e302f32302d3230203d3e203233373731.roa (hash: v2TgaAIHHDunNAOw1JM/bm0zQw8XfmuertseUpkXSRc=) 14: 3230322e3135302e31382e302f32332d3233203d3e203233373731.roa (hash: APocDbXRQg2wv31o48BTtqj07rqk2V0kwxEFZ1QU8xY=) 15: 3132342e34372e36302e302f32332d3233203d3e203233373731.roa (hash: G9l4NwqDBjtx8mFDIX9sC3AUL3UlrDcnBTqgVYX0je4=) 16: 3230322e3135302e31382e302f32342d3234203d3e203233373731.roa (hash: 8sE5JMIq6pzIiNUoKNqZt1ME8ALHGay+vymJzWD4hRw=) 17: 3230322e3135302e32362e302f32342d3234203d3e203233373731.roa (hash: 1msLkdKCqNLv6ppw7WVRykYh3A9QqAHjy2n5cklLB9E=) 18: 3132342e34372e302e302f31382d3138203d3e203233373731.roa (hash: cEFa0DCQPYgCOcXyCHupYXtjBewPyZjexOVg7SvoozA=) 19: 3132342e34372e35382e302f32332d3233203d3e203233373731.roa (hash: rQLWosbS/tP3HuPrH7EoixJZKXhPapZHHKl+DlBIndA=) 20: 3138322e38302e302e302f31342d3134203d3e203233373731.roa (hash: DEIsLgZWwMZVXZrAgCGa+9+kjq+hrhJhASPlOimNIGg=) 21: 35392e3135332e342e302f32342d3234203d3e203233373731.roa (hash: dTbWhYqWvozgKM0jMO32uy9zqUmnTW5W+hJzW5pKhmI=) 22: 3230332e3135322e36342e302f31392d3139203d3e203233373731.roa (hash: Wu4sTDbldOMAEhICk304bLhf/fPKm8ovOZ0PrQMVTDw=) 23: 35392e3135332e352e302f32342d3234203d3e203233373731.roa (hash: hC8SaJLt4oaYUtWrd50kicdXJYn+a56+Ny0dOE0MZLE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:47:6d:f2:e8:34:df:ce:e4:3a:da:79:cf:24:6f:a1:15:f4:ac:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Validity Not Before: May 29 09:27:46 2026 GMT Not After : May 30 10:09:46 2026 GMT Subject: CN=643249B6AD0D48BA0F5505723E7E8DF7B7199E0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:48:d2:d2:14:88:9e:d3:47:fc:74:8d:59:fc: f3:9a:db:25:73:49:88:44:97:ac:eb:fc:d6:f9:d0: 33:9f:ee:03:69:de:59:13:f5:30:99:98:da:53:a1: e5:91:8b:fd:ac:7b:e8:70:fa:86:ac:88:b8:6c:f0: 35:11:ff:42:17:89:cd:6d:cc:fe:d3:c7:fc:27:82: a3:6c:4e:08:6c:4f:ab:6c:bd:45:77:58:f6:c7:e4: 02:79:ca:9d:7c:7a:ec:ae:e5:6c:4f:ce:66:ce:0a: 9c:43:14:62:e8:85:47:94:4f:99:82:02:f6:1c:6a: 26:71:d5:c8:58:02:05:05:15:f8:1a:4b:ff:ff:c2: 63:7f:34:6b:47:94:0a:59:95:04:75:4c:9c:38:c0: 0e:ba:d1:79:7b:af:d8:a9:c2:d5:bb:e6:56:03:49: 63:72:af:8c:66:96:c1:94:c3:65:82:e9:95:ed:a6: 64:b3:c7:56:20:b9:95:ad:79:d7:8f:e2:85:54:c4: 6d:e3:23:1a:ce:cf:2f:5a:f0:51:10:57:1d:0d:b1: cf:30:68:12:21:57:61:00:5b:cb:13:d6:ba:7b:66: af:16:24:af:8c:44:0b:5b:35:c4:5e:4a:b2:c7:96: 27:aa:a7:8d:51:05:69:81:74:03:09:fc:b5:35:b6: cf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:32:49:B6:AD:0D:48:BA:0F:55:05:72:3E:7E:8D:F7:B7:19:9E:0E X509v3 Authority Key Identifier: keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ba:9b:07:3f:c3:d8:b9:c1:80:aa:70:02:53:92:ff:31:32: df:d6:23:f8:06:0c:ee:3e:c0:71:be:a6:5d:e0:ce:a5:39:fe: 6e:a3:07:14:f8:2b:a4:6f:10:21:52:e3:e8:f9:1d:30:ed:6a: 61:b7:29:cf:e1:17:a5:85:bf:d4:25:f5:24:14:b1:f3:c8:38: 50:5f:54:f0:da:0f:3a:50:7e:8b:10:a0:34:0b:fe:b5:79:31: a6:ac:f2:0f:8d:a7:4c:87:78:86:97:a2:83:df:6f:c9:f2:8a: 6c:e3:1d:77:83:41:55:9e:ac:d5:ef:fe:99:fc:3a:94:40:a8: 89:d6:7e:d1:61:f1:91:70:d9:1a:39:e4:de:d1:1b:67:ff:6a: 41:44:f4:ed:52:31:71:07:c2:0e:17:05:9a:4f:ad:ed:a1:ea: df:83:6a:4d:61:86:c7:80:05:21:96:81:e8:bf:6b:14:6c:8d: 78:a9:5b:1a:cd:96:67:d0:e4:0d:b2:64:a3:18:a9:90:e4:5c: e8:b2:64:10:54:87:01:72:66:11:c5:47:01:66:90:94:9d:45: c7:0b:99:eb:65:fd:58:49:d5:00:fd:39:5a:21:25:35:6c:20: 24:12:a2:9f:63:20:7b:fe:c3:01:67:65:b3:66:16:b7:16:37: 25:8a:6f:ee -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDkdt8ug0387kOtp5zyRvoRX0rNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5 QjFGNUIyQzAeFw0yNjA1MjkwOTI3NDZaFw0yNjA1MzAxMDA5NDZaMDMxMTAvBgNV BAMTKDY0MzI0OUI2QUQwRDQ4QkEwRjU1MDU3MjNFN0U4REY3QjcxOTlFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXSNLSFIie00f8dI1Z/POa2yVz SYhEl6zr/Nb50DOf7gNp3lkT9TCZmNpToeWRi/2se+hw+oasiLhs8DUR/0IXic1t zP7Tx/wngqNsTghsT6tsvUV3WPbH5AJ5yp18euyu5WxPzmbOCpxDFGLohUeUT5mC AvYcaiZx1chYAgUFFfgaS///wmN/NGtHlApZlQR1TJw4wA660Xl7r9ipwtW75lYD SWNyr4xmlsGUw2WC6ZXtpmSzx1YguZWtedeP4oVUxG3jIxrOzy9a8FEQVx0Nsc8w aBIhV2EAW8sT1rp7Zq8WJK+MRAtbNcReSrLHlieqp41RBWmBdAMJ/LU1ts+zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZDJJtq0NSLoPVQVyPn6N97cZng4wHwYDVR0j BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4 QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIwNDgzODYvMC9GQjdCNzk0RjEyMzcy NUZFODAwQTY0N0YzRjdFOEJFOTlCMUY1QjJDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7qbBz/D2LnB gKpwAlOS/zEy39Yj+AYM7j7Acb6mXeDOpTn+bqMHFPgrpG8QIVLj6PkdMO1qYbcp z+EXpYW/1CX1JBSx88g4UF9U8NoPOlB+ixCgNAv+tXkxpqzyD42nTId4hpeig99v yfKKbOMdd4NBVZ6s1e/+mfw6lECoidZ+0WHxkXDZGjnk3tEbZ/9qQUT07VIxcQfC DhcFmk+t7aHq34NqTWGGx4AFIZaB6L9rFGyNeKlbGs2WZ9DkDbJkoxipkORc6LJk EFSHAXJmEcVHAWaQlJ1FxwuZ62X9WEnVAP05WiElNWwgJBKin2Mge/7DAWdls2YW txY3JYpv7g== -----END CERTIFICATE-----Generated at Fri May 29 22:05:07 2026 by rpki-client