$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft File: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft (raw, json) Hash identifier: f1pm3wq9bYZOd/Vu0TaL+z/wKxqQnOMCz+B+3LfcJu0= Subject key identifier: 59:D5:DC:4C:E5:2F:BB:25:87:DE:6A:FD:D9:54:D1:F7:5D:FC:95:7E Authority key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA Certificate issuer: /CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Certificate serial: 77BA335FDC4715B3F17DFD1334F0B9724EFA01A7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft Manifest number: 58 Signing time: Tue 14 Jul 2026 08:50:53 +0000 Manifest this update: Tue 14 Jul 2026 08:45:53 +0000 Manifest next update: Wed 15 Jul 2026 11:51:53 +0000 Files and hashes: 1: 3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa (hash: WbMaWG6apBa3pSCbnJ8kgOTdT0aFXm7oFZYtZD4puOQ=) 2: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl (hash: JCfvXBtArJo9v+ofeE3iYtap39hMosgQQEj1fB4E69Q=) 3: 3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa (hash: pCJukIqUYrgHCj5Ju2oMUnrFjBuF4DtRmejZ+EtNDu0=) 4: 323430333a363734303a3a2f34382d3438203d3e2034383038.roa (hash: xVjIIll3PePJXngcsv3lCke4SgWX61LJmNnDtNzxkZU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ba:33:5f:dc:47:15:b3:f1:7d:fd:13:34:f0:b9:72:4e:fa:01:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Validity Not Before: Jul 14 08:45:53 2026 GMT Not After : Jul 15 11:51:53 2026 GMT Subject: CN=59D5DC4CE52FBB2587DE6AFDD954D1F75DFC957E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:b7:d0:de:2f:ed:67:99:ba:1b:00:f5:85: 7d:29:f1:22:a3:da:a8:9b:91:b5:18:eb:7e:89:da: 23:9e:40:9a:21:6a:59:d9:65:e7:40:42:0f:62:42: 1c:44:e3:eb:8f:e5:1e:ee:9c:b0:03:8e:ad:91:11: 48:df:29:6c:af:74:aa:69:57:2d:93:11:9f:c5:ea: c6:8c:48:e7:da:6c:11:f2:9d:17:41:f5:e8:c3:d8: bd:90:bd:79:6f:04:7f:df:74:77:81:23:a1:c4:fe: 5a:fc:9d:a2:cb:c6:32:0b:60:71:bb:7d:6c:25:43: b8:95:de:15:60:89:f5:d8:4c:bb:87:aa:a1:68:95: 74:e9:29:a9:b5:99:ee:31:3e:34:a5:62:3b:57:43: 87:2f:e6:75:1f:02:b5:19:ac:00:0a:de:53:e1:53: 6d:89:71:45:b5:cf:23:d8:f0:db:c6:0d:22:69:f9: 95:ce:b0:83:9a:1b:cb:5c:d3:3c:bc:5d:77:04:f2: 40:91:a9:35:d5:6f:91:44:88:e3:d0:6d:58:bf:8a: 0c:56:3c:70:e2:ff:14:8c:33:f0:39:5e:92:96:23: 46:52:74:9e:80:63:45:85:eb:e3:c4:c0:8a:81:ce: f2:67:93:40:4c:a1:ae:2b:02:c6:3d:d9:da:27:fc: e3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D5:DC:4C:E5:2F:BB:25:87:DE:6A:FD:D9:54:D1:F7:5D:FC:95:7E X509v3 Authority Key Identifier: keyid:FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:8a:85:3c:bb:30:1a:89:0a:70:b8:86:85:ab:94:ec:45:b3: 8f:1d:d8:23:a5:cf:10:01:a9:5b:e1:1d:d4:82:f7:cc:7a:84: fb:48:11:80:f9:4f:d0:62:96:9f:a7:86:35:93:ed:12:14:07: 7a:c3:25:97:25:9b:da:bc:0e:31:7b:6c:ee:7e:f9:dd:96:c8: ea:e8:0b:99:aa:90:04:94:a3:3a:e2:71:b0:c4:38:fb:6f:dd: 72:46:81:f4:49:b1:2d:b4:a9:54:85:15:8b:97:6c:55:d4:21: af:70:35:fd:72:78:0d:31:2a:c2:5b:b2:ff:90:a4:76:bb:9d: 1f:08:61:c8:21:ab:24:70:e3:69:b8:29:d3:1f:0e:20:58:25: 35:1a:60:21:29:a1:c9:e4:74:f2:2c:08:f1:e1:39:c3:e4:5d: 65:89:10:e3:09:dc:92:60:34:f3:f0:46:56:51:99:52:bd:a3: f1:84:36:96:e4:26:d3:fc:4a:76:f7:d7:18:79:17:00:2a:18: a4:d3:29:b1:bc:8a:7e:ac:f6:1c:57:1a:18:d0:f6:b6:75:e9: a3:7e:e8:f6:d7:51:de:57:07:52:69:b4:11:52:13:ee:ee:f4: 71:42:d3:b4:bd:d7:0e:e1:be:85:e5:64:0d:2d:30:6c:fc:13: 45:41:c5:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd7ozX9xHFbPxff0TNPC5ck76AacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0 MzY0QkFFQTAeFw0yNjA3MTQwODQ1NTNaFw0yNjA3MTUxMTUxNTNaMDMxMTAvBgNV BAMTKDU5RDVEQzRDRTUyRkJCMjU4N0RFNkFGREQ5NTREMUY3NURGQzk1N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpLfQ3i/tZ5m6GwD1hX0p8SKj 2qibkbUY636J2iOeQJohalnZZedAQg9iQhxE4+uP5R7unLADjq2REUjfKWyvdKpp Vy2TEZ/F6saMSOfabBHynRdB9ejD2L2QvXlvBH/fdHeBI6HE/lr8naLLxjILYHG7 fWwlQ7iV3hVgifXYTLuHqqFolXTpKam1me4xPjSlYjtXQ4cv5nUfArUZrAAK3lPh U22JcUW1zyPY8NvGDSJp+ZXOsIOaG8tc0zy8XXcE8kCRqTXVb5FEiOPQbVi/igxW PHDi/xSMM/A5XpKWI0ZSdJ6AY0WF6+PEwIqBzvJnk0BMoa4rAsY92don/ONRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWdXcTOUvuyWH3mr92VTR9138lX4wHwYDVR0j BBgwFoAU+kU68/SrFmVR/UwyLV/SOENkuuowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1NTI5NTczMTIzNjg3NS8wL0ZBNDUzQUYzRjRBQjE2NjU1MUZENEMzMjJENUZE MjM4NDM2NEJBRUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0MzY0QkFFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTUyOTU3MzEyMzY4NzUvMC9GQTQ1M0FGM0Y0QUIx NjY1NTFGRDRDMzIyRDVGRDIzODQzNjRCQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwYqFPLswGokK cLiGhauU7EWzjx3YI6XPEAGpW+Ed1IL3zHqE+0gRgPlP0GKWn6eGNZPtEhQHesMl lyWb2rwOMXts7n753ZbI6ugLmaqQBJSjOuJxsMQ4+2/dckaB9EmxLbSpVIUVi5ds VdQhr3A1/XJ4DTEqwluy/5CkdrudHwhhyCGrJHDjabgp0x8OIFglNRpgISmhyeR0 8iwI8eE5w+RdZYkQ4wnckmA08/BGVlGZUr2j8YQ2luQm0/xKdvfXGHkXACoYpNMp sbyKfqz2HFcaGND2tnXpo37o9tdR3lcHUmm0EVIT7u70cULTtL3XDuG+heVkDS0w bPwTRUHFQQ== -----END CERTIFICATE-----Generated at Tue Jul 14 19:59:03 2026 by rpki-client