$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft File: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft (raw, json) Hash identifier: Zli0dWbW/C35lA2cK1lWFm0MB1tTKDyYymxm0TauIAo= Subject key identifier: B2:4E:91:ED:95:45:93:21:30:4A:70:36:3F:56:16:7C:3D:3C:66:CA Authority key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA Certificate issuer: /CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Certificate serial: 1DAF77EDF574C77E04EC34F5AD7CD335378592E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft Manifest number: AA Signing time: Tue 13 Oct 2026 11:57:58 +0000 Manifest this update: Tue 13 Oct 2026 11:52:58 +0000 Manifest next update: Fri 16 Oct 2026 14:43:58 +0000 Files and hashes: 1: 3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa (hash: pCJukIqUYrgHCj5Ju2oMUnrFjBuF4DtRmejZ+EtNDu0=) 2: 3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa (hash: WbMaWG6apBa3pSCbnJ8kgOTdT0aFXm7oFZYtZD4puOQ=) 3: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl (hash: 4qJtU0xHUvwERqZ/uBZuyhWQjuqJYtdhri8DaAspeKk=) 4: 323430333a363734303a3a2f34382d3438203d3e2034383038.roa (hash: xVjIIll3PePJXngcsv3lCke4SgWX61LJmNnDtNzxkZU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:af:77:ed:f5:74:c7:7e:04:ec:34:f5:ad:7c:d3:35:37:85:92:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Validity Not Before: Oct 13 11:52:58 2026 GMT Not After : Oct 16 14:43:58 2026 GMT Subject: CN=B24E91ED95459321304A70363F56167C3D3C66CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:48:11:dd:f6:ee:3e:a1:71:7a:78:ea:87:cd: e2:62:f1:0b:2b:58:f0:bf:e2:5b:c5:59:f3:a7:98: 7f:84:e8:95:09:f7:91:81:fd:83:15:2e:cc:88:4b: 4b:53:69:ed:93:e6:d7:ef:a5:f9:0c:39:59:95:85: 23:3a:01:cc:56:b4:2b:91:76:8b:7b:03:8a:3e:bf: 94:9b:10:b0:b5:4c:cb:41:3f:ae:9b:44:21:4d:d5: 97:18:c2:91:1b:d0:e4:01:28:5a:1b:7a:be:71:17: df:04:42:97:d3:33:6d:c6:43:f1:75:5a:bf:64:44: 10:5f:27:c7:ff:c4:1e:a8:4a:96:92:90:45:74:42: bc:6c:b3:f0:1f:c5:90:93:e0:9e:35:4c:fc:4f:c2: 75:b6:05:1b:a7:64:26:64:48:bc:ec:fc:4c:48:f0: b1:57:a4:f7:1e:35:da:25:9a:c3:e8:95:c4:a5:d4: 5c:07:0d:ec:fd:b2:12:9d:81:8b:10:81:fe:8e:4a: 52:aa:44:fe:ed:b0:ff:72:e3:0c:65:2d:16:75:08: 5f:e6:b7:16:85:81:aa:26:a2:9d:9f:bf:e8:c8:97: 89:30:69:2b:fc:1d:4a:94:e1:d9:b2:28:86:11:19: 39:83:32:8e:ee:f5:2e:ea:1a:e2:cb:63:d4:a6:bc: 11:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4E:91:ED:95:45:93:21:30:4A:70:36:3F:56:16:7C:3D:3C:66:CA X509v3 Authority Key Identifier: keyid:FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7b:cb:54:5f:97:a5:a0:3e:29:b5:77:43:48:66:20:99:bd: 3f:af:04:23:80:21:d7:57:06:05:05:43:4a:eb:a3:c4:10:49: 08:e5:b9:dc:08:61:0a:16:ea:5a:bf:59:57:85:9f:72:2e:c1: fe:84:f0:ba:4d:3b:51:dd:0e:4b:e5:73:7c:4d:d1:b1:6c:bf: 8d:76:a0:f0:35:25:e9:4d:f3:41:d7:b1:20:a9:a9:82:c9:02: 6a:41:d2:09:30:3c:18:0b:90:ab:18:df:66:97:24:7a:46:f6: 0a:5e:83:76:94:3d:2e:1b:48:d8:63:10:bb:4f:88:32:f6:72: 30:84:3d:1e:18:fa:4b:ea:75:f6:d8:13:20:79:68:b4:6a:c0: 61:c1:b4:75:e9:b1:48:67:97:36:08:db:c4:9e:aa:0f:7f:ad: ff:09:0d:e4:13:0f:fc:f9:82:09:7a:e4:77:bd:d4:17:70:f6: b1:e3:50:28:5d:c1:37:8a:12:06:bd:ea:4c:00:ba:88:6a:da: f0:88:a0:8d:d6:0f:83:ba:cf:a9:88:be:3a:4a:6e:38:a9:50: 9b:a8:03:08:b8:c3:9d:17:6f:e2:ae:9d:15:5b:19:8e:9c:7d: b1:7a:32:03:56:e6:30:bb:95:ab:4c:7b:28:72:71:f8:b7:7c: 87:87:83:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHa937fV0x34E7DT1rXzTNTeFkuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0 MzY0QkFFQTAeFw0yNjEwMTMxMTUyNThaFw0yNjEwMTYxNDQzNThaMDMxMTAvBgNV BAMTKEIyNEU5MUVEOTU0NTkzMjEzMDRBNzAzNjNGNTYxNjdDM0QzQzY2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8SBHd9u4+oXF6eOqHzeJi8Qsr WPC/4lvFWfOnmH+E6JUJ95GB/YMVLsyIS0tTae2T5tfvpfkMOVmVhSM6AcxWtCuR dot7A4o+v5SbELC1TMtBP66bRCFN1ZcYwpEb0OQBKFober5xF98EQpfTM23GQ/F1 Wr9kRBBfJ8f/xB6oSpaSkEV0Qrxss/AfxZCT4J41TPxPwnW2BRunZCZkSLzs/ExI 8LFXpPceNdolmsPolcSl1FwHDez9shKdgYsQgf6OSlKqRP7tsP9y4wxlLRZ1CF/m txaFgaomop2fv+jIl4kwaSv8HUqU4dmyKIYRGTmDMo7u9S7qGuLLY9SmvBGlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsk6R7ZVFkyEwSnA2P1YWfD08ZsowHwYDVR0j BBgwFoAU+kU68/SrFmVR/UwyLV/SOENkuuowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1NTI5NTczMTIzNjg3NS8wL0ZBNDUzQUYzRjRBQjE2NjU1MUZENEMzMjJENUZE MjM4NDM2NEJBRUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0MzY0QkFFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTUyOTU3MzEyMzY4NzUvMC9GQTQ1M0FGM0Y0QUIx NjY1NTFGRDRDMzIyRDVGRDIzODQzNjRCQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnvLVF+XpaA+ KbV3Q0hmIJm9P68EI4Ah11cGBQVDSuujxBBJCOW53AhhChbqWr9ZV4Wfci7B/oTw uk07Ud0OS+VzfE3RsWy/jXag8DUl6U3zQdexIKmpgskCakHSCTA8GAuQqxjfZpck ekb2Cl6DdpQ9LhtI2GMQu0+IMvZyMIQ9Hhj6S+p19tgTIHlotGrAYcG0demxSGeX NgjbxJ6qD3+t/wkN5BMP/PmCCXrkd73UF3D2seNQKF3BN4oSBr3qTAC6iGra8Iig jdYPg7rPqYi+OkpuOKlQm6gDCLjDnRdv4q6dFVsZjpx9sXoyA1bmMLuVq0x7KHJx +Ld8h4eD8Q== -----END CERTIFICATE-----Generated at Tue Oct 13 22:39:58 2026 by rpki-client