$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft File: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft (raw, json) Hash identifier: dNzxVt5eF9naTaQFiO96BHPIK1wCD7RCagt/KQI/dtc= Subject key identifier: B6:D9:92:6A:67:5E:8B:06:80:93:9A:7A:C6:43:CC:B5:35:B6:EF:4A Authority key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA Certificate issuer: /CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Certificate serial: 72BED1BB3BD4C1E3267353A3638D3F520720E50F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft Manifest number: 1B Signing time: Fri 29 May 2026 13:42:54 +0000 Manifest this update: Fri 29 May 2026 13:37:54 +0000 Manifest next update: Sat 30 May 2026 16:11:54 +0000 Files and hashes: 1: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl (hash: v2mSAe2NwIeuPumONz4NPoEclmcc0yUCyDprk6iYUDs=) 2: 3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa (hash: pCJukIqUYrgHCj5Ju2oMUnrFjBuF4DtRmejZ+EtNDu0=) 3: 3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa (hash: WbMaWG6apBa3pSCbnJ8kgOTdT0aFXm7oFZYtZD4puOQ=) 4: 323430333a363734303a3a2f34382d3438203d3e2034383038.roa (hash: xVjIIll3PePJXngcsv3lCke4SgWX61LJmNnDtNzxkZU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:be:d1:bb:3b:d4:c1:e3:26:73:53:a3:63:8d:3f:52:07:20:e5:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Validity Not Before: May 29 13:37:54 2026 GMT Not After : May 30 16:11:54 2026 GMT Subject: CN=B6D9926A675E8B0680939A7AC643CCB535B6EF4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:2a:b2:30:65:5c:48:a5:75:41:2f:fc:f7: 4f:c1:55:f1:25:ed:71:17:6c:15:d4:3a:39:9f:93: ac:35:76:80:8a:5b:5b:2e:ba:41:d5:fa:c5:73:a3: f9:f1:35:29:bb:94:74:68:d0:87:bc:81:d7:08:c4: 70:2a:a9:4f:53:0b:c0:55:6f:08:80:8d:66:2f:6b: e6:c5:3b:38:4a:a6:f7:21:4e:07:5a:94:63:be:00: 66:83:cc:af:4d:90:c0:3e:30:d3:01:3b:c3:1e:04: 12:b3:dc:79:d6:70:b6:14:cd:a6:ee:76:3e:de:68: 89:ef:6a:30:c4:21:20:d7:3d:2e:e3:eb:f6:01:83: aa:ea:7f:ef:f9:6c:a6:da:b4:88:c1:a8:3a:17:28: 60:9f:82:d8:d3:5b:fc:84:de:9f:1d:f6:fa:3b:65: 37:28:16:b9:c0:c4:4e:ce:7f:ef:23:e0:a6:f4:c8: fb:04:83:0a:45:df:e4:c6:a3:95:d5:d2:bc:77:e5: 4d:7d:37:61:07:d7:75:f5:83:e2:b6:73:6e:fc:7e: 9e:61:75:7d:1e:c8:f8:07:81:af:d2:e3:98:80:07: 76:53:23:59:1c:a7:49:6e:6f:e6:ed:6e:ad:54:35: 1d:a2:ef:23:c6:e1:46:5e:29:59:fc:4c:7e:8d:03: 5f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D9:92:6A:67:5E:8B:06:80:93:9A:7A:C6:43:CC:B5:35:B6:EF:4A X509v3 Authority Key Identifier: keyid:FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:de:39:f3:ca:23:db:32:46:dd:f6:13:a6:7d:31:c1:35:0a: ea:32:b8:60:39:18:19:5d:2e:fc:a8:e1:c8:a0:5d:71:45:33: b9:d7:ea:c8:fe:e5:98:be:be:93:fd:52:c4:6b:de:2e:27:0d: f9:e2:ab:db:19:d3:a4:d0:a5:00:52:a3:a0:a8:f3:e7:fe:43: d6:41:67:ff:5d:5d:53:aa:30:bb:59:28:a6:0c:42:3d:c8:d9: 17:33:26:dc:b1:9e:b4:7c:2b:13:e6:8e:7e:89:9f:67:b3:d4: 86:5e:06:73:09:0b:cd:9b:9d:44:a6:4a:fc:10:8b:a4:1a:c0: 13:5d:a6:e0:88:b9:a9:57:68:29:77:7d:4e:79:e7:20:6a:8e: 55:64:8b:4b:89:07:50:a8:b9:e2:71:85:dc:5e:ad:26:c4:78: 3a:09:c3:4f:66:21:ee:cd:54:61:5c:86:fe:03:80:f9:2d:d1: 49:7a:7e:3a:20:af:47:8a:80:6d:f2:94:94:31:36:dd:f1:57: e2:d3:e3:24:3c:ee:25:25:a7:62:43:9b:bf:90:28:5b:5a:4e: df:8d:6a:e0:ba:68:8b:e5:bd:14:23:41:5c:1b:ae:77:58:44: 24:7d:ff:5f:a0:a3:ae:b5:96:a2:fc:90:c0:b3:e8:52:a6:a3: a7:ca:05:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcr7RuzvUweMmc1OjY40/Ugcg5Q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0 MzY0QkFFQTAeFw0yNjA1MjkxMzM3NTRaFw0yNjA1MzAxNjExNTRaMDMxMTAvBgNV BAMTKEI2RDk5MjZBNjc1RThCMDY4MDkzOUE3QUM2NDNDQ0I1MzVCNkVGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ2SqyMGVcSKV1QS/890/BVfEl 7XEXbBXUOjmfk6w1doCKW1suukHV+sVzo/nxNSm7lHRo0Ie8gdcIxHAqqU9TC8BV bwiAjWYva+bFOzhKpvchTgdalGO+AGaDzK9NkMA+MNMBO8MeBBKz3HnWcLYUzabu dj7eaInvajDEISDXPS7j6/YBg6rqf+/5bKbatIjBqDoXKGCfgtjTW/yE3p8d9vo7 ZTcoFrnAxE7Of+8j4Kb0yPsEgwpF3+TGo5XV0rx35U19N2EH13X1g+K2c278fp5h dX0eyPgHga/S45iAB3ZTI1kcp0lub+btbq1UNR2i7yPG4UZeKVn8TH6NA18VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUttmSamdeiwaAk5p6xkPMtTW270owHwYDVR0j BBgwFoAU+kU68/SrFmVR/UwyLV/SOENkuuowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1NTI5NTczMTIzNjg3NS8wL0ZBNDUzQUYzRjRBQjE2NjU1MUZENEMzMjJENUZE MjM4NDM2NEJBRUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0MzY0QkFFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTUyOTU3MzEyMzY4NzUvMC9GQTQ1M0FGM0Y0QUIx NjY1NTFGRDRDMzIyRDVGRDIzODQzNjRCQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApd4588oj2zJG 3fYTpn0xwTUK6jK4YDkYGV0u/KjhyKBdcUUzudfqyP7lmL6+k/1SxGveLicN+eKr 2xnTpNClAFKjoKjz5/5D1kFn/11dU6owu1kopgxCPcjZFzMm3LGetHwrE+aOfomf Z7PUhl4GcwkLzZudRKZK/BCLpBrAE12m4Ii5qVdoKXd9TnnnIGqOVWSLS4kHUKi5 4nGF3F6tJsR4OgnDT2Yh7s1UYVyG/gOA+S3RSXp+OiCvR4qAbfKUlDE23fFX4tPj JDzuJSWnYkObv5AoW1pO341q4Lpoi+W9FCNBXBuud1hEJH3/X6CjrrWWovyQwLPo Uqajp8oFrA== -----END CERTIFICATE-----Generated at Fri May 29 22:02:47 2026 by rpki-client