$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft File: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft (raw, json) Hash identifier: Ir2NIGUCklQHyJ+VY7ngOjTOYobd5dkhQvczw7urOKk= Subject key identifier: 4A:B2:20:2A:68:44:E0:5B:F8:C6:A5:5D:0D:D2:B9:04:7D:FA:B1:56 Authority key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA Certificate issuer: /CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Certificate serial: 11ED94BD22C8200256652942AF0AB5737DCA484F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft Manifest number: 95 Signing time: Fri 28 Aug 2026 06:48:10 +0000 Manifest this update: Fri 28 Aug 2026 06:43:10 +0000 Manifest next update: Mon 31 Aug 2026 14:11:10 +0000 Files and hashes: 1: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl (hash: 2t6vIYttD7dArjOYGJQxXpR0kSYGHXpPOaWA4YRepIU=) 2: 3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa (hash: pCJukIqUYrgHCj5Ju2oMUnrFjBuF4DtRmejZ+EtNDu0=) 3: 323430333a363734303a3a2f34382d3438203d3e2034383038.roa (hash: xVjIIll3PePJXngcsv3lCke4SgWX61LJmNnDtNzxkZU=) 4: 3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa (hash: WbMaWG6apBa3pSCbnJ8kgOTdT0aFXm7oFZYtZD4puOQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ed:94:bd:22:c8:20:02:56:65:29:42:af:0a:b5:73:7d:ca:48:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Validity Not Before: Aug 28 06:43:10 2026 GMT Not After : Aug 31 14:11:10 2026 GMT Subject: CN=4AB2202A6844E05BF8C6A55D0DD2B9047DFAB156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:9e:9a:2b:a3:2a:66:d5:cd:ff:e8:2b:52: 01:4f:ff:40:c9:f5:43:f1:32:1b:d5:6d:cc:71:5c: ec:53:ed:6d:53:cd:d5:7e:94:47:8a:bc:e4:bf:54: af:7a:e7:ce:b4:db:68:f6:56:64:ce:ce:8f:5d:87: b3:8e:26:1a:17:ca:48:5b:3e:1d:ed:68:ba:21:b5: a2:0c:f5:35:b6:b8:44:72:5a:f1:13:5b:a7:f0:ab: 42:ed:f2:29:b8:a1:68:28:2b:a7:6b:cb:af:e3:3b: 40:05:96:42:83:6b:06:c4:34:8f:11:db:97:8e:01: c8:cd:9c:5f:ce:d8:c8:61:7b:3c:3b:e3:f9:c8:de: a7:27:69:96:2d:0c:b1:09:4f:b4:3f:7f:e8:eb:3e: e2:d7:a8:8c:1a:4f:51:2b:ad:14:4e:4a:fd:ac:fe: c1:04:35:19:3d:4a:75:fc:dd:dd:9b:51:f4:fb:22: 1f:98:d8:9b:70:f1:79:7d:8c:e1:ce:7f:b7:2f:49: 2e:92:e0:6c:b4:fa:2b:ee:75:3c:28:eb:c4:58:61: 43:4e:a4:56:fd:b0:15:51:40:30:81:51:e8:a2:38: d5:de:c2:f2:c3:ef:cf:62:bb:7b:85:96:58:dd:43: fd:33:83:b7:62:26:45:29:6c:f2:95:12:0d:e2:f2: 12:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B2:20:2A:68:44:E0:5B:F8:C6:A5:5D:0D:D2:B9:04:7D:FA:B1:56 X509v3 Authority Key Identifier: keyid:FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:27:19:9c:4c:3a:b6:5b:ef:a4:60:7a:11:62:e7:31:5f:33: ab:4b:a6:e9:dc:b1:89:8e:5e:59:66:68:36:62:a1:ae:32:7e: b9:02:c0:87:66:52:50:f6:0b:6c:7e:14:81:64:f4:d2:11:98: 3f:25:38:81:1a:50:67:37:ac:67:57:3e:89:aa:e7:ba:29:df: 55:28:bc:89:55:5d:88:14:93:b3:2b:87:b9:5f:10:b8:34:31: a7:5e:42:14:ef:ab:e8:e3:7a:dd:c5:87:77:91:6b:25:c7:e2: 80:6e:b6:db:76:ca:96:1a:76:04:5a:15:5a:60:bc:0e:00:9c: 4d:36:1d:9e:df:3f:63:f7:08:b4:12:a9:5b:dd:6d:ee:b8:5b: f7:7c:c7:e7:c8:80:97:c1:1a:40:30:2a:65:70:5a:62:10:1c: e5:4a:57:97:16:cb:c2:69:a9:01:59:a5:94:63:54:d1:71:9c: f8:bb:a7:11:04:d1:c1:d0:45:22:ec:5d:73:4c:30:78:54:f3: 10:f2:fe:26:3c:e7:0d:a7:fa:31:5a:5a:15:25:f5:ba:e6:78: ae:d2:eb:03:c7:ed:2a:70:52:8d:bd:e7:19:cf:76:d6:59:16: 8f:52:c7:1c:c0:88:15:0c:15:b9:d9:23:9a:e0:81:2c:af:6e: 12:be:6e:e9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEe2UvSLIIAJWZSlCrwq1c33KSE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0 MzY0QkFFQTAeFw0yNjA4MjgwNjQzMTBaFw0yNjA4MzExNDExMTBaMDMxMTAvBgNV BAMTKDRBQjIyMDJBNjg0NEUwNUJGOEM2QTU1RDBERDJCOTA0N0RGQUIxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvp56aK6MqZtXN/+grUgFP/0DJ 9UPxMhvVbcxxXOxT7W1TzdV+lEeKvOS/VK96586022j2VmTOzo9dh7OOJhoXykhb Ph3taLohtaIM9TW2uERyWvETW6fwq0Lt8im4oWgoK6dry6/jO0AFlkKDawbENI8R 25eOAcjNnF/O2Mhhezw74/nI3qcnaZYtDLEJT7Q/f+jrPuLXqIwaT1ErrRROSv2s /sEENRk9SnX83d2bUfT7Ih+Y2Jtw8Xl9jOHOf7cvSS6S4Gy0+ivudTwo68RYYUNO pFb9sBVRQDCBUeiiONXewvLD789iu3uFlljdQ/0zg7diJkUpbPKVEg3i8hLzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSrIgKmhE4Fv4xqVdDdK5BH36sVYwHwYDVR0j BBgwFoAU+kU68/SrFmVR/UwyLV/SOENkuuowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1NTI5NTczMTIzNjg3NS8wL0ZBNDUzQUYzRjRBQjE2NjU1MUZENEMzMjJENUZE MjM4NDM2NEJBRUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0MzY0QkFFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTUyOTU3MzEyMzY4NzUvMC9GQTQ1M0FGM0Y0QUIx NjY1NTFGRDRDMzIyRDVGRDIzODQzNjRCQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfScZnEw6tlvv pGB6EWLnMV8zq0um6dyxiY5eWWZoNmKhrjJ+uQLAh2ZSUPYLbH4UgWT00hGYPyU4 gRpQZzesZ1c+iarnuinfVSi8iVVdiBSTsyuHuV8QuDQxp15CFO+r6ON63cWHd5Fr JcfigG6223bKlhp2BFoVWmC8DgCcTTYdnt8/Y/cItBKpW91t7rhb93zH58iAl8Ea QDAqZXBaYhAc5UpXlxbLwmmpAVmllGNU0XGc+LunEQTRwdBFIuxdc0wweFTzEPL+ JjznDaf6MVpaFSX1uuZ4rtLrA8ftKnBSjb3nGc921lkWj1LHHMCIFQwVudkjmuCB LK9uEr5u6Q== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:19 2026 by rpki-client