$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft File: FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft (raw, json) Hash identifier: P8tdfnWy9guk13pjmZYt+miBqajQdjJ+yW/ks5PxR+g= Subject key identifier: A9:E2:58:F2:58:68:16:90:90:B3:18:F2:62:E9:94:07:64:FA:84:26 Authority key identifier: FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9 Certificate issuer: /CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9 Certificate serial: 3E9707E0F2E35029440149A3DC9928FC81F70C9A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft Manifest number: A0 Signing time: Fri 28 Aug 2026 06:58:28 +0000 Manifest this update: Fri 28 Aug 2026 06:53:28 +0000 Manifest next update: Mon 31 Aug 2026 18:06:28 +0000 Files and hashes: 1: AS24139.roa (hash: qdYkjvhQ+XXRS0M+IDlpLknRxmi951UHbBDsRT0lR9I=) 2: FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl (hash: DMT3EIyXyF+C6Jw8wniYYPhM4/XorAW/Zl9Ba6m6pX0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:97:07:e0:f2:e3:50:29:44:01:49:a3:dc:99:28:fc:81:f7:0c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9 Validity Not Before: Aug 28 06:53:28 2026 GMT Not After : Aug 31 18:06:28 2026 GMT Subject: CN=A9E258F25868169090B318F262E9940764FA8426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:8f:d0:11:3a:27:15:d2:7b:90:a2:40:6a: 8d:f6:06:17:42:c0:61:70:7b:0f:e0:b7:15:b6:79: dd:fe:62:ff:0e:47:a4:90:4a:35:7b:82:03:80:43: a8:87:f8:e4:eb:07:30:bb:b2:67:0f:b8:4c:03:9d: 1c:b2:83:ed:54:d3:b8:4a:14:d4:16:16:ca:f7:c5: 57:1a:7b:51:1d:8b:5a:1b:44:b2:df:99:f4:01:e3: 77:13:46:06:69:23:76:ca:92:b0:e3:78:f8:64:55: 6a:d2:02:f4:57:ef:f7:c0:1b:7d:fe:10:34:59:2d: 6c:c4:de:82:cd:3e:de:fa:3f:90:bb:a5:da:9a:1b: d0:e6:07:05:a7:cc:0b:2b:a3:08:6a:64:05:c4:a5: fa:9f:19:94:f1:48:30:23:d6:34:10:35:60:9d:46: af:27:65:ca:a9:a6:f2:24:bf:28:c1:5c:00:ac:96: a3:04:a5:af:b8:c6:75:25:12:06:82:eb:2a:82:23: 09:81:e1:07:f1:57:a0:eb:f9:75:4f:86:a7:b9:e6: 2f:bd:de:f7:70:84:0a:2b:87:79:77:9a:be:19:cc: ad:73:0b:0d:73:16:5c:f2:0f:81:54:97:1d:2e:ec: c7:d5:4f:cb:0c:a9:7e:fc:f7:74:01:fe:59:91:25: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E2:58:F2:58:68:16:90:90:B3:18:F2:62:E9:94:07:64:FA:84:26 X509v3 Authority Key Identifier: keyid:FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c8:e0:9f:51:59:0b:e1:fc:1e:23:9c:62:f8:e1:6a:0b:29: 71:4c:4e:29:4e:ad:a9:e0:12:4f:27:39:55:1f:e4:07:07:0f: e2:ee:c4:03:7d:73:0f:09:93:68:c9:34:41:fe:89:23:52:a3: 14:3b:6c:b1:42:c4:fa:77:8f:51:fa:9f:48:72:5c:18:20:21: 11:2c:0d:37:9c:f5:71:d9:d9:c3:69:00:20:f9:e1:c5:aa:c1: 5f:36:8d:25:44:e7:e9:ee:2c:d3:ff:87:df:bb:3e:21:1b:7a: 39:51:5e:b0:8e:28:91:cc:5d:9d:28:bd:a3:27:8c:93:8c:d3: f9:98:cd:5f:60:15:3e:e6:22:fe:b6:1b:09:a1:9c:f3:73:7c: de:69:de:85:55:bf:17:7d:bc:9a:55:12:fb:d2:f2:32:65:03: 12:9c:58:72:5e:97:c4:6c:79:0a:d6:85:5b:53:bc:e8:a2:33: bb:b8:cc:0b:4c:6a:4d:fe:64:c3:07:76:5f:c2:5e:3d:10:73: fb:e6:6e:d0:1f:30:8e:d6:86:cc:61:f6:6a:24:a2:8d:93:97: ca:fd:2c:4d:d0:18:1f:09:2f:34:27:bb:33:87:c4:b3:c0:41: 2f:a5:6e:d7:1c:32:c1:f5:40:f1:c6:93:e2:94:3c:ef:d7:06: 9c:de:22:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPpcH4PLjUClEAUmj3Jko/IH3DJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU4MTMxRDdEQkExNjRGOERGMkQxOTUxQUMxMjk5ODg0 MjIzRTZBOTAeFw0yNjA4MjgwNjUzMjhaFw0yNjA4MzExODA2MjhaMDMxMTAvBgNV BAMTKEE5RTI1OEYyNTg2ODE2OTA5MEIzMThGMjYyRTk5NDA3NjRGQTg0MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHY/QETonFdJ7kKJAao32BhdC wGFwew/gtxW2ed3+Yv8OR6SQSjV7ggOAQ6iH+OTrBzC7smcPuEwDnRyyg+1U07hK FNQWFsr3xVcae1Edi1obRLLfmfQB43cTRgZpI3bKkrDjePhkVWrSAvRX7/fAG33+ EDRZLWzE3oLNPt76P5C7pdqaG9DmBwWnzAsrowhqZAXEpfqfGZTxSDAj1jQQNWCd Rq8nZcqppvIkvyjBXACslqMEpa+4xnUlEgaC6yqCIwmB4QfxV6Dr+XVPhqe55i+9 3vdwhAorh3l3mr4ZzK1zCw1zFlzyD4FUlx0u7MfVT8sMqX7893QB/lmRJbGtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqeJY8lhoFpCQsxjyYumUB2T6hCYwHwYDVR0j BBgwFoAU/oEx19uhZPjfLRlRrBKZiEIj5qkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjQ1ODEzMjE3Mjc2NzI1MS8wL0ZFODEzMUQ3REJBMTY0RjhERjJEMTk1MUFDMTI5 OTg4NDIyM0U2QTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkU4MTMxRDdEQkExNjRGOERGMkQxOTUxQUMxMjk5ODg0MjIzRTZBOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY0NTgxMzIxNzI3NjcyNTEvMC9GRTgxMzFEN0RCQTE2 NEY4REYyRDE5NTFBQzEyOTk4ODQyMjNFNkE5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMjgn1FZC+H8 HiOcYvjhagspcUxOKU6tqeASTyc5VR/kBwcP4u7EA31zDwmTaMk0Qf6JI1KjFDts sULE+nePUfqfSHJcGCAhESwNN5z1cdnZw2kAIPnhxarBXzaNJUTn6e4s0/+H37s+ IRt6OVFesI4okcxdnSi9oyeMk4zT+ZjNX2AVPuYi/rYbCaGc83N83mnehVW/F328 mlUS+9LyMmUDEpxYcl6XxGx5CtaFW1O86KIzu7jMC0xqTf5kwwd2X8JePRBz++Zu 0B8wjtaGzGH2aiSijZOXyv0sTdAYHwkvNCe7M4fEs8BBL6Vu1xwywfVA8caT4pQ8 79cGnN4ikQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:14 2026 by rpki-client