$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft File: FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft (raw, json) Hash identifier: VRFUUAer4+nnetPArC82PIBKTHaiq7PsPBBa/ChgUGk= Subject key identifier: 88:AA:91:74:13:CC:77:14:27:6B:74:A3:1D:9D:29:02:AE:6B:8B:24 Authority key identifier: FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9 Certificate issuer: /CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9 Certificate serial: 254D4512C2C0529903365B5CDF8FDCA024C0F76D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft Manifest number: B5 Signing time: Thu 15 Oct 2026 05:11:21 +0000 Manifest this update: Thu 15 Oct 2026 05:06:21 +0000 Manifest next update: Sun 18 Oct 2026 12:06:21 +0000 Files and hashes: 1: AS24139.roa (hash: qdYkjvhQ+XXRS0M+IDlpLknRxmi951UHbBDsRT0lR9I=) 2: FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl (hash: D49dNSpWVyfzJ9qcHbAKIzf0kZaVc4567Kblpwo7LGY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 12:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4d:45:12:c2:c0:52:99:03:36:5b:5c:df:8f:dc:a0:24:c0:f7:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9 Validity Not Before: Oct 15 05:06:21 2026 GMT Not After : Oct 18 12:06:21 2026 GMT Subject: CN=88AA917413CC7714276B74A31D9D2902AE6B8B24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bc:c0:45:7d:7d:67:35:1f:c1:10:38:c4:a1: 99:02:22:e3:23:5d:03:94:a8:af:91:6e:a5:45:66: 2b:c3:79:91:59:22:db:d3:c5:b6:bc:98:2f:d2:52: 12:f4:e4:4f:c0:34:d5:ab:81:c0:95:5d:43:a7:a4: 73:29:eb:72:a2:77:b2:72:1e:d0:14:a4:2d:a7:ac: 8d:b2:76:cb:c3:af:5a:ac:2c:97:03:2d:b5:65:39: e5:49:a4:40:ad:77:36:b6:be:e5:9f:aa:95:70:a9: 63:1f:0b:c7:2c:81:36:8b:74:18:3c:0f:dc:b2:24: ad:48:bb:e1:bd:aa:e5:c5:12:2b:89:49:e5:96:c5: 95:b8:bd:84:fc:1e:64:c5:4d:e0:62:73:3d:36:a7: 4c:30:04:9a:39:28:e8:bb:33:9a:9d:a8:ef:78:a4: 3c:a6:c9:8e:42:49:ef:da:d9:f7:ea:20:8e:57:8f: 12:62:85:31:64:24:f9:bd:04:58:e8:a7:24:0b:68: 97:ba:51:5e:5a:61:21:65:ec:70:63:bd:bd:66:4d: fe:48:1a:d0:23:d9:96:2f:38:7e:51:07:c0:4c:96: 80:19:a8:1c:4d:04:a8:1a:11:41:bb:8a:0b:64:8d: e6:42:3f:49:05:ba:6b:75:af:bb:88:ed:9b:92:88: e6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AA:91:74:13:CC:77:14:27:6B:74:A3:1D:9D:29:02:AE:6B:8B:24 X509v3 Authority Key Identifier: keyid:FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2b:f5:4b:b9:b3:e5:07:a6:49:e9:bf:de:02:c0:c1:d3:45: 50:17:c4:e5:c0:24:7e:81:c4:b7:68:9d:7d:79:34:2b:76:47: 13:69:b0:d8:36:99:56:cb:9a:e4:c3:30:cb:43:db:12:98:8b: 77:a6:b9:85:22:e9:11:4e:06:84:0f:9a:96:02:0f:96:df:a2: 63:05:77:d7:c4:a5:c0:53:66:58:3c:02:0e:2b:f3:5a:2f:64: 34:e2:34:c4:bf:39:62:57:cc:11:ca:19:7a:0b:06:81:46:c3: 79:90:71:20:b0:c4:04:b5:2c:28:4c:8e:b2:a5:4d:d4:26:53: 0f:ab:47:f8:e9:d6:2e:b6:24:de:51:8a:a6:01:a4:66:44:a8: 3f:32:cd:70:3c:4d:e4:86:6c:21:86:3e:81:07:88:37:8e:47: 04:75:da:89:e8:8d:3a:f9:f4:a6:18:aa:7b:55:db:23:50:87: 60:6a:ba:1a:46:eb:06:8a:a7:d6:fd:1e:30:65:0b:73:67:b0: 13:3d:be:ee:5b:74:8d:49:35:6f:35:e6:ba:69:1f:c0:04:4b: 18:a7:49:47:de:a5:7d:1f:90:fa:1d:f6:22:c6:f5:f9:df:1b: 2a:ed:b6:ff:dd:81:a7:d7:bb:bb:d4:d7:17:89:05:63:c2:00: 0f:12:4d:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJU1FEsLAUpkDNltc34/coCTA920wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU4MTMxRDdEQkExNjRGOERGMkQxOTUxQUMxMjk5ODg0 MjIzRTZBOTAeFw0yNjEwMTUwNTA2MjFaFw0yNjEwMTgxMjA2MjFaMDMxMTAvBgNV BAMTKDg4QUE5MTc0MTNDQzc3MTQyNzZCNzRBMzFEOUQyOTAyQUU2QjhCMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZvMBFfX1nNR/BEDjEoZkCIuMj XQOUqK+RbqVFZivDeZFZItvTxba8mC/SUhL05E/ANNWrgcCVXUOnpHMp63Kid7Jy HtAUpC2nrI2ydsvDr1qsLJcDLbVlOeVJpECtdza2vuWfqpVwqWMfC8csgTaLdBg8 D9yyJK1Iu+G9quXFEiuJSeWWxZW4vYT8HmTFTeBicz02p0wwBJo5KOi7M5qdqO94 pDymyY5CSe/a2ffqII5XjxJihTFkJPm9BFjopyQLaJe6UV5aYSFl7HBjvb1mTf5I GtAj2ZYvOH5RB8BMloAZqBxNBKgaEUG7igtkjeZCP0kFumt1r7uI7ZuSiObdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiKqRdBPMdxQna3SjHZ0pAq5riyQwHwYDVR0j BBgwFoAU/oEx19uhZPjfLRlRrBKZiEIj5qkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjQ1ODEzMjE3Mjc2NzI1MS8wL0ZFODEzMUQ3REJBMTY0RjhERjJEMTk1MUFDMTI5 OTg4NDIyM0U2QTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkU4MTMxRDdEQkExNjRGOERGMkQxOTUxQUMxMjk5ODg0MjIzRTZBOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY0NTgxMzIxNzI3NjcyNTEvMC9GRTgxMzFEN0RCQTE2 NEY4REYyRDE5NTFBQzEyOTk4ODQyMjNFNkE5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCv1S7mz5Qem Sem/3gLAwdNFUBfE5cAkfoHEt2idfXk0K3ZHE2mw2DaZVsua5MMwy0PbEpiLd6a5 hSLpEU4GhA+algIPlt+iYwV318SlwFNmWDwCDivzWi9kNOI0xL85YlfMEcoZegsG gUbDeZBxILDEBLUsKEyOsqVN1CZTD6tH+OnWLrYk3lGKpgGkZkSoPzLNcDxN5IZs IYY+gQeIN45HBHXaieiNOvn0phiqe1XbI1CHYGq6GkbrBoqn1v0eMGULc2ewEz2+ 7lt0jUk1bzXmumkfwARLGKdJR96lfR+Q+h32Isb1+d8bKu22/92Bp9e7u9TXF4kF Y8IADxJNsw== -----END CERTIFICATE-----Generated at Thu Oct 15 10:35:08 2026 by rpki-client