$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft File: FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft (raw, json) Hash identifier: 0TLMT2s+DWb/eviIQtqPhTeQvA//tW6EvE1/zWAJ9vk= Subject key identifier: 8A:8E:B7:3C:0E:45:3A:C3:06:C8:05:62:73:1C:0D:E1:19:FB:30:78 Authority key identifier: FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9 Certificate issuer: /CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9 Certificate serial: 4F1D53A4FA413B0285BC5070EBE55BC16196C928 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft Manifest number: 26 Signing time: Fri 29 May 2026 07:27:42 +0000 Manifest this update: Fri 29 May 2026 07:22:42 +0000 Manifest next update: Sat 30 May 2026 07:34:42 +0000 Files and hashes: 1: FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl (hash: q0KZcWenIcdDaetN0p5WCqAbjI9gLyHC0uaF8pvAdps=) 2: AS24139.roa (hash: hJcHyjWR1pIcNDPAIlns1S2+qmJeWdk6oWaWD3uXW7s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1d:53:a4:fa:41:3b:02:85:bc:50:70:eb:e5:5b:c1:61:96:c9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE8131D7DBA164F8DF2D1951AC1299884223E6A9 Validity Not Before: May 29 07:22:42 2026 GMT Not After : May 30 07:34:42 2026 GMT Subject: CN=8A8EB73C0E453AC306C80562731C0DE119FB3078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:ad:ab:db:e0:bf:e9:5e:7d:79:0d:f2:61: e6:1d:b4:ea:62:da:b7:f0:8c:91:1d:c4:dc:a6:2c: f1:8a:e3:9d:4a:d3:88:9b:cf:b6:d9:da:35:f4:37: b0:e3:c1:7c:e0:8b:77:5d:3c:3c:06:89:28:07:ef: 0c:55:f7:54:a2:6f:d8:c7:4a:bb:0a:96:2e:3a:bb: 44:cc:6a:c9:72:44:ed:83:4d:78:60:4f:c4:bf:3e: 56:ef:11:a6:50:e6:22:1e:6c:f4:d8:62:50:6a:5e: 38:84:98:b7:56:9d:29:3e:71:8c:07:9b:80:82:9a: d6:50:1f:c9:16:61:b7:88:83:c8:fc:22:e7:07:2e: f9:67:1d:3a:6c:20:cd:0c:a0:d5:08:0e:e4:27:ec: 7d:eb:24:5b:39:fe:5c:75:8d:50:49:83:08:7d:f6: a9:4a:55:a8:89:7c:3f:30:c7:c5:ae:73:68:c5:14: 39:22:56:a3:0c:4c:9c:70:23:10:66:f7:df:20:bf: 42:9f:7b:d0:05:40:5c:14:e3:e3:f9:09:99:4f:ff: 8d:25:1a:8a:74:b4:a0:30:b3:44:82:93:dc:ed:3e: bf:cd:58:f9:b9:d2:3d:8b:21:86:ac:b4:ec:c9:9d: 16:37:7d:3a:84:09:00:31:7f:1f:65:cc:3c:a5:25: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8E:B7:3C:0E:45:3A:C3:06:C8:05:62:73:1C:0D:E1:19:FB:30:78 X509v3 Authority Key Identifier: keyid:FE:81:31:D7:DB:A1:64:F8:DF:2D:19:51:AC:12:99:88:42:23:E6:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106458132172767251/0/FE8131D7DBA164F8DF2D1951AC1299884223E6A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d9:53:59:d8:54:58:4d:a0:5f:36:98:0c:5c:12:6e:1a:2f: 12:9f:16:de:fa:a3:bf:76:4a:e0:e8:5f:a6:de:bf:3f:44:f3: 45:16:40:c5:2e:d5:f0:f1:29:92:24:a5:ee:d1:ae:f8:01:27: 4f:16:a6:97:10:36:ff:1b:67:d8:74:0a:f0:de:53:c6:3c:ff: cc:4e:b7:b7:22:fc:0e:dd:02:d5:74:b2:da:2d:af:21:e5:68: b6:7b:96:91:67:66:2e:75:f2:f3:0b:8a:74:d8:f5:25:9c:06: ab:7a:1f:23:1f:d6:15:38:90:e6:a1:a7:9f:b2:b1:ce:2c:3d: a6:dc:89:31:1c:9a:78:71:32:5c:3d:11:fa:01:ed:37:5b:db: 31:73:f2:f2:e8:18:cd:91:a4:6f:b1:86:e2:c4:43:42:d7:1c: 7c:80:52:e7:69:62:8a:a1:10:3b:c2:6e:3b:32:b7:b0:f2:97: 1c:c7:71:01:c5:07:80:49:74:1d:8e:ea:a1:21:9f:65:68:97: 68:2c:37:87:83:d4:12:33:da:c9:5c:e3:4a:9f:27:d1:ca:00: 2a:25:96:24:23:1e:82:33:0b:b5:93:d0:8d:95:0e:54:3f:54: 84:9f:64:2e:39:b7:24:9f:02:86:7b:40:86:34:3e:77:25:17: a2:54:61:90 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTx1TpPpBOwKFvFBw6+VbwWGWySgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU4MTMxRDdEQkExNjRGOERGMkQxOTUxQUMxMjk5ODg0 MjIzRTZBOTAeFw0yNjA1MjkwNzIyNDJaFw0yNjA1MzAwNzM0NDJaMDMxMTAvBgNV BAMTKDhBOEVCNzNDMEU0NTNBQzMwNkM4MDU2MjczMUMwREUxMTlGQjMwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HK2r2+C/6V59eQ3yYeYdtOpi 2rfwjJEdxNymLPGK451K04ibz7bZ2jX0N7DjwXzgi3ddPDwGiSgH7wxV91Sib9jH SrsKli46u0TMaslyRO2DTXhgT8S/PlbvEaZQ5iIebPTYYlBqXjiEmLdWnSk+cYwH m4CCmtZQH8kWYbeIg8j8IucHLvlnHTpsIM0MoNUIDuQn7H3rJFs5/lx1jVBJgwh9 9qlKVaiJfD8wx8Wuc2jFFDkiVqMMTJxwIxBm998gv0Kfe9AFQFwU4+P5CZlP/40l Gop0tKAws0SCk9ztPr/NWPm50j2LIYastOzJnRY3fTqECQAxfx9lzDylJUPnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUio63PA5FOsMGyAVicxwN4Rn7MHgwHwYDVR0j BBgwFoAU/oEx19uhZPjfLRlRrBKZiEIj5qkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjQ1ODEzMjE3Mjc2NzI1MS8wL0ZFODEzMUQ3REJBMTY0RjhERjJEMTk1MUFDMTI5 OTg4NDIyM0U2QTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkU4MTMxRDdEQkExNjRGOERGMkQxOTUxQUMxMjk5ODg0MjIzRTZBOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY0NTgxMzIxNzI3NjcyNTEvMC9GRTgxMzFEN0RCQTE2 NEY4REYyRDE5NTFBQzEyOTk4ODQyMjNFNkE5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9lTWdhUWE2g XzaYDFwSbhovEp8W3vqjv3ZK4Ohfpt6/P0TzRRZAxS7V8PEpkiSl7tGu+AEnTxam lxA2/xtn2HQK8N5Txjz/zE63tyL8Dt0C1XSy2i2vIeVotnuWkWdmLnXy8wuKdNj1 JZwGq3ofIx/WFTiQ5qGnn7Kxziw9ptyJMRyaeHEyXD0R+gHtN1vbMXPy8ugYzZGk b7GG4sRDQtccfIBS52liiqEQO8JuOzK3sPKXHMdxAcUHgEl0HY7qoSGfZWiXaCw3 h4PUEjPayVzjSp8n0coAKiWWJCMegjMLtZPQjZUOVD9UhJ9kLjm3JJ8ChntAhjQ+ dyUXolRhkA== -----END CERTIFICATE-----Generated at Fri May 29 22:02:44 2026 by rpki-client