$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111842086300155925/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.mft File: FA44A1B9136325B4DC1FD0E79B880C87DD347B31.mft (raw, json) Hash identifier: Xdcgo6XsOm2vdsDbcowkDptiapZ6n6ku3MRgFPk/7/g= Subject key identifier: 83:D7:81:7A:BB:A7:4B:68:B2:80:98:E1:D0:69:49:A1:6E:69:BB:46 Authority key identifier: FA:44:A1:B9:13:63:25:B4:DC:1F:D0:E7:9B:88:0C:87:DD:34:7B:31 Certificate issuer: /CN=FA44A1B9136325B4DC1FD0E79B880C87DD347B31 Certificate serial: 4D60DF62ADFF9501A42DE7C2F6566BF3F97A886F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.mft Manifest number: 17 Signing time: Wed 03 Jun 2026 22:38:57 +0000 Manifest this update: Wed 03 Jun 2026 22:33:57 +0000 Manifest next update: Fri 05 Jun 2026 00:08:57 +0000 Files and hashes: 1: 3136302e32322e3134382e302f32332d3233203d3e2030.roa (hash: p6ZpqAcYKZShiVZ0UOwQgAy23JxzOWzPCot6EKXLWhk=) 2: FA44A1B9136325B4DC1FD0E79B880C87DD347B31.crl (hash: EeMSf3Mp29oICIB+ToLl12GFuw15xZ/TyiP8S1IX17k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.crl rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 00:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:60:df:62:ad:ff:95:01:a4:2d:e7:c2:f6:56:6b:f3:f9:7a:88:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA44A1B9136325B4DC1FD0E79B880C87DD347B31 Validity Not Before: Jun 3 22:33:57 2026 GMT Not After : Jun 5 00:08:57 2026 GMT Subject: CN=83D7817ABBA74B68B28098E1D06949A16E69BB46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:62:3c:ec:cd:6a:8f:20:51:81:2c:ec:08:59: 1b:b4:f6:80:6f:9a:5f:a5:35:3e:e3:50:23:83:94: 73:dd:e7:36:bd:09:6f:38:c0:fb:c7:f2:93:13:df: 6f:7e:3b:35:55:52:75:e1:61:9e:ee:e4:89:5d:e1: 30:40:54:7d:f1:33:76:55:8c:64:10:c1:f1:e6:81: ef:ff:cd:97:2a:fc:ed:f3:18:b8:3c:fd:83:bd:6c: e0:35:c5:bf:bb:07:93:5a:ed:3a:c6:4d:ef:67:85: 07:a4:b2:85:7e:53:10:13:53:76:fe:86:c2:0a:09: d6:1d:86:0d:5b:85:91:82:3b:fe:b1:1f:a3:18:33: de:8a:54:b1:28:af:63:af:43:01:40:c5:5a:e1:13: c0:18:d3:c8:6f:b7:a1:a3:e1:31:5c:4c:8d:84:e1: e0:35:ca:20:df:28:17:a2:9d:50:20:fb:22:dc:00: f7:e2:28:47:34:65:fe:81:23:d8:7e:85:99:2d:c6: 13:bf:42:88:5c:9b:45:fc:89:5d:1d:9e:89:ed:45: 68:db:ab:cc:31:98:97:ec:b1:07:e7:c5:83:d0:0a: 41:1c:12:a3:ae:46:b4:d2:39:31:8a:65:dd:6a:38: 5e:f4:41:e2:fa:47:64:e4:d3:bf:22:7e:21:d1:24: ab:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D7:81:7A:BB:A7:4B:68:B2:80:98:E1:D0:69:49:A1:6E:69:BB:46 X509v3 Authority Key Identifier: keyid:FA:44:A1:B9:13:63:25:B4:DC:1F:D0:E7:9B:88:0C:87:DD:34:7B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111842086300155925/0/FA44A1B9136325B4DC1FD0E79B880C87DD347B31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:7a:e2:bd:5a:cf:26:7a:bd:b0:ff:c8:a0:6e:93:34:bb:51: a0:fa:fb:73:87:a0:e3:3e:d4:be:93:38:9c:a9:6a:71:c8:6e: 4c:db:0f:d8:a1:5f:69:8a:40:df:c0:c9:e0:94:16:e5:99:e0: 2c:21:5f:d5:00:f4:8c:69:76:79:ca:31:e7:80:fe:26:d9:3a: 0a:46:d8:c4:b7:9b:57:8b:91:06:8e:5a:d6:df:fb:0e:87:a6: 7c:c1:c0:0e:ca:fc:d2:b9:a9:cd:33:90:0c:18:1e:3a:78:31: ac:54:dd:81:98:52:b7:c9:e5:84:6e:8a:ab:77:85:d3:c2:56: 18:05:bc:83:f6:a0:b6:dd:78:8a:66:a6:bf:af:02:d3:12:fe: 83:61:3e:05:10:1d:2e:dc:44:07:4f:31:e9:cc:76:bc:96:c5: bd:27:a3:2a:0b:49:f4:b3:b9:ef:f9:05:e9:38:a7:c5:94:dc: d3:87:3d:d5:c4:64:49:7b:1e:0a:ad:9c:a3:68:7c:6d:a9:e0: 89:a5:34:13:69:c9:d2:fa:01:24:87:31:7c:98:c0:2b:a2:3d: b1:ba:7f:76:09:7f:c0:69:05:fb:42:19:5e:1b:46:74:b1:e4: 9a:94:1c:2e:68:f0:19:31:7d:4b:1a:69:56:bc:e5:83:e7:31: 44:4d:e8:64 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTWDfYq3/lQGkLefC9lZr8/l6iG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0NEExQjkxMzYzMjVCNERDMUZEMEU3OUI4ODBDODdE RDM0N0IzMTAeFw0yNjA2MDMyMjMzNTdaFw0yNjA2MDUwMDA4NTdaMDMxMTAvBgNV BAMTKDgzRDc4MTdBQkJBNzRCNjhCMjgwOThFMUQwNjk0OUExNkU2OUJCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZYjzszWqPIFGBLOwIWRu09oBv ml+lNT7jUCODlHPd5za9CW84wPvH8pMT329+OzVVUnXhYZ7u5Ild4TBAVH3xM3ZV jGQQwfHmge//zZcq/O3zGLg8/YO9bOA1xb+7B5Na7TrGTe9nhQeksoV+UxATU3b+ hsIKCdYdhg1bhZGCO/6xH6MYM96KVLEor2OvQwFAxVrhE8AY08hvt6Gj4TFcTI2E 4eA1yiDfKBeinVAg+yLcAPfiKEc0Zf6BI9h+hZktxhO/Qohcm0X8iV0dnontRWjb q8wxmJfssQfnxYPQCkEcEqOuRrTSOTGKZd1qOF70QeL6R2Tk078ifiHRJKt3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUg9eBerunS2iygJjh0GlJoW5pu0YwHwYDVR0j BBgwFoAU+kShuRNjJbTcH9Dnm4gMh900ezEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg0MjA4NjMwMDE1NTkyNS8wL0ZBNDRBMUI5MTM2MzI1QjREQzFGRDBFNzlCODgw Qzg3REQzNDdCMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRkE0NEExQjkxMzYzMjVCNERDMUZEMEU3OUI4ODBDODdERDM0N0IzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4NDIwODYzMDAxNTU5MjUvMC9GQTQ0QTFCOTEzNjMy NUI0REMxRkQwRTc5Qjg4MEM4N0REMzQ3QjMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxHrivVrPJnq9 sP/IoG6TNLtRoPr7c4eg4z7UvpM4nKlqcchuTNsP2KFfaYpA38DJ4JQW5ZngLCFf 1QD0jGl2ecox54D+Jtk6CkbYxLebV4uRBo5a1t/7DoemfMHADsr80rmpzTOQDBge OngxrFTdgZhSt8nlhG6Kq3eF08JWGAW8g/agtt14imamv68C0xL+g2E+BRAdLtxE B08x6cx2vJbFvSejKgtJ9LO57/kF6TinxZTc04c91cRkSXseCq2co2h8bangiaU0 E2nJ0voBJIcxfJjAK6I9sbp/dgl/wGkF+0IZXhtGdLHkmpQcLmjwGTF9SxppVrzl g+cxRE3oZA== -----END CERTIFICATE-----Generated at Thu Jun 4 15:02:42 2026 by rpki-client