$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft File: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft (raw, json) Hash identifier: iRbi4MrjHCZOuf8NeQSakn16IxHyUYiiFNZRligeutY= Subject key identifier: 16:F1:05:9A:A1:E3:AD:C1:F3:DE:49:42:44:84:F0:2C:EC:A4:3D:32 Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A Certificate issuer: /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Certificate serial: 6AA8DF7F25DB5AF062036282E08E2D6207B9C2F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft Manifest number: 8F Signing time: Mon 26 Oct 2026 12:38:42 +0000 Manifest this update: Mon 26 Oct 2026 12:33:42 +0000 Manifest next update: Thu 29 Oct 2026 14:26:42 +0000 Files and hashes: 1: 3231382e3234302e3138312e302f32342d3234203d3e203435303538.roa (hash: StpUKUs1rVFrd/wGnvAcrta3zI5qiSifu4/J6otxOY8=) 2: 3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa (hash: W1PuJ+HbUt/iBs+gWvlRS8Ed7W25ywxjxjnRjdpuULE=) 3: 3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa (hash: jJXMVgde2pxbfq2NcR3+ZwHj4k6TJr3LdkEaBURBLXc=) 4: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl (hash: HmQ6faO14JhWJU8QBONTmUZTcNQWPZvs2RLFm/DqEHo=) 5: 3231382e3234302e3138342e302f32342d3234203d3e2034383038.roa (hash: 8W97xzHc9MQctO7ZNjByi6LZvr1KI8kDZ7yXZdszjxI=) 6: 3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa (hash: FXhv9P90uZTHbPWO0WwQi96WGpHYA4LPw6mGXuxuRKE=) 7: 3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa (hash: Cni/r/Zja/reOMYwwWQACpwTbRJuZT4t4DhHsOzNIAY=) 8: 3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa (hash: Oerta/6FyO4G7xGB/2MOZsxBA07vpNkvtKeF+Hda6yU=) 9: 3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa (hash: ZZ0ylrxDB0RtarHxxpZzISxuiZqcj7poY8afyFg+hwM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 03:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a8:df:7f:25:db:5a:f0:62:03:62:82:e0:8e:2d:62:07:b9:c2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Validity Not Before: Oct 26 12:33:42 2026 GMT Not After : Oct 29 14:26:42 2026 GMT Subject: CN=16F1059AA1E3ADC1F3DE49424484F02CECA43D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:5e:dc:7c:f1:c0:c1:b9:d1:e1:ab:ed:86: 0d:ca:28:68:db:e9:c8:00:fc:fe:4a:cf:ce:ee:42: 34:fe:03:bc:7b:1b:7e:3c:ad:a8:6e:da:78:b1:5a: b8:bc:00:58:c3:ec:04:58:61:2b:af:5e:89:27:01: 51:b6:a4:3e:df:0b:dd:ee:95:39:2b:a7:a7:5e:a1: 5a:b1:c8:7f:c3:90:41:32:98:4c:29:44:de:d1:f2: 6e:aa:c2:2d:61:26:05:2a:92:0e:61:8f:52:92:cb: f6:f5:5e:4d:d8:fe:7c:83:43:3d:30:ab:35:df:ab: 3e:2a:a8:ae:ac:13:02:2d:9a:02:31:41:66:99:c7: 7b:e9:24:5b:a2:c2:3e:59:a4:10:59:c1:51:f8:38: 2c:47:96:48:6d:96:db:b9:5c:60:ff:fd:df:d2:86: a4:b3:e2:a6:fe:26:e7:81:5a:ab:f0:c2:a1:f7:82: c3:1d:a2:3e:5e:a6:2c:6e:c5:53:9b:6a:54:26:8d: 21:d7:aa:39:be:24:71:81:ed:44:d0:85:f6:e2:4f: 17:63:a8:51:7f:14:4a:88:77:7d:17:15:77:e3:ad: 56:83:32:3c:12:d4:21:a7:82:38:81:c7:72:d4:c0: d5:3a:a7:cf:55:22:de:b2:bc:2c:56:02:53:bf:f3: 9c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F1:05:9A:A1:E3:AD:C1:F3:DE:49:42:44:84:F0:2C:EC:A4:3D:32 X509v3 Authority Key Identifier: keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:a2:a7:50:27:33:aa:fb:f6:b1:bf:cf:0b:55:3e:0a:69:8c: 02:0c:e2:4d:cf:a2:13:6f:f3:44:93:97:bc:f4:55:a8:42:7b: ef:96:bc:e9:21:a8:8d:f7:b2:41:fe:9d:a9:c6:5d:10:3c:61: ef:5d:cc:4c:b3:f8:4d:c9:3d:7c:3a:3e:1f:ed:88:b9:47:18: 77:07:80:8c:e0:4c:28:78:d5:ef:82:6a:08:47:4f:44:97:81: b6:6e:6b:fc:3e:f3:e2:65:12:08:bc:b0:76:e7:f9:1b:b9:17: 6a:f1:32:2c:bb:d6:01:2a:12:ec:e3:b5:b2:25:2e:63:8b:de: e3:75:c4:fe:ee:43:11:77:28:60:ee:49:a2:e2:8e:f4:c1:2c: 8f:3b:cf:d4:b0:35:e9:9e:3e:63:42:78:73:11:ec:3a:a1:b9: cc:ec:01:a3:bb:e8:81:c6:a9:55:b4:dc:87:46:fb:a1:f1:53: 29:d0:05:47:d0:6f:d3:1d:34:a3:5d:c0:41:d2:fa:32:52:7d: e3:99:0f:ff:f6:8d:a4:ac:37:99:64:55:e5:78:8f:a3:0e:38: 54:d1:b7:4d:a0:e1:1c:af:1c:86:e7:fa:8e:78:67:87:89:f1: 89:3d:63:4e:6b:e6:e9:40:b3:77:2e:43:80:af:47:2a:a3:ed: d1:a8:2e:d8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaqjffyXbWvBiA2KC4I4tYge5wvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4 QzgzRkY2QTAeFw0yNjEwMjYxMjMzNDJaFw0yNjEwMjkxNDI2NDJaMDMxMTAvBgNV BAMTKDE2RjEwNTlBQTFFM0FEQzFGM0RFNDk0MjQ0ODRGMDJDRUNBNDNEMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyr17cfPHAwbnR4avthg3KKGjb 6cgA/P5Kz87uQjT+A7x7G348rahu2nixWri8AFjD7ARYYSuvXoknAVG2pD7fC93u lTkrp6deoVqxyH/DkEEymEwpRN7R8m6qwi1hJgUqkg5hj1KSy/b1Xk3Y/nyDQz0w qzXfqz4qqK6sEwItmgIxQWaZx3vpJFuiwj5ZpBBZwVH4OCxHlkhtltu5XGD//d/S hqSz4qb+JueBWqvwwqH3gsMdoj5epixuxVObalQmjSHXqjm+JHGB7UTQhfbiTxdj qFF/FEqId30XFXfjrVaDMjwS1CGngjiBx3LUwNU6p89VIt6yvCxWAlO/85xjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFvEFmqHjrcHz3klCRITwLOykPTIwHwYDVR0j BBgwFoAU/NxSLCl3pCwOGpkgQPWEDIyD/2owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0NjU4OTY4OTUyODM0Ny8wL0ZDREM1MjJDMjk3N0E0MkMwRTFBOTkyMDQwRjU4 NDBDOEM4M0ZGNkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4QzgzRkY2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDY1ODk2ODk1MjgzNDcvMC9GQ0RDNTIyQzI5NzdB NDJDMEUxQTk5MjA0MEY1ODQwQzhDODNGRjZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0qKnUCczqvv2 sb/PC1U+CmmMAgziTc+iE2/zRJOXvPRVqEJ775a86SGojfeyQf6dqcZdEDxh713M TLP4Tck9fDo+H+2IuUcYdweAjOBMKHjV74JqCEdPRJeBtm5r/D7z4mUSCLywduf5 G7kXavEyLLvWASoS7OO1siUuY4ve43XE/u5DEXcoYO5JouKO9MEsjzvP1LA16Z4+ Y0J4cxHsOqG5zOwBo7vogcapVbTch0b7ofFTKdAFR9Bv0x00o13AQdL6MlJ945kP //aNpKw3mWRV5XiPow44VNG3TaDhHK8chuf6jnhnh4nxiT1jTmvm6UCzdy5DgK9H KqPt0agu2A== -----END CERTIFICATE-----Generated at Mon Oct 26 16:30:08 2026 by rpki-client