$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft File: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft (raw, json) Hash identifier: kQqdVHmhBY3f3SA9q2SuL7NcuJTxFBIiSDpT71O/QEg= Subject key identifier: AD:E9:C7:B8:E6:23:F0:F6:4C:1E:F4:5B:90:73:42:2A:05:29:11:53 Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A Certificate issuer: /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Certificate serial: 5C32ADA3A3A97CBF6C35741EFD462F09971D15A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft Manifest number: 0B Signing time: Thu 11 Jun 2026 08:13:30 +0000 Manifest this update: Thu 11 Jun 2026 08:08:30 +0000 Manifest next update: Fri 12 Jun 2026 09:03:30 +0000 Files and hashes: 1: 3231382e3234302e3138342e302f32342d3234203d3e2034383038.roa (hash: 8W97xzHc9MQctO7ZNjByi6LZvr1KI8kDZ7yXZdszjxI=) 2: 3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa (hash: ZZ0ylrxDB0RtarHxxpZzISxuiZqcj7poY8afyFg+hwM=) 3: 3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa (hash: W1PuJ+HbUt/iBs+gWvlRS8Ed7W25ywxjxjnRjdpuULE=) 4: 3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa (hash: Oerta/6FyO4G7xGB/2MOZsxBA07vpNkvtKeF+Hda6yU=) 5: 3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa (hash: FXhv9P90uZTHbPWO0WwQi96WGpHYA4LPw6mGXuxuRKE=) 6: 3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa (hash: jJXMVgde2pxbfq2NcR3+ZwHj4k6TJr3LdkEaBURBLXc=) 7: 3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa (hash: Cni/r/Zja/reOMYwwWQACpwTbRJuZT4t4DhHsOzNIAY=) 8: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl (hash: qvLQL4o9D+oylcc+mm+fIJbWBtjv36UnxjHI2RVdtys=) 9: 3231382e3234302e3138312e302f32342d3234203d3e203435303538.roa (hash: StpUKUs1rVFrd/wGnvAcrta3zI5qiSifu4/J6otxOY8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 09:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:32:ad:a3:a3:a9:7c:bf:6c:35:74:1e:fd:46:2f:09:97:1d:15:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Validity Not Before: Jun 11 08:08:30 2026 GMT Not After : Jun 12 09:03:30 2026 GMT Subject: CN=ADE9C7B8E623F0F64C1EF45B9073422A05291153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:b9:e7:c9:41:9f:4e:c8:d1:74:c3:41:e1: 91:3b:fe:92:74:c0:a8:8f:33:9a:22:c7:52:5c:32: 1f:07:e4:69:79:4a:b5:d2:eb:7b:b6:be:7a:39:00: 2e:b2:9e:9f:ce:89:59:57:39:58:19:4f:15:2d:2c: dd:7b:d8:e7:dd:ba:40:5c:78:21:1b:d8:e8:37:5c: b4:b3:15:53:04:4a:70:7b:4f:b1:b4:f9:a5:35:a9: 14:3c:20:12:15:30:d8:20:78:84:dd:f1:d4:26:8d: 6e:09:2a:57:f5:25:16:18:bf:79:7f:7a:c9:05:e0: 3e:83:e3:46:da:ea:00:d2:1e:9b:70:f2:ef:c9:22: 12:e8:d6:bd:67:d4:53:85:62:db:7e:81:cd:12:5f: cc:5d:07:76:98:6d:57:7f:d6:c3:d5:1f:ac:22:54: 51:74:38:b1:03:30:ff:bf:33:59:43:2f:63:d6:df: a7:66:07:d7:6a:c8:4e:09:cd:8c:f9:0a:a9:3b:5e: 07:10:9a:7c:20:bf:24:bb:a9:ac:de:7b:1d:0d:93: 85:03:ac:c4:71:07:d0:da:b3:c4:8d:a9:ba:0f:d4: 6e:18:fb:c3:e6:53:53:8b:16:19:0a:c6:1a:64:0d: 1c:90:99:b3:a5:00:c3:8d:ac:0f:15:b1:7c:a3:b8: 56:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E9:C7:B8:E6:23:F0:F6:4C:1E:F4:5B:90:73:42:2A:05:29:11:53 X509v3 Authority Key Identifier: keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:14:21:db:db:15:f3:c9:9a:f3:aa:6f:99:6f:71:a6:b7:f4: bf:7c:4a:2c:5f:30:53:b4:8b:a9:38:87:6f:6d:72:c1:60:c3: fe:f0:30:fa:8e:8e:9a:87:5d:5f:b3:0f:2b:31:b7:57:15:d3: 85:6b:f0:96:f4:db:ee:94:70:8b:62:fb:75:45:33:c8:1e:1a: ab:ac:a7:88:46:43:c2:43:7d:99:47:63:8e:5b:33:8a:0d:0f: ec:ce:8a:32:ba:9e:cc:a7:38:bc:b5:92:cc:a7:9e:fc:6d:19: b0:4a:53:e8:b0:75:2f:86:59:74:4f:0a:0d:cb:10:f5:7d:66: 03:3d:92:b2:db:4b:9a:40:c2:97:93:89:2a:fd:28:ee:10:ec: 71:70:21:b5:73:f0:30:5e:ac:33:98:c6:20:47:b5:84:45:fa: ff:5f:97:6d:45:54:0d:7e:26:73:7e:53:ed:76:82:29:cb:78: 44:03:eb:38:0d:a0:43:17:f5:01:dc:03:31:af:e3:e2:72:2d: b6:12:fe:23:8e:b9:3e:c6:e3:e3:e5:70:c1:81:2f:3f:6c:0f: ea:cc:21:81:c1:33:4c:32:3b:d8:71:b1:94:d9:2a:f7:4b:b9: 75:ac:b3:7a:d3:f3:2f:6e:1d:50:da:7c:5d:cc:fe:d6:19:7e: 7e:ab:bb:9b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXDKto6OpfL9sNXQe/UYvCZcdFagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4 QzgzRkY2QTAeFw0yNjA2MTEwODA4MzBaFw0yNjA2MTIwOTAzMzBaMDMxMTAvBgNV BAMTKEFERTlDN0I4RTYyM0YwRjY0QzFFRjQ1QjkwNzM0MjJBMDUyOTExNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCornnyUGfTsjRdMNB4ZE7/pJ0 wKiPM5oix1JcMh8H5Gl5SrXS63u2vno5AC6ynp/OiVlXOVgZTxUtLN172OfdukBc eCEb2Og3XLSzFVMESnB7T7G0+aU1qRQ8IBIVMNggeITd8dQmjW4JKlf1JRYYv3l/ eskF4D6D40ba6gDSHptw8u/JIhLo1r1n1FOFYtt+gc0SX8xdB3aYbVd/1sPVH6wi VFF0OLEDMP+/M1lDL2PW36dmB9dqyE4JzYz5Cqk7XgcQmnwgvyS7qazeex0Nk4UD rMRxB9Das8SNqboP1G4Y+8PmU1OLFhkKxhpkDRyQmbOlAMONrA8VsXyjuFYFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrenHuOYj8PZMHvRbkHNCKgUpEVMwHwYDVR0j BBgwFoAU/NxSLCl3pCwOGpkgQPWEDIyD/2owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0NjU4OTY4OTUyODM0Ny8wL0ZDREM1MjJDMjk3N0E0MkMwRTFBOTkyMDQwRjU4 NDBDOEM4M0ZGNkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4QzgzRkY2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDY1ODk2ODk1MjgzNDcvMC9GQ0RDNTIyQzI5NzdB NDJDMEUxQTk5MjA0MEY1ODQwQzhDODNGRjZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6hQh29sV88ma 86pvmW9xprf0v3xKLF8wU7SLqTiHb21ywWDD/vAw+o6OmoddX7MPKzG3VxXThWvw lvTb7pRwi2L7dUUzyB4aq6yniEZDwkN9mUdjjlszig0P7M6KMrqezKc4vLWSzKee /G0ZsEpT6LB1L4ZZdE8KDcsQ9X1mAz2SsttLmkDCl5OJKv0o7hDscXAhtXPwMF6s M5jGIEe1hEX6/1+XbUVUDX4mc35T7XaCKct4RAPrOA2gQxf1AdwDMa/j4nItthL+ I465Psbj4+VwwYEvP2wP6swhgcEzTDI72HGxlNkq90u5dayzetPzL24dUNp8Xcz+ 1hl+fqu7mw== -----END CERTIFICATE-----Generated at Fri Jun 12 03:33:29 2026 by rpki-client