$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft File: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft (raw, json) Hash identifier: uczjJrQ/X+KIK+vYJGiN60FuomAmzkcMVC8sgGx6leU= Subject key identifier: D6:FB:F3:7F:48:8C:21:E2:99:DC:7D:2D:B0:3D:C1:BC:70:80:5B:62 Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A Certificate issuer: /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Certificate serial: 20BF22136D88D941FC5D29BB3CA5226B6F8330DB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft Manifest number: 79 Signing time: Tue 08 Sep 2026 12:59:15 +0000 Manifest this update: Tue 08 Sep 2026 12:54:15 +0000 Manifest next update: Fri 11 Sep 2026 22:13:15 +0000 Files and hashes: 1: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl (hash: 9rizkJ+/n+PM3YrIubrq37CJDTlsxFHiK34YRYelJ24=) 2: 3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa (hash: ZZ0ylrxDB0RtarHxxpZzISxuiZqcj7poY8afyFg+hwM=) 3: 3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa (hash: Cni/r/Zja/reOMYwwWQACpwTbRJuZT4t4DhHsOzNIAY=) 4: 3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa (hash: jJXMVgde2pxbfq2NcR3+ZwHj4k6TJr3LdkEaBURBLXc=) 5: 3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa (hash: W1PuJ+HbUt/iBs+gWvlRS8Ed7W25ywxjxjnRjdpuULE=) 6: 3231382e3234302e3138312e302f32342d3234203d3e203435303538.roa (hash: StpUKUs1rVFrd/wGnvAcrta3zI5qiSifu4/J6otxOY8=) 7: 3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa (hash: Oerta/6FyO4G7xGB/2MOZsxBA07vpNkvtKeF+Hda6yU=) 8: 3231382e3234302e3138342e302f32342d3234203d3e2034383038.roa (hash: 8W97xzHc9MQctO7ZNjByi6LZvr1KI8kDZ7yXZdszjxI=) 9: 3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa (hash: FXhv9P90uZTHbPWO0WwQi96WGpHYA4LPw6mGXuxuRKE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 22:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:bf:22:13:6d:88:d9:41:fc:5d:29:bb:3c:a5:22:6b:6f:83:30:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Validity Not Before: Sep 8 12:54:15 2026 GMT Not After : Sep 11 22:13:15 2026 GMT Subject: CN=D6FBF37F488C21E299DC7D2DB03DC1BC70805B62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:fb:73:64:00:e8:bc:ed:ca:a1:f0:e1:f9: ce:b5:c8:5a:fc:79:d0:fc:ac:cc:53:40:a7:a3:f9: 54:93:97:13:ab:f8:0e:51:19:53:03:9d:cb:bd:da: 3a:34:f4:94:b8:50:28:47:4b:cb:74:19:62:e9:1c: 58:1f:34:8a:08:d5:5c:d6:7e:b0:99:42:56:7f:87: cb:70:b6:67:2f:f4:cb:c4:54:5e:4f:7b:7d:c8:ee: f9:a8:22:6f:32:39:8e:e9:2e:ce:3d:09:95:7a:8e: cf:87:47:75:d3:68:dd:8a:99:e6:22:cb:ac:db:00: 49:61:62:90:0a:c3:e0:86:de:1c:a2:fe:ea:b6:43: 7e:e4:89:56:50:5d:5a:91:16:fc:71:4c:68:77:cd: 3b:3f:a6:da:da:4b:84:c7:89:fe:ba:95:b6:c0:df: 46:71:12:ed:fc:f1:cc:f8:6d:29:69:73:d1:d9:db: 1d:4a:96:fc:d6:84:07:5a:51:0c:46:d3:3c:d8:05: ac:bb:cf:87:f2:62:ff:09:fb:d0:73:7f:1a:8d:38: a6:b8:8d:03:79:75:e6:52:c9:18:51:a0:9f:05:62: c4:c6:6f:9e:e1:42:80:e1:30:9b:d8:e2:f9:ff:d7: c4:d8:e9:04:f9:99:14:c4:86:80:5e:06:6c:cd:37: ec:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FB:F3:7F:48:8C:21:E2:99:DC:7D:2D:B0:3D:C1:BC:70:80:5B:62 X509v3 Authority Key Identifier: keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f2:b4:0f:3c:71:8c:0c:06:83:b2:c2:19:65:20:c1:90:0b: ad:42:77:37:cf:00:8b:93:58:04:92:e4:f6:1b:c9:83:38:40: 0a:06:38:66:ae:9e:d7:73:ad:ab:30:6a:57:cd:75:51:fc:f4: 89:ba:6c:f0:07:66:0f:b1:2d:57:33:43:d0:b8:5d:a0:5f:11: d1:ec:3d:81:66:e8:33:f3:0d:54:3a:d1:ba:82:4f:df:8c:d3: 66:3c:68:59:5e:4e:37:cc:06:b1:fb:0d:59:17:91:64:32:0f: 6b:18:7d:74:87:ed:1d:1d:d8:65:8d:19:e9:b1:30:38:db:b3: 8a:fa:d7:50:53:97:7a:8e:3a:4a:15:6e:e4:9b:94:e4:40:ec: b8:9c:f3:8d:4d:dc:f1:fb:80:bb:ac:bf:ad:9f:86:dc:51:2b: 88:4d:a8:da:d1:a8:1a:49:2b:6e:d2:89:80:dd:78:51:8b:63: 77:9f:0f:b7:9c:c2:86:22:09:b3:f1:db:29:08:90:83:23:93: ee:3a:47:37:ad:42:04:12:ee:90:ad:9e:7c:46:68:10:a5:82: 2e:e5:0e:ed:53:a4:bb:f5:a4:01:8c:09:c9:c3:ca:36:f3:fe: 31:04:08:a7:33:da:e9:d3:41:eb:c1:38:af:af:57:16:ad:f3: 38:9f:2e:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIL8iE22I2UH8XSm7PKUia2+DMNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4 QzgzRkY2QTAeFw0yNjA5MDgxMjU0MTVaFw0yNjA5MTEyMjEzMTVaMDMxMTAvBgNV BAMTKEQ2RkJGMzdGNDg4QzIxRTI5OURDN0QyREIwM0RDMUJDNzA4MDVCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEx/tzZADovO3KofDh+c61yFr8 edD8rMxTQKej+VSTlxOr+A5RGVMDncu92jo09JS4UChHS8t0GWLpHFgfNIoI1VzW frCZQlZ/h8twtmcv9MvEVF5Pe33I7vmoIm8yOY7pLs49CZV6js+HR3XTaN2KmeYi y6zbAElhYpAKw+CG3hyi/uq2Q37kiVZQXVqRFvxxTGh3zTs/ptraS4THif66lbbA 30ZxEu388cz4bSlpc9HZ2x1KlvzWhAdaUQxG0zzYBay7z4fyYv8J+9BzfxqNOKa4 jQN5deZSyRhRoJ8FYsTGb57hQoDhMJvY4vn/18TY6QT5mRTEhoBeBmzNN+zNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1vvzf0iMIeKZ3H0tsD3BvHCAW2IwHwYDVR0j BBgwFoAU/NxSLCl3pCwOGpkgQPWEDIyD/2owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0NjU4OTY4OTUyODM0Ny8wL0ZDREM1MjJDMjk3N0E0MkMwRTFBOTkyMDQwRjU4 NDBDOEM4M0ZGNkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4QzgzRkY2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDY1ODk2ODk1MjgzNDcvMC9GQ0RDNTIyQzI5NzdB NDJDMEUxQTk5MjA0MEY1ODQwQzhDODNGRjZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvK0DzxxjAwG g7LCGWUgwZALrUJ3N88Ai5NYBJLk9hvJgzhACgY4Zq6e13OtqzBqV811Ufz0ibps 8AdmD7EtVzND0LhdoF8R0ew9gWboM/MNVDrRuoJP34zTZjxoWV5ON8wGsfsNWReR ZDIPaxh9dIftHR3YZY0Z6bEwONuzivrXUFOXeo46ShVu5JuU5EDsuJzzjU3c8fuA u6y/rZ+G3FEriE2o2tGoGkkrbtKJgN14UYtjd58Pt5zChiIJs/HbKQiQgyOT7jpH N61CBBLukK2efEZoEKWCLuUO7VOku/WkAYwJycPKNvP+MQQIpzPa6dNB68E4r69X Fq3zOJ8uog== -----END CERTIFICATE-----Generated at Thu Sep 10 14:11:32 2026 by rpki-client