$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft File: FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft (raw, json) Hash identifier: 1fJsBczbPw2dT6zCnJoKpPYCArelXxQQoR5y2LL6Wh4= Subject key identifier: 8F:0E:85:F1:66:4B:3D:BD:E5:93:97:EA:78:FC:26:29:D5:75:3B:47 Authority key identifier: FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D Certificate issuer: /CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D Certificate serial: 374497AF465B4EC8364360F0CF97D20D55F2A688 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft Manifest number: 27 Signing time: Wed 13 May 2026 03:20:55 +0000 Manifest this update: Wed 13 May 2026 03:15:55 +0000 Manifest next update: Thu 14 May 2026 06:51:55 +0000 Files and hashes: 1: 3130332e3136392e36322e302f32332d3233203d3e20313436373436.roa (hash: K+igfdpX4dyqlaiPGaiQ/D+ne2AyiTVYoQO5bTIdUK8=) 2: FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl (hash: V6z0o2jA7U370TeL2fFbZRYQCa+F9LZiUDg6EKcwINM=) 3: 323430373a396263303a3a2f33322d3332203d3e20313436373436.roa (hash: Oy/Z6kZQu3MFqdajWzdr4HEF6jg7aYQKFEno2tldjJE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:44:97:af:46:5b:4e:c8:36:43:60:f0:cf:97:d2:0d:55:f2:a6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D Validity Not Before: May 13 03:15:55 2026 GMT Not After : May 14 06:51:55 2026 GMT Subject: CN=8F0E85F1664B3DBDE59397EA78FC2629D5753B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a3:2a:f4:63:c6:75:d5:29:33:f3:cb:73:e6: 26:be:b1:cc:40:b9:d0:1e:6a:b1:4b:22:11:6a:5e: 78:38:fa:f0:9b:7c:bb:0e:52:3b:d2:53:3f:ae:4a: 7c:ff:30:83:b2:12:24:9d:e6:50:ad:e7:44:a2:47: 8e:ef:70:76:6f:1e:ff:a9:cc:d7:d5:e2:2f:ce:58: 9e:99:09:5e:81:84:cf:33:08:e4:dc:49:70:db:dd: 6d:d2:a9:6a:ec:28:16:d6:88:39:3e:ce:a8:65:6b: 96:ad:50:8d:07:a4:49:70:96:a5:e3:21:41:5e:38: 0e:aa:72:cd:27:e4:f8:4a:d7:89:fa:b4:1a:9b:6c: de:b6:39:49:84:64:00:b6:e9:b2:b8:87:b2:2b:92: de:a1:25:ad:71:08:76:14:de:fd:c4:53:3f:90:7a: 1f:8f:04:f0:86:31:a1:a1:f6:d8:4a:07:61:f3:a3: c8:9a:0c:74:1f:f9:fe:8b:a6:35:b7:56:d5:be:91: 64:da:ff:24:45:a0:79:8b:f2:c8:7b:3f:7b:aa:83: ff:87:1c:f9:20:0f:aa:64:2d:e1:9e:95:ef:3b:3a: be:60:32:b4:c3:78:3b:aa:7e:20:3a:8a:e6:ed:92: af:bf:49:52:cb:cf:65:9b:b9:00:3c:78:70:c2:b4: 83:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0E:85:F1:66:4B:3D:BD:E5:93:97:EA:78:FC:26:29:D5:75:3B:47 X509v3 Authority Key Identifier: keyid:FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ff:de:c1:b9:1f:46:9b:fe:6f:7c:15:52:90:3d:28:e3:0f: 61:11:12:43:34:df:0c:6e:8f:70:61:74:74:ca:f4:59:5c:34: 0d:57:e8:a4:0d:28:21:67:c9:c4:d2:a1:00:3d:bd:1d:fa:41: 77:c4:c7:e9:ab:4d:75:99:a1:72:b6:e5:3d:97:c8:63:aa:27: 3a:b7:9d:cd:fd:33:e5:6a:b4:6a:5a:83:f0:81:1e:99:84:be: 0f:6e:3e:5d:59:22:66:e1:61:8e:ea:d7:b7:6e:66:11:14:c0: 2f:e3:e1:30:c0:2e:eb:b3:98:7f:1d:34:f3:a8:38:6a:eb:b8: 2d:aa:29:34:90:ce:2d:80:f5:70:62:6e:0d:a6:3b:fe:9a:5d: df:37:92:28:fd:78:26:f8:73:96:66:95:11:0a:36:0a:f4:ed: 1f:a3:19:84:f9:49:3b:e1:68:e8:f3:fe:b3:6d:85:00:d8:db: a1:b6:4a:64:e9:94:c7:c4:49:50:3a:80:e6:7f:ef:66:9c:93: 8e:75:5b:c0:08:de:dd:cb:7b:8d:14:04:6b:37:20:c5:b2:db: 84:ad:85:5c:4a:b2:de:1f:2b:86:8d:6b:8b:31:2c:50:fe:41: 94:02:6e:30:82:b6:7c:c1:e2:ee:a2:81:77:91:62:a7:78:ff: e2:42:64:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN0SXr0ZbTsg2Q2Dwz5fSDVXypogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFEMEFENUNDNThGQjRCMzI3MTU2OUExNkM4MDVBNTNB QjRBMjcwRDAeFw0yNjA1MTMwMzE1NTVaFw0yNjA1MTQwNjUxNTVaMDMxMTAvBgNV BAMTKDhGMEU4NUYxNjY0QjNEQkRFNTkzOTdFQTc4RkMyNjI5RDU3NTNCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMoyr0Y8Z11Skz88tz5ia+scxA udAearFLIhFqXng4+vCbfLsOUjvSUz+uSnz/MIOyEiSd5lCt50SiR47vcHZvHv+p zNfV4i/OWJ6ZCV6BhM8zCOTcSXDb3W3SqWrsKBbWiDk+zqhla5atUI0HpElwlqXj IUFeOA6qcs0n5PhK14n6tBqbbN62OUmEZAC26bK4h7Irkt6hJa1xCHYU3v3EUz+Q eh+PBPCGMaGh9thKB2Hzo8iaDHQf+f6LpjW3VtW+kWTa/yRFoHmL8sh7P3uqg/+H HPkgD6pkLeGele87Or5gMrTDeDuqfiA6iubtkq+/SVLLz2WbuQA8eHDCtINlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjw6F8WZLPb3lk5fqePwmKdV1O0cwHwYDVR0j BBgwFoAU+tCtXMWPtLMnFWmhbIBaU6tKJw0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njc2MTQ1Mzk3MDQ1NjU3OC8wL0ZBRDBBRDVDQzU4RkI0QjMyNzE1NjlBMTZDODA1 QTUzQUI0QTI3MEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkFEMEFENUNDNThGQjRCMzI3MTU2OUExNkM4MDVBNTNBQjRBMjcwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3NjE0NTM5NzA0NTY1NzgvMC9GQUQwQUQ1Q0M1OEZC NEIzMjcxNTY5QTE2QzgwNUE1M0FCNEEyNzBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUf/ewbkfRpv+ b3wVUpA9KOMPYRESQzTfDG6PcGF0dMr0WVw0DVfopA0oIWfJxNKhAD29HfpBd8TH 6atNdZmhcrblPZfIY6onOredzf0z5Wq0alqD8IEemYS+D24+XVkiZuFhjurXt25m ERTAL+PhMMAu67OYfx0086g4auu4LaopNJDOLYD1cGJuDaY7/ppd3zeSKP14Jvhz lmaVEQo2CvTtH6MZhPlJO+Fo6PP+s22FANjbobZKZOmUx8RJUDqA5n/vZpyTjnVb wAje3ct7jRQEazcgxbLbhK2FXEqy3h8rho1rizEsUP5BlAJuMIK2fMHi7qKBd5Fi p3j/4kJkCQ== -----END CERTIFICATE-----Generated at Wed May 13 20:55:31 2026 by rpki-client