$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft File: FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft (raw, json) Hash identifier: 3Dkgtzh2VRGhEaz51rv0CdF4SMNhiayDDOm8kdMHV98= Subject key identifier: 0C:E9:C9:FE:6D:5A:7E:91:66:77:F7:5A:80:2F:0E:BE:AE:33:74:E4 Authority key identifier: FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D Certificate issuer: /CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D Certificate serial: 585F180BC378139F1586271C16654D46834AA6F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft Manifest number: 86 Signing time: Fri 24 Jul 2026 05:35:28 +0000 Manifest this update: Fri 24 Jul 2026 05:30:28 +0000 Manifest next update: Sat 25 Jul 2026 06:09:28 +0000 Files and hashes: 1: 3130332e3136392e36322e302f32332d3233203d3e20313436373436.roa (hash: K+igfdpX4dyqlaiPGaiQ/D+ne2AyiTVYoQO5bTIdUK8=) 2: 323430373a396263303a3a2f33322d3332203d3e20313436373436.roa (hash: Oy/Z6kZQu3MFqdajWzdr4HEF6jg7aYQKFEno2tldjJE=) 3: FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl (hash: X2/43FDMGxeNKrHvIaTZwb+7ohktBgBSk9C66Yqf8lA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5f:18:0b:c3:78:13:9f:15:86:27:1c:16:65:4d:46:83:4a:a6:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D Validity Not Before: Jul 24 05:30:28 2026 GMT Not After : Jul 25 06:09:28 2026 GMT Subject: CN=0CE9C9FE6D5A7E916677F75A802F0EBEAE3374E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d1:73:01:62:69:92:45:77:51:57:50:86:d3: 9e:14:49:91:ce:80:be:32:3f:e0:fd:7a:4c:b1:77: 04:08:7d:a4:13:6d:3d:c7:7a:35:c6:31:e1:a7:e8: e3:50:36:d0:73:f2:04:c1:04:2e:9f:91:a3:f6:99: bb:70:e4:95:15:ca:92:60:d5:b7:53:ca:e3:26:25: 12:26:41:db:73:5e:2b:b7:b1:e7:7c:65:e1:73:f8: 38:18:ae:0f:1b:4f:c3:07:d0:96:d0:93:b8:b3:2f: f4:5c:35:3f:cf:6d:c7:20:24:d8:40:c2:48:18:b0: 24:d9:9b:ca:ef:01:e1:ea:04:78:e2:af:37:2e:3b: f1:2b:5a:ef:6e:ea:ce:04:b0:06:1e:32:d8:1b:45: 93:f9:97:b8:cd:36:d0:33:fd:37:aa:bd:1b:36:09: 49:c8:9c:8c:07:94:95:4a:3b:b9:fe:b9:da:b7:97: f7:91:e1:03:bf:42:75:b5:33:01:ea:67:ba:63:9e: e1:d2:18:33:ae:61:f8:0a:6a:ef:33:6f:5a:d8:9f: 7a:88:43:5e:51:4e:4e:53:18:18:ff:c7:3d:f2:a2: ed:ba:23:16:0c:8c:1f:23:32:55:74:4f:4c:cb:61: ed:49:bd:e9:02:8c:56:ef:ac:df:c9:6e:74:2a:65: fb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E9:C9:FE:6D:5A:7E:91:66:77:F7:5A:80:2F:0E:BE:AE:33:74:E4 X509v3 Authority Key Identifier: keyid:FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6e:f5:f2:09:1d:a3:ce:02:5a:00:4e:b4:1b:af:b3:6e:57: 97:de:60:e2:eb:b0:94:92:f1:53:d2:0e:2e:ec:f8:1e:0c:6f: a7:93:25:11:65:74:ea:ad:e9:47:85:58:15:99:f5:83:ad:55: 80:41:ad:8c:b7:2e:74:f0:2b:02:fd:55:bd:b7:b5:27:88:ff: 67:85:ca:ed:e5:55:e7:5e:ae:7a:ba:58:46:15:b4:0d:c5:e7: 9b:17:a1:5b:e4:03:6b:b8:31:dd:07:85:8b:93:ba:ff:f5:66: bf:c5:02:25:f9:0e:97:3a:1c:9c:9a:59:9c:04:c9:32:89:e8: 00:de:bd:91:3b:88:51:b7:bb:8e:9b:bb:31:fb:9b:28:c3:a8: 39:5a:8c:3a:f6:f4:52:ab:7b:93:4f:f1:cc:e8:dc:d5:cb:98: 18:79:d4:7f:c9:50:09:29:86:0c:0c:6e:c4:43:83:75:8a:b9: 6a:1a:db:5b:b9:ec:0a:25:31:e5:6f:a2:65:4b:30:c1:60:29: 92:a7:8a:2e:ff:0e:79:1f:d7:35:87:d8:61:fc:a3:d8:7d:a2: 56:78:99:11:f9:3f:ab:7f:1e:96:76:9a:2a:eb:7f:e8:51:10: 19:96:57:99:c6:ed:2e:48:d0:f3:54:4e:f4:02:f4:3f:e9:41: ff:75:1d:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWF8YC8N4E58VhiccFmVNRoNKpvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkFEMEFENUNDNThGQjRCMzI3MTU2OUExNkM4MDVBNTNB QjRBMjcwRDAeFw0yNjA3MjQwNTMwMjhaFw0yNjA3MjUwNjA5MjhaMDMxMTAvBgNV BAMTKDBDRTlDOUZFNkQ1QTdFOTE2Njc3Rjc1QTgwMkYwRUJFQUUzMzc0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs0XMBYmmSRXdRV1CG054USZHO gL4yP+D9ekyxdwQIfaQTbT3HejXGMeGn6ONQNtBz8gTBBC6fkaP2mbtw5JUVypJg 1bdTyuMmJRImQdtzXiu3sed8ZeFz+DgYrg8bT8MH0JbQk7izL/RcNT/PbccgJNhA wkgYsCTZm8rvAeHqBHjirzcuO/ErWu9u6s4EsAYeMtgbRZP5l7jNNtAz/TeqvRs2 CUnInIwHlJVKO7n+udq3l/eR4QO/QnW1MwHqZ7pjnuHSGDOuYfgKau8zb1rYn3qI Q15RTk5TGBj/xz3you26IxYMjB8jMlV0T0zLYe1JvekCjFbvrN/JbnQqZftVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDOnJ/m1afpFmd/dagC8Ovq4zdOQwHwYDVR0j BBgwFoAU+tCtXMWPtLMnFWmhbIBaU6tKJw0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njc2MTQ1Mzk3MDQ1NjU3OC8wL0ZBRDBBRDVDQzU4RkI0QjMyNzE1NjlBMTZDODA1 QTUzQUI0QTI3MEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkFEMEFENUNDNThGQjRCMzI3MTU2OUExNkM4MDVBNTNBQjRBMjcwRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3NjE0NTM5NzA0NTY1NzgvMC9GQUQwQUQ1Q0M1OEZC NEIzMjcxNTY5QTE2QzgwNUE1M0FCNEEyNzBELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2718gkdo84C WgBOtBuvs25Xl95g4uuwlJLxU9IOLuz4Hgxvp5MlEWV06q3pR4VYFZn1g61VgEGt jLcudPArAv1Vvbe1J4j/Z4XK7eVV516uerpYRhW0DcXnmxehW+QDa7gx3QeFi5O6 //Vmv8UCJfkOlzocnJpZnATJMonoAN69kTuIUbe7jpu7MfubKMOoOVqMOvb0Uqt7 k0/xzOjc1cuYGHnUf8lQCSmGDAxuxEODdYq5ahrbW7nsCiUx5W+iZUswwWApkqeK Lv8OeR/XNYfYYfyj2H2iVniZEfk/q38elnaaKut/6FEQGZZXmcbtLkjQ81RO9AL0 P+lB/3Ud3g== -----END CERTIFICATE-----Generated at Fri Jul 24 22:19:55 2026 by rpki-client