$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft File: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft (raw, json) Hash identifier: WRqQYRYbT/iCwZra+JxRTr0jDY5d+RAKUz/HBR4i3hE= Subject key identifier: 93:AA:E8:E7:9A:2D:A3:E0:87:7D:A8:9E:3F:13:A9:34:1A:DB:30:DD Authority key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA Certificate issuer: /CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Certificate serial: 462BBBB743EBD11A764119450699A3B9DC2D82F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft Manifest number: 05 Signing time: Wed 13 May 2026 08:31:02 +0000 Manifest this update: Wed 13 May 2026 08:26:02 +0000 Manifest next update: Thu 14 May 2026 10:04:02 +0000 Files and hashes: 1: 3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa (hash: pCJukIqUYrgHCj5Ju2oMUnrFjBuF4DtRmejZ+EtNDu0=) 2: 323430333a363734303a3a2f34382d3438203d3e2034383038.roa (hash: xVjIIll3PePJXngcsv3lCke4SgWX61LJmNnDtNzxkZU=) 3: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl (hash: X4osMg4smkbfSGJ1wSUEqMkpCbKP0qVtcDGQ4uzVHjI=) 4: 3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa (hash: WbMaWG6apBa3pSCbnJ8kgOTdT0aFXm7oFZYtZD4puOQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:2b:bb:b7:43:eb:d1:1a:76:41:19:45:06:99:a3:b9:dc:2d:82:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Validity Not Before: May 13 08:26:02 2026 GMT Not After : May 14 10:04:02 2026 GMT Subject: CN=93AAE8E79A2DA3E0877DA89E3F13A9341ADB30DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b3:c6:b5:26:6b:56:e3:db:91:e4:f9:7b:8a: b3:ce:c1:a8:dd:e6:ed:40:0b:b0:7d:7c:55:ec:f2: 92:cf:b2:03:a4:77:03:d2:16:a9:93:83:4f:b3:d2: 9d:a2:75:40:a8:0a:ef:e5:7e:d9:27:cd:8a:cf:a0: 80:2c:5e:55:2d:98:ab:b1:8b:d9:6f:47:18:24:fe: ed:80:95:9e:7f:11:bc:b4:f2:e4:e7:07:e1:4a:48: ac:27:e3:9a:05:ca:89:c2:3b:f2:ee:46:08:a3:ef: 7b:64:78:53:9b:40:08:07:a8:55:d1:c7:2c:4c:e1: 01:cc:ea:53:c8:a6:c4:37:64:d0:6f:33:bf:e0:cf: 80:58:4a:2d:be:eb:42:06:d8:95:83:b3:6b:95:64: 88:8e:af:37:2f:2e:f7:3e:a9:77:33:a4:20:dc:19: 32:e7:1b:4a:87:d9:ba:c3:41:44:e7:12:eb:14:c0: 90:77:34:34:7c:a8:92:2e:8b:08:d6:5c:bf:2f:2d: 01:bc:7a:c7:a6:a9:c6:9a:a6:5c:30:45:55:0f:12: 91:39:67:17:cc:90:37:6b:8b:9f:42:8f:54:d1:ca: b9:6d:29:15:b7:a2:dd:ee:1d:17:c6:14:b5:ed:22: fe:6d:f8:5d:a8:10:07:2e:84:0d:65:c8:8e:9a:94: ff:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AA:E8:E7:9A:2D:A3:E0:87:7D:A8:9E:3F:13:A9:34:1A:DB:30:DD X509v3 Authority Key Identifier: keyid:FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a5:01:f0:82:69:9f:36:92:41:8e:4e:a9:6b:06:6b:56:87: 1a:25:13:ba:37:8b:e8:92:bd:57:2c:e6:39:4d:c6:f8:e5:40: 18:eb:96:66:a4:50:96:d6:c6:6d:f7:1b:26:02:3f:5f:ce:67: 60:98:ad:46:e2:ce:9e:db:68:31:c8:88:8c:8b:4d:92:30:94: 34:57:f7:11:bf:88:99:76:5a:23:1b:94:03:42:23:9b:0d:aa: 2a:d8:8c:1d:bd:43:83:ce:01:6b:ef:bc:9a:d3:af:a2:74:16: 6f:ae:ee:5c:28:e5:5e:90:05:d6:2d:37:73:cb:ae:4b:41:3d: ff:96:0b:af:d3:1a:46:6e:f7:77:75:09:a0:8c:6e:86:6c:ee: 58:14:b7:c1:cd:32:5c:6d:a0:e1:cd:94:4e:91:72:6d:b6:0c: be:16:ad:b2:e7:bb:02:a3:1d:d3:ef:72:f7:b5:bf:eb:66:ff: 6f:65:0c:be:e6:98:42:12:6b:65:a3:07:98:f2:0e:10:fa:19: ba:16:0a:16:4b:26:5d:2b:fa:9a:b5:ae:0c:3b:de:9b:f5:4e: 95:fc:aa:25:34:30:a2:bd:f5:47:01:fc:3f:4f:0c:12:27:1a: 24:5a:74:92:76:23:32:7a:32:fc:ab:59:ef:7b:ca:b7:a3:dd: 69:83:1a:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURiu7t0Pr0Rp2QRlFBpmjudwtgvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0 MzY0QkFFQTAeFw0yNjA1MTMwODI2MDJaFw0yNjA1MTQxMDA0MDJaMDMxMTAvBgNV BAMTKDkzQUFFOEU3OUEyREEzRTA4NzdEQTg5RTNGMTNBOTM0MUFEQjMwREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWs8a1JmtW49uR5Pl7irPOwajd 5u1AC7B9fFXs8pLPsgOkdwPSFqmTg0+z0p2idUCoCu/lftknzYrPoIAsXlUtmKux i9lvRxgk/u2AlZ5/Eby08uTnB+FKSKwn45oFyonCO/LuRgij73tkeFObQAgHqFXR xyxM4QHM6lPIpsQ3ZNBvM7/gz4BYSi2+60IG2JWDs2uVZIiOrzcvLvc+qXczpCDc GTLnG0qH2brDQUTnEusUwJB3NDR8qJIuiwjWXL8vLQG8esemqcaaplwwRVUPEpE5 ZxfMkDdri59Cj1TRyrltKRW3ot3uHRfGFLXtIv5t+F2oEAcuhA1lyI6alP89AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk6ro55oto+CHfaiePxOpNBrbMN0wHwYDVR0j BBgwFoAU+kU68/SrFmVR/UwyLV/SOENkuuowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1NTI5NTczMTIzNjg3NS8wL0ZBNDUzQUYzRjRBQjE2NjU1MUZENEMzMjJENUZE MjM4NDM2NEJBRUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0MzY0QkFFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTUyOTU3MzEyMzY4NzUvMC9GQTQ1M0FGM0Y0QUIx NjY1NTFGRDRDMzIyRDVGRDIzODQzNjRCQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6UB8IJpnzaS QY5OqWsGa1aHGiUTujeL6JK9VyzmOU3G+OVAGOuWZqRQltbGbfcbJgI/X85nYJit RuLOnttoMciIjItNkjCUNFf3Eb+ImXZaIxuUA0Ijmw2qKtiMHb1Dg84Ba++8mtOv onQWb67uXCjlXpAF1i03c8uuS0E9/5YLr9MaRm73d3UJoIxuhmzuWBS3wc0yXG2g 4c2UTpFybbYMvhatsue7AqMd0+9y97W/62b/b2UMvuaYQhJrZaMHmPIOEPoZuhYK FksmXSv6mrWuDDvem/VOlfyqJTQwor31RwH8P08MEicaJFp0knYjMnoy/KtZ73vK t6PdaYMapg== -----END CERTIFICATE-----Generated at Wed May 13 12:40:27 2026 by rpki-client