$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft File: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft (raw, json) Hash identifier: gzhIA1sRF2QqZsTj10P3WM7hAj6zNIeeUpGgKPLhMGs= Subject key identifier: B1:20:A5:67:84:4C:DB:83:AF:C5:B3:04:89:16:09:D0:BE:1B:B2:BA Authority key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA Certificate issuer: /CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Certificate serial: 703B04B37BEB01A742A27F810F1FCCB031FBE34C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft Manifest number: A3 Signing time: Sun 27 Sep 2026 12:19:54 +0000 Manifest this update: Sun 27 Sep 2026 12:14:54 +0000 Manifest next update: Wed 30 Sep 2026 21:24:54 +0000 Files and hashes: 1: 3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa (hash: pCJukIqUYrgHCj5Ju2oMUnrFjBuF4DtRmejZ+EtNDu0=) 2: 3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa (hash: WbMaWG6apBa3pSCbnJ8kgOTdT0aFXm7oFZYtZD4puOQ=) 3: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl (hash: ZLptmAJtzckIAJZBOJ58AknuD4TBXn44q60/krt1LW0=) 4: 323430333a363734303a3a2f34382d3438203d3e2034383038.roa (hash: xVjIIll3PePJXngcsv3lCke4SgWX61LJmNnDtNzxkZU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 21:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:3b:04:b3:7b:eb:01:a7:42:a2:7f:81:0f:1f:cc:b0:31:fb:e3:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Validity Not Before: Sep 27 12:14:54 2026 GMT Not After : Sep 30 21:24:54 2026 GMT Subject: CN=B120A567844CDB83AFC5B304891609D0BE1BB2BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:3e:2f:19:ca:9d:0e:f5:8c:94:4f:da:b5: bf:db:64:f0:40:e4:11:86:72:c5:80:b2:2a:77:c1: 64:2d:26:61:5e:a0:a4:e3:55:d7:3e:90:34:9c:48: e7:8b:7d:a6:98:e5:77:f6:1f:ad:8e:44:90:ec:6c: 17:dd:53:87:7a:0b:93:19:ba:88:f5:64:0e:05:ca: c5:65:2b:5f:a4:e0:63:e0:41:b1:72:25:23:f5:43: d4:03:44:ba:c3:54:96:f1:8c:b0:de:01:d1:74:e3: ea:c6:bf:a0:e2:b8:7f:a8:42:9f:c8:6a:e6:2f:45: 24:16:e1:81:90:26:4c:0f:23:76:40:75:49:92:68: fd:ea:91:ff:22:f0:81:d7:40:49:4b:2a:75:d1:8d: 8c:98:c4:9e:a8:a2:aa:52:09:11:39:6d:e7:3e:9c: d4:f5:49:cb:5e:73:45:04:31:6d:8b:fb:9b:85:dd: 90:ed:fe:31:2d:b3:10:60:c4:58:0a:d0:1d:f0:d9: 87:dd:9a:3e:91:8c:7d:22:ef:5d:a9:e6:94:3f:58: 42:af:aa:0c:ea:28:88:9b:95:f7:92:b5:43:37:2a: 10:56:0f:f0:50:1c:d8:4e:f5:50:6f:bf:c6:68:fb: 68:fe:ed:e0:c1:8b:35:d7:ae:be:c8:35:c0:ea:62: 08:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:20:A5:67:84:4C:DB:83:AF:C5:B3:04:89:16:09:D0:BE:1B:B2:BA X509v3 Authority Key Identifier: keyid:FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b7:6f:bf:8e:e2:3a:b5:78:6b:6f:0a:11:12:64:f3:79:f7: c8:5b:83:70:ce:57:be:86:1d:1a:23:26:0f:00:36:db:9b:7d: cd:f4:41:f5:7c:ba:42:47:ad:e4:80:f8:de:11:75:19:75:f9: 4f:b1:ba:a9:c8:6e:d8:1d:45:a7:e1:9a:0a:5f:50:9d:a9:54: 1e:6c:9a:bd:80:8c:a2:a4:4a:34:31:52:9b:5a:a3:2a:33:f9: 9a:af:af:39:98:ac:21:b4:0e:4c:bb:48:b9:57:5d:52:d1:5d: 49:06:1b:cb:6b:d3:8f:eb:8c:88:e9:e3:c0:21:b9:94:88:f4: d6:9f:09:8d:7a:b3:21:2d:8d:67:53:24:4c:04:73:c2:2c:7e: ec:48:5f:07:b0:e2:aa:98:1b:79:50:96:97:30:c8:d0:96:bf: a1:95:d2:a8:07:d3:3b:81:4d:3a:96:51:1f:6f:ab:60:5a:ff: 1b:72:89:9b:84:6f:4a:5e:a5:84:cd:9a:8f:dc:c1:c5:4f:0a: 6f:55:18:b4:df:db:55:34:2c:8c:1d:31:87:35:22:af:25:b5: da:6e:7b:38:27:a3:6e:e3:35:dd:92:08:9f:ce:cd:1f:6e:b7: 1f:75:73:b3:0d:7a:87:99:64:2a:ce:74:83:aa:76:8e:dc:7e: 72:02:31:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcDsEs3vrAadCon+BDx/MsDH740wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0 MzY0QkFFQTAeFw0yNjA5MjcxMjE0NTRaFw0yNjA5MzAyMTI0NTRaMDMxMTAvBgNV BAMTKEIxMjBBNTY3ODQ0Q0RCODNBRkM1QjMwNDg5MTYwOUQwQkUxQkIyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0XT4vGcqdDvWMlE/atb/bZPBA 5BGGcsWAsip3wWQtJmFeoKTjVdc+kDScSOeLfaaY5Xf2H62ORJDsbBfdU4d6C5MZ uoj1ZA4FysVlK1+k4GPgQbFyJSP1Q9QDRLrDVJbxjLDeAdF04+rGv6DiuH+oQp/I auYvRSQW4YGQJkwPI3ZAdUmSaP3qkf8i8IHXQElLKnXRjYyYxJ6ooqpSCRE5bec+ nNT1Sctec0UEMW2L+5uF3ZDt/jEtsxBgxFgK0B3w2Yfdmj6RjH0i712p5pQ/WEKv qgzqKIiblfeStUM3KhBWD/BQHNhO9VBvv8Zo+2j+7eDBizXXrr7INcDqYgjZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsSClZ4RM24OvxbMEiRYJ0L4bsrowHwYDVR0j BBgwFoAU+kU68/SrFmVR/UwyLV/SOENkuuowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1NTI5NTczMTIzNjg3NS8wL0ZBNDUzQUYzRjRBQjE2NjU1MUZENEMzMjJENUZE MjM4NDM2NEJBRUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0MzY0QkFFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTUyOTU3MzEyMzY4NzUvMC9GQTQ1M0FGM0Y0QUIx NjY1NTFGRDRDMzIyRDVGRDIzODQzNjRCQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArdvv47iOrV4 a28KERJk83n3yFuDcM5XvoYdGiMmDwA225t9zfRB9Xy6Qket5ID43hF1GXX5T7G6 qchu2B1Fp+GaCl9QnalUHmyavYCMoqRKNDFSm1qjKjP5mq+vOZisIbQOTLtIuVdd UtFdSQYby2vTj+uMiOnjwCG5lIj01p8JjXqzIS2NZ1MkTARzwix+7EhfB7Diqpgb eVCWlzDI0Ja/oZXSqAfTO4FNOpZRH2+rYFr/G3KJm4RvSl6lhM2aj9zBxU8Kb1UY tN/bVTQsjB0xhzUiryW12m57OCejbuM13ZIIn87NH263H3Vzsw16h5lkKs50g6p2 jtx+cgIxuA== -----END CERTIFICATE-----Generated at Tue Sep 29 19:18:19 2026 by rpki-client