$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft File: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft (raw, json) Hash identifier: LaKnfvSldy/vNC2wmrQ5qECFHJ4pzdZmxJvLSNZbIDQ= Subject key identifier: 75:C9:D5:6D:7F:5D:86:37:FD:65:61:F7:99:D6:8B:60:A5:41:66:B7 Authority key identifier: FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA Certificate issuer: /CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Certificate serial: 4B4C9C24731BF0367B1E971B752809C84AB0470E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft Manifest number: 65 Signing time: Fri 24 Jul 2026 00:54:59 +0000 Manifest this update: Fri 24 Jul 2026 00:49:59 +0000 Manifest next update: Sat 25 Jul 2026 01:47:59 +0000 Files and hashes: 1: FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl (hash: h55iH3V4IspIPjQfpqELpCtoeKsm2/8ikmdHnzEQkKM=) 2: 3130332e3133352e3136342e302f32332d3233203d3e2034383038.roa (hash: pCJukIqUYrgHCj5Ju2oMUnrFjBuF4DtRmejZ+EtNDu0=) 3: 323430333a363734303a3a2f34382d3438203d3e2034383038.roa (hash: xVjIIll3PePJXngcsv3lCke4SgWX61LJmNnDtNzxkZU=) 4: 3130332e3133352e3136302e302f32322d3232203d3e2034383038.roa (hash: WbMaWG6apBa3pSCbnJ8kgOTdT0aFXm7oFZYtZD4puOQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4c:9c:24:73:1b:f0:36:7b:1e:97:1b:75:28:09:c8:4a:b0:47:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA453AF3F4AB166551FD4C322D5FD2384364BAEA Validity Not Before: Jul 24 00:49:59 2026 GMT Not After : Jul 25 01:47:59 2026 GMT Subject: CN=75C9D56D7F5D8637FD6561F799D68B60A54166B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:13:85:c0:06:b9:0c:de:17:9b:18:dc:ec: a2:55:10:02:bc:11:cd:99:63:f2:ce:c4:34:55:ad: fc:91:15:e6:83:9d:31:15:c8:76:22:8e:2f:bd:75: 32:4e:e0:00:42:29:3e:3f:5e:6e:88:fa:e0:0b:4e: cf:47:bb:8b:8d:f6:2d:18:cb:0c:f8:18:e9:51:98: 8f:d9:64:72:b6:0a:a2:21:cf:44:71:cd:fb:3b:de: 42:ba:9f:a7:16:d7:09:2e:65:94:fb:9f:77:a0:f4: 4e:69:d4:36:41:99:75:0a:cc:a0:69:23:82:ed:7c: e8:bf:2f:49:d6:db:ea:70:af:55:a6:c8:6c:b1:7e: 73:4b:77:c4:19:84:99:6d:d5:54:6b:e7:7a:02:d1: 71:d6:5c:a7:8b:ae:89:ce:ad:0e:87:ba:ee:6f:38: 73:aa:c2:83:73:31:2c:d0:a7:0b:4f:32:d5:e4:7b: a6:c7:74:d2:6c:a8:1a:71:d7:8c:fb:1d:97:13:29: d8:c7:3e:d4:51:e1:3e:48:61:8f:bb:88:cb:f2:e5: 72:53:ae:e5:60:75:39:c7:8a:f3:09:5a:82:d0:5c: 46:b4:42:ef:1b:34:85:55:1d:88:74:5e:c5:53:bf: 5f:3b:88:2f:87:e9:31:0b:fa:27:33:21:fc:66:db: 33:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C9:D5:6D:7F:5D:86:37:FD:65:61:F7:99:D6:8B:60:A5:41:66:B7 X509v3 Authority Key Identifier: keyid:FA:45:3A:F3:F4:AB:16:65:51:FD:4C:32:2D:5F:D2:38:43:64:BA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106055295731236875/0/FA453AF3F4AB166551FD4C322D5FD2384364BAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:49:cb:76:3e:82:ac:7d:54:bb:d2:6a:26:36:de:15:d6:9b: fe:03:dc:a7:9f:0d:b2:93:cc:ac:6f:79:4a:8a:74:d8:c3:ad: b5:a9:a5:9a:74:61:db:1e:38:88:45:6e:16:7f:58:9c:86:ff: aa:aa:58:66:22:a2:67:11:ad:64:ea:62:38:7b:27:f3:74:46: db:53:6c:3a:cd:6b:30:15:be:80:22:7a:da:7b:a0:24:d5:ae: ba:d4:d5:aa:ae:1b:16:8e:9f:b5:4d:ef:11:ee:39:f6:5b:60: ec:95:79:90:1c:ae:e3:d2:b9:c2:2b:87:96:1c:63:d5:71:4a: 01:ff:da:9f:76:99:3a:8b:7b:86:ad:d4:10:6e:e0:c2:f1:a9: 1a:73:1c:9f:02:b9:9f:81:b9:1f:cb:8d:29:cd:be:44:89:a5: 5f:cb:1e:ea:94:6f:ee:06:dd:6d:cd:5b:a6:8b:a8:21:75:06: 60:fe:de:75:55:7f:54:fd:66:f4:64:10:2e:e4:a3:1f:61:44: f6:c7:d0:60:eb:52:f6:62:a2:9b:18:35:f8:6c:f6:43:55:b9: 69:1c:13:40:76:5a:e5:d6:63:67:a1:7f:9f:b2:60:88:47:2b: dd:03:e9:64:be:e2:29:d8:2d:f1:92:25:5f:91:fe:27:ba:91: 28:9c:2a:24 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS0ycJHMb8DZ7HpcbdSgJyEqwRw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0 MzY0QkFFQTAeFw0yNjA3MjQwMDQ5NTlaFw0yNjA3MjUwMTQ3NTlaMDMxMTAvBgNV BAMTKDc1QzlENTZEN0Y1RDg2MzdGRDY1NjFGNzk5RDY4QjYwQTU0MTY2QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPBOFwAa5DN4Xmxjc7KJVEAK8 Ec2ZY/LOxDRVrfyRFeaDnTEVyHYiji+9dTJO4ABCKT4/Xm6I+uALTs9Hu4uN9i0Y ywz4GOlRmI/ZZHK2CqIhz0Rxzfs73kK6n6cW1wkuZZT7n3eg9E5p1DZBmXUKzKBp I4LtfOi/L0nW2+pwr1WmyGyxfnNLd8QZhJlt1VRr53oC0XHWXKeLronOrQ6Huu5v OHOqwoNzMSzQpwtPMtXke6bHdNJsqBpx14z7HZcTKdjHPtRR4T5IYY+7iMvy5XJT ruVgdTnHivMJWoLQXEa0Qu8bNIVVHYh0XsVTv187iC+H6TEL+iczIfxm2zNHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdcnVbX9dhjf9ZWH3mdaLYKVBZrcwHwYDVR0j BBgwFoAU+kU68/SrFmVR/UwyLV/SOENkuuowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjA1NTI5NTczMTIzNjg3NS8wL0ZBNDUzQUYzRjRBQjE2NjU1MUZENEMzMjJENUZE MjM4NDM2NEJBRUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkE0NTNBRjNGNEFCMTY2NTUxRkQ0QzMyMkQ1RkQyMzg0MzY0QkFFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYwNTUyOTU3MzEyMzY4NzUvMC9GQTQ1M0FGM0Y0QUIx NjY1NTFGRDRDMzIyRDVGRDIzODQzNjRCQUVBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUknLdj6CrH1U u9JqJjbeFdab/gPcp58NspPMrG95Sop02MOttamlmnRh2x44iEVuFn9YnIb/qqpY ZiKiZxGtZOpiOHsn83RG21NsOs1rMBW+gCJ62nugJNWuutTVqq4bFo6ftU3vEe45 9ltg7JV5kByu49K5wiuHlhxj1XFKAf/an3aZOot7hq3UEG7gwvGpGnMcnwK5n4G5 H8uNKc2+RImlX8se6pRv7gbdbc1bpouoIXUGYP7edVV/VP1m9GQQLuSjH2FE9sfQ YOtS9mKimxg1+Gz2Q1W5aRwTQHZa5dZjZ6F/n7JgiEcr3QPpZL7iKdgt8ZIlX5H+ J7qRKJwqJA== -----END CERTIFICATE-----Generated at Fri Jul 24 15:39:34 2026 by rpki-client