$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft File: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft (raw, json) Hash identifier: yvWJl0TRnyxybT08jbbzZSC2l1v6+ADtvHYl1szH+P0= Subject key identifier: 74:FF:5C:45:E5:07:6C:FA:3A:50:75:1D:A3:B9:51:39:77:E4:4C:2B Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A Certificate issuer: /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Certificate serial: 5832E04B4C35634C08BF9BE8E1C5FF46BE8618CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft Manifest number: 44 Signing time: Thu 23 Jul 2026 09:58:22 +0000 Manifest this update: Thu 23 Jul 2026 09:53:22 +0000 Manifest next update: Fri 24 Jul 2026 13:48:22 +0000 Files and hashes: 1: 3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa (hash: FXhv9P90uZTHbPWO0WwQi96WGpHYA4LPw6mGXuxuRKE=) 2: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl (hash: UyWHBmkyCj/YAOkoqa+dPA17YJh47dQyiaMBr+kHV/Y=) 3: 3231382e3234302e3138342e302f32342d3234203d3e2034383038.roa (hash: 8W97xzHc9MQctO7ZNjByi6LZvr1KI8kDZ7yXZdszjxI=) 4: 3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa (hash: jJXMVgde2pxbfq2NcR3+ZwHj4k6TJr3LdkEaBURBLXc=) 5: 3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa (hash: Oerta/6FyO4G7xGB/2MOZsxBA07vpNkvtKeF+Hda6yU=) 6: 3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa (hash: ZZ0ylrxDB0RtarHxxpZzISxuiZqcj7poY8afyFg+hwM=) 7: 3231382e3234302e3138312e302f32342d3234203d3e203435303538.roa (hash: StpUKUs1rVFrd/wGnvAcrta3zI5qiSifu4/J6otxOY8=) 8: 3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa (hash: Cni/r/Zja/reOMYwwWQACpwTbRJuZT4t4DhHsOzNIAY=) 9: 3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa (hash: W1PuJ+HbUt/iBs+gWvlRS8Ed7W25ywxjxjnRjdpuULE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:32:e0:4b:4c:35:63:4c:08:bf:9b:e8:e1:c5:ff:46:be:86:18:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Validity Not Before: Jul 23 09:53:22 2026 GMT Not After : Jul 24 13:48:22 2026 GMT Subject: CN=74FF5C45E5076CFA3A50751DA3B9513977E44C2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:50:fa:f9:fd:af:bc:3b:c4:cf:39:cb:60:d8: fc:1f:46:4a:fd:be:06:63:e6:bf:39:96:38:64:b0: fa:4c:92:8d:52:4e:d7:d1:7a:5f:37:89:90:70:77: b0:0f:40:cb:93:17:c5:65:42:49:d8:27:a9:19:24: 2d:6a:89:6e:d7:32:71:c7:ae:09:5a:48:fe:c8:b8: 9b:cd:dc:68:9b:a2:ac:a4:5c:2e:d3:06:49:76:0e: 1a:dc:e8:92:f6:90:6d:8d:b0:2a:db:6e:eb:77:3d: 04:bf:c3:69:0b:98:94:84:4b:20:2a:7c:f2:b3:20: 2c:91:30:c6:29:ff:4e:7c:76:5e:82:9c:71:d3:3d: 82:41:fa:56:d6:42:bd:c7:ab:74:c5:74:50:29:a4: e8:02:4f:76:fd:8c:b2:92:7b:24:eb:e3:54:73:be: 24:7f:0b:c4:42:b1:0f:3e:06:30:55:9e:72:93:bb: ca:d2:e1:fc:37:51:57:59:88:e5:73:6f:d8:a3:29: 0b:02:4d:25:b6:c6:55:4f:73:8d:97:b0:9b:8f:90: 95:e1:f1:c8:73:8d:50:d1:e7:c3:f6:a6:17:c5:d3: b5:0d:56:ae:e7:70:7c:f1:ae:96:2b:0c:2f:d0:a4: 09:7f:d3:48:1a:18:56:cd:58:21:35:62:76:b6:9e: a2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FF:5C:45:E5:07:6C:FA:3A:50:75:1D:A3:B9:51:39:77:E4:4C:2B X509v3 Authority Key Identifier: keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f2:fb:b6:34:18:4d:db:1f:1f:b0:73:05:6b:e0:66:b2:ca: 5b:3a:6b:fe:00:ff:8e:07:9e:90:6c:3a:0e:c9:0a:ed:b2:8d: e0:28:78:1f:6b:aa:29:3a:3c:94:a7:00:67:3b:e5:df:89:c8: cc:6a:ae:98:4e:c2:5a:9a:a5:00:9f:41:17:82:d9:3f:b5:ab: 53:80:ce:fe:ec:37:45:f1:c2:ee:e2:eb:80:19:31:8b:4b:f7: e7:31:67:d5:15:9d:4d:e9:3f:e9:31:6d:bb:73:30:af:8b:76: 2e:a7:1a:3c:78:4b:37:59:25:63:15:e3:00:a4:fd:aa:7f:ab: 26:b2:dc:0d:56:15:b3:7f:3e:2b:90:f5:dd:cb:11:f8:f4:1f: 70:79:d4:dd:47:b7:37:c2:d9:c2:5e:1f:c3:6c:e6:35:49:1f: 5b:39:0a:b2:56:e2:6f:ab:bf:65:66:d0:38:c7:fd:e3:d5:4b: 47:81:ca:b0:46:8c:ef:6b:81:7a:36:6f:d2:3f:a2:4b:7e:e0: 22:d8:72:6b:00:b5:0d:8b:fa:25:94:e7:42:52:9a:88:da:76: b4:39:20:5b:0f:88:19:69:d1:0f:c1:1d:62:6c:b3:bd:15:d1: b2:dc:7a:42:61:bc:88:0b:f3:3c:a9:06:26:b6:d1:f2:61:80: bf:98:0c:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWDLgS0w1Y0wIv5vo4cX/Rr6GGMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4 QzgzRkY2QTAeFw0yNjA3MjMwOTUzMjJaFw0yNjA3MjQxMzQ4MjJaMDMxMTAvBgNV BAMTKDc0RkY1QzQ1RTUwNzZDRkEzQTUwNzUxREEzQjk1MTM5NzdFNDRDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkUPr5/a+8O8TPOctg2PwfRkr9 vgZj5r85ljhksPpMko1STtfRel83iZBwd7APQMuTF8VlQknYJ6kZJC1qiW7XMnHH rglaSP7IuJvN3GiboqykXC7TBkl2Dhrc6JL2kG2NsCrbbut3PQS/w2kLmJSESyAq fPKzICyRMMYp/058dl6CnHHTPYJB+lbWQr3Hq3TFdFAppOgCT3b9jLKSeyTr41Rz viR/C8RCsQ8+BjBVnnKTu8rS4fw3UVdZiOVzb9ijKQsCTSW2xlVPc42XsJuPkJXh 8chzjVDR58P2phfF07UNVq7ncHzxrpYrDC/QpAl/00gaGFbNWCE1Yna2nqJ7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdP9cReUHbPo6UHUdo7lROXfkTCswHwYDVR0j BBgwFoAU/NxSLCl3pCwOGpkgQPWEDIyD/2owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0NjU4OTY4OTUyODM0Ny8wL0ZDREM1MjJDMjk3N0E0MkMwRTFBOTkyMDQwRjU4 NDBDOEM4M0ZGNkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4QzgzRkY2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDY1ODk2ODk1MjgzNDcvMC9GQ0RDNTIyQzI5NzdB NDJDMEUxQTk5MjA0MEY1ODQwQzhDODNGRjZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfL7tjQYTdsf H7BzBWvgZrLKWzpr/gD/jgeekGw6DskK7bKN4Ch4H2uqKTo8lKcAZzvl34nIzGqu mE7CWpqlAJ9BF4LZP7WrU4DO/uw3RfHC7uLrgBkxi0v35zFn1RWdTek/6TFtu3Mw r4t2LqcaPHhLN1klYxXjAKT9qn+rJrLcDVYVs38+K5D13csR+PQfcHnU3Ue3N8LZ wl4fw2zmNUkfWzkKslbib6u/ZWbQOMf949VLR4HKsEaM72uBejZv0j+iS37gIthy awC1DYv6JZTnQlKaiNp2tDkgWw+IGWnRD8EdYmyzvRXRstx6QmG8iAvzPKkGJrbR 8mGAv5gM0g== -----END CERTIFICATE-----Generated at Fri Jul 24 03:27:25 2026 by rpki-client