$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft File: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft (raw, json) Hash identifier: mO07nZfV2W4ZuWjbRAe0F85sK1dAWZWwMU7IocWcGG0= Subject key identifier: DD:63:F9:FD:97:CA:83:37:26:77:70:15:14:51:90:B6:1D:4B:31:DE Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A Certificate issuer: /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Certificate serial: 59C21F7BBDD7A8C38DC1D4FBBF53B6374CCD5453 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft Manifest number: 81 Signing time: Sat 26 Sep 2026 10:18:35 +0000 Manifest this update: Sat 26 Sep 2026 10:13:35 +0000 Manifest next update: Tue 29 Sep 2026 13:04:35 +0000 Files and hashes: 1: 3231382e3234302e3136302e302f32322d3232203d3e2034383038.roa (hash: jJXMVgde2pxbfq2NcR3+ZwHj4k6TJr3LdkEaBURBLXc=) 2: FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl (hash: ScV9xIYVjZc2bDCx143FQdTKDpSG9quq98JJ9gh3FiU=) 3: 3231382e3234302e3138302e302f32342d3234203d3e203435303538.roa (hash: ZZ0ylrxDB0RtarHxxpZzISxuiZqcj7poY8afyFg+hwM=) 4: 3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa (hash: Oerta/6FyO4G7xGB/2MOZsxBA07vpNkvtKeF+Hda6yU=) 5: 3231382e3234302e3138342e302f32342d3234203d3e2034383038.roa (hash: 8W97xzHc9MQctO7ZNjByi6LZvr1KI8kDZ7yXZdszjxI=) 6: 3231382e3234302e3132382e302f31392d3139203d3e203233373234.roa (hash: W1PuJ+HbUt/iBs+gWvlRS8Ed7W25ywxjxjnRjdpuULE=) 7: 3231382e3234302e3138332e302f32342d3234203d3e203435303538.roa (hash: Cni/r/Zja/reOMYwwWQACpwTbRJuZT4t4DhHsOzNIAY=) 8: 3231382e3234302e3137362e302f32342d3234203d3e203435303538.roa (hash: FXhv9P90uZTHbPWO0WwQi96WGpHYA4LPw6mGXuxuRKE=) 9: 3231382e3234302e3138312e302f32342d3234203d3e203435303538.roa (hash: StpUKUs1rVFrd/wGnvAcrta3zI5qiSifu4/J6otxOY8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 13:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c2:1f:7b:bd:d7:a8:c3:8d:c1:d4:fb:bf:53:b6:37:4c:cd:54:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Validity Not Before: Sep 26 10:13:35 2026 GMT Not After : Sep 29 13:04:35 2026 GMT Subject: CN=DD63F9FD97CA833726777015145190B61D4B31DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ab:d4:5f:ef:5b:90:48:0f:48:a4:7b:b3:18: 45:aa:96:a2:7e:8c:7a:d3:ee:77:80:06:05:4f:f7: 6d:42:bd:2e:e0:0d:e9:0a:f3:68:b9:83:e8:8c:b4: 16:28:a1:89:99:19:7c:47:44:88:f1:ea:e3:ca:2e: 9d:e4:7f:b8:82:37:3d:cf:c7:78:4d:cd:06:48:1f: 8b:7d:0b:47:38:db:3a:3a:ce:2d:84:82:e4:e1:80: 3e:63:a4:dc:ff:fe:42:4f:c3:7e:c8:18:30:af:4e: 93:62:c4:9b:57:51:b1:a6:e5:a0:e5:2f:07:10:da: 51:45:ca:f4:9c:34:4c:0a:d0:5a:87:8b:15:2a:35: 33:1b:a5:a1:6a:84:f4:55:34:79:33:cb:55:53:6e: 0a:12:e1:00:35:a8:1e:94:41:40:d9:e6:6a:ba:ba: a2:92:27:66:03:14:e3:b1:12:3d:b8:41:0e:c1:ea: 16:5e:c2:10:e8:c9:82:53:b4:66:58:e4:8d:9e:48: 45:4d:ed:47:20:b7:87:ce:88:9e:7f:fe:15:29:5e: 9d:ca:54:8c:79:6b:64:81:13:fc:23:17:f5:98:64: d9:1f:04:7f:7e:51:44:40:c1:97:cd:44:e1:db:09: 42:39:10:5b:10:80:04:0a:90:16:d7:61:40:fa:7b: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:63:F9:FD:97:CA:83:37:26:77:70:15:14:51:90:B6:1D:4B:31:DE X509v3 Authority Key Identifier: keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a4:45:60:4d:2f:c0:e8:ec:f5:29:04:90:92:a0:44:f7:61: be:a6:9d:59:6b:59:35:bc:c5:96:b3:8b:60:7d:6d:4a:d4:4a: 88:37:94:b5:3f:3e:41:75:4a:a5:63:20:00:f2:f7:58:b8:d3: 98:d2:58:19:8f:7a:dd:f2:6a:9f:93:75:2f:f0:f9:21:ed:9e: d1:7e:6d:96:87:df:21:e9:16:cf:95:51:f3:0e:39:50:51:13: 4b:4a:f8:7e:77:ab:83:12:32:46:96:1e:39:60:ac:ee:c0:a8: f7:c0:9a:7b:10:0d:6c:b2:30:d4:eb:b0:52:69:62:ab:ac:04: fc:f5:29:a6:ee:75:9e:d7:cb:c0:5f:47:d6:ea:27:ae:91:79: 87:06:77:9e:73:4e:9b:da:2d:b1:13:a5:79:15:58:8b:81:82: e0:07:cc:20:b3:30:c6:75:d3:66:51:c1:48:79:46:a3:92:19: 5b:2d:94:eb:51:5d:b0:0e:44:24:18:fa:73:8f:be:76:fa:a8: ff:11:4d:3e:a7:c6:75:d3:4c:d9:96:06:4d:45:d0:46:58:fe: 93:0b:5a:2b:af:0a:33:76:b6:b1:79:fa:85:5c:e8:e4:c6:a7: b9:10:8e:04:a0:b8:5a:d4:0d:ec:af:c9:f7:34:62:6d:3e:8d: 6e:25:eb:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWcIfe73XqMONwdT7v1O2N0zNVFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4 QzgzRkY2QTAeFw0yNjA5MjYxMDEzMzVaFw0yNjA5MjkxMzA0MzVaMDMxMTAvBgNV BAMTKERENjNGOUZEOTdDQTgzMzcyNjc3NzAxNTE0NTE5MEI2MUQ0QjMxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzq9Rf71uQSA9IpHuzGEWqlqJ+ jHrT7neABgVP921CvS7gDekK82i5g+iMtBYooYmZGXxHRIjx6uPKLp3kf7iCNz3P x3hNzQZIH4t9C0c42zo6zi2EguThgD5jpNz//kJPw37IGDCvTpNixJtXUbGm5aDl LwcQ2lFFyvScNEwK0FqHixUqNTMbpaFqhPRVNHkzy1VTbgoS4QA1qB6UQUDZ5mq6 uqKSJ2YDFOOxEj24QQ7B6hZewhDoyYJTtGZY5I2eSEVN7Ucgt4fOiJ5//hUpXp3K VIx5a2SBE/wjF/WYZNkfBH9+UURAwZfNROHbCUI5EFsQgAQKkBbXYUD6e9WtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3WP5/ZfKgzcmd3AVFFGQth1LMd4wHwYDVR0j BBgwFoAU/NxSLCl3pCwOGpkgQPWEDIyD/2owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0NjU4OTY4OTUyODM0Ny8wL0ZDREM1MjJDMjk3N0E0MkMwRTFBOTkyMDQwRjU4 NDBDOEM4M0ZGNkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4QzgzRkY2QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDY1ODk2ODk1MjgzNDcvMC9GQ0RDNTIyQzI5NzdB NDJDMEUxQTk5MjA0MEY1ODQwQzhDODNGRjZBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaRFYE0vwOjs 9SkEkJKgRPdhvqadWWtZNbzFlrOLYH1tStRKiDeUtT8+QXVKpWMgAPL3WLjTmNJY GY963fJqn5N1L/D5Ie2e0X5tloffIekWz5VR8w45UFETS0r4fnergxIyRpYeOWCs 7sCo98CaexANbLIw1OuwUmliq6wE/PUppu51ntfLwF9H1uonrpF5hwZ3nnNOm9ot sROleRVYi4GC4AfMILMwxnXTZlHBSHlGo5IZWy2U61FdsA5EJBj6c4++dvqo/xFN PqfGddNM2ZYGTUXQRlj+kwtaK68KM3a2sXn6hVzo5ManuRCOBKC4WtQN7K/J9zRi bT6NbiXrrg== -----END CERTIFICATE-----Generated at Sat Sep 26 15:03:07 2026 by rpki-client