$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft File: 954A5DC9B9563940C939DA5ED54F10318629C84D.mft (raw, json) Hash identifier: WU1zd6NcXqjeIA/1u7VZq3Bl7XZTHkleJWNS2zOI//E= Subject key identifier: 77:2E:3B:A1:C2:C3:0E:33:61:09:9C:A9:DB:0F:84:71:AF:FB:71:87 Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 4D07CEA0028C42FD228D2C33011FC70E447803C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft Manifest number: 0126 Signing time: Fri 28 Aug 2026 06:48:25 +0000 Manifest this update: Fri 28 Aug 2026 06:43:25 +0000 Manifest next update: Mon 31 Aug 2026 10:11:25 +0000 Files and hashes: 1: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (hash: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU=) 2: 954A5DC9B9563940C939DA5ED54F10318629C84D.crl (hash: IJ5UTrRvRTK5JTyXey4w2HNSXSRfyNoLY0D7snY9NlE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 10:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:07:ce:a0:02:8c:42:fd:22:8d:2c:33:01:1f:c7:0e:44:78:03:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: Aug 28 06:43:25 2026 GMT Not After : Aug 31 10:11:25 2026 GMT Subject: CN=772E3BA1C2C30E3361099CA9DB0F8471AFFB7187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:47:0f:39:5d:25:53:22:28:cb:a2:d4:e9:a4: b3:ff:98:6e:76:b0:9d:39:71:2a:f1:d9:a7:d5:6a: 92:ff:39:8c:d3:21:8d:47:82:3b:84:03:07:54:0d: b5:be:d2:7e:2d:8c:03:eb:e9:52:8e:37:bd:f2:f6: 59:f1:4a:c7:f2:86:78:e8:0b:bc:27:20:55:39:60: 2c:2c:04:70:66:0b:98:f6:23:5a:28:64:2d:32:a1: 90:e0:f5:08:4e:c0:62:c8:97:db:b4:0d:bb:50:fd: 5e:00:7d:dd:7b:23:be:f5:ef:43:50:38:3e:c3:b5: 9a:97:bf:c1:bd:b5:9f:8c:01:e4:2d:51:e4:fb:c3: ce:61:a1:a1:e3:38:80:34:5e:7b:09:1e:2f:e9:9f: 22:34:28:b3:d5:d3:7f:5a:f7:97:f3:e9:eb:b8:40: e3:74:69:5a:8f:ec:0c:41:02:39:00:09:e0:58:38: ec:b0:84:21:60:23:bb:87:ca:2f:08:ae:89:e4:e8: 3b:4c:32:42:a4:d6:7e:8d:ea:04:25:1f:f3:f7:18: 7d:48:ef:09:f8:bb:de:c3:ed:62:2c:82:b6:87:73: 05:8b:f5:95:09:92:f4:86:07:4e:63:9b:71:2c:aa: c9:26:e6:91:19:9d:9b:80:81:85:81:6e:9f:4d:3b: b1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2E:3B:A1:C2:C3:0E:33:61:09:9C:A9:DB:0F:84:71:AF:FB:71:87 X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0f:27:46:77:de:04:fe:af:1f:53:b7:09:36:81:a2:4b:10: 4f:a4:a3:99:69:1f:b8:90:2c:2b:f6:60:d3:a0:7b:a0:c9:f9: 47:43:e8:6a:eb:84:a5:90:73:be:fa:06:52:2a:f0:9b:86:65: 2f:aa:39:9d:d9:4d:67:34:2f:f5:18:99:85:09:96:36:9a:b8: e3:ce:38:f4:41:9b:73:7d:6c:8d:73:39:8f:88:ab:e9:8a:11: 9e:c8:5a:98:56:36:46:47:86:55:ad:20:3e:ee:df:0f:39:eb: 8e:94:2e:1c:bc:ae:12:1e:59:85:d4:d2:8d:7f:1b:08:0d:b1: 62:a7:9d:c4:8e:cb:ee:2a:c6:8a:cf:7b:7b:79:a0:35:31:2e: fb:ea:f7:c5:d5:b7:c2:cf:bd:41:61:f8:23:39:4d:9f:23:35: b2:89:db:8c:0d:c7:42:da:60:62:4d:dc:77:db:38:62:31:bd: 7c:1d:6f:ef:80:5a:ff:54:b3:7a:23:2a:90:6e:30:24:2f:69: 8e:0c:33:25:e7:76:3d:97:9e:e1:13:22:53:95:68:87:0a:5c: c5:4a:74:28:e1:47:69:48:ad:08:de:6f:e3:98:4c:1c:ad:7e: cd:93:f3:48:ee:34:30:a0:f1:18:dc:0c:a6:a9:0e:52:37:93: 55:dc:a3:44 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTQfOoAKMQv0ijSwzAR/HDkR4A8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjA4MjgwNjQzMjVaFw0yNjA4MzExMDExMjVaMDMxMTAvBgNV BAMTKDc3MkUzQkExQzJDMzBFMzM2MTA5OUNBOURCMEY4NDcxQUZGQjcxODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Rw85XSVTIijLotTppLP/mG52 sJ05cSrx2afVapL/OYzTIY1HgjuEAwdUDbW+0n4tjAPr6VKON73y9lnxSsfyhnjo C7wnIFU5YCwsBHBmC5j2I1ooZC0yoZDg9QhOwGLIl9u0DbtQ/V4Afd17I77170NQ OD7DtZqXv8G9tZ+MAeQtUeT7w85hoaHjOIA0XnsJHi/pnyI0KLPV039a95fz6eu4 QON0aVqP7AxBAjkACeBYOOywhCFgI7uHyi8Ironk6DtMMkKk1n6N6gQlH/P3GH1I 7wn4u97D7WIsgraHcwWL9ZUJkvSGB05jm3Esqskm5pEZnZuAgYWBbp9NO7EBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdy47ocLDDjNhCZyp2w+Eca/7cYcwHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5MTczMTQvMC85NTRBNURDOUI5NTYz OTQwQzkzOURBNUVENTRGMTAzMTg2MjlDODRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbw8nRnfeBP6v H1O3CTaBoksQT6SjmWkfuJAsK/Zg06B7oMn5R0PoauuEpZBzvvoGUirwm4ZlL6o5 ndlNZzQv9RiZhQmWNpq448449EGbc31sjXM5j4ir6YoRnshamFY2RkeGVa0gPu7f DznrjpQuHLyuEh5ZhdTSjX8bCA2xYqedxI7L7irGis97e3mgNTEu++r3xdW3ws+9 QWH4IzlNnyM1sonbjA3HQtpgYk3cd9s4YjG9fB1v74Ba/1SzeiMqkG4wJC9pjgwz Jed2PZee4RMiU5VohwpcxUp0KOFHaUitCN5v45hMHK1+zZPzSO40MKDxGNwMpqkO UjeTVdyjRA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:49 2026 by rpki-client