$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft File: 954A5DC9B9563940C939DA5ED54F10318629C84D.mft (raw, json) Hash identifier: lR8CmjTedH+wRuZp5q/mBC1mp5omQ3XdLBtcwc+3XtA= Subject key identifier: E9:1D:05:BC:79:E7:BD:13:39:3D:62:39:41:56:FC:1F:8B:A1:F1:C0 Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 75A85BE4CAF5F318B9206266FF619F523E464692 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 06:49:17 +0000 Manifest this update: Mon 13 Apr 2026 06:44:17 +0000 Manifest next update: Tue 14 Apr 2026 07:34:17 +0000 Files and hashes: 1: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (hash: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU=) 2: 954A5DC9B9563940C939DA5ED54F10318629C84D.crl (hash: 2SBqRp6mPoiDPC1IMFDcIvtVi34qyCgpdAw8cHPArfs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a8:5b:e4:ca:f5:f3:18:b9:20:62:66:ff:61:9f:52:3e:46:46:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: Apr 13 06:44:17 2026 GMT Not After : Apr 14 07:34:17 2026 GMT Subject: CN=E91D05BC79E7BD13393D62394156FC1F8BA1F1C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f0:ed:db:ba:ab:9e:9a:0c:ab:14:fe:91:33: dd:0a:a0:39:5d:83:98:10:33:a8:04:88:ad:e1:ae: 83:e2:aa:21:88:dc:49:f1:57:d0:c3:3b:7f:99:56: a6:e1:16:e5:b9:40:85:e8:c3:37:da:1f:7c:89:91: b4:53:11:9e:85:8b:e6:19:9f:85:95:b4:40:f2:33: 79:da:5f:ee:4c:44:37:dd:76:a0:c7:ec:e3:97:18: 67:00:cf:77:a4:9b:c7:dd:11:11:d0:ac:79:ef:62: d6:8a:72:84:b6:f5:63:de:b4:0c:13:f2:2a:8f:ca: 3a:14:14:12:28:d7:41:4f:85:81:c4:a6:38:91:a9: 9f:d8:2f:0a:2e:7c:b5:93:64:8f:35:a3:d8:f1:cd: 76:bf:13:95:58:d2:fc:ca:09:0c:5f:6f:1f:3d:59: e8:47:18:13:7a:0f:0a:74:ad:9f:21:64:6a:e5:27: b7:df:2b:1f:cd:b2:76:48:8a:3a:0c:5f:7d:d6:f5: 34:e6:58:8e:b3:bf:30:c6:20:b4:73:e4:bc:33:3a: 0d:0b:bf:bd:7e:7a:aa:96:eb:07:7e:5b:63:60:cb: 64:f1:26:eb:aa:c5:30:65:66:14:ee:df:9b:79:ee: 3e:3f:3f:a5:92:6e:35:44:af:24:f4:66:96:58:e9: 3e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1D:05:BC:79:E7:BD:13:39:3D:62:39:41:56:FC:1F:8B:A1:F1:C0 X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:36:ca:55:f5:11:3b:c9:78:14:79:24:51:5e:be:bb:be:9e: 8f:11:f9:63:e3:8f:ed:79:b6:03:49:ff:fd:10:04:aa:b6:c9: b1:07:69:0d:d4:cd:ce:ab:ef:3f:27:76:e6:a2:88:d5:2f:2a: 02:c3:9a:f3:34:86:9b:e7:73:d5:ae:4d:bd:ad:3f:91:e3:88: 5b:f2:27:b0:28:0a:f3:4d:9d:26:23:b8:11:56:b6:a0:50:cd: 80:33:8f:a3:27:c8:ea:2d:7b:3f:13:6c:32:6c:a4:80:67:7a: 30:6c:a3:ed:4b:9d:06:00:e1:30:bc:43:0c:4d:31:5d:30:61: 7a:13:a9:c0:bb:0d:02:70:ff:8a:00:a0:06:b0:f8:42:72:19: e6:f1:ad:af:1b:ec:25:fd:0f:31:d1:11:74:57:94:ca:ec:53: 83:e7:7f:d1:09:7b:55:4c:67:04:71:7e:01:9f:3d:93:44:ba: 77:eb:7a:e3:f7:b7:86:c6:b3:ac:bb:a4:e7:b5:ec:30:a3:3e: bc:c4:6a:94:79:88:95:78:f6:72:ae:6c:86:72:c0:ac:b3:0f: 3a:4c:c8:03:a9:4b:59:0b:1d:33:f8:2b:77:bf:6c:20:20:7b: fa:2e:8c:e1:ce:3d:3b:f3:5b:ea:e6:e4:2b:3a:55:f4:2e:38: 11:b2:c3:0d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdahb5Mr18xi5IGJm/2GfUj5GRpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjA0MTMwNjQ0MTdaFw0yNjA0MTQwNzM0MTdaMDMxMTAvBgNV BAMTKEU5MUQwNUJDNzlFN0JEMTMzOTNENjIzOTQxNTZGQzFGOEJBMUYxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa8O3buquemgyrFP6RM90KoDld g5gQM6gEiK3hroPiqiGI3EnxV9DDO3+ZVqbhFuW5QIXowzfaH3yJkbRTEZ6Fi+YZ n4WVtEDyM3naX+5MRDfddqDH7OOXGGcAz3ekm8fdERHQrHnvYtaKcoS29WPetAwT 8iqPyjoUFBIo10FPhYHEpjiRqZ/YLwoufLWTZI81o9jxzXa/E5VY0vzKCQxfbx89 WehHGBN6Dwp0rZ8hZGrlJ7ffKx/NsnZIijoMX33W9TTmWI6zvzDGILRz5LwzOg0L v71+eqqW6wd+W2Ngy2TxJuuqxTBlZhTu35t57j4/P6WSbjVEryT0ZpZY6T5zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6R0FvHnnvRM5PWI5QVb8H4uh8cAwHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5MTczMTQvMC85NTRBNURDOUI5NTYz OTQwQzkzOURBNUVENTRGMTAzMTg2MjlDODRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDbKVfURO8l4 FHkkUV6+u76ejxH5Y+OP7Xm2A0n//RAEqrbJsQdpDdTNzqvvPyd25qKI1S8qAsOa 8zSGm+dz1a5Nva0/keOIW/InsCgK802dJiO4EVa2oFDNgDOPoyfI6i17PxNsMmyk gGd6MGyj7UudBgDhMLxDDE0xXTBhehOpwLsNAnD/igCgBrD4QnIZ5vGtrxvsJf0P MdERdFeUyuxTg+d/0Ql7VUxnBHF+AZ89k0S6d+t64/e3hsazrLuk57XsMKM+vMRq lHmIlXj2cq5shnLArLMPOkzIA6lLWQsdM/grd79sICB7+i6M4c49O/Nb6ubkKzpV 9C44EbLDDQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:52 2026 by rpki-client