$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft File: 954A5DC9B9563940C939DA5ED54F10318629C84D.mft (raw, json) Hash identifier: nZoJ4t9drtPb8CEExBnjzf+AmgyMi4FUkw7LqmHfyM0= Subject key identifier: 86:9D:99:B2:59:AD:8D:EC:F0:7B:A5:99:4B:16:52:CD:15:53:3D:FC Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 4401F49DAFB41B72CA8A19A2D439F09403768D95 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft Manifest number: AE Signing time: Fri 29 May 2026 13:07:50 +0000 Manifest this update: Fri 29 May 2026 13:02:50 +0000 Manifest next update: Sat 30 May 2026 13:38:50 +0000 Files and hashes: 1: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (hash: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU=) 2: 954A5DC9B9563940C939DA5ED54F10318629C84D.crl (hash: gfUGltR7BddvfiPaNfunj6i2QU6B2GlTpUIu1Lnbu9k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:01:f4:9d:af:b4:1b:72:ca:8a:19:a2:d4:39:f0:94:03:76:8d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: May 29 13:02:50 2026 GMT Not After : May 30 13:38:50 2026 GMT Subject: CN=869D99B259AD8DECF07BA5994B1652CD15533DFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:ab:45:cd:26:be:3b:10:e7:55:7e:c3:d8: 59:c2:08:1c:cd:c8:43:f8:18:41:47:11:66:9b:76: 00:22:fa:97:09:b3:05:17:49:07:af:bc:fb:59:39: 30:4f:85:a9:66:3e:ee:8e:42:f1:8a:c9:e8:75:c2: 7e:a5:81:ef:92:9e:69:f8:05:81:9b:03:49:f9:9d: ec:81:9e:67:a2:1b:11:3f:6a:ea:b3:5b:42:89:3a: 0e:a9:32:6a:6c:1f:39:f4:ae:27:46:2a:c9:8e:6c: 7d:25:9d:63:47:e6:a4:c8:1c:8e:0a:f3:71:79:b5: a9:74:32:72:72:57:f1:96:b5:b5:2b:45:5d:2f:37: a4:e1:56:93:7f:b7:c7:6e:e0:cb:59:a1:55:54:92: 3d:e5:8c:d7:90:4d:20:72:ca:04:79:a0:56:a2:2b: 01:3c:c0:5b:8a:c0:ed:4c:70:8e:de:d7:aa:2c:aa: e4:15:23:e9:6d:b2:08:58:e3:a1:ec:36:f8:7d:33: cd:96:c4:26:56:02:7e:a5:7f:43:f5:9b:1a:b2:d9: be:f5:af:dc:e9:8f:f8:23:4c:61:fb:41:0b:5a:c8: 35:06:88:52:a2:fe:a5:58:e0:0c:74:db:ec:2a:e9: c8:16:a0:65:ca:a9:c8:71:c4:0c:5d:40:a9:71:ec: ce:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9D:99:B2:59:AD:8D:EC:F0:7B:A5:99:4B:16:52:CD:15:53:3D:FC X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6d:d5:43:d9:66:93:67:ce:c6:bd:5c:f8:d7:d4:2b:a8:cc: b0:fb:95:0b:dc:de:f6:6f:6f:87:53:39:c1:4e:5d:97:ee:2f: b8:e2:fe:94:16:43:ec:95:c5:d2:26:49:b3:4d:69:99:f3:cb: 55:ea:e9:a7:ae:b8:bc:a0:3c:b0:a7:40:f4:90:4d:49:09:af: 81:05:d5:d2:1f:23:77:9e:d7:c8:2f:78:e6:01:b5:5b:b3:21: 84:8e:ea:9d:aa:4d:de:e2:ca:54:37:1c:a8:f3:aa:db:2a:45: 4e:5c:fb:eb:47:5c:1d:d0:09:c3:d7:a1:07:0c:ae:ae:e9:09: 78:81:63:8a:0e:9a:00:9f:73:ba:fb:8b:e6:2a:01:35:47:cb: a9:ab:79:8e:b4:86:5a:99:64:91:1e:04:94:1e:90:be:03:a6: e9:a6:2c:39:0b:4e:1d:ba:2d:22:97:40:ed:69:16:5e:d8:3c: 0c:09:0c:f2:9e:f4:61:d2:a0:3c:7e:01:90:f8:83:6f:17:fb: 3e:58:8f:b7:52:b0:27:cf:81:f7:9b:b2:26:cd:53:64:21:7d: 60:12:06:cd:f0:12:c8:eb:e9:cf:86:a9:7f:f9:8e:6c:15:e9: 8f:09:f1:81:67:0b:14:a7:46:3b:1d:95:35:df:1c:47:3f:d2: 9a:e8:c0:b4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURAH0na+0G3LKihmi1DnwlAN2jZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjA1MjkxMzAyNTBaFw0yNjA1MzAxMzM4NTBaMDMxMTAvBgNV BAMTKDg2OUQ5OUIyNTlBRDhERUNGMDdCQTU5OTRCMTY1MkNEMTU1MzNERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWUatFzSa+OxDnVX7D2FnCCBzN yEP4GEFHEWabdgAi+pcJswUXSQevvPtZOTBPhalmPu6OQvGKyeh1wn6lge+Snmn4 BYGbA0n5neyBnmeiGxE/auqzW0KJOg6pMmpsHzn0ridGKsmObH0lnWNH5qTIHI4K 83F5tal0MnJyV/GWtbUrRV0vN6ThVpN/t8du4MtZoVVUkj3ljNeQTSByygR5oFai KwE8wFuKwO1McI7e16osquQVI+ltsghY46HsNvh9M82WxCZWAn6lf0P1mxqy2b71 r9zpj/gjTGH7QQtayDUGiFKi/qVY4Ax02+wq6cgWoGXKqchxxAxdQKlx7M4xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhp2Zslmtjezwe6WZSxZSzRVTPfwwHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5MTczMTQvMC85NTRBNURDOUI5NTYz OTQwQzkzOURBNUVENTRGMTAzMTg2MjlDODRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIm3VQ9lmk2fO xr1c+NfUK6jMsPuVC9ze9m9vh1M5wU5dl+4vuOL+lBZD7JXF0iZJs01pmfPLVerp p664vKA8sKdA9JBNSQmvgQXV0h8jd57XyC945gG1W7MhhI7qnapN3uLKVDccqPOq 2ypFTlz760dcHdAJw9ehBwyurukJeIFjig6aAJ9zuvuL5ioBNUfLqat5jrSGWplk kR4ElB6QvgOm6aYsOQtOHbotIpdA7WkWXtg8DAkM8p70YdKgPH4BkPiDbxf7PliP t1KwJ8+B95uyJs1TZCF9YBIGzfASyOvpz4apf/mObBXpjwnxgWcLFKdGOx2VNd8c Rz/SmujAtA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:21 2026 by rpki-client