$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft File: 954A5DC9B9563940C939DA5ED54F10318629C84D.mft (raw, json) Hash identifier: Qf+1EGfjzU+9deJMv5hlhALm453nRk8yUAIMwyQ7di0= Subject key identifier: F1:92:56:AC:5D:51:13:6A:B7:8C:B2:19:F4:52:F3:DD:7E:10:48:C0 Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 1076FB778B565D1C63B3138ED68AA5317EE9FDA3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft Manifest number: 013B Signing time: Wed 14 Oct 2026 03:43:30 +0000 Manifest this update: Wed 14 Oct 2026 03:38:30 +0000 Manifest next update: Sat 17 Oct 2026 10:45:30 +0000 Files and hashes: 1: 954A5DC9B9563940C939DA5ED54F10318629C84D.crl (hash: MEk981HNcpmhpmCoOprugFVvZC6V6ReuPW38zAKUbqk=) 2: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (hash: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 10:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:76:fb:77:8b:56:5d:1c:63:b3:13:8e:d6:8a:a5:31:7e:e9:fd:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: Oct 14 03:38:30 2026 GMT Not After : Oct 17 10:45:30 2026 GMT Subject: CN=F19256AC5D51136AB78CB219F452F3DD7E1048C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:62:34:65:b7:76:7d:6d:85:33:3d:c4:18: 0d:64:a6:89:5c:f6:6f:bf:c7:78:99:5d:87:fb:0d: 7a:bd:d1:e4:e3:bd:05:9b:5e:88:56:f9:e9:b5:10: fe:15:bf:85:a8:7d:80:24:40:59:07:f0:1f:a2:b0: 8b:98:4c:75:c0:4d:f9:4c:dc:48:02:8a:94:43:8e: 00:86:9c:8a:03:df:e0:b2:a2:f4:ed:4b:98:9a:d0: 4a:0e:6a:32:05:69:d3:a9:e2:58:54:38:72:ef:34: b4:63:ba:5c:6f:9f:b9:40:72:b6:2e:47:75:d3:14: 56:29:d1:b8:a0:91:8c:fa:24:04:b6:97:57:aa:09: 41:de:b8:1e:1c:48:d0:31:cb:6b:9d:ba:49:b8:3a: 8e:d7:35:8c:77:67:bc:2a:10:64:ec:83:cc:f2:19: 4a:73:d7:70:fd:23:55:99:ea:fb:a4:d7:e1:97:84: 4e:b4:e1:e1:01:10:55:ec:95:4f:e4:56:66:96:24: e8:aa:87:98:79:2d:62:bb:c0:2a:e7:cf:2f:b5:b7: 4a:79:f7:21:63:1e:f0:7f:14:09:b2:32:31:de:e5: 09:b1:8c:ba:8b:23:33:da:fc:5c:90:ea:50:de:fe: f1:41:3a:7d:f0:2e:59:db:93:fd:54:dc:bc:a0:25: 0d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:92:56:AC:5D:51:13:6A:B7:8C:B2:19:F4:52:F3:DD:7E:10:48:C0 X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:45:9f:91:4a:ff:de:1e:3c:05:63:ae:48:66:2c:52:8e:4d: f1:47:12:92:da:8d:da:0e:75:d0:66:ad:c8:df:a1:cb:28:cc: b2:1f:ab:9c:f1:80:70:02:a3:96:1d:26:99:cd:72:5a:9c:b8: 80:73:40:89:0c:e1:de:b3:bb:d3:c1:93:4b:86:e5:e6:f9:42: 7a:52:bb:ab:be:15:c4:4d:c2:e9:a0:59:04:29:d2:28:2c:24: f7:bc:22:72:bb:8c:45:72:2e:b1:e1:77:1a:64:81:81:06:fb: ca:68:76:87:b9:52:ce:ab:ff:55:2c:ca:44:a1:09:d6:d3:30: 8e:5d:d9:6f:e4:c2:b4:e1:2b:2a:c8:de:1c:ba:24:28:02:73: 33:88:be:15:32:73:24:a7:5b:6c:59:56:66:83:8a:07:95:11: cb:c9:93:5d:25:70:b6:95:62:0d:2b:f8:9b:ec:df:2b:15:38: 9a:d5:94:cf:0e:25:61:94:35:05:c7:6b:ef:6a:ed:d2:2a:5a: 24:11:d2:46:3a:b6:3d:c5:60:d0:c3:48:8d:06:41:05:09:b5: 4f:8e:84:04:3d:52:d1:ab:25:d3:b0:4c:25:73:a5:68:41:98: 6e:c2:20:99:80:ed:ba:cc:9c:1b:f3:7d:5e:8e:0e:28:d0:ec: e0:c3:52:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEHb7d4tWXRxjsxOO1oqlMX7p/aMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjEwMTQwMzM4MzBaFw0yNjEwMTcxMDQ1MzBaMDMxMTAvBgNV BAMTKEYxOTI1NkFDNUQ1MTEzNkFCNzhDQjIxOUY0NTJGM0REN0UxMDQ4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC58mI0Zbd2fW2FMz3EGA1kpolc 9m+/x3iZXYf7DXq90eTjvQWbXohW+em1EP4Vv4WofYAkQFkH8B+isIuYTHXATflM 3EgCipRDjgCGnIoD3+CyovTtS5ia0EoOajIFadOp4lhUOHLvNLRjulxvn7lAcrYu R3XTFFYp0bigkYz6JAS2l1eqCUHeuB4cSNAxy2udukm4Oo7XNYx3Z7wqEGTsg8zy GUpz13D9I1WZ6vuk1+GXhE604eEBEFXslU/kVmaWJOiqh5h5LWK7wCrnzy+1t0p5 9yFjHvB/FAmyMjHe5QmxjLqLIzPa/FyQ6lDe/vFBOn3wLlnbk/1U3LygJQ29AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8ZJWrF1RE2q3jLIZ9FLz3X4QSMAwHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5MTczMTQvMC85NTRBNURDOUI5NTYz OTQwQzkzOURBNUVENTRGMTAzMTg2MjlDODRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEWfkUr/3h48 BWOuSGYsUo5N8UcSktqN2g510GatyN+hyyjMsh+rnPGAcAKjlh0mmc1yWpy4gHNA iQzh3rO708GTS4bl5vlCelK7q74VxE3C6aBZBCnSKCwk97wicruMRXIuseF3GmSB gQb7ymh2h7lSzqv/VSzKRKEJ1tMwjl3Zb+TCtOErKsjeHLokKAJzM4i+FTJzJKdb bFlWZoOKB5URy8mTXSVwtpViDSv4m+zfKxU4mtWUzw4lYZQ1Bcdr72rt0ipaJBHS Rjq2PcVg0MNIjQZBBQm1T46EBD1S0asl07BMJXOlaEGYbsIgmYDtusycG/N9Xo4O KNDs4MNSJw== -----END CERTIFICATE-----Generated at Wed Oct 14 23:00:33 2026 by rpki-client