$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft File: 954A5DC9B9563940C939DA5ED54F10318629C84D.mft (raw, json) Hash identifier: Ls+onxHCaqqQEihVX3udkh8/nUhZa5/p+3MyAkAbIXM= Subject key identifier: 27:2F:E9:2E:A6:07:42:5C:31:15:83:BA:B3:AF:4C:A4:99:E4:85:33 Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 7A88F233A11CB4829D77A25B8350A3D10A60FB6B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft Manifest number: EB Signing time: Tue 14 Jul 2026 09:46:01 +0000 Manifest this update: Tue 14 Jul 2026 09:41:01 +0000 Manifest next update: Wed 15 Jul 2026 11:43:01 +0000 Files and hashes: 1: 954A5DC9B9563940C939DA5ED54F10318629C84D.crl (hash: CFIGIditWHBwPRrv243gd2JYLmsqLSN56bBZNfaxjFI=) 2: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (hash: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:88:f2:33:a1:1c:b4:82:9d:77:a2:5b:83:50:a3:d1:0a:60:fb:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: Jul 14 09:41:01 2026 GMT Not After : Jul 15 11:43:01 2026 GMT Subject: CN=272FE92EA607425C311583BAB3AF4CA499E48533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:79:db:86:bc:ad:b7:47:88:59:5f:8b:4e: d3:f1:c7:26:9e:52:a6:68:6d:27:7a:c3:62:2a:6e: 4b:b8:6e:6c:82:ef:43:78:11:96:e9:82:17:e3:38: 23:f1:80:ea:99:dd:82:74:1d:7a:66:f2:09:2e:16: 46:b5:5a:85:72:fd:b6:58:77:5f:02:63:47:a8:0d: 40:a7:dc:bb:82:99:9b:98:e7:8f:75:2b:54:e7:0c: 2b:84:33:bc:e1:44:fb:fb:36:4d:a3:95:27:6a:1e: 85:43:8c:d2:01:a4:13:26:16:d6:5f:e0:0e:f4:d1: 92:73:a3:d1:85:40:22:7f:17:e1:13:07:83:09:58: 43:c2:6a:ac:e9:37:51:03:c7:e3:1b:eb:17:54:cd: 8a:b6:47:e1:ee:4f:9e:80:87:dc:98:6c:cb:41:34: 18:27:fc:ca:43:aa:09:0b:41:1a:52:d8:5b:7a:3d: a3:db:18:38:a7:e4:7a:b8:7a:64:97:a9:58:b9:fc: c6:e8:a4:ca:c8:08:38:eb:5a:53:0a:47:8c:b8:29: ec:31:bd:e0:f8:a5:32:8e:a4:e2:8d:48:34:4b:c2: d0:25:69:d1:df:b5:45:85:da:76:e8:3c:37:4c:3e: b1:a5:15:95:de:cc:3e:79:d9:6a:64:e3:08:a4:9a: ea:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2F:E9:2E:A6:07:42:5C:31:15:83:BA:B3:AF:4C:A4:99:E4:85:33 X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:85:2f:01:82:7d:03:4b:5f:33:f9:bc:70:50:3e:3e:b2:02: 83:e3:05:94:f4:bf:b9:be:22:c6:a5:af:9e:92:a7:6f:56:2f: d0:b6:ba:4b:59:06:9e:97:a1:3e:3f:96:2a:34:27:3b:16:42: 0d:f0:e7:5d:2c:1d:5a:e6:55:cd:b1:83:51:59:5b:64:6c:50: cc:ab:f2:77:17:e7:4c:2c:c7:11:8d:70:ce:6c:a8:2f:ca:22: 41:52:f4:b2:8f:c4:17:7d:ae:53:a7:3d:b0:11:8a:37:95:f4: 1a:5b:a2:b5:cc:e1:b0:fd:93:33:28:af:64:ba:49:07:06:80: f2:26:92:66:ca:cf:da:4e:82:1e:29:4f:bc:d8:11:3b:97:e2: 47:f5:60:cf:7b:4e:8d:9e:07:e2:a4:54:8a:02:78:6f:29:7b: 71:0a:81:02:a3:67:dd:d3:5f:a0:6a:95:50:af:98:ef:99:39: 21:e9:bf:be:dc:cc:f2:b3:14:9e:89:01:37:a8:90:05:80:60: 4d:f4:a9:9d:5d:e3:fd:23:a1:84:78:fb:22:c6:7f:7e:81:2f: f6:4e:69:59:1e:82:3a:7e:2a:6b:2f:9e:71:27:8e:c9:c6:1b: 1c:81:39:6d:f0:92:2d:73:a2:3b:0c:2a:7a:80:b7:2c:bd:e9: 0d:bf:17:24 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeojyM6EctIKdd6Jbg1Cj0Qpg+2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjA3MTQwOTQxMDFaFw0yNjA3MTUxMTQzMDFaMDMxMTAvBgNV BAMTKDI3MkZFOTJFQTYwNzQyNUMzMTE1ODNCQUIzQUY0Q0E0OTlFNDg1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5w3nbhrytt0eIWV+LTtPxxyae UqZobSd6w2Iqbku4bmyC70N4EZbpghfjOCPxgOqZ3YJ0HXpm8gkuFka1WoVy/bZY d18CY0eoDUCn3LuCmZuY5491K1TnDCuEM7zhRPv7Nk2jlSdqHoVDjNIBpBMmFtZf 4A700ZJzo9GFQCJ/F+ETB4MJWEPCaqzpN1EDx+Mb6xdUzYq2R+HuT56Ah9yYbMtB NBgn/MpDqgkLQRpS2Ft6PaPbGDin5Hq4emSXqVi5/MbopMrICDjrWlMKR4y4Kewx veD4pTKOpOKNSDRLwtAladHftUWF2nboPDdMPrGlFZXezD552Wpk4wikmupvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJy/pLqYHQlwxFYO6s69MpJnkhTMwHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5MTczMTQvMC85NTRBNURDOUI5NTYz OTQwQzkzOURBNUVENTRGMTAzMTg2MjlDODRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIUvAYJ9A0tf M/m8cFA+PrICg+MFlPS/ub4ixqWvnpKnb1Yv0La6S1kGnpehPj+WKjQnOxZCDfDn XSwdWuZVzbGDUVlbZGxQzKvydxfnTCzHEY1wzmyoL8oiQVL0so/EF32uU6c9sBGK N5X0GluitczhsP2TMyivZLpJBwaA8iaSZsrP2k6CHilPvNgRO5fiR/Vgz3tOjZ4H 4qRUigJ4byl7cQqBAqNn3dNfoGqVUK+Y75k5Iem/vtzM8rMUnokBN6iQBYBgTfSp nV3j/SOhhHj7IsZ/foEv9k5pWR6COn4qay+ecSeOycYbHIE5bfCSLXOiOwwqeoC3 LL3pDb8XJA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:54 2026 by rpki-client