$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft File: 654C69951CF087D0BC74151532E452AE157FCCCB.mft (raw, json) Hash identifier: gqjulTCLdbcany1O7nWqGXi6xILblYz6M+nAwX45KyE= Subject key identifier: 75:0E:A0:4A:30:52:91:0B:1A:73:2A:ED:DD:0B:62:E5:87:7C:5F:FC Authority key identifier: 65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB Certificate issuer: /CN=654C69951CF087D0BC74151532E452AE157FCCCB Certificate serial: 2685E07D3844488339F16784B2C46DE3764A71B5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft Manifest number: 79 Signing time: Tue 08 Sep 2026 14:54:22 +0000 Manifest this update: Tue 08 Sep 2026 14:49:22 +0000 Manifest next update: Fri 11 Sep 2026 18:29:22 +0000 Files and hashes: 1: 654C69951CF087D0BC74151532E452AE157FCCCB.crl (hash: PWGmzXg1B2vgpbaUMkAvaydtvT75goTnOLhbx23tdw4=) 2: 3130332e3134362e3132362e302f32332d3233203d3e2034383038.roa (hash: C3frltR1t3bQDu+F7qcDmwSg2cgzyaJJekrxhs4+M0s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 18:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:85:e0:7d:38:44:48:83:39:f1:67:84:b2:c4:6d:e3:76:4a:71:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654C69951CF087D0BC74151532E452AE157FCCCB Validity Not Before: Sep 8 14:49:22 2026 GMT Not After : Sep 11 18:29:22 2026 GMT Subject: CN=750EA04A3052910B1A732AEDDD0B62E5877C5FFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5f:f8:bb:ff:f0:f1:0d:ed:0f:c1:c3:98:9e: a9:64:eb:c1:a7:e7:bb:27:9b:43:ef:6e:7d:3c:24: d1:ad:74:bd:e5:69:86:61:85:37:4d:0a:35:ff:d0: f2:ed:8f:17:f0:4a:86:73:cf:0e:8b:93:71:53:0d: b1:7d:88:0e:8f:a1:fd:86:e7:52:12:e5:f3:3b:12: 92:26:00:ca:5c:17:98:c0:10:ab:e0:68:11:37:71: 20:30:76:87:65:4f:57:26:09:6a:6c:af:c5:b5:52: 59:96:35:1d:f9:3b:87:6e:70:f7:8f:3d:5a:f3:f4: b3:c5:be:44:69:d0:8e:87:4b:75:79:2f:58:ad:19: f5:4d:4a:3b:72:f2:6f:e6:48:8f:af:35:59:29:9a: 26:7a:d6:55:30:d7:78:b4:a1:c0:f6:b2:89:9d:fb: f6:38:22:cb:c1:cb:44:ec:85:ed:fa:dd:5d:91:de: db:1b:b6:c6:ad:af:52:fd:04:c9:53:45:54:bf:0f: 70:5f:fa:0d:2d:d2:34:5a:e4:bc:b3:3b:81:44:50: 86:0a:6a:d0:6e:20:ac:57:42:dd:44:62:03:4b:35: fc:18:b1:78:6f:54:6a:b2:f7:36:a2:10:89:a0:49: 09:ad:b7:49:f6:ba:ca:b2:09:33:67:ac:0e:43:68: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0E:A0:4A:30:52:91:0B:1A:73:2A:ED:DD:0B:62:E5:87:7C:5F:FC X509v3 Authority Key Identifier: keyid:65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:6a:2b:1e:6f:16:46:67:a7:62:00:64:17:d4:74:8e:5c:13: 2c:17:cd:57:d5:a1:ad:83:64:82:0a:37:0b:2c:8c:be:39:2c: e3:e8:a8:c5:e9:6e:d7:87:40:a7:fb:1b:52:c3:88:7a:e3:d9: 33:ed:fc:c9:84:b7:d7:71:20:2e:56:72:21:27:7a:8f:82:0c: 1b:98:90:71:1f:bd:a6:da:5e:34:48:5b:51:49:4f:7b:7b:57: 26:ed:08:cc:1e:cf:3d:ec:4d:8b:d7:aa:a6:b0:ab:b9:f6:33: 11:d1:f9:70:3f:69:5c:c2:59:14:01:14:11:bf:1e:90:92:81: 34:86:89:f5:bb:6b:d7:de:ec:1a:e0:a9:8b:89:6a:63:8d:1a: c5:f5:e8:aa:73:b2:38:09:19:e5:aa:68:bd:01:f9:a3:2a:ec: d4:0a:5f:ab:68:c0:97:50:5e:b2:1a:62:03:84:21:16:0c:f2: 19:75:d4:14:a9:c9:c4:a3:24:4a:53:31:22:1c:2e:f9:94:c1: 6a:a0:ad:37:0b:d9:c5:1e:d5:e3:c9:cd:c1:cf:b4:5f:40:cb: b7:1a:3b:4a:f3:14:15:d2:01:4e:13:db:1b:0d:33:9d:69:19: fb:2a:8d:7b:ae:0d:fe:09:60:0c:6d:88:11:5b:e0:b9:ce:3a: 8e:44:e5:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJoXgfThESIM58WeEssRt43ZKcbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUx NTdGQ0NDQjAeFw0yNjA5MDgxNDQ5MjJaFw0yNjA5MTExODI5MjJaMDMxMTAvBgNV BAMTKDc1MEVBMDRBMzA1MjkxMEIxQTczMkFFREREMEI2MkU1ODc3QzVGRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcX/i7//DxDe0PwcOYnqlk68Gn 57snm0Pvbn08JNGtdL3laYZhhTdNCjX/0PLtjxfwSoZzzw6Lk3FTDbF9iA6Pof2G 51IS5fM7EpImAMpcF5jAEKvgaBE3cSAwdodlT1cmCWpsr8W1UlmWNR35O4ducPeP PVrz9LPFvkRp0I6HS3V5L1itGfVNSjty8m/mSI+vNVkpmiZ61lUw13i0ocD2somd +/Y4IsvBy0Tshe363V2R3tsbtsatr1L9BMlTRVS/D3Bf+g0t0jRa5LyzO4FEUIYK atBuIKxXQt1EYgNLNfwYsXhvVGqy9zaiEImgSQmtt0n2usqyCTNnrA5DaHCdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdQ6gSjBSkQsacyrt3Qti5Yd8X/wwHwYDVR0j BBgwFoAUZUxplRzwh9C8dBUVMuRSrhV/zMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDgzOTYxNDI5MzU0MDg5MS8wLzY1NEM2OTk1MUNGMDg3RDBCQzc0MTUxNTMyRTQ1 MkFFMTU3RkNDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUxNTdGQ0NDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4Mzk2MTQyOTM1NDA4OTEvMC82NTRDNjk5NTFDRjA4 N0QwQkM3NDE1MTUzMkU0NTJBRTE1N0ZDQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGorHm8WRmen YgBkF9R0jlwTLBfNV9WhrYNkggo3CyyMvjks4+ioxelu14dAp/sbUsOIeuPZM+38 yYS313EgLlZyISd6j4IMG5iQcR+9ptpeNEhbUUlPe3tXJu0IzB7PPexNi9eqprCr ufYzEdH5cD9pXMJZFAEUEb8ekJKBNIaJ9btr197sGuCpi4lqY40axfXoqnOyOAkZ 5apovQH5oyrs1Apfq2jAl1BeshpiA4QhFgzyGXXUFKnJxKMkSlMxIhwu+ZTBaqCt NwvZxR7V48nNwc+0X0DLtxo7SvMUFdIBThPbGw0znWkZ+yqNe64N/glgDG2IEVvg uc46jkTlQA== -----END CERTIFICATE-----Generated at Thu Sep 10 17:47:20 2026 by rpki-client