$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft File: 654C69951CF087D0BC74151532E452AE157FCCCB.mft (raw, json) Hash identifier: KrjJ3AdGfRXayY02r3iUlexHLi9xjC2fHFXQe75R5vQ= Subject key identifier: 5B:A1:97:E2:C1:8E:74:7D:6D:F0:9F:EA:81:D6:05:26:FF:90:25:F7 Authority key identifier: 65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB Certificate issuer: /CN=654C69951CF087D0BC74151532E452AE157FCCCB Certificate serial: 161C094BA4CC608CB0C4D897316C98C7FA9FE99B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft Manifest number: 49 Signing time: Mon 27 Jul 2026 07:48:41 +0000 Manifest this update: Mon 27 Jul 2026 07:43:41 +0000 Manifest next update: Tue 28 Jul 2026 08:38:41 +0000 Files and hashes: 1: 3130332e3134362e3132362e302f32332d3233203d3e2034383038.roa (hash: C3frltR1t3bQDu+F7qcDmwSg2cgzyaJJekrxhs4+M0s=) 2: 654C69951CF087D0BC74151532E452AE157FCCCB.crl (hash: UhxEX8q0hWL1TFcy+WlcNFnmR5hgI7oTcF+akrwEH+Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1c:09:4b:a4:cc:60:8c:b0:c4:d8:97:31:6c:98:c7:fa:9f:e9:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654C69951CF087D0BC74151532E452AE157FCCCB Validity Not Before: Jul 27 07:43:41 2026 GMT Not After : Jul 28 08:38:41 2026 GMT Subject: CN=5BA197E2C18E747D6DF09FEA81D60526FF9025F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:87:46:6b:84:a3:21:b9:bb:97:8e:4e:38: f6:9d:65:3f:42:91:b8:9b:36:ab:11:3e:a2:0e:65: 2b:0f:94:01:28:79:05:c9:11:68:ba:00:ce:0c:62: 6c:f1:65:b7:87:4b:a9:90:27:57:16:1d:7b:d6:05: 8d:b8:4c:a4:53:ae:98:28:17:33:73:82:9d:c5:28: df:ef:67:fa:a1:67:13:4b:51:b9:dd:f6:7a:3f:e6: 2a:8d:8a:7f:5a:38:2c:76:24:14:79:65:2a:6c:7a: 3c:e8:39:97:af:27:63:d1:d2:03:2f:1b:02:40:66: d0:00:b8:b9:c0:35:10:28:67:db:5e:ca:48:c3:52: 28:d1:1f:33:42:98:30:df:51:4a:96:fb:08:68:ae: a5:f8:db:ac:a8:8d:86:e5:0e:9d:7b:2e:88:c5:fa: a8:25:d3:e1:ef:02:46:77:d8:35:8c:b5:e2:7c:f5: e4:0f:e1:39:14:26:7a:f2:7d:d9:33:af:dc:de:80: 5d:6e:40:bc:51:bf:3d:ab:c7:4e:21:a8:3c:1b:0a: d7:28:28:cf:63:df:1d:61:7c:6f:58:94:44:fe:bb: bf:21:fa:6f:cd:9e:81:57:8d:9b:76:2b:d3:08:3d: 7e:12:85:62:12:a4:2f:0c:dc:61:5e:c9:97:c8:40: 32:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A1:97:E2:C1:8E:74:7D:6D:F0:9F:EA:81:D6:05:26:FF:90:25:F7 X509v3 Authority Key Identifier: keyid:65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:57:c0:c3:51:32:62:d3:b1:0e:0e:2a:dd:7f:c0:9e:30:63: 2e:f8:d4:61:94:33:5d:d1:cc:95:9c:40:45:62:a6:58:2e:31: 70:66:20:11:77:2b:d3:1c:cd:89:b3:a3:eb:8b:92:0c:72:45: 7c:f9:79:33:36:9b:e1:9b:f3:88:df:06:c3:0a:0c:a2:e4:79: 5c:04:55:19:1a:23:c7:74:74:47:d1:bd:d8:40:80:56:dc:0d: bd:89:86:e9:f3:ee:f1:a6:8d:a3:a4:1e:91:72:62:7b:e3:50: 98:c0:15:b5:5b:d4:98:65:be:8b:a7:87:57:91:d8:e8:9f:93: a7:37:bb:38:03:c8:69:17:e7:bc:0b:95:54:b6:f4:af:3c:bf: ad:5d:2c:69:b9:4e:fb:3a:3a:c9:6f:d0:a8:d2:da:27:5b:30: 94:b0:81:c8:97:49:72:0b:f5:4e:7a:32:dd:03:bc:8b:3e:4b: 92:c6:d0:76:0e:4e:c0:f6:d5:29:3f:de:f5:8e:0b:d4:5f:d5: 4d:0d:7b:56:c1:1e:c4:90:da:ef:4d:b6:e3:fe:1f:b2:30:ab: 40:ca:f4:2a:cd:ee:00:33:67:5c:aa:ea:5a:8e:c1:15:81:f7: 10:5b:6d:b1:a2:28:34:e5:f8:ad:6a:a6:2c:49:6b:bf:6d:fd: 28:f9:a4:fc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFhwJS6TMYIywxNiXMWyYx/qf6ZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUx NTdGQ0NDQjAeFw0yNjA3MjcwNzQzNDFaFw0yNjA3MjgwODM4NDFaMDMxMTAvBgNV BAMTKDVCQTE5N0UyQzE4RTc0N0Q2REYwOUZFQTgxRDYwNTI2RkY5MDI1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6IdGa4SjIbm7l45OOPadZT9C kbibNqsRPqIOZSsPlAEoeQXJEWi6AM4MYmzxZbeHS6mQJ1cWHXvWBY24TKRTrpgo FzNzgp3FKN/vZ/qhZxNLUbnd9no/5iqNin9aOCx2JBR5ZSpsejzoOZevJ2PR0gMv GwJAZtAAuLnANRAoZ9teykjDUijRHzNCmDDfUUqW+whorqX426yojYblDp17LojF +qgl0+HvAkZ32DWMteJ89eQP4TkUJnryfdkzr9zegF1uQLxRvz2rx04hqDwbCtco KM9j3x1hfG9YlET+u78h+m/NnoFXjZt2K9MIPX4ShWISpC8M3GFeyZfIQDKnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUW6GX4sGOdH1t8J/qgdYFJv+QJfcwHwYDVR0j BBgwFoAUZUxplRzwh9C8dBUVMuRSrhV/zMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDgzOTYxNDI5MzU0MDg5MS8wLzY1NEM2OTk1MUNGMDg3RDBCQzc0MTUxNTMyRTQ1 MkFFMTU3RkNDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUxNTdGQ0NDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4Mzk2MTQyOTM1NDA4OTEvMC82NTRDNjk5NTFDRjA4 N0QwQkM3NDE1MTUzMkU0NTJBRTE1N0ZDQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVfAw1EyYtOx Dg4q3X/AnjBjLvjUYZQzXdHMlZxARWKmWC4xcGYgEXcr0xzNibOj64uSDHJFfPl5 Mzab4ZvziN8GwwoMouR5XARVGRojx3R0R9G92ECAVtwNvYmG6fPu8aaNo6QekXJi e+NQmMAVtVvUmGW+i6eHV5HY6J+Tpze7OAPIaRfnvAuVVLb0rzy/rV0sablO+zo6 yW/QqNLaJ1swlLCByJdJcgv1Tnoy3QO8iz5LksbQdg5OwPbVKT/e9Y4L1F/VTQ17 VsEexJDa70224/4fsjCrQMr0Ks3uADNnXKrqWo7BFYH3EFttsaIoNOX4rWqmLElr v239KPmk/A== -----END CERTIFICATE-----Generated at Mon Jul 27 11:22:20 2026 by rpki-client