$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft File: 654C69951CF087D0BC74151532E452AE157FCCCB.mft (raw, json) Hash identifier: fYuV8rMcAYR5DlSMi4XQFSk9bQW3b+hPEmE6qhpyYqw= Subject key identifier: 14:CF:EA:8C:35:23:9E:91:DA:5E:EC:52:A6:35:FF:F9:79:08:73:51 Authority key identifier: 65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB Certificate issuer: /CN=654C69951CF087D0BC74151532E452AE157FCCCB Certificate serial: 7CA0DD23E7068B2C7C11E854609B46122D1972F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft Manifest number: 8F Signing time: Wed 28 Oct 2026 01:15:26 +0000 Manifest this update: Wed 28 Oct 2026 01:10:26 +0000 Manifest next update: Sat 31 Oct 2026 05:34:26 +0000 Files and hashes: 1: 654C69951CF087D0BC74151532E452AE157FCCCB.crl (hash: D5rCT5XrN8bYmPEOYnvIn3entoQx0Sqz8uM9HPsVqWo=) 2: 3130332e3134362e3132362e302f32332d3233203d3e2034383038.roa (hash: C3frltR1t3bQDu+F7qcDmwSg2cgzyaJJekrxhs4+M0s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 05:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a0:dd:23:e7:06:8b:2c:7c:11:e8:54:60:9b:46:12:2d:19:72:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654C69951CF087D0BC74151532E452AE157FCCCB Validity Not Before: Oct 28 01:10:26 2026 GMT Not After : Oct 31 05:34:26 2026 GMT Subject: CN=14CFEA8C35239E91DA5EEC52A635FFF979087351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:eb:d2:f3:5e:19:8f:8b:4c:54:05:33:59: d8:f2:dc:27:65:aa:0f:47:60:bd:89:f4:61:cc:9b: e6:a6:3e:9a:46:b0:7a:e4:5d:c3:3a:a1:67:53:4c: 66:1e:05:56:3f:bf:f5:f9:94:ce:d8:31:42:6c:d5: 83:6b:45:fe:47:19:03:09:45:13:0b:56:17:04:44: 2f:96:c7:23:06:4b:b2:5d:2c:c9:d5:fe:01:5f:99: 1c:84:de:45:1f:64:68:6c:26:2b:16:d1:7e:97:ab: c0:a8:7f:95:07:2c:fc:11:d7:5b:d1:08:c5:67:bd: cf:c5:b0:f9:c8:13:66:81:b3:4a:3e:90:cb:f4:3e: 46:e7:ce:a3:f2:0a:42:68:4f:ea:32:6c:86:d7:1a: 2d:73:5f:90:e3:cb:64:2e:c3:b0:56:2a:70:b6:3c: 48:3c:78:99:0c:bf:a3:24:ff:f7:d9:71:d8:9e:c6: 41:5f:8d:10:39:bb:26:54:33:75:4c:06:fb:b2:36: e8:5f:53:b9:4a:51:81:fc:9d:26:4c:b6:f8:d5:b6: c1:3e:42:90:49:bb:bc:6c:e2:20:89:3b:62:6f:7e: fb:80:47:9c:2d:17:14:10:a8:9f:35:d8:71:07:cf: 04:75:02:a3:a2:e2:39:ba:10:5a:66:3d:4b:b6:8a: f2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CF:EA:8C:35:23:9E:91:DA:5E:EC:52:A6:35:FF:F9:79:08:73:51 X509v3 Authority Key Identifier: keyid:65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f4:81:77:27:2a:ce:d4:6d:7f:c2:a2:cf:55:4b:0e:0d:45: 01:b1:66:ee:1b:73:a1:f1:c8:3b:2f:2f:67:34:74:2e:0f:08: 17:7e:ed:3f:94:bf:19:96:d5:dc:ca:ce:da:8d:ee:cc:e0:8b: c4:09:3d:82:4f:31:7d:92:b8:1a:a6:61:db:09:7f:ac:72:e3: b9:7c:a8:8f:b4:91:6b:6b:1e:07:07:b9:7b:4e:49:8b:cc:fe: 82:b8:df:3b:18:3f:8b:87:ce:71:3a:87:3c:bb:85:4b:2e:e6: b6:c5:1e:e1:a3:5e:45:b7:32:eb:d5:85:6b:df:57:4f:4d:e3: c7:7f:c2:32:a2:a4:4a:f7:e4:c4:ae:e4:ee:be:e9:93:36:b6: 47:12:3d:f2:6e:bc:e8:f2:02:88:a9:89:7d:0a:94:86:df:da: 94:d9:6e:08:d8:38:79:25:fa:2f:c4:27:b2:8f:92:cb:6b:06: ca:3b:29:da:bf:81:dc:fe:7e:82:b9:12:a4:10:99:5f:82:13: 26:63:9c:93:b9:b0:9d:39:ec:a7:e2:ad:78:ad:8e:1d:d7:5f: 42:52:ec:38:67:1f:67:73:1f:e0:31:c7:91:d0:ad:c7:8b:3e: c1:60:94:10:ca:11:a1:0d:d9:1b:44:78:7a:06:ed:7d:82:57: 18:6e:8d:02 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfKDdI+cGiyx8EehUYJtGEi0ZcvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUx NTdGQ0NDQjAeFw0yNjEwMjgwMTEwMjZaFw0yNjEwMzEwNTM0MjZaMDMxMTAvBgNV BAMTKDE0Q0ZFQThDMzUyMzlFOTFEQTVFRUM1MkE2MzVGRkY5NzkwODczNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoYOvS814Zj4tMVAUzWdjy3Cdl qg9HYL2J9GHMm+amPppGsHrkXcM6oWdTTGYeBVY/v/X5lM7YMUJs1YNrRf5HGQMJ RRMLVhcERC+WxyMGS7JdLMnV/gFfmRyE3kUfZGhsJisW0X6Xq8Cof5UHLPwR11vR CMVnvc/FsPnIE2aBs0o+kMv0PkbnzqPyCkJoT+oybIbXGi1zX5Djy2Quw7BWKnC2 PEg8eJkMv6Mk//fZcdiexkFfjRA5uyZUM3VMBvuyNuhfU7lKUYH8nSZMtvjVtsE+ QpBJu7xs4iCJO2JvfvuAR5wtFxQQqJ812HEHzwR1AqOi4jm6EFpmPUu2ivIrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFM/qjDUjnpHaXuxSpjX/+XkIc1EwHwYDVR0j BBgwFoAUZUxplRzwh9C8dBUVMuRSrhV/zMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDgzOTYxNDI5MzU0MDg5MS8wLzY1NEM2OTk1MUNGMDg3RDBCQzc0MTUxNTMyRTQ1 MkFFMTU3RkNDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUxNTdGQ0NDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4Mzk2MTQyOTM1NDA4OTEvMC82NTRDNjk5NTFDRjA4 N0QwQkM3NDE1MTUzMkU0NTJBRTE1N0ZDQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfSBdycqztRt f8Kiz1VLDg1FAbFm7htzofHIOy8vZzR0Lg8IF37tP5S/GZbV3MrO2o3uzOCLxAk9 gk8xfZK4GqZh2wl/rHLjuXyoj7SRa2seBwe5e05Ji8z+grjfOxg/i4fOcTqHPLuF Sy7mtsUe4aNeRbcy69WFa99XT03jx3/CMqKkSvfkxK7k7r7pkza2RxI98m686PIC iKmJfQqUht/alNluCNg4eSX6L8Qnso+Sy2sGyjsp2r+B3P5+grkSpBCZX4ITJmOc k7mwnTnsp+KteK2OHddfQlLsOGcfZ3Mf4DHHkdCtx4s+wWCUEMoRoQ3ZG0R4egbt fYJXGG6NAg== -----END CERTIFICATE-----Generated at Wed Oct 28 11:26:59 2026 by rpki-client