$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft File: 654C69951CF087D0BC74151532E452AE157FCCCB.mft (raw, json) Hash identifier: WRh+nu7kRm6Kfl3XIwetoqzv2tyGdQV0qE3zhhvOyYU= Subject key identifier: DE:9A:37:57:9F:1B:B1:2D:4F:EC:01:A3:39:70:AC:62:28:9E:DB:43 Authority key identifier: 65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB Certificate issuer: /CN=654C69951CF087D0BC74151532E452AE157FCCCB Certificate serial: 0DAB32C8DA5A1621657DF1FF19ABC73CE22C479E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft Manifest number: 0C Signing time: Thu 11 Jun 2026 22:04:27 +0000 Manifest this update: Thu 11 Jun 2026 21:59:27 +0000 Manifest next update: Sat 13 Jun 2026 00:10:27 +0000 Files and hashes: 1: 654C69951CF087D0BC74151532E452AE157FCCCB.crl (hash: jfvNT/o3PX1thlyZpeOMToOEqKit8wESK1cMnnmyJdY=) 2: 3130332e3134362e3132362e302f32332d3233203d3e2034383038.roa (hash: C3frltR1t3bQDu+F7qcDmwSg2cgzyaJJekrxhs4+M0s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 00:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ab:32:c8:da:5a:16:21:65:7d:f1:ff:19:ab:c7:3c:e2:2c:47:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654C69951CF087D0BC74151532E452AE157FCCCB Validity Not Before: Jun 11 21:59:27 2026 GMT Not After : Jun 13 00:10:27 2026 GMT Subject: CN=DE9A37579F1BB12D4FEC01A33970AC62289EDB43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:56:6a:2c:47:a8:84:b5:9c:48:fa:db:ae:97: f6:21:73:0b:6e:64:40:5d:15:05:cf:dd:97:2f:9b: 48:bb:90:01:54:0c:09:17:bf:c1:37:fa:05:d5:92: 90:8f:71:dd:cb:b6:5e:3a:86:0f:cd:9f:26:ac:e5: 2b:73:59:5b:9b:a9:21:5c:02:4e:ad:29:2b:2e:d3: c5:77:22:39:f9:47:d9:d4:93:3b:bf:7b:6b:dc:55: ef:0c:79:6f:a7:89:56:c5:37:a0:fa:20:2f:28:c3: ed:ab:e3:e4:3c:9a:50:f5:b1:f0:30:05:e1:e4:38: f9:31:06:a7:30:58:8a:48:be:d9:c1:d3:17:c9:5e: 93:08:5d:b9:6b:aa:26:7d:80:1a:9c:80:8f:5c:37: f6:5a:2b:80:4a:38:f4:0c:65:fa:3d:ff:ba:48:8f: 09:74:6c:41:ee:35:ec:7f:d0:bc:ef:99:ff:a7:65: 53:75:a3:29:07:26:59:5b:9c:2b:c5:de:75:c7:34: 86:1f:bf:66:4c:94:07:41:1d:36:a7:c1:e7:46:49: 21:dc:28:01:09:93:c7:0d:6f:e8:a4:c3:1a:72:a2: b2:73:00:c9:6f:92:df:3d:e7:b8:76:4c:fb:59:5a: ee:1e:13:00:94:e5:97:e7:ff:b3:c6:3d:28:93:2f: bc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9A:37:57:9F:1B:B1:2D:4F:EC:01:A3:39:70:AC:62:28:9E:DB:43 X509v3 Authority Key Identifier: keyid:65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:52:76:9b:f7:4b:29:e0:ba:92:1b:f4:5e:31:41:c6:26:0b: 4c:c8:fc:ec:94:68:95:66:09:15:f0:b5:3d:03:78:82:65:20: 6b:a3:58:3f:8d:8e:76:44:e5:db:d0:66:5f:67:71:90:64:f6: 33:28:df:9c:4a:da:dd:47:f8:82:8f:a1:ec:ae:ae:ef:2c:f7: e4:f2:1d:b9:e6:cb:6f:ef:c8:9d:ec:da:08:06:e9:c6:77:30: bc:aa:41:7e:5f:65:69:11:1b:b2:3a:2a:e8:47:99:d0:44:d7: 6a:29:4b:55:ae:51:f2:7b:90:91:92:8e:50:b6:f6:10:9f:05: 2e:06:f8:08:97:01:de:58:f5:7a:da:b3:20:80:42:2d:22:67: 20:7e:22:25:88:a7:1f:4c:d0:f0:37:d0:ad:52:25:4b:81:c7: 42:e1:4f:4e:aa:fc:26:a7:fd:7d:a7:e2:18:c2:8e:a6:c1:db: 45:4f:b5:fa:15:ba:c5:ed:01:9d:50:c6:b8:1e:90:0d:7c:06: 97:a3:cb:d9:3d:47:e3:a6:9f:7a:94:4c:c0:ef:0d:2b:07:ab: b7:33:09:e5:92:f8:6c:23:4d:2f:46:85:4c:a0:b3:9a:e2:b2: e3:ec:6e:15:9c:eb:d1:06:50:01:92:45:4d:25:bf:d8:d0:cd: 12:d6:10:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDasyyNpaFiFlffH/GavHPOIsR54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUx NTdGQ0NDQjAeFw0yNjA2MTEyMTU5MjdaFw0yNjA2MTMwMDEwMjdaMDMxMTAvBgNV BAMTKERFOUEzNzU3OUYxQkIxMkQ0RkVDMDFBMzM5NzBBQzYyMjg5RURCNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNVmosR6iEtZxI+tuul/Yhcwtu ZEBdFQXP3Zcvm0i7kAFUDAkXv8E3+gXVkpCPcd3Ltl46hg/Nnyas5StzWVubqSFc Ak6tKSsu08V3Ijn5R9nUkzu/e2vcVe8MeW+niVbFN6D6IC8ow+2r4+Q8mlD1sfAw BeHkOPkxBqcwWIpIvtnB0xfJXpMIXblrqiZ9gBqcgI9cN/ZaK4BKOPQMZfo9/7pI jwl0bEHuNex/0Lzvmf+nZVN1oykHJllbnCvF3nXHNIYfv2ZMlAdBHTanwedGSSHc KAEJk8cNb+ikwxpyorJzAMlvkt8957h2TPtZWu4eEwCU5Zfn/7PGPSiTL7xzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3po3V58bsS1P7AGjOXCsYiie20MwHwYDVR0j BBgwFoAUZUxplRzwh9C8dBUVMuRSrhV/zMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDgzOTYxNDI5MzU0MDg5MS8wLzY1NEM2OTk1MUNGMDg3RDBCQzc0MTUxNTMyRTQ1 MkFFMTU3RkNDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUxNTdGQ0NDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4Mzk2MTQyOTM1NDA4OTEvMC82NTRDNjk5NTFDRjA4 N0QwQkM3NDE1MTUzMkU0NTJBRTE1N0ZDQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFJ2m/dLKeC6 khv0XjFBxiYLTMj87JRolWYJFfC1PQN4gmUga6NYP42OdkTl29BmX2dxkGT2Myjf nEra3Uf4go+h7K6u7yz35PIduebLb+/InezaCAbpxncwvKpBfl9laREbsjoq6EeZ 0ETXailLVa5R8nuQkZKOULb2EJ8FLgb4CJcB3lj1etqzIIBCLSJnIH4iJYinH0zQ 8DfQrVIlS4HHQuFPTqr8Jqf9fafiGMKOpsHbRU+1+hW6xe0BnVDGuB6QDXwGl6PL 2T1H46afepRMwO8NKwertzMJ5ZL4bCNNL0aFTKCzmuKy4+xuFZzr0QZQAZJFTSW/ 2NDNEtYQ7w== -----END CERTIFICATE-----Generated at Fri Jun 12 03:35:06 2026 by rpki-client