$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft File: 954A5DC9B9563940C939DA5ED54F10318629C84D.mft (raw, json) Hash identifier: 8sqkdVbIRHP8go6SsO26im6esmocszKLEwAkHgqidRo= Subject key identifier: 3D:AA:01:F7:70:AF:7C:C8:93:78:7C:59:55:96:6C:FF:76:9F:C2:2E Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 226B3ADD25C4CA834BE517A6F947F18BFD57489D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft Manifest number: 5A Signing time: Fri 27 Mar 2026 00:58:28 +0000 Manifest this update: Fri 27 Mar 2026 00:53:28 +0000 Manifest next update: Sat 28 Mar 2026 04:12:28 +0000 Files and hashes: 1: 954A5DC9B9563940C939DA5ED54F10318629C84D.crl (hash: 8+NkTRPSqZXM4XLe+cvzNabjRwAWCekipMhNhlZHIRg=) 2: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (hash: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6b:3a:dd:25:c4:ca:83:4b:e5:17:a6:f9:47:f1:8b:fd:57:48:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: Mar 27 00:53:28 2026 GMT Not After : Mar 28 04:12:28 2026 GMT Subject: CN=3DAA01F770AF7CC893787C5955966CFF769FC22E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a3:ce:e7:56:a1:c8:b9:7b:8b:ef:32:34:96: f0:53:17:e6:17:f0:8c:c2:8c:4d:da:77:ec:3f:02: e1:8e:e3:84:45:85:c3:19:e5:53:b6:97:7a:5d:f8: f7:ef:b1:ec:36:11:58:48:a6:4d:0a:a8:36:9c:db: e4:71:52:a8:de:e4:78:20:8c:b4:ae:e4:76:5d:fd: 60:4f:72:cc:e9:a6:61:89:2d:26:37:b8:dd:d3:3e: 8b:b0:c2:de:05:77:7d:09:3c:da:49:92:6b:12:82: 95:9a:57:50:f3:11:32:d9:23:35:96:03:6c:1c:3f: 5f:bf:e2:ea:b2:a4:2b:46:31:b8:17:ff:78:aa:b9: f1:4c:a3:c1:03:45:54:b3:6d:a7:66:22:21:29:af: 78:b9:b7:01:52:7a:6e:18:b7:b6:43:5e:d7:d2:53: 34:99:32:5b:8d:12:3e:e0:9b:72:a9:f6:5e:52:ca: 40:34:54:6a:2f:4a:0a:2a:32:b2:0b:89:c9:0d:95: 08:83:08:9d:5a:56:82:01:2c:86:a1:c2:c5:44:88: af:3c:b0:51:c9:b5:82:c2:e6:a4:1f:b0:06:a5:5b: 8f:8a:22:00:a3:7d:6b:d1:83:64:17:37:02:3b:b5: 55:4e:1e:eb:59:13:53:c9:6a:54:be:6c:9f:cb:1b: ea:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AA:01:F7:70:AF:7C:C8:93:78:7C:59:55:96:6C:FF:76:9F:C2:2E X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:68:cd:2a:5c:d6:13:7a:7a:d1:78:97:4f:a5:65:84:f8:54: b5:57:0a:ee:d7:a5:e4:8c:70:17:38:17:8e:b6:63:5d:b0:bc: c5:17:c9:52:de:77:83:79:28:fc:8b:d9:28:77:ac:42:f2:3a: c1:22:bd:58:df:66:3b:c9:8e:2c:62:0a:0b:9d:76:c0:91:e5: 85:ed:6f:af:5a:b2:cc:a9:18:48:0c:7a:22:2a:e0:f8:7a:d9: d5:f5:76:c1:49:22:41:a9:d3:cd:7a:06:cb:92:ed:15:dd:c6: 16:10:de:ca:5c:0f:49:a1:c6:61:7b:b7:89:85:75:bb:07:ae: 81:eb:38:e9:bf:d9:09:55:de:76:7f:7d:6a:3c:4c:84:ab:9e: a0:c1:68:58:4e:3f:d8:43:d7:a1:5b:ca:55:f3:79:17:51:e3: fe:16:de:8a:1e:ca:06:5b:02:20:bd:9a:26:5c:38:84:32:16: 86:26:7f:ba:e3:48:17:9a:9c:68:9f:ee:c6:26:6e:d3:fd:24: ad:38:86:fe:aa:e0:b6:4e:b5:36:ec:2f:0c:f9:28:e4:fc:88: 45:c3:a0:1b:f4:3a:1a:b2:c5:e7:4f:b6:67:2c:98:8a:78:c6: 2e:bf:2f:06:ee:7e:0a:8c:dc:e5:6d:a4:94:29:f0:4d:d5:d8: cb:46:42:17 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIms63SXEyoNL5Rem+Ufxi/1XSJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjAzMjcwMDUzMjhaFw0yNjAzMjgwNDEyMjhaMDMxMTAvBgNV BAMTKDNEQUEwMUY3NzBBRjdDQzg5Mzc4N0M1OTU1OTY2Q0ZGNzY5RkMyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLo87nVqHIuXuL7zI0lvBTF+YX 8IzCjE3ad+w/AuGO44RFhcMZ5VO2l3pd+Pfvsew2EVhIpk0KqDac2+RxUqje5Hgg jLSu5HZd/WBPcszppmGJLSY3uN3TPouwwt4Fd30JPNpJkmsSgpWaV1DzETLZIzWW A2wcP1+/4uqypCtGMbgX/3iqufFMo8EDRVSzbadmIiEpr3i5twFSem4Yt7ZDXtfS UzSZMluNEj7gm3Kp9l5SykA0VGovSgoqMrILickNlQiDCJ1aVoIBLIahwsVEiK88 sFHJtYLC5qQfsAalW4+KIgCjfWvRg2QXNwI7tVVOHutZE1PJalS+bJ/LG+pRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPaoB93CvfMiTeHxZVZZs/3afwi4wHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5MTczMTQvMC85NTRBNURDOUI5NTYz OTQwQzkzOURBNUVENTRGMTAzMTg2MjlDODRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2jNKlzWE3p6 0XiXT6VlhPhUtVcK7tel5IxwFzgXjrZjXbC8xRfJUt53g3ko/IvZKHesQvI6wSK9 WN9mO8mOLGIKC512wJHlhe1vr1qyzKkYSAx6Iirg+HrZ1fV2wUkiQanTzXoGy5Lt Fd3GFhDeylwPSaHGYXu3iYV1uweuges46b/ZCVXedn99ajxMhKueoMFoWE4/2EPX oVvKVfN5F1Hj/hbeih7KBlsCIL2aJlw4hDIWhiZ/uuNIF5qcaJ/uxiZu0/0krTiG /qrgtk61NuwvDPko5PyIRcOgG/Q6GrLF50+2ZyyYinjGLr8vBu5+Cozc5W2klCnw TdXYy0ZCFw== -----END CERTIFICATE-----Generated at Fri Mar 27 06:22:20 2026 by rpki-client