$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft File: 954A5DC9B9563940C939DA5ED54F10318629C84D.mft (raw, json) Hash identifier: w2/Ikm/aWtZ09ubuANevBlBKrxNH5za5Zpi6AEyGT7k= Subject key identifier: 71:1B:23:2F:6D:47:D5:41:3F:72:9A:BE:2C:A0:35:DD:F7:DF:25:6A Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 1039C753AEB6B81A3492F3E540FCBF2E61AE3F67 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft Manifest number: 013A Signing time: Sun 11 Oct 2026 19:05:52 +0000 Manifest this update: Sun 11 Oct 2026 19:00:52 +0000 Manifest next update: Thu 15 Oct 2026 03:38:52 +0000 Files and hashes: 1: 954A5DC9B9563940C939DA5ED54F10318629C84D.crl (hash: jvgOcR33HG8zqS+nxiKyT78W8rfpTu6WVodwD2xzCNM=) 2: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (hash: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:39:c7:53:ae:b6:b8:1a:34:92:f3:e5:40:fc:bf:2e:61:ae:3f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: Oct 11 19:00:52 2026 GMT Not After : Oct 15 03:38:52 2026 GMT Subject: CN=711B232F6D47D5413F729ABE2CA035DDF7DF256A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:e8:ab:9d:44:7d:97:4f:70:a5:be:e6:36: 56:56:52:c6:35:92:88:11:b7:8a:bf:f5:f0:d7:bf: 62:65:18:35:b2:a5:0d:29:ae:16:13:51:b4:ae:2f: ad:a1:5e:4f:75:65:59:9b:e9:0b:77:20:ad:79:7c: 13:e4:08:ee:ac:2b:29:01:2b:65:ce:11:fb:b8:d1: 7b:e5:ba:50:e9:99:83:ab:dd:63:ce:09:be:54:ba: 6c:98:de:84:f7:c2:59:7f:5b:3c:45:8c:a8:c7:5b: df:68:62:e0:e6:d7:2e:d6:3b:fa:5c:8d:8d:87:19: 45:88:20:6a:2c:79:0b:4f:18:9f:1b:28:ea:5d:43: a4:c1:2d:7b:e2:ec:c3:e4:21:e9:24:27:eb:da:8e: f2:10:b2:ea:78:43:45:fa:a3:30:c0:54:22:49:37: 3a:a1:f2:46:2e:06:98:16:4d:17:61:9a:da:19:62: c0:f9:21:1c:7a:b9:ee:3b:ab:39:93:56:94:86:38: 50:b7:2e:f1:38:a4:92:b9:95:49:cf:ee:e9:d7:d5: 4a:0e:3d:35:fd:63:d6:ce:b8:a1:1f:c3:99:ab:39: 2e:c7:06:e1:b9:18:ff:c5:54:6c:14:ad:0b:d8:7c: 99:8e:eb:6d:ad:a1:6c:4a:b3:c3:3d:25:b3:62:fa: 0c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1B:23:2F:6D:47:D5:41:3F:72:9A:BE:2C:A0:35:DD:F7:DF:25:6A X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:43:de:13:ec:5b:b4:85:5e:5e:57:6b:5d:bc:9d:ee:9d:14: 8f:98:e1:d6:d4:9c:35:40:3e:71:d1:e9:38:f0:3b:01:37:52: de:7e:c9:4e:ef:04:8d:d7:44:cc:08:8b:71:7d:c9:92:73:b5: 51:6c:1d:e8:88:bf:f8:a0:14:43:1e:3d:e5:08:f4:a1:94:39: d7:15:88:5a:be:1a:65:6c:70:64:45:af:1a:ac:aa:d8:02:01: b2:97:66:73:ce:6c:5e:02:7e:76:75:18:a2:32:6b:57:95:7d: b3:98:31:26:86:00:99:e1:2f:6a:89:1f:6f:77:55:2f:fe:54: fc:37:9d:ef:66:4c:86:6d:0a:89:fc:d4:94:6e:64:2a:f0:77: 6b:4f:30:b0:bf:62:7a:82:11:3d:76:9f:b0:f6:80:37:99:4a: f9:16:78:56:1d:29:c4:22:be:0a:6b:2f:ba:47:d0:92:15:58: d2:4b:88:82:12:03:10:ff:a5:c3:5a:b9:71:4d:81:e9:bf:f1: a2:de:ac:37:fd:06:ad:f4:c9:f1:fa:d1:86:26:24:db:ec:11: 15:cc:d7:d2:3b:9a:5e:d1:c6:e7:cd:2f:59:76:36:07:86:87: 4e:c5:3d:d0:83:fc:3c:ff:5c:60:6f:ae:d8:31:ea:ae:3c:09: f6:1d:2c:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEDnHU662uBo0kvPlQPy/LmGuP2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjEwMTExOTAwNTJaFw0yNjEwMTUwMzM4NTJaMDMxMTAvBgNV BAMTKDcxMUIyMzJGNkQ0N0Q1NDEzRjcyOUFCRTJDQTAzNURERjdERjI1NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATuirnUR9l09wpb7mNlZWUsY1 kogRt4q/9fDXv2JlGDWypQ0prhYTUbSuL62hXk91ZVmb6Qt3IK15fBPkCO6sKykB K2XOEfu40XvlulDpmYOr3WPOCb5UumyY3oT3wll/WzxFjKjHW99oYuDm1y7WO/pc jY2HGUWIIGoseQtPGJ8bKOpdQ6TBLXvi7MPkIekkJ+vajvIQsup4Q0X6ozDAVCJJ Nzqh8kYuBpgWTRdhmtoZYsD5IRx6ue47qzmTVpSGOFC3LvE4pJK5lUnP7unX1UoO PTX9Y9bOuKEfw5mrOS7HBuG5GP/FVGwUrQvYfJmO622toWxKs8M9JbNi+gyLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcRsjL21H1UE/cpq+LKA13fffJWowHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5MTczMTQvMC85NTRBNURDOUI5NTYz OTQwQzkzOURBNUVENTRGMTAzMTg2MjlDODRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUPeE+xbtIVe XldrXbyd7p0Uj5jh1tScNUA+cdHpOPA7ATdS3n7JTu8EjddEzAiLcX3JknO1UWwd 6Ii/+KAUQx495Qj0oZQ51xWIWr4aZWxwZEWvGqyq2AIBspdmc85sXgJ+dnUYojJr V5V9s5gxJoYAmeEvaokfb3dVL/5U/Ded72ZMhm0KifzUlG5kKvB3a08wsL9ieoIR PXafsPaAN5lK+RZ4Vh0pxCK+CmsvukfQkhVY0kuIghIDEP+lw1q5cU2B6b/xot6s N/0GrfTJ8frRhiYk2+wRFczX0juaXtHG580vWXY2B4aHTsU90IP8PP9cYG+u2DHq rjwJ9h0sFA== -----END CERTIFICATE-----Generated at Tue Oct 13 06:04:09 2026 by rpki-client