$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft File: 954A5DC9B9563940C939DA5ED54F10318629C84D.mft (raw, json) Hash identifier: xRw7ELqKj/YOc6ZYmjLDi9Vk0lJo8qyVyBDQWeJWuXo= Subject key identifier: FE:1A:1D:D0:70:21:41:7A:45:98:EE:3C:A6:6F:FB:E6:46:F0:85:E4 Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 0F76EB8CB1CCB4FC84EC7B75CA3978B9C8970C08 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft Manifest number: 99 Signing time: Wed 13 May 2026 13:21:05 +0000 Manifest this update: Wed 13 May 2026 13:16:05 +0000 Manifest next update: Thu 14 May 2026 14:56:05 +0000 Files and hashes: 1: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (hash: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU=) 2: 954A5DC9B9563940C939DA5ED54F10318629C84D.crl (hash: C9rfTwVIJ3aT4JGcYiDnVUMFf1cT8p2MkgOJQaiJd08=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:76:eb:8c:b1:cc:b4:fc:84:ec:7b:75:ca:39:78:b9:c8:97:0c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: May 13 13:16:05 2026 GMT Not After : May 14 14:56:05 2026 GMT Subject: CN=FE1A1DD07021417A4598EE3CA66FFBE646F085E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:51:ea:1a:9f:3c:fb:47:3c:a8:c4:0c:c6:c7: d8:83:10:bb:5a:3f:dd:ab:7d:87:3e:40:ca:27:0f: d0:9f:ca:e3:5d:b6:05:05:6d:9f:51:59:e8:6e:be: be:b0:c7:18:38:39:bc:c6:8c:a8:f7:f8:fd:2a:a0: 99:b6:07:a4:66:f6:b0:00:7c:c4:e6:9b:7e:65:e2: fe:65:dc:08:68:93:1f:5c:93:23:d6:75:94:39:f4: 7b:6d:47:60:71:27:57:57:d6:9d:1b:75:e9:8b:48: 8f:ec:1f:7e:d4:ce:bc:d7:b3:de:1d:98:81:a3:ae: 06:4a:a8:a7:b6:ea:0f:97:2a:67:35:3d:17:9c:0e: 96:43:55:8d:87:a7:92:56:78:4b:c8:e1:35:50:83: 3a:50:3d:f0:d8:0b:9a:4b:17:b4:c0:b8:3b:cc:24: d4:8d:ca:bc:5f:16:f3:63:9d:f6:30:cd:38:27:e2: d1:ef:39:27:90:5f:e7:da:c7:13:5e:3d:ab:32:5b: e7:f0:a0:07:99:cf:17:83:ff:54:45:a5:3a:62:ce: 02:57:fa:28:4e:71:c9:6f:75:17:9c:87:70:65:46: 3f:40:bf:a7:53:fa:23:1d:3b:d7:10:de:d2:dc:9b: f2:7e:eb:26:38:db:a5:3a:52:ca:d5:78:11:dc:38: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1A:1D:D0:70:21:41:7A:45:98:EE:3C:A6:6F:FB:E6:46:F0:85:E4 X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:23:31:e5:c1:28:6b:cc:6b:dd:31:65:79:8b:9d:dd:40:54: d0:9b:92:30:27:37:3f:98:3d:ea:db:31:a7:40:d4:61:66:c1: 36:3a:33:04:c0:49:20:71:a5:52:d3:64:39:0d:b5:11:af:b2: ee:b1:3c:e5:7b:9a:d0:1f:7e:81:ee:8a:aa:90:b7:7a:3d:28: 90:15:66:b8:ef:dd:34:f6:75:12:e0:37:49:ae:e2:18:e1:46: e8:dd:db:33:8c:e7:54:51:e2:08:e7:1f:14:2a:c4:7f:f1:60: d8:16:f9:af:73:6b:35:fa:12:59:45:55:cb:da:83:45:f4:38: 28:84:86:b3:0f:0b:49:9d:34:b0:f3:6c:1b:15:b9:97:00:be: f7:cd:6c:81:ef:67:c9:c4:73:f3:d5:3d:a2:77:1a:06:66:1a: 3e:a2:2f:d8:1e:f9:db:7e:3a:79:e5:03:f4:51:c8:14:50:0a: a2:95:93:38:a2:3e:05:94:f0:da:dc:90:8e:8c:fa:66:48:7d: 95:03:c7:89:e9:b0:72:c3:9c:9b:46:b9:e3:14:f9:2a:ce:9d: c7:18:e3:85:9a:e3:62:57:c4:96:9d:d7:68:a7:21:e4:1f:91: 8e:ee:38:22:1f:e9:30:74:38:05:dc:bf:ac:b0:b5:e5:c9:e2: 7a:bf:ae:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD3brjLHMtPyE7Ht1yjl4uciXDAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjA1MTMxMzE2MDVaFw0yNjA1MTQxNDU2MDVaMDMxMTAvBgNV BAMTKEZFMUExREQwNzAyMTQxN0E0NTk4RUUzQ0E2NkZGQkU2NDZGMDg1RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgUeoanzz7RzyoxAzGx9iDELta P92rfYc+QMonD9CfyuNdtgUFbZ9RWehuvr6wxxg4ObzGjKj3+P0qoJm2B6Rm9rAA fMTmm35l4v5l3Ahokx9ckyPWdZQ59HttR2BxJ1dX1p0bdemLSI/sH37UzrzXs94d mIGjrgZKqKe26g+XKmc1PRecDpZDVY2Hp5JWeEvI4TVQgzpQPfDYC5pLF7TAuDvM JNSNyrxfFvNjnfYwzTgn4tHvOSeQX+faxxNePasyW+fwoAeZzxeD/1RFpTpizgJX +ihOcclvdRech3BlRj9Av6dT+iMdO9cQ3tLcm/J+6yY426U6UsrVeBHcOHoHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/hod0HAhQXpFmO48pm/75kbwheQwHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5MTczMTQvMC85NTRBNURDOUI5NTYz OTQwQzkzOURBNUVENTRGMTAzMTg2MjlDODRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCMx5cEoa8xr 3TFleYud3UBU0JuSMCc3P5g96tsxp0DUYWbBNjozBMBJIHGlUtNkOQ21Ea+y7rE8 5Xua0B9+ge6KqpC3ej0okBVmuO/dNPZ1EuA3Sa7iGOFG6N3bM4znVFHiCOcfFCrE f/Fg2Bb5r3NrNfoSWUVVy9qDRfQ4KISGsw8LSZ00sPNsGxW5lwC+981sge9nycRz 89U9oncaBmYaPqIv2B752346eeUD9FHIFFAKopWTOKI+BZTw2tyQjoz6Zkh9lQPH iemwcsOcm0a54xT5Ks6dxxjjhZrjYlfElp3XaKch5B+Rju44Ih/pMHQ4Bdy/rLC1 5cnier+uUg== -----END CERTIFICATE-----Generated at Wed May 13 19:42:32 2026 by rpki-client