$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft File: 654C69951CF087D0BC74151532E452AE157FCCCB.mft (raw, json) Hash identifier: ViM8vWG+t/nENL8UKg6K2EvXNlj3/tIFc3vlu9Zte5A= Subject key identifier: D0:4C:A3:7A:78:A2:80:2A:31:74:F0:C7:CA:64:6B:95:7B:BD:00:48 Authority key identifier: 65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB Certificate issuer: /CN=654C69951CF087D0BC74151532E452AE157FCCCB Certificate serial: 3F5BDA8D3EF13B0B929F9155994F3780BC79AE8C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft Manifest number: 87 Signing time: Fri 09 Oct 2026 19:18:41 +0000 Manifest this update: Fri 09 Oct 2026 19:13:41 +0000 Manifest next update: Tue 13 Oct 2026 04:23:41 +0000 Files and hashes: 1: 3130332e3134362e3132362e302f32332d3233203d3e2034383038.roa (hash: C3frltR1t3bQDu+F7qcDmwSg2cgzyaJJekrxhs4+M0s=) 2: 654C69951CF087D0BC74151532E452AE157FCCCB.crl (hash: EpxggA6eLbJFSVasjHecA1fYKao/8zqIVrVUuXPRFFo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 04:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:5b:da:8d:3e:f1:3b:0b:92:9f:91:55:99:4f:37:80:bc:79:ae:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654C69951CF087D0BC74151532E452AE157FCCCB Validity Not Before: Oct 9 19:13:41 2026 GMT Not After : Oct 13 04:23:41 2026 GMT Subject: CN=D04CA37A78A2802A3174F0C7CA646B957BBD0048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2f:6b:76:84:7b:59:7d:41:27:17:e0:65:bd: 0d:ed:14:ed:04:af:f5:f1:20:49:e5:c2:46:bd:91: 3c:85:2a:4a:1c:e2:87:f5:fa:9e:b0:81:2f:89:66: 20:1f:4f:83:ab:4e:be:1b:ec:61:eb:f3:55:d6:73: 21:1b:02:19:69:20:10:7c:27:40:28:30:9c:97:99: c4:65:26:a0:5f:c2:3b:3d:01:be:7d:ad:f9:96:e6: 13:4d:fd:7f:2b:da:9e:66:76:69:91:2d:8f:44:97: b4:b3:9e:20:a6:29:76:9f:a2:55:c3:5e:d4:8f:17: 63:f4:98:39:f6:64:a7:d1:b2:b5:6a:35:dd:7a:69: 48:51:29:3f:a5:7b:ac:e7:6b:2d:91:d3:33:7f:82: fe:fa:57:7c:e9:de:84:15:93:11:cc:66:d3:d5:b2: 56:e9:4e:9d:d4:7a:59:0b:33:3f:cf:aa:5c:78:40: 16:09:3a:9b:47:5d:94:ec:46:e8:c7:d9:66:9b:d9: 9d:e7:6c:a5:e9:91:ab:ea:47:29:4b:01:00:96:31: 72:b7:4d:c9:c4:6e:4a:c8:75:4f:cd:69:12:11:24: 3b:74:15:c0:8b:9a:69:1f:bd:b8:5d:8f:19:b7:8b: 12:de:2e:67:4d:46:3c:19:d0:21:22:25:70:09:8f: 41:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4C:A3:7A:78:A2:80:2A:31:74:F0:C7:CA:64:6B:95:7B:BD:00:48 X509v3 Authority Key Identifier: keyid:65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:16:74:f5:1a:d2:f8:4e:b8:7a:d8:62:cd:45:e6:b5:5e:76: fd:c0:43:ff:68:b7:6a:91:12:2c:a5:8e:63:21:ce:22:8f:75: e0:3e:fb:01:c4:08:9b:10:52:ff:fa:a1:de:fd:88:11:14:ba: fb:f8:d4:99:cf:8a:6f:09:51:cc:6a:93:53:6f:4e:bb:71:56: ff:6a:a4:9b:b5:b6:7d:ee:e0:f9:98:2b:41:6b:6f:eb:79:e6: 61:69:35:40:41:21:3d:0c:20:7e:b5:81:19:bd:81:9c:8e:b0: e3:47:e8:f0:96:ca:c2:75:f2:b0:e6:bf:bb:d6:a3:a6:c7:4f: df:71:eb:1f:b3:cf:31:ce:a7:6c:ba:07:23:95:ee:ad:5d:b0: 94:35:93:79:bd:ff:18:bf:20:39:b5:85:19:f1:b4:f7:e4:f1: 69:bc:b5:5f:10:5c:c2:31:e8:19:a7:b2:8b:59:5e:6e:4b:d8: 8c:c2:a9:ad:53:df:cd:4a:b3:f0:05:c3:ed:4f:5b:44:e3:f8: 6f:9d:2e:6e:f3:52:e4:62:49:29:ae:82:00:e5:bf:7f:b1:84: 9b:02:5f:4f:38:c5:92:33:32:95:c1:87:74:3f:b5:e8:e4:46: e5:12:f0:64:27:63:17:a7:1b:95:d3:19:b9:70:a1:f3:66:f0: 19:6e:af:06 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP1vajT7xOwuSn5FVmU83gLx5rowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUx NTdGQ0NDQjAeFw0yNjEwMDkxOTEzNDFaFw0yNjEwMTMwNDIzNDFaMDMxMTAvBgNV BAMTKEQwNENBMzdBNzhBMjgwMkEzMTc0RjBDN0NBNjQ2Qjk1N0JCRDAwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtL2t2hHtZfUEnF+BlvQ3tFO0E r/XxIEnlwka9kTyFKkoc4of1+p6wgS+JZiAfT4OrTr4b7GHr81XWcyEbAhlpIBB8 J0AoMJyXmcRlJqBfwjs9Ab59rfmW5hNN/X8r2p5mdmmRLY9El7SzniCmKXafolXD XtSPF2P0mDn2ZKfRsrVqNd16aUhRKT+le6znay2R0zN/gv76V3zp3oQVkxHMZtPV slbpTp3UelkLMz/Pqlx4QBYJOptHXZTsRujH2Wab2Z3nbKXpkavqRylLAQCWMXK3 TcnEbkrIdU/NaRIRJDt0FcCLmmkfvbhdjxm3ixLeLmdNRjwZ0CEiJXAJj0FhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0EyjeniigCoxdPDHymRrlXu9AEgwHwYDVR0j BBgwFoAUZUxplRzwh9C8dBUVMuRSrhV/zMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDgzOTYxNDI5MzU0MDg5MS8wLzY1NEM2OTk1MUNGMDg3RDBCQzc0MTUxNTMyRTQ1 MkFFMTU3RkNDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUxNTdGQ0NDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4Mzk2MTQyOTM1NDA4OTEvMC82NTRDNjk5NTFDRjA4 N0QwQkM3NDE1MTUzMkU0NTJBRTE1N0ZDQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRZ09RrS+E64 ethizUXmtV52/cBD/2i3apESLKWOYyHOIo914D77AcQImxBS//qh3v2IERS6+/jU mc+KbwlRzGqTU29Ou3FW/2qkm7W2fe7g+ZgrQWtv63nmYWk1QEEhPQwgfrWBGb2B nI6w40fo8JbKwnXysOa/u9ajpsdP33HrH7PPMc6nbLoHI5XurV2wlDWTeb3/GL8g ObWFGfG09+Txaby1XxBcwjHoGaeyi1lebkvYjMKprVPfzUqz8AXD7U9bROP4b50u bvNS5GJJKa6CAOW/f7GEmwJfTzjFkjMylcGHdD+16ORG5RLwZCdjF6cbldMZuXCh 82bwGW6vBg== -----END CERTIFICATE-----Generated at Sun Oct 11 18:39:49 2026 by rpki-client