$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft File: 654C69951CF087D0BC74151532E452AE157FCCCB.mft (raw, json) Hash identifier: wG1fMzboKgkCAwN1Fygv/uqdXh0iDH8z+Y6Z9SFmdN0= Subject key identifier: C4:2A:79:5B:99:26:CB:EC:74:1C:43:12:05:DE:E2:9D:92:C9:3E:56 Authority key identifier: 65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB Certificate issuer: /CN=654C69951CF087D0BC74151532E452AE157FCCCB Certificate serial: 0BC28E4076D93374530CAF25F90211D2DB719C97 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft Manifest number: 45 Signing time: Fri 24 Jul 2026 08:30:46 +0000 Manifest this update: Fri 24 Jul 2026 08:25:46 +0000 Manifest next update: Sat 25 Jul 2026 11:48:46 +0000 Files and hashes: 1: 3130332e3134362e3132362e302f32332d3233203d3e2034383038.roa (hash: C3frltR1t3bQDu+F7qcDmwSg2cgzyaJJekrxhs4+M0s=) 2: 654C69951CF087D0BC74151532E452AE157FCCCB.crl (hash: 0YVL5nE9qzb3AeO6f9WAXeL4gfpMWq6B57Z5nyimtPI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c2:8e:40:76:d9:33:74:53:0c:af:25:f9:02:11:d2:db:71:9c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654C69951CF087D0BC74151532E452AE157FCCCB Validity Not Before: Jul 24 08:25:46 2026 GMT Not After : Jul 25 11:48:46 2026 GMT Subject: CN=C42A795B9926CBEC741C431205DEE29D92C93E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9b:e2:5a:4a:35:79:f6:09:45:0c:4e:f4:b6: be:9f:bb:ba:e2:ed:0f:a4:83:3d:f0:e7:c2:1e:64: 50:de:12:5e:02:f5:5c:71:46:9a:a6:54:b1:19:fb: 42:06:95:63:d5:fe:f7:6c:39:57:ec:fb:55:68:46: cc:8f:6d:16:8d:1f:6e:0c:26:aa:53:86:06:4b:d1: 6b:d7:a0:dd:91:fa:b1:42:28:c2:3a:0e:29:7a:5c: f9:d2:b0:0a:de:ec:d5:bf:e6:dd:ca:70:6c:e4:c8: ed:a4:79:ad:ae:24:d9:c0:88:27:ec:23:d9:c7:1f: c0:93:47:a9:43:77:99:ef:6f:a8:50:40:09:f6:c0: 2b:dd:e4:ae:6a:17:77:ee:09:0c:8b:75:ca:52:83: 15:52:93:3d:fd:d7:24:b3:c3:47:62:a6:a3:ab:18: eb:e5:22:5f:10:1c:07:fc:32:e4:17:0b:54:4c:92: f0:ea:60:db:f2:d9:f2:2a:69:c7:b1:b3:69:b2:80: f1:f0:3a:c6:f0:1b:02:d2:fb:8c:32:d7:9b:b4:f0: 16:cd:73:65:68:80:a4:c8:c5:b3:86:2a:6d:a3:4f: 85:87:ae:ae:16:3d:b1:98:5f:92:b7:41:8f:13:d5: d3:32:52:14:39:10:88:10:da:a2:3e:4c:e4:5e:94: 0f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2A:79:5B:99:26:CB:EC:74:1C:43:12:05:DE:E2:9D:92:C9:3E:56 X509v3 Authority Key Identifier: keyid:65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:2f:6b:c9:7f:bc:b3:71:5e:20:9b:33:dd:a2:96:c0:c9:18: 3d:84:93:78:94:ed:cf:91:58:9e:87:b7:b2:8b:f0:b2:ae:ef: de:d4:1f:dc:61:9e:51:7b:d9:c9:7d:bd:8d:f5:38:2d:36:f7: 37:f8:09:7d:e8:10:ff:d9:32:83:09:14:03:b2:c8:50:94:c9: 5a:3f:7d:b0:b0:67:cf:77:3b:ff:9c:f6:f7:f4:50:67:1b:1e: 46:67:e9:fa:b7:20:0b:86:9a:b9:d9:61:76:80:ac:08:ff:be: 3c:27:6a:ab:02:bd:26:97:0a:1d:44:ff:91:6f:01:22:82:bc: 33:e9:ab:d3:2c:aa:65:1d:be:9c:6d:78:72:7b:d2:c0:42:42: c5:7d:c8:04:f1:cd:78:81:07:1f:34:ca:cf:5e:2e:67:45:22: 10:22:8c:6f:5c:9a:74:8e:7a:24:7c:0d:c4:f4:0d:f2:37:39: 96:dd:5f:04:ce:11:1e:ee:49:16:43:7a:e8:a2:b8:55:2d:2c: 77:45:91:7d:2c:9a:d3:50:37:81:6b:94:3a:6d:7d:ac:e1:e2: 43:27:fb:6a:ca:17:ba:2c:bf:8c:94:18:0f:6c:0d:fc:ae:ef: 53:6d:2b:26:57:08:f2:f9:01:8b:de:47:c6:d5:0a:bd:a2:15: c9:90:49:b7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC8KOQHbZM3RTDK8l+QIR0ttxnJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUx NTdGQ0NDQjAeFw0yNjA3MjQwODI1NDZaFw0yNjA3MjUxMTQ4NDZaMDMxMTAvBgNV BAMTKEM0MkE3OTVCOTkyNkNCRUM3NDFDNDMxMjA1REVFMjlEOTJDOTNFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdm+JaSjV59glFDE70tr6fu7ri 7Q+kgz3w58IeZFDeEl4C9VxxRpqmVLEZ+0IGlWPV/vdsOVfs+1VoRsyPbRaNH24M JqpThgZL0WvXoN2R+rFCKMI6Dil6XPnSsAre7NW/5t3KcGzkyO2kea2uJNnAiCfs I9nHH8CTR6lDd5nvb6hQQAn2wCvd5K5qF3fuCQyLdcpSgxVSkz391ySzw0dipqOr GOvlIl8QHAf8MuQXC1RMkvDqYNvy2fIqacexs2mygPHwOsbwGwLS+4wy15u08BbN c2VogKTIxbOGKm2jT4WHrq4WPbGYX5K3QY8T1dMyUhQ5EIgQ2qI+TORelA8lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxCp5W5kmy+x0HEMSBd7inZLJPlYwHwYDVR0j BBgwFoAUZUxplRzwh9C8dBUVMuRSrhV/zMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDgzOTYxNDI5MzU0MDg5MS8wLzY1NEM2OTk1MUNGMDg3RDBCQzc0MTUxNTMyRTQ1 MkFFMTU3RkNDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUxNTdGQ0NDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4Mzk2MTQyOTM1NDA4OTEvMC82NTRDNjk5NTFDRjA4 N0QwQkM3NDE1MTUzMkU0NTJBRTE1N0ZDQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJi9ryX+8s3Fe IJsz3aKWwMkYPYSTeJTtz5FYnoe3sovwsq7v3tQf3GGeUXvZyX29jfU4LTb3N/gJ fegQ/9kygwkUA7LIUJTJWj99sLBnz3c7/5z29/RQZxseRmfp+rcgC4aaudlhdoCs CP++PCdqqwK9JpcKHUT/kW8BIoK8M+mr0yyqZR2+nG14cnvSwEJCxX3IBPHNeIEH HzTKz14uZ0UiECKMb1yadI56JHwNxPQN8jc5lt1fBM4RHu5JFkN66KK4VS0sd0WR fSya01A3gWuUOm19rOHiQyf7asoXuiy/jJQYD2wN/K7vU20rJlcI8vkBi95HxtUK vaIVyZBJtw== -----END CERTIFICATE-----Generated at Fri Jul 24 15:43:53 2026 by rpki-client