$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft File: 954A5DC9B9563940C939DA5ED54F10318629C84D.mft (raw, json) Hash identifier: kXH82v/5gMobCMJGpqf1Q9Vx2VKbREESlwgmt/jgwwg= Subject key identifier: D4:39:33:37:4F:11:51:A0:57:1B:33:9B:4A:22:FB:2A:27:1E:49:FC Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 3F98D4B61B5FAFAE5D034F4DFDB04680DF2D4EB0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft Manifest number: FF Signing time: Wed 29 Jul 2026 18:24:54 +0000 Manifest this update: Wed 29 Jul 2026 18:19:54 +0000 Manifest next update: Thu 30 Jul 2026 18:25:54 +0000 Files and hashes: 1: 954A5DC9B9563940C939DA5ED54F10318629C84D.crl (hash: Gz3vsX2AsOgEmP/4dIoGVstxS2XMKhF/kOsc4hMyJwE=) 2: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (hash: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 18:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:98:d4:b6:1b:5f:af:ae:5d:03:4f:4d:fd:b0:46:80:df:2d:4e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: Jul 29 18:19:54 2026 GMT Not After : Jul 30 18:25:54 2026 GMT Subject: CN=D43933374F1151A0571B339B4A22FB2A271E49FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:18:3c:e7:4c:f8:9a:98:fa:07:d4:f1:e6: a8:ca:e6:12:53:08:d9:fc:fe:df:99:a6:9a:ec:0d: 36:f2:ff:43:b4:14:c7:61:a3:02:f8:1e:98:57:02: 8f:d4:a7:c4:7d:c4:d4:a3:c0:ec:31:fb:66:d1:37: ef:58:e1:8e:3a:78:51:f6:fe:cf:f7:e9:f9:56:e8: ae:cb:8d:fe:c0:2b:2a:bf:28:9d:8d:60:a1:65:9d: 74:d8:c0:18:f0:ad:f8:dc:73:42:bf:df:54:9b:b3: 48:30:65:3e:3e:a5:97:e7:a7:fa:72:83:c6:49:a4: 3b:ab:c9:48:e9:23:31:fc:66:2a:78:89:05:0d:f5: 6a:25:1c:b9:77:99:ff:f5:e1:ac:1d:bf:71:01:c0: 60:f6:81:8c:5c:6d:ec:c3:bf:fe:d2:55:94:85:19: 48:e5:d1:98:2c:aa:0e:8b:da:b4:36:01:11:16:81: a3:57:03:e6:0d:e9:27:c9:46:f0:a3:89:e0:5d:84: a6:ee:ec:e6:f2:b8:f4:ea:0d:05:a1:26:c0:0c:88: 14:56:57:26:a6:73:29:88:4a:79:bb:7a:3b:58:c1: c8:78:e4:c4:cd:3f:ed:a7:8f:88:eb:1f:1f:28:5f: 9a:fd:97:ac:94:8a:06:1d:10:f9:5f:9f:97:67:b1: b4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:39:33:37:4F:11:51:A0:57:1B:33:9B:4A:22:FB:2A:27:1E:49:FC X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:59:42:2e:15:b9:ba:47:53:92:90:da:27:00:8b:b5:d6:cc: 89:e6:9e:4f:39:89:af:c5:8c:d9:e9:70:4c:0c:d9:b3:24:69: 39:27:52:cf:b3:20:f9:df:cd:b7:3c:39:d5:f2:eb:7b:dc:e1: d2:42:48:f0:83:80:7d:28:23:17:94:2c:6f:b8:fa:a4:f8:1e: 23:f3:c6:d7:2f:99:67:8d:a1:8c:46:66:3a:87:82:76:96:48: 1f:75:ee:77:71:fa:66:f9:9e:2d:15:75:0b:11:88:80:2b:2b: 49:8e:58:f9:b3:3a:7f:91:96:7d:d0:c1:83:a8:f2:3c:92:68: a7:be:e6:d1:7d:2d:e2:20:90:a8:5c:ac:2d:9c:84:58:f7:8e: ee:26:68:91:fc:0d:89:2e:04:26:5e:4c:cf:11:f1:a0:50:f9: ec:50:05:88:cb:82:57:97:d1:8a:3c:af:df:aa:39:0d:11:69: 33:d0:39:58:a8:44:66:ca:01:74:88:fd:96:6f:fc:ce:e4:d8: 1b:c1:5d:64:b0:51:2e:18:6f:72:32:21:e8:ef:9d:f4:52:d2: 97:3e:0a:70:06:da:33:a8:ae:90:d7:29:b7:63:b0:f5:62:b9: b8:9f:ef:5e:a0:f0:32:9b:f0:bc:59:27:33:92:32:02:6c:32: 3b:15:c3:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP5jUthtfr65dA09N/bBGgN8tTrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjA3MjkxODE5NTRaFw0yNjA3MzAxODI1NTRaMDMxMTAvBgNV BAMTKEQ0MzkzMzM3NEYxMTUxQTA1NzFCMzM5QjRBMjJGQjJBMjcxRTQ5RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15Rg850z4mpj6B9Tx5qjK5hJT CNn8/t+ZpprsDTby/0O0FMdhowL4HphXAo/Up8R9xNSjwOwx+2bRN+9Y4Y46eFH2 /s/36flW6K7Ljf7AKyq/KJ2NYKFlnXTYwBjwrfjcc0K/31Sbs0gwZT4+pZfnp/py g8ZJpDuryUjpIzH8Zip4iQUN9WolHLl3mf/14awdv3EBwGD2gYxcbezDv/7SVZSF GUjl0Zgsqg6L2rQ2AREWgaNXA+YN6SfJRvCjieBdhKbu7ObyuPTqDQWhJsAMiBRW VyamcymISnm7ejtYwch45MTNP+2nj4jrHx8oX5r9l6yUigYdEPlfn5dnsbSpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1DkzN08RUaBXGzObSiL7KiceSfwwHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5MTczMTQvMC85NTRBNURDOUI5NTYz OTQwQzkzOURBNUVENTRGMTAzMTg2MjlDODRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFllCLhW5ukdT kpDaJwCLtdbMieaeTzmJr8WM2elwTAzZsyRpOSdSz7Mg+d/Ntzw51fLre9zh0kJI 8IOAfSgjF5Qsb7j6pPgeI/PG1y+ZZ42hjEZmOoeCdpZIH3Xud3H6ZvmeLRV1CxGI gCsrSY5Y+bM6f5GWfdDBg6jyPJJop77m0X0t4iCQqFysLZyEWPeO7iZokfwNiS4E Jl5MzxHxoFD57FAFiMuCV5fRijyv36o5DRFpM9A5WKhEZsoBdIj9lm/8zuTYG8Fd ZLBRLhhvcjIh6O+d9FLSlz4KcAbaM6iukNcpt2Ow9WK5uJ/vXqDwMpvwvFknM5Iy AmwyOxXDug== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:08 2026 by rpki-client