$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft File: 954A5DC9B9563940C939DA5ED54F10318629C84D.mft (raw, json) Hash identifier: vUl4rn0VNkhfbqbli9j8YAiBUIiMGcVhvtXwsWtKJeE= Subject key identifier: 6A:75:BB:DC:8E:A5:BD:2E:B9:C3:2C:CE:88:D6:A5:F7:46:91:53:C8 Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 0A8C413A3E829EAB1705AF05A5402116FF30A6F4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft Manifest number: 76 Signing time: Thu 16 Apr 2026 23:44:36 +0000 Manifest this update: Thu 16 Apr 2026 23:39:36 +0000 Manifest next update: Sat 18 Apr 2026 01:14:36 +0000 Files and hashes: 1: 954A5DC9B9563940C939DA5ED54F10318629C84D.crl (hash: arZzHHM9BG9W4w0g8zq/GoXYxxsU/PlAPN9aTuHNEaY=) 2: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (hash: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 01:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8c:41:3a:3e:82:9e:ab:17:05:af:05:a5:40:21:16:ff:30:a6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: Apr 16 23:39:36 2026 GMT Not After : Apr 18 01:14:36 2026 GMT Subject: CN=6A75BBDC8EA5BD2EB9C32CCE88D6A5F7469153C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c6:e3:51:67:6d:41:15:ef:f1:9c:95:62:c2: e1:9f:98:75:e8:bd:c6:5f:ef:40:15:03:45:c6:7d: 68:ad:12:2f:5f:17:de:b1:40:92:de:36:c3:36:35: 07:40:39:ac:ab:05:bb:86:6f:d7:71:71:96:cb:ec: 1b:3a:4a:23:be:76:cc:b5:2d:c0:08:36:6d:d2:42: ef:76:cc:bf:bc:c5:b7:9a:17:81:d6:f3:41:0b:f5: 79:0e:b0:66:d9:86:d7:e4:ed:fe:37:93:98:0e:1f: 47:78:9d:17:cf:e7:78:ca:78:86:a7:ed:fa:9c:0e: ac:7f:4d:ff:06:9d:8d:07:ec:30:d0:7d:d1:41:04: f6:55:ae:e9:41:f2:fc:8e:d7:59:d3:07:97:91:55: a2:7e:91:f1:b9:20:f8:70:0d:c5:46:c5:fc:ec:da: a1:18:2c:e4:49:d4:b3:0b:60:8b:83:7c:33:82:63: 54:eb:b5:22:12:ca:85:01:8d:31:e0:53:fb:0b:05: 30:25:5e:40:cd:0c:82:5d:99:c1:0b:67:7a:8f:ee: 81:33:85:26:2c:2a:3e:bc:93:df:8c:f7:de:18:60: 56:2f:43:ef:0c:c9:12:4b:f5:23:0a:79:ba:f2:ac: 9d:36:b7:7b:c8:c3:1f:ba:0e:29:db:b7:d6:aa:56: 61:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:75:BB:DC:8E:A5:BD:2E:B9:C3:2C:CE:88:D6:A5:F7:46:91:53:C8 X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:0d:ac:80:5e:2e:f9:81:c3:03:c8:3e:8f:a4:da:d3:8b:95: 8f:1f:f9:55:64:63:4b:ab:e1:f5:c6:11:80:a4:05:e2:48:33: d3:62:87:64:4d:19:49:5e:26:f5:46:f0:ac:60:9a:0d:8d:63: de:7d:a3:ee:5c:17:2c:98:93:5f:a3:09:07:cd:1d:05:8e:a5: 71:6a:a0:8a:1c:8c:91:14:e1:44:54:8c:74:81:fd:b7:f6:c0: b4:6e:46:4d:92:7e:b6:3d:12:7e:6f:c7:9c:00:fd:de:e1:89: b6:48:c0:1a:14:2d:49:f6:87:24:a7:b4:f5:38:f9:ca:97:c4: bc:55:30:d3:7a:bc:66:9d:23:04:55:c5:c5:6c:c7:44:3e:17: 3b:aa:dd:06:50:eb:3a:e3:cb:c5:f8:32:38:eb:df:99:a4:0d: be:c9:c6:60:8c:aa:36:8d:53:c0:a0:0e:8b:52:b7:e2:82:35: 77:1e:4c:74:3c:27:8c:8e:7c:67:e5:16:93:05:21:03:be:f4: d3:b2:f0:30:94:95:89:15:8c:5b:80:d5:89:05:a7:1e:96:53: b5:de:94:27:e4:cf:f5:82:32:94:72:40:4e:3a:00:1c:f3:ee: 66:9f:74:55:ee:16:fa:13:9c:6d:3c:0d:4a:60:0e:93:bb:27: fe:11:09:20 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCoxBOj6CnqsXBa8FpUAhFv8wpvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjA0MTYyMzM5MzZaFw0yNjA0MTgwMTE0MzZaMDMxMTAvBgNV BAMTKDZBNzVCQkRDOEVBNUJEMkVCOUMzMkNDRTg4RDZBNUY3NDY5MTUzQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoxuNRZ21BFe/xnJViwuGfmHXo vcZf70AVA0XGfWitEi9fF96xQJLeNsM2NQdAOayrBbuGb9dxcZbL7Bs6SiO+dsy1 LcAINm3SQu92zL+8xbeaF4HW80EL9XkOsGbZhtfk7f43k5gOH0d4nRfP53jKeIan 7fqcDqx/Tf8GnY0H7DDQfdFBBPZVrulB8vyO11nTB5eRVaJ+kfG5IPhwDcVGxfzs 2qEYLORJ1LMLYIuDfDOCY1TrtSISyoUBjTHgU/sLBTAlXkDNDIJdmcELZ3qP7oEz hSYsKj68k9+M994YYFYvQ+8MyRJL9SMKebryrJ02t3vIwx+6Dinbt9aqVmFBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUanW73I6lvS65wyzOiNal90aRU8gwHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5MTczMTQvMC85NTRBNURDOUI5NTYz OTQwQzkzOURBNUVENTRGMTAzMTg2MjlDODRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQ2sgF4u+YHD A8g+j6Ta04uVjx/5VWRjS6vh9cYRgKQF4kgz02KHZE0ZSV4m9UbwrGCaDY1j3n2j 7lwXLJiTX6MJB80dBY6lcWqgihyMkRThRFSMdIH9t/bAtG5GTZJ+tj0Sfm/HnAD9 3uGJtkjAGhQtSfaHJKe09Tj5ypfEvFUw03q8Zp0jBFXFxWzHRD4XO6rdBlDrOuPL xfgyOOvfmaQNvsnGYIyqNo1TwKAOi1K34oI1dx5MdDwnjI58Z+UWkwUhA77007Lw MJSViRWMW4DViQWnHpZTtd6UJ+TP9YIylHJATjoAHPPuZp90Ve4W+hOcbTwNSmAO k7sn/hEJIA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:24:15 2026 by rpki-client