$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft File: 954A5DC9B9563940C939DA5ED54F10318629C84D.mft (raw, json) Hash identifier: yqqY6Cn6U1HWWLZFiJi86OJltPR+Nei5K7V7Dbr3M64= Subject key identifier: DA:AD:21:BF:7F:D7:9E:EF:6E:02:D0:B5:B0:6A:F4:9E:D8:AB:39:36 Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 35F800BB3EF234849B73A29CDFFEC096A8E48FAF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft Manifest number: C3 Signing time: Sun 14 Jun 2026 02:52:38 +0000 Manifest this update: Sun 14 Jun 2026 02:47:38 +0000 Manifest next update: Mon 15 Jun 2026 06:31:38 +0000 Files and hashes: 1: 954A5DC9B9563940C939DA5ED54F10318629C84D.crl (hash: LhM61CEJiQLFYTB0wKGMez346x1NnuiGCAB9G6NF60c=) 2: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (hash: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f8:00:bb:3e:f2:34:84:9b:73:a2:9c:df:fe:c0:96:a8:e4:8f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: Jun 14 02:47:38 2026 GMT Not After : Jun 15 06:31:38 2026 GMT Subject: CN=DAAD21BF7FD79EEF6E02D0B5B06AF49ED8AB3936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2c:4a:3f:29:6c:ff:06:fb:68:7e:36:8d:c5: 2c:cd:43:98:7c:b7:3b:e6:bd:b7:e3:8c:7d:99:52: 82:77:0f:b4:03:2b:b2:9a:15:aa:c2:77:a4:92:f2: bf:f4:82:e7:75:ae:73:5b:e5:40:95:4a:f6:cd:12: db:5a:74:a3:ed:f1:99:51:c9:63:67:f2:ad:8d:96: 8f:8d:9c:24:3b:c4:bd:8d:80:db:5a:63:97:5b:5b: c0:a1:48:c8:cf:3a:7b:83:27:3b:f4:94:d2:25:53: cb:7d:9d:ae:41:47:88:de:4b:41:cb:30:4c:ef:98: d6:1b:e8:48:97:7b:eb:a3:5f:37:3e:ba:a1:8b:dd: 0e:be:d4:e2:e9:1b:47:73:34:16:93:1d:ad:a2:89: 80:85:02:e0:a1:02:79:ad:c5:da:51:a6:e0:ca:8b: 08:81:2a:df:d6:65:12:c3:e4:59:88:f2:17:29:df: 8e:ae:47:36:d2:f1:07:a4:55:b0:97:92:ca:c5:a3: 42:5a:1a:20:a9:80:06:9b:e4:e7:04:9f:2d:39:27: b5:8a:e7:ab:81:08:af:c3:46:08:aa:74:ae:a6:10: 75:d6:7e:82:f9:21:e6:9c:20:9f:2a:3a:ce:49:f3: c6:40:98:39:fb:c4:0e:23:50:d8:8f:26:59:ea:46: b1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AD:21:BF:7F:D7:9E:EF:6E:02:D0:B5:B0:6A:F4:9E:D8:AB:39:36 X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e7:53:85:3b:01:51:03:4e:d4:9a:6d:0f:9f:b8:15:d3:2c: 29:2f:02:4c:ac:f3:ab:54:bb:11:1b:64:52:70:57:6e:aa:d4: e9:3a:17:aa:8c:ca:34:f8:7e:84:ae:85:f7:a5:9f:fe:5e:57: b3:99:67:6e:a7:9a:4c:99:e3:45:dd:00:5f:74:18:4f:e2:d2: 3a:cd:fc:3f:ee:20:71:53:d7:71:fe:56:8d:a8:7c:a8:6a:fe: 35:2b:4f:01:c4:76:6c:eb:bb:0f:0e:44:91:bb:01:c4:26:bc: 14:92:cf:16:00:13:6e:3f:d2:c9:c9:58:5b:bb:b4:93:f0:fb: 70:b6:16:06:76:2a:7a:cb:76:09:eb:c8:c6:dc:57:7e:87:4e: 0a:cb:a2:c4:c2:4f:10:74:d1:16:57:32:ad:de:a4:96:21:75: 4b:66:61:65:e5:f4:00:f1:df:08:e5:b7:66:fd:f9:01:8d:14: 4f:6c:27:a0:dc:1e:a4:ca:5e:59:4d:5c:2d:2f:28:99:77:5c: 42:f2:93:1a:46:2e:f0:41:90:1c:d2:3b:23:96:a6:c7:2d:0b: aa:3a:91:ef:84:6f:95:35:d3:83:89:2b:b7:21:13:eb:6e:37: b3:63:0c:25:60:fb:cc:6b:ac:77:2d:05:e7:15:fa:ae:d9:6b: 84:a0:f2:dc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNfgAuz7yNISbc6Kc3/7Alqjkj68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjA2MTQwMjQ3MzhaFw0yNjA2MTUwNjMxMzhaMDMxMTAvBgNV BAMTKERBQUQyMUJGN0ZENzlFRUY2RTAyRDBCNUIwNkFGNDlFRDhBQjM5MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLEo/KWz/BvtofjaNxSzNQ5h8 tzvmvbfjjH2ZUoJ3D7QDK7KaFarCd6SS8r/0gud1rnNb5UCVSvbNEttadKPt8ZlR yWNn8q2Nlo+NnCQ7xL2NgNtaY5dbW8ChSMjPOnuDJzv0lNIlU8t9na5BR4jeS0HL MEzvmNYb6EiXe+ujXzc+uqGL3Q6+1OLpG0dzNBaTHa2iiYCFAuChAnmtxdpRpuDK iwiBKt/WZRLD5FmI8hcp346uRzbS8QekVbCXksrFo0JaGiCpgAab5OcEny05J7WK 56uBCK/DRgiqdK6mEHXWfoL5IeacIJ8qOs5J88ZAmDn7xA4jUNiPJlnqRrHdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2q0hv3/Xnu9uAtC1sGr0ntirOTYwHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5MTczMTQvMC85NTRBNURDOUI5NTYz OTQwQzkzOURBNUVENTRGMTAzMTg2MjlDODRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFudThTsBUQNO 1JptD5+4FdMsKS8CTKzzq1S7ERtkUnBXbqrU6ToXqozKNPh+hK6F96Wf/l5Xs5ln bqeaTJnjRd0AX3QYT+LSOs38P+4gcVPXcf5Wjah8qGr+NStPAcR2bOu7Dw5EkbsB xCa8FJLPFgATbj/SyclYW7u0k/D7cLYWBnYqest2CevIxtxXfodOCsuixMJPEHTR Flcyrd6kliF1S2ZhZeX0APHfCOW3Zv35AY0UT2wnoNwepMpeWU1cLS8omXdcQvKT GkYu8EGQHNI7I5amxy0LqjqR74RvlTXTg4krtyET6243s2MMJWD7zGusdy0F5xX6 rtlrhKDy3A== -----END CERTIFICATE-----Generated at Sun Jun 14 07:10:24 2026 by rpki-client