$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft File: 954A5DC9B9563940C939DA5ED54F10318629C84D.mft (raw, json) Hash identifier: tZ5S5kZZX1E/aKPfem7itu0mJvFUM7QQDT3p3lnXwr4= Subject key identifier: 76:F8:EE:06:5C:54:E9:D6:FF:05:3E:FE:3B:AD:15:97:F8:A3:CF:26 Authority key identifier: 95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D Certificate issuer: /CN=954A5DC9B9563940C939DA5ED54F10318629C84D Certificate serial: 747D2637C915748DB1958135989C389AA2D31D16 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 23:23:16 +0000 Manifest this update: Sun 01 Mar 2026 23:18:16 +0000 Manifest next update: Tue 03 Mar 2026 01:32:16 +0000 Files and hashes: 1: 3231312e38382e302e302f31362d3332203d3e2039333036.roa (hash: n/MR28Y0o/lgk94yQZrDbIfBa0IAylijqcKATe8MMHU=) 2: 954A5DC9B9563940C939DA5ED54F10318629C84D.crl (hash: CCUUf5sOivbkCCMJe9q/15nmm0KnAkKCn0khOweoA9k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 01:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7d:26:37:c9:15:74:8d:b1:95:81:35:98:9c:38:9a:a2:d3:1d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954A5DC9B9563940C939DA5ED54F10318629C84D Validity Not Before: Mar 1 23:18:16 2026 GMT Not After : Mar 3 01:32:16 2026 GMT Subject: CN=76F8EE065C54E9D6FF053EFE3BAD1597F8A3CF26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:6e:db:56:78:c9:f4:e3:cf:5d:21:ee:42: 67:2b:e0:53:5a:bc:9a:1c:a2:93:fc:06:04:74:2e: 55:6b:41:2c:d1:4c:1b:4b:eb:de:24:bc:7d:ea:5e: 78:da:5a:8c:dd:67:41:d5:d3:df:11:04:ea:b0:cd: b1:32:be:68:8c:e8:c8:e0:14:96:9f:7b:ef:39:99: 6f:6d:c1:85:46:e9:12:15:1b:63:a0:3a:bf:73:86: de:79:9d:80:e4:15:d5:8a:11:d0:99:71:b6:0f:3c: 2d:84:4c:d7:b4:c3:e2:c1:3c:89:ea:f1:58:a1:be: bd:71:62:53:e1:cb:21:26:94:1b:11:d5:89:b1:7c: 08:9d:05:48:73:7c:4c:a0:95:0b:1e:56:8b:8c:bf: ef:23:8a:d2:4d:1b:60:0e:dc:6f:bb:e4:6c:33:c5: a2:0e:03:e4:45:22:84:ae:e9:c8:75:3a:97:77:80: 20:af:3d:87:7a:55:c8:95:08:bd:c3:2e:0e:cb:a8: 21:8f:72:5a:4a:3b:2d:d0:e8:3a:ff:1e:8f:ca:28: b8:01:63:1a:8e:5f:18:17:7e:23:1e:96:eb:97:ee: e1:0f:86:3f:bb:87:f1:7b:d9:2e:fa:88:89:de:87: 4f:c3:9e:7b:9b:cc:f5:a0:f4:39:bc:9f:e1:33:dc: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F8:EE:06:5C:54:E9:D6:FF:05:3E:FE:3B:AD:15:97:F8:A3:CF:26 X509v3 Authority Key Identifier: keyid:95:4A:5D:C9:B9:56:39:40:C9:39:DA:5E:D5:4F:10:31:86:29:C8:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/954A5DC9B9563940C939DA5ED54F10318629C84D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371917314/0/954A5DC9B9563940C939DA5ED54F10318629C84D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:37:ba:76:61:16:66:e7:0d:db:f4:80:dd:96:b8:12:eb:72: 84:93:41:7f:4d:00:96:76:a5:2f:1b:51:a4:f5:4c:93:ab:81: 1d:6a:ef:bc:35:60:e9:67:2a:b2:da:1a:b2:ae:64:3d:8a:bf: 13:3d:07:c2:ce:82:4e:68:95:af:04:db:39:18:91:d5:37:4e: fe:56:29:10:e2:ca:7c:4f:93:c2:0c:a5:46:a9:8d:fa:56:39: 97:ec:ba:2e:03:a1:25:a9:b2:15:17:3f:c7:4d:0d:dc:6c:77: f4:fe:bc:2d:06:79:21:6e:27:fa:7f:94:52:9b:ca:a9:e6:47: e0:1d:d7:48:6e:83:b8:26:cc:99:a9:46:d3:e0:cb:c7:94:8b: da:bb:a2:03:6a:4e:c8:0f:9c:f5:f8:82:14:44:83:c0:e9:97: 27:49:05:cc:15:95:b3:76:e9:5b:bc:d0:2a:f4:69:3e:53:bd: e7:91:fa:4b:bf:d3:10:32:8c:c8:48:78:8d:dc:f3:33:80:74: 42:2a:09:4c:00:15:0e:fa:c1:bb:5b:5a:16:f5:81:a6:56:45: 5d:e4:b4:68:49:cf:c1:10:72:69:54:44:92:d2:9e:9a:6c:3f: 0a:22:8e:9e:33:0d:62:fd:a6:b4:eb:8b:b7:a5:5b:f7:02:db: 13:30:9f:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdH0mN8kVdI2xlYE1mJw4mqLTHRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4 NjI5Qzg0RDAeFw0yNjAzMDEyMzE4MTZaFw0yNjAzMDMwMTMyMTZaMDMxMTAvBgNV BAMTKDc2RjhFRTA2NUM1NEU5RDZGRjA1M0VGRTNCQUQxNTk3RjhBM0NGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSm7bVnjJ9OPPXSHuQmcr4FNa vJocopP8BgR0LlVrQSzRTBtL694kvH3qXnjaWozdZ0HV098RBOqwzbEyvmiM6Mjg FJafe+85mW9twYVG6RIVG2OgOr9zht55nYDkFdWKEdCZcbYPPC2ETNe0w+LBPInq 8Vihvr1xYlPhyyEmlBsR1YmxfAidBUhzfEyglQseVouMv+8jitJNG2AO3G+75Gwz xaIOA+RFIoSu6ch1Opd3gCCvPYd6VciVCL3DLg7LqCGPclpKOy3Q6Dr/Ho/KKLgB YxqOXxgXfiMeluuX7uEPhj+7h/F72S76iIneh0/DnnubzPWg9Dm8n+Ez3CYzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdvjuBlxU6db/BT7+O60Vl/ijzyYwHwYDVR0j BBgwFoAUlUpdyblWOUDJOdpe1U8QMYYpyE0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTkxNzMxNC8wLzk1NEE1REM5Qjk1NjM5NDBDOTM5REE1RUQ1NEYx MDMxODYyOUM4NEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTU0QTVEQzlCOTU2Mzk0MEM5MzlEQTVFRDU0RjEwMzE4NjI5Qzg0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzE5MTczMTQvMC85NTRBNURDOUI5NTYz OTQwQzkzOURBNUVENTRGMTAzMTg2MjlDODRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANje6dmEWZucN 2/SA3Za4EutyhJNBf00AlnalLxtRpPVMk6uBHWrvvDVg6Wcqstoasq5kPYq/Ez0H ws6CTmiVrwTbORiR1TdO/lYpEOLKfE+TwgylRqmN+lY5l+y6LgOhJamyFRc/x00N 3Gx39P68LQZ5IW4n+n+UUpvKqeZH4B3XSG6DuCbMmalG0+DLx5SL2ruiA2pOyA+c 9fiCFESDwOmXJ0kFzBWVs3bpW7zQKvRpPlO955H6S7/TEDKMyEh4jdzzM4B0QioJ TAAVDvrBu1taFvWBplZFXeS0aEnPwRByaVREktKemmw/CiKOnjMNYv2mtOuLt6Vb 9wLbEzCfew== -----END CERTIFICATE-----Generated at Mon Mar 2 18:05:07 2026 by rpki-client