$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft File: 654C69951CF087D0BC74151532E452AE157FCCCB.mft (raw, json) Hash identifier: VmbrxTb1duMgI8jtE9uad+gkYrLb8guEn2E95gEBZi0= Subject key identifier: 19:E9:DF:D6:3E:D8:61:AA:F5:13:26:82:79:19:FA:5E:79:AA:AA:E7 Authority key identifier: 65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB Certificate issuer: /CN=654C69951CF087D0BC74151532E452AE157FCCCB Certificate serial: 134FCBB8D7F69EF01F913D9AA7AA87A177FCF8BC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft Manifest number: 0E Signing time: Sat 13 Jun 2026 10:46:45 +0000 Manifest this update: Sat 13 Jun 2026 10:41:45 +0000 Manifest next update: Sun 14 Jun 2026 13:21:45 +0000 Files and hashes: 1: 3130332e3134362e3132362e302f32332d3233203d3e2034383038.roa (hash: C3frltR1t3bQDu+F7qcDmwSg2cgzyaJJekrxhs4+M0s=) 2: 654C69951CF087D0BC74151532E452AE157FCCCB.crl (hash: Q/0+FqgsePCi/eRV/JquxtYcGpj7MB9AvkJMcIUIWh8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 13:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4f:cb:b8:d7:f6:9e:f0:1f:91:3d:9a:a7:aa:87:a1:77:fc:f8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654C69951CF087D0BC74151532E452AE157FCCCB Validity Not Before: Jun 13 10:41:45 2026 GMT Not After : Jun 14 13:21:45 2026 GMT Subject: CN=19E9DFD63ED861AAF51326827919FA5E79AAAAE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:49:e3:b8:e2:67:b8:42:73:d1:e6:ca:cc:59: 65:b9:ef:ff:aa:b6:fc:f2:ea:3b:20:c8:4a:a8:73: 41:b7:a4:b8:15:36:6e:98:62:aa:ac:1d:64:ef:22: de:d6:3c:e4:65:66:7e:77:2d:5b:ea:1e:72:ea:2a: 80:50:17:3a:33:56:82:4c:17:ea:8b:da:7e:bd:63: df:c1:65:ae:c5:4e:38:ed:a1:f9:75:7f:9c:16:99: 04:80:81:a7:71:96:11:66:3a:81:06:ca:c8:77:6a: 41:87:65:1b:2f:f6:1d:65:32:f3:a0:cb:7e:db:64: ce:cb:c6:cd:4d:2f:6c:bd:be:ae:60:4c:b5:51:c4: 81:74:8f:a8:4c:fb:12:fd:c4:79:5a:e5:eb:ed:36: f2:16:82:8e:10:8c:99:1c:c0:0e:7a:e8:3f:6d:95: b4:ac:9f:54:8a:27:61:ba:ee:e1:49:eb:c4:2d:70: 4c:94:21:d1:d0:84:db:d9:31:76:0e:4d:96:43:a2: 2f:4a:11:43:89:0c:35:5f:a0:a3:9a:17:fb:3d:59: 89:e8:d2:fb:de:34:8e:bf:29:40:10:16:4e:61:14: 59:57:bb:a7:e6:94:54:40:69:74:9f:ad:e0:fb:55: 35:ed:0a:df:3f:5d:6f:9e:c6:82:d9:dd:20:56:d6: 3e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E9:DF:D6:3E:D8:61:AA:F5:13:26:82:79:19:FA:5E:79:AA:AA:E7 X509v3 Authority Key Identifier: keyid:65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f1:6c:43:88:a5:1d:b8:8d:2f:1e:be:fc:ff:4f:8d:ce:4c: 95:fa:da:6f:7b:88:f6:db:be:8b:79:c1:9c:80:2c:d2:e5:4b: 7b:cd:47:e9:1d:5a:b9:c7:11:5b:8f:28:e6:78:70:19:03:b0: c8:67:7c:c5:fd:fc:d9:4d:e2:4a:07:3a:32:a4:c1:b2:6c:88: 05:32:f7:cb:a1:1d:97:f4:0c:2f:08:bb:43:3f:9c:14:f1:37: a3:94:e8:c1:eb:9e:46:02:1d:3b:f5:5c:91:fd:ce:62:70:6c: 49:40:9c:a5:1e:07:b3:12:18:64:0d:43:c8:fd:4c:a7:20:08: 6d:dc:c8:ef:e5:55:01:bd:e8:11:d7:5f:70:6e:a6:eb:4e:71: 9c:27:b5:13:90:eb:b5:e2:4b:df:dc:f5:b8:74:90:85:54:2d: 24:73:c8:1a:96:70:69:2e:2a:80:56:90:64:f5:7e:54:5c:41: 11:44:5a:0f:d7:d4:78:02:18:75:3f:37:ba:51:32:c3:34:49: a3:2e:0b:0a:de:c5:9e:5d:b1:9b:a3:1b:75:56:66:af:5d:e0: 4b:4f:af:43:ba:dc:83:67:39:cd:35:56:44:71:ff:61:2f:14: 9f:a2:bd:96:11:8e:f1:8f:0c:aa:d0:0e:08:f8:71:e4:4b:c6: 12:f8:e7:90 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE0/LuNf2nvAfkT2ap6qHoXf8+LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUx NTdGQ0NDQjAeFw0yNjA2MTMxMDQxNDVaFw0yNjA2MTQxMzIxNDVaMDMxMTAvBgNV BAMTKDE5RTlERkQ2M0VEODYxQUFGNTEzMjY4Mjc5MTlGQTVFNzlBQUFBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkSeO44me4QnPR5srMWWW57/+q tvzy6jsgyEqoc0G3pLgVNm6YYqqsHWTvIt7WPORlZn53LVvqHnLqKoBQFzozVoJM F+qL2n69Y9/BZa7FTjjtofl1f5wWmQSAgadxlhFmOoEGysh3akGHZRsv9h1lMvOg y37bZM7Lxs1NL2y9vq5gTLVRxIF0j6hM+xL9xHla5evtNvIWgo4QjJkcwA566D9t lbSsn1SKJ2G67uFJ68QtcEyUIdHQhNvZMXYOTZZDoi9KEUOJDDVfoKOaF/s9WYno 0vveNI6/KUAQFk5hFFlXu6fmlFRAaXSfreD7VTXtCt8/XW+exoLZ3SBW1j5NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGenf1j7YYar1EyaCeRn6XnmqqucwHwYDVR0j BBgwFoAUZUxplRzwh9C8dBUVMuRSrhV/zMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDgzOTYxNDI5MzU0MDg5MS8wLzY1NEM2OTk1MUNGMDg3RDBCQzc0MTUxNTMyRTQ1 MkFFMTU3RkNDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUxNTdGQ0NDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4Mzk2MTQyOTM1NDA4OTEvMC82NTRDNjk5NTFDRjA4 N0QwQkM3NDE1MTUzMkU0NTJBRTE1N0ZDQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPFsQ4ilHbiN Lx6+/P9Pjc5Mlfrab3uI9tu+i3nBnIAs0uVLe81H6R1auccRW48o5nhwGQOwyGd8 xf382U3iSgc6MqTBsmyIBTL3y6Edl/QMLwi7Qz+cFPE3o5ToweueRgIdO/Vckf3O YnBsSUCcpR4HsxIYZA1DyP1MpyAIbdzI7+VVAb3oEddfcG6m605xnCe1E5DrteJL 39z1uHSQhVQtJHPIGpZwaS4qgFaQZPV+VFxBEURaD9fUeAIYdT83ulEywzRJoy4L Ct7Fnl2xm6MbdVZmr13gS0+vQ7rcg2c5zTVWRHH/YS8Un6K9lhGO8Y8MqtAOCPhx 5EvGEvjnkA== -----END CERTIFICATE-----Generated at Sun Jun 14 02:48:05 2026 by rpki-client