$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft File: 654C69951CF087D0BC74151532E452AE157FCCCB.mft (raw, json) Hash identifier: 8FNB2yw8WFXld1/xI8G3NQjpdwX8iAjRVvLAdvfIBZY= Subject key identifier: EF:EB:A3:3D:E8:26:09:9E:80:24:BE:93:DD:58:03:58:4F:6C:6B:9D Authority key identifier: 65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB Certificate issuer: /CN=654C69951CF087D0BC74151532E452AE157FCCCB Certificate serial: 3F4DDAB26E3AFAB0A67F17A1BE40A691E01B15D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft Manifest number: 4C Signing time: Wed 29 Jul 2026 11:04:14 +0000 Manifest this update: Wed 29 Jul 2026 10:59:14 +0000 Manifest next update: Thu 30 Jul 2026 13:18:14 +0000 Files and hashes: 1: 654C69951CF087D0BC74151532E452AE157FCCCB.crl (hash: YGPVf7rLhbiQDx8CpCNosQf9kHvQEiNf+4FqWsLMAuo=) 2: 3130332e3134362e3132362e302f32332d3233203d3e2034383038.roa (hash: C3frltR1t3bQDu+F7qcDmwSg2cgzyaJJekrxhs4+M0s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 13:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:4d:da:b2:6e:3a:fa:b0:a6:7f:17:a1:be:40:a6:91:e0:1b:15:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654C69951CF087D0BC74151532E452AE157FCCCB Validity Not Before: Jul 29 10:59:14 2026 GMT Not After : Jul 30 13:18:14 2026 GMT Subject: CN=EFEBA33DE826099E8024BE93DD5803584F6C6B9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ca:76:82:81:df:e7:11:f6:bd:f7:d2:e4:a4: 0a:05:8f:4b:54:aa:75:7a:d3:ec:cf:f4:06:6c:99: 31:3c:8f:bb:23:51:d1:03:f5:d6:2d:1a:50:cb:47: 89:cd:85:46:6f:8e:87:48:ca:8e:27:e5:a4:c9:88: ac:f1:2b:d6:19:a9:8b:c9:30:76:b9:b7:20:f2:2f: e0:d6:bd:ca:23:b1:ff:c1:03:77:f2:1f:82:0c:3d: c9:4a:4e:39:09:11:28:fd:47:ce:ec:8e:c4:d8:81: 44:69:1f:0d:be:ae:b0:c2:19:11:71:bc:6d:60:16: c0:c1:dd:64:ec:2b:c0:f6:d1:33:04:2c:f1:88:96: e4:fe:32:0e:7d:96:3f:6d:13:c5:92:25:66:99:ce: 0d:a2:53:c9:41:c2:12:2e:6f:d5:9c:38:97:89:3c: 37:e9:a4:90:80:64:71:c6:76:54:f0:9f:ee:d0:92: 65:95:e2:e1:43:76:8b:22:1b:46:ad:d5:23:99:a5: fa:2f:43:79:6b:dd:98:e4:17:74:81:4c:4e:fe:73: 98:0e:d6:29:6d:9c:6f:6c:e0:05:0d:97:de:77:64: 73:c9:fd:c5:07:cc:ee:1a:c9:b2:34:ed:7c:dd:2d: 46:da:29:bb:fe:bc:02:ac:ed:f6:fd:35:79:d1:ba: 96:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EB:A3:3D:E8:26:09:9E:80:24:BE:93:DD:58:03:58:4F:6C:6B:9D X509v3 Authority Key Identifier: keyid:65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5a:eb:27:f1:e6:46:1c:2b:01:9e:94:5f:c7:48:58:6a:7a: 4c:d6:22:6d:14:51:3a:b8:ee:6c:c2:97:4e:42:6f:34:f0:14: d2:e5:87:1d:18:49:9f:f4:a3:7a:6e:d2:11:52:f5:4e:63:b6: cc:b2:08:b6:cd:a3:00:8f:95:45:24:ea:87:04:dc:10:c2:36: a3:33:4f:84:f2:a0:10:28:79:c8:b2:94:6b:0a:c8:02:88:db: e4:5d:22:30:fc:8a:f7:c6:e1:ea:12:29:d9:d5:a5:a5:be:a4: 65:96:70:cb:d5:78:5e:cb:1d:58:32:07:f0:b4:cb:3c:21:3d: 36:21:81:65:8b:92:f1:73:2c:76:e9:1e:21:11:7a:05:87:49: fa:a8:d5:f0:5b:e2:2b:7f:90:73:07:6e:ac:a7:e8:64:5a:97: 08:47:f8:98:70:6f:c3:75:56:4b:24:4f:e0:4d:92:62:9a:eb: 13:bc:b0:d3:12:f6:3f:3d:e7:a7:c7:ca:1d:0d:67:14:ef:ff: 0d:1b:73:47:cc:f3:83:76:10:87:74:90:9a:7c:53:68:7b:85: 4c:9e:6f:dd:1b:b3:d0:32:5c:d5:24:90:95:39:69:4e:db:ab: d1:56:de:26:98:13:71:29:b2:28:39:eb:8e:a3:64:14:60:32: 37:14:ab:d0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP03asm46+rCmfxehvkCmkeAbFdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUx NTdGQ0NDQjAeFw0yNjA3MjkxMDU5MTRaFw0yNjA3MzAxMzE4MTRaMDMxMTAvBgNV BAMTKEVGRUJBMzNERTgyNjA5OUU4MDI0QkU5M0RENTgwMzU4NEY2QzZCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVynaCgd/nEfa999LkpAoFj0tU qnV60+zP9AZsmTE8j7sjUdED9dYtGlDLR4nNhUZvjodIyo4n5aTJiKzxK9YZqYvJ MHa5tyDyL+DWvcojsf/BA3fyH4IMPclKTjkJESj9R87sjsTYgURpHw2+rrDCGRFx vG1gFsDB3WTsK8D20TMELPGIluT+Mg59lj9tE8WSJWaZzg2iU8lBwhIub9WcOJeJ PDfppJCAZHHGdlTwn+7QkmWV4uFDdosiG0at1SOZpfovQ3lr3ZjkF3SBTE7+c5gO 1iltnG9s4AUNl953ZHPJ/cUHzO4aybI07XzdLUbaKbv+vAKs7fb9NXnRupZxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7+ujPegmCZ6AJL6T3VgDWE9sa50wHwYDVR0j BBgwFoAUZUxplRzwh9C8dBUVMuRSrhV/zMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDgzOTYxNDI5MzU0MDg5MS8wLzY1NEM2OTk1MUNGMDg3RDBCQzc0MTUxNTMyRTQ1 MkFFMTU3RkNDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUxNTdGQ0NDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4Mzk2MTQyOTM1NDA4OTEvMC82NTRDNjk5NTFDRjA4 N0QwQkM3NDE1MTUzMkU0NTJBRTE1N0ZDQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFrrJ/HmRhwr AZ6UX8dIWGp6TNYibRRROrjubMKXTkJvNPAU0uWHHRhJn/Sjem7SEVL1TmO2zLII ts2jAI+VRSTqhwTcEMI2ozNPhPKgECh5yLKUawrIAojb5F0iMPyK98bh6hIp2dWl pb6kZZZwy9V4XssdWDIH8LTLPCE9NiGBZYuS8XMsdukeIRF6BYdJ+qjV8FviK3+Q cwdurKfoZFqXCEf4mHBvw3VWSyRP4E2SYprrE7yw0xL2Pz3np8fKHQ1nFO//DRtz R8zzg3YQh3SQmnxTaHuFTJ5v3Ruz0DJc1SSQlTlpTtur0VbeJpgTcSmyKDnrjqNk FGAyNxSr0A== -----END CERTIFICATE-----Generated at Wed Jul 29 23:13:34 2026 by rpki-client