$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft File: 654C69951CF087D0BC74151532E452AE157FCCCB.mft (raw, json) Hash identifier: hnvdfl17S5EapnHUv4wnbpqLj4E1cF6feSosBQQ1IgQ= Subject key identifier: 5C:E5:1B:1A:DD:61:82:51:44:58:B1:41:3F:60:E3:3A:7B:AD:73:56 Authority key identifier: 65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB Certificate issuer: /CN=654C69951CF087D0BC74151532E452AE157FCCCB Certificate serial: 670A50BDE9D718BA3F8E925965B6D62974A84B71 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft Manifest number: 8D Signing time: Fri 23 Oct 2026 12:45:17 +0000 Manifest this update: Fri 23 Oct 2026 12:40:17 +0000 Manifest next update: Mon 26 Oct 2026 23:49:17 +0000 Files and hashes: 1: 654C69951CF087D0BC74151532E452AE157FCCCB.crl (hash: c93sA9/jEvfQ/F4avxkoQTIkuFlfUCI84n/Y4wWGUxs=) 2: 3130332e3134362e3132362e302f32332d3233203d3e2034383038.roa (hash: C3frltR1t3bQDu+F7qcDmwSg2cgzyaJJekrxhs4+M0s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 17:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0a:50:bd:e9:d7:18:ba:3f:8e:92:59:65:b6:d6:29:74:a8:4b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654C69951CF087D0BC74151532E452AE157FCCCB Validity Not Before: Oct 23 12:40:17 2026 GMT Not After : Oct 26 23:49:17 2026 GMT Subject: CN=5CE51B1ADD6182514458B1413F60E33A7BAD7356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a5:18:e4:0a:3a:96:37:c3:79:a0:ba:75:83: 78:fa:21:24:33:85:e2:52:23:38:c3:26:7a:d5:3a: de:ce:80:54:b0:05:46:d8:6a:c7:4d:c6:9c:01:3b: b7:ff:f0:69:2e:08:74:e8:92:bd:81:e9:58:e5:10: c2:f3:45:11:74:1c:de:c3:04:d0:3f:9e:95:eb:20: 15:05:b4:5b:f8:b9:18:16:9a:de:98:94:75:fe:da: 2c:17:95:c3:18:4d:94:c5:72:2b:d3:99:92:cc:54: a3:60:7a:8c:f9:ec:44:16:b1:02:53:ca:e2:e9:71: 2a:d1:27:16:6c:cc:e1:8e:96:0b:be:2e:e7:74:a2: cc:f2:a4:03:fe:fc:e4:72:da:5f:35:eb:dc:de:06: a2:ca:9f:a0:21:98:83:51:07:12:4a:15:c9:9b:2b: 64:e0:2a:b7:8f:47:8b:33:97:7d:41:d5:3d:98:5f: 58:76:ce:d3:ed:f7:03:4a:eb:e8:ee:e1:a3:4b:b5: c2:59:8e:a4:39:93:ab:9d:2f:79:01:04:69:53:b3: a8:8f:fc:46:62:6a:34:87:60:57:7b:23:48:9c:4d: ad:44:91:98:fb:20:c1:77:78:d8:a6:a5:57:9d:92: 6f:ea:d3:f4:ec:fc:23:47:3e:37:95:5e:12:83:46: 7e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E5:1B:1A:DD:61:82:51:44:58:B1:41:3F:60:E3:3A:7B:AD:73:56 X509v3 Authority Key Identifier: keyid:65:4C:69:95:1C:F0:87:D0:BC:74:15:15:32:E4:52:AE:15:7F:CC:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/654C69951CF087D0BC74151532E452AE157FCCCB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114839614293540891/0/654C69951CF087D0BC74151532E452AE157FCCCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:fc:e1:20:56:e1:db:73:ee:ac:f6:69:ec:30:d2:ef:dd:bc: 77:64:11:cb:bf:f1:b6:c2:ac:b0:1a:7b:ad:7d:26:52:5d:d7: fc:28:17:76:c0:3f:c1:cf:e2:c3:ae:92:95:18:d1:12:a5:07: ba:c0:51:24:59:ee:ee:5c:a0:73:77:fc:e0:55:ec:8c:ee:6f: b7:42:35:08:1b:60:07:42:55:65:19:77:86:65:f9:d7:ca:c3: 8b:4b:52:71:38:a1:05:2a:1e:70:ce:8e:73:c3:59:4e:77:52: d7:71:77:72:70:5a:4b:09:f5:9d:20:1e:9b:8c:ae:7c:d4:3f: b0:e9:da:16:83:d5:d3:33:4c:94:a7:05:48:d6:bb:93:aa:06: 06:a6:f0:f6:5e:7a:4a:78:ba:96:26:c5:9b:d3:c7:d6:10:95: dc:00:c5:a6:44:45:bf:ef:5d:3f:22:6d:27:7a:93:20:0d:b6: 9f:3e:e1:65:44:59:59:ae:cb:d7:e9:aa:b9:22:c7:f5:bf:81: 7b:7c:8a:60:df:05:d4:57:62:34:9b:d9:db:8c:c0:44:75:76: 4e:85:e4:24:2d:e3:10:29:69:39:e9:c0:8e:da:92:6e:c5:62: d3:20:df:8d:6b:37:81:e2:21:5f:68:0d:27:e2:22:8f:6f:49: b0:5b:31:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZwpQvenXGLo/jpJZZbbWKXSoS3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUx NTdGQ0NDQjAeFw0yNjEwMjMxMjQwMTdaFw0yNjEwMjYyMzQ5MTdaMDMxMTAvBgNV BAMTKDVDRTUxQjFBREQ2MTgyNTE0NDU4QjE0MTNGNjBFMzNBN0JBRDczNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/pRjkCjqWN8N5oLp1g3j6ISQz heJSIzjDJnrVOt7OgFSwBUbYasdNxpwBO7f/8GkuCHTokr2B6VjlEMLzRRF0HN7D BNA/npXrIBUFtFv4uRgWmt6YlHX+2iwXlcMYTZTFcivTmZLMVKNgeoz57EQWsQJT yuLpcSrRJxZszOGOlgu+Lud0oszypAP+/ORy2l8169zeBqLKn6AhmINRBxJKFcmb K2TgKrePR4szl31B1T2YX1h2ztPt9wNK6+ju4aNLtcJZjqQ5k6udL3kBBGlTs6iP /EZiajSHYFd7I0icTa1EkZj7IMF3eNimpVedkm/q0/Ts/CNHPjeVXhKDRn7jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXOUbGt1hglFEWLFBP2DjOnutc1YwHwYDVR0j BBgwFoAUZUxplRzwh9C8dBUVMuRSrhV/zMswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDgzOTYxNDI5MzU0MDg5MS8wLzY1NEM2OTk1MUNGMDg3RDBCQzc0MTUxNTMyRTQ1 MkFFMTU3RkNDQ0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjU0QzY5OTUxQ0YwODdEMEJDNzQxNTE1MzJFNDUyQUUxNTdGQ0NDQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4Mzk2MTQyOTM1NDA4OTEvMC82NTRDNjk5NTFDRjA4 N0QwQkM3NDE1MTUzMkU0NTJBRTE1N0ZDQ0NCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvzhIFbh23Pu rPZp7DDS7928d2QRy7/xtsKssBp7rX0mUl3X/CgXdsA/wc/iw66SlRjREqUHusBR JFnu7lygc3f84FXsjO5vt0I1CBtgB0JVZRl3hmX518rDi0tScTihBSoecM6Oc8NZ TndS13F3cnBaSwn1nSAem4yufNQ/sOnaFoPV0zNMlKcFSNa7k6oGBqbw9l56Sni6 libFm9PH1hCV3ADFpkRFv+9dPyJtJ3qTIA22nz7hZURZWa7L1+mquSLH9b+Be3yK YN8F1FdiNJvZ24zARHV2ToXkJC3jEClpOenAjtqSbsVi0yDfjWs3geIhX2gNJ+Ii j29JsFsxvQ== -----END CERTIFICATE-----Generated at Sat Oct 24 11:11:42 2026 by rpki-client