$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json) Hash identifier: nGQ1pIy6iJKjai6F/pTosdpVyeNK37DQ3m1gglI/fYI= Subject key identifier: 88:42:E6:7A:FA:0B:8D:B0:D2:25:48:52:B1:FB:D3:18:08:A5:AE:96 Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 36A76C323EF62E5E4DAB20C6734B61095DACD1B1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft Manifest number: 0141 Signing time: Mon 26 Oct 2026 10:43:40 +0000 Manifest this update: Mon 26 Oct 2026 10:38:40 +0000 Manifest next update: Thu 29 Oct 2026 22:36:40 +0000 Files and hashes: 1: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=) 2: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=) 3: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=) 4: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=) 5: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=) 6: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=) 7: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: TDty1hgmu28bPfA1f7qAvFBrBLD2druB41etLXlfTkI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 22:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a7:6c:32:3e:f6:2e:5e:4d:ab:20:c6:73:4b:61:09:5d:ac:d1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Oct 26 10:38:40 2026 GMT Not After : Oct 29 22:36:40 2026 GMT Subject: CN=8842E67AFA0B8DB0D2254852B1FBD31808A5AE96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:57:fe:3a:82:3f:d7:5c:36:1d:83:49:65:81: 4f:8e:f8:66:da:5b:13:33:0b:5a:d8:f4:60:3f:f5: 7f:02:ee:4d:c1:1a:9a:7b:a1:9b:72:82:eb:ba:7a: d4:d4:75:69:3c:26:b5:21:25:96:4a:7b:d3:31:96: 51:ce:bf:60:f6:a7:fa:4c:37:83:74:c8:14:ca:4f: 58:9d:4a:cd:c1:f7:90:7c:77:50:21:1b:a8:62:01: 48:e5:4f:78:69:44:7e:18:3d:f5:e4:bf:e5:a9:aa: fe:e1:e0:19:24:c6:68:3b:b4:e8:f5:48:33:bb:a7: 40:87:20:73:14:31:c3:18:03:2a:eb:ae:cf:98:19: f3:2a:a6:2e:2b:0d:22:fc:c2:da:13:e5:d9:d0:b6: 81:17:be:90:2d:bf:63:4a:2b:61:ac:f3:01:5c:71: e3:d1:2c:3a:db:cc:21:d8:a3:71:75:e6:56:25:7c: 28:f9:39:f4:95:ac:11:7b:f5:83:d1:37:e8:af:19: 28:13:57:31:78:25:6d:e0:a4:d8:3e:02:fc:57:e1: ff:13:a1:b9:b7:d8:de:2c:c9:45:4f:d9:4b:39:b0: 3a:8d:b3:06:eb:e7:64:80:5c:ee:da:32:6e:b2:1f: d0:47:eb:5e:81:04:04:46:ec:82:ea:86:e6:f1:82: e1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:42:E6:7A:FA:0B:8D:B0:D2:25:48:52:B1:FB:D3:18:08:A5:AE:96 X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:a4:de:b4:21:26:71:82:2e:31:8d:7c:78:dd:25:98:2c:82: 04:ec:32:61:0f:20:34:bd:3e:92:05:47:af:bb:fa:b3:93:fe: a4:45:87:f2:80:51:42:fb:f4:d7:78:ab:83:28:27:7c:02:f6: b4:ea:80:11:84:bf:8b:d9:58:b6:37:0e:06:65:7a:87:6c:ed: c1:c4:79:56:2a:ce:b2:79:97:e4:e7:83:0e:e3:6c:dd:dc:f0: 38:65:4b:df:c7:ee:2a:53:e9:bf:48:59:7d:60:fb:7b:cf:d6: 8d:7c:1b:b1:89:50:c8:b5:c2:be:d9:38:9b:44:51:13:63:5f: 9c:2d:86:f7:8b:08:be:09:48:8a:87:3c:70:e1:38:65:3b:88: 20:ee:70:f5:4c:f3:f7:69:55:da:f5:92:f9:96:a6:1d:b5:18: da:18:36:f8:9c:d2:84:09:f9:27:0e:9b:38:e5:3b:f9:0d:a2: 09:31:f1:ea:44:0b:1a:6f:25:d3:a1:44:88:15:4c:36:b7:df: 64:e6:9f:83:06:bf:fd:4d:d2:59:7a:3f:93:29:e4:b6:82:b4: 2e:7a:b3:9a:1d:81:19:87:be:84:b2:64:95:5f:84:af:38:0a: 4a:d8:2e:01:f4:d8:cc:25:ea:c0:e3:98:3f:9f:19:f7:19:46: 1a:f4:aa:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNqdsMj72Ll5NqyDGc0thCV2s0bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjEwMjYxMDM4NDBaFw0yNjEwMjkyMjM2NDBaMDMxMTAvBgNV BAMTKDg4NDJFNjdBRkEwQjhEQjBEMjI1NDg1MkIxRkJEMzE4MDhBNUFFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRV/46gj/XXDYdg0llgU+O+Gba WxMzC1rY9GA/9X8C7k3BGpp7oZtyguu6etTUdWk8JrUhJZZKe9MxllHOv2D2p/pM N4N0yBTKT1idSs3B95B8d1AhG6hiAUjlT3hpRH4YPfXkv+Wpqv7h4Bkkxmg7tOj1 SDO7p0CHIHMUMcMYAyrrrs+YGfMqpi4rDSL8wtoT5dnQtoEXvpAtv2NKK2Gs8wFc cePRLDrbzCHYo3F15lYlfCj5OfSVrBF79YPRN+ivGSgTVzF4JW3gpNg+AvxX4f8T obm32N4syUVP2Us5sDqNswbr52SAXO7aMm6yH9BH616BBARG7ILqhubxguHdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiELmevoLjbDSJUhSsfvTGAilrpYwHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE4NDE5MjIvMC81RTY2NURFQTAzNjVD MzhCMjU4N0NBMzg0NzNEQjMwQjAwQjM3MjQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKTetCEmcYIu MY18eN0lmCyCBOwyYQ8gNL0+kgVHr7v6s5P+pEWH8oBRQvv013irgygnfAL2tOqA EYS/i9lYtjcOBmV6h2ztwcR5VirOsnmX5OeDDuNs3dzwOGVL38fuKlPpv0hZfWD7 e8/WjXwbsYlQyLXCvtk4m0RRE2NfnC2G94sIvglIioc8cOE4ZTuIIO5w9Uzz92lV 2vWS+ZamHbUY2hg2+JzShAn5Jw6bOOU7+Q2iCTHx6kQLGm8l06FEiBVMNrffZOaf gwa//U3SWXo/kynktoK0Lnqzmh2BGYe+hLJklV+ErzgKStguAfTYzCXqwOOYP58Z 9xlGGvSqvg== -----END CERTIFICATE-----Generated at Wed Oct 28 18:36:43 2026 by rpki-client