$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json) Hash identifier: hcSn/7hl+mUIK4X5VSgGdmSVz899tJMZz/KUnWtVdwE= Subject key identifier: EB:BB:EF:41:43:C1:AB:88:1C:DB:A8:62:EE:A9:1C:89:9C:7E:A3:28 Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 065BE497E344EA18FB987347A76D953766047AAA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft Manifest number: 82 Signing time: Sun 26 Apr 2026 21:58:33 +0000 Manifest this update: Sun 26 Apr 2026 21:53:33 +0000 Manifest next update: Mon 27 Apr 2026 22:45:33 +0000 Files and hashes: 1: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=) 2: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=) 3: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=) 4: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=) 5: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=) 6: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: 740eCT2Xx7iA2NixNEQp5GduCtp6HcJ4kpRvPSfdNZQ=) 7: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 22:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5b:e4:97:e3:44:ea:18:fb:98:73:47:a7:6d:95:37:66:04:7a:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Apr 26 21:53:33 2026 GMT Not After : Apr 27 22:45:33 2026 GMT Subject: CN=EBBBEF4143C1AB881CDBA862EEA91C899C7EA328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:16:49:db:07:60:bb:0f:58:55:fe:b2:11: 60:17:99:fc:4c:2f:21:94:8f:d7:5b:80:9a:ce:60: 1c:ed:4f:72:ad:79:49:9c:d8:62:a8:cf:5a:0a:f9: c5:d6:4c:9f:b4:64:5c:20:90:06:47:c5:6a:9a:ce: ae:f2:82:6e:ff:3e:0c:95:90:fd:f7:79:77:5a:96: d9:eb:4b:67:80:47:47:39:c1:75:e2:18:03:c4:1c: b0:12:88:21:5f:dc:04:38:f9:fa:90:32:36:5a:a5: 8a:f4:97:29:96:33:94:31:d9:96:4f:d7:ac:7c:1f: dd:2f:8f:16:fa:85:e1:bc:32:ea:53:be:83:4e:23: f4:b7:3e:db:12:c5:46:88:25:cc:fe:0a:79:6f:b9: 3d:81:2d:9d:14:3f:76:a8:72:2b:d4:69:3b:db:89: d2:65:5e:dc:d9:c7:76:f2:73:d4:41:95:36:5c:70: ad:2c:f0:a0:87:e5:a8:17:97:d7:92:91:be:1b:37: b3:2c:98:19:1a:4c:60:95:15:55:50:be:0b:f8:32: e4:95:87:c2:56:e7:10:8e:f3:5c:6c:c5:51:62:aa: 3c:aa:bf:d3:af:cc:60:7d:87:82:53:0b:66:bf:6d: 4d:e1:37:97:26:2c:b7:f1:9c:7f:27:54:17:d6:6e: b9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BB:EF:41:43:C1:AB:88:1C:DB:A8:62:EE:A9:1C:89:9C:7E:A3:28 X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d3:79:21:98:2d:80:ca:c9:29:fe:6b:88:5c:30:65:7b:50: a7:f5:a7:a1:98:d9:ec:2d:a6:3d:4b:1c:11:17:80:0b:3c:ff: ce:07:de:2f:af:00:85:b6:3b:06:2e:9f:22:d5:eb:45:f8:1b: 59:d5:1d:3c:01:81:69:a0:ac:ea:ee:36:7f:ad:3e:e4:e3:f3: b4:98:92:d1:07:9b:65:17:2e:0c:dc:f8:7b:5c:e7:10:6e:c7: 69:c8:3d:f2:56:ea:83:40:62:32:5f:db:9b:9b:71:1d:70:a3: ce:25:89:fe:7a:66:d5:dc:93:d4:cd:fc:2d:b6:df:b4:7e:53: b9:90:1c:f6:d7:82:b2:30:06:7d:78:ca:04:48:bd:52:7d:6b: 59:62:7d:5e:61:b2:35:57:87:c6:d7:f3:14:4a:b2:e2:5a:98: b3:66:c3:ad:8b:30:72:c2:09:05:5c:07:7d:5b:f1:45:4e:0c: 5c:e7:75:cf:bf:0c:c5:e1:51:67:5e:89:de:8d:8e:7a:34:a0: cf:1c:c6:a8:e7:e9:ad:0c:0f:f7:48:82:35:cf:4c:be:b5:e1: 73:91:62:a2:bf:da:e6:3d:f0:56:07:bf:18:85:70:28:51:6a: c8:fa:de:f7:06:e8:f3:91:98:f2:7c:02:8d:97:4b:c4:39:ef: d3:30:d3:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBlvkl+NE6hj7mHNHp22VN2YEeqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjA0MjYyMTUzMzNaFw0yNjA0MjcyMjQ1MzNaMDMxMTAvBgNV BAMTKEVCQkJFRjQxNDNDMUFCODgxQ0RCQTg2MkVFQTkxQzg5OUM3RUEzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY2xZJ2wdguw9YVf6yEWAXmfxM LyGUj9dbgJrOYBztT3KteUmc2GKoz1oK+cXWTJ+0ZFwgkAZHxWqazq7ygm7/PgyV kP33eXdaltnrS2eAR0c5wXXiGAPEHLASiCFf3AQ4+fqQMjZapYr0lymWM5Qx2ZZP 16x8H90vjxb6heG8MupTvoNOI/S3PtsSxUaIJcz+CnlvuT2BLZ0UP3aocivUaTvb idJlXtzZx3byc9RBlTZccK0s8KCH5agXl9eSkb4bN7MsmBkaTGCVFVVQvgv4MuSV h8JW5xCO81xsxVFiqjyqv9OvzGB9h4JTC2a/bU3hN5cmLLfxnH8nVBfWbrlvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU67vvQUPBq4gc26hi7qkciZx+oygwHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE4NDE5MjIvMC81RTY2NURFQTAzNjVD MzhCMjU4N0NBMzg0NzNEQjMwQjAwQjM3MjQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdN5IZgtgMrJ Kf5riFwwZXtQp/WnoZjZ7C2mPUscEReACzz/zgfeL68AhbY7Bi6fItXrRfgbWdUd PAGBaaCs6u42f60+5OPztJiS0QebZRcuDNz4e1znEG7Hacg98lbqg0BiMl/bm5tx HXCjziWJ/npm1dyT1M38LbbftH5TuZAc9teCsjAGfXjKBEi9Un1rWWJ9XmGyNVeH xtfzFEqy4lqYs2bDrYswcsIJBVwHfVvxRU4MXOd1z78MxeFRZ16J3o2OejSgzxzG qOfprQwP90iCNc9MvrXhc5Fior/a5j3wVge/GIVwKFFqyPre9wbo85GY8nwCjZdL xDnv0zDTvA== -----END CERTIFICATE-----Generated at Mon Apr 27 09:57:18 2026 by rpki-client