$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json) Hash identifier: Bslo1qol5JONtdoMPvv+m1GWRZrLCGJZpvedIbFQAQw= Subject key identifier: BB:77:A5:D9:70:05:05:95:65:BE:48:22:C1:8B:A3:30:9F:1B:53:FE Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 65587960763906FA260F6A2B83B7EAF25CE63F66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft Manifest number: BF Signing time: Thu 11 Jun 2026 14:33:51 +0000 Manifest this update: Thu 11 Jun 2026 14:28:51 +0000 Manifest next update: Fri 12 Jun 2026 17:52:51 +0000 Files and hashes: 1: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=) 2: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=) 3: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=) 4: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=) 5: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=) 6: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=) 7: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: P2/xRmfT/g4WIdxO1j7wmvxAUWAOzD+q2Oz+2ZlxckI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 17:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:58:79:60:76:39:06:fa:26:0f:6a:2b:83:b7:ea:f2:5c:e6:3f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Jun 11 14:28:51 2026 GMT Not After : Jun 12 17:52:51 2026 GMT Subject: CN=BB77A5D97005059565BE4822C18BA3309F1B53FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f4:4f:52:3a:9a:aa:af:e0:c3:df:83:f6:e9: e3:57:13:30:18:7d:d6:48:c9:ef:1b:ed:82:18:ac: f0:05:1e:1f:f5:cb:b9:51:36:df:d3:df:cb:b9:95: 41:d7:63:31:9e:ea:31:61:d2:3f:76:d5:81:cd:b5: 06:23:a4:2a:0b:06:55:e4:5b:4f:e5:2a:2f:64:e0: e2:82:2c:ea:98:7c:5b:fd:4f:a5:14:0c:43:63:ca: 06:2f:52:e4:c3:3b:70:e4:c2:a9:1a:1e:d0:9e:e0: 52:d4:62:21:86:63:29:09:55:2f:34:5d:fb:82:b6: 04:2a:cd:dc:8f:8d:11:85:01:d9:ee:a9:da:8e:17: e8:8b:f9:24:48:62:be:83:96:39:26:5e:38:fd:5b: 61:be:3e:2b:1c:67:24:6a:ef:f0:ca:b8:12:f1:e0: dd:2d:41:e6:5f:cf:53:9e:5e:b1:ee:c7:7c:6d:84: be:51:95:8a:4f:8e:90:c2:52:94:d1:3a:7a:a0:3b: 91:c9:bc:71:cb:5e:ba:b6:69:ef:3f:53:e2:f9:f7: 37:57:13:3d:00:2d:6a:1e:77:4c:f8:14:a9:e3:dd: eb:55:c4:5c:51:9a:ed:44:bc:9c:ee:e6:8a:5b:01: 05:b6:a2:fe:85:d3:a7:da:46:0d:b2:94:26:34:07: 2d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:77:A5:D9:70:05:05:95:65:BE:48:22:C1:8B:A3:30:9F:1B:53:FE X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1f:c1:4d:1a:5c:90:25:c9:d7:f3:ee:7c:6a:00:2b:58:9e: b8:5f:3e:12:93:74:16:38:6b:89:f5:45:1b:5b:99:d6:a7:01: 9f:eb:12:5f:98:6f:a1:9d:34:22:21:e2:c5:1c:04:98:5b:68: c6:78:3e:82:e1:42:1c:56:3d:cc:fc:88:22:8f:e7:93:de:bc: ac:ed:32:f2:6e:02:e2:bd:60:46:58:e9:03:99:bd:5a:58:83: d0:e0:d7:b5:27:67:1b:56:0a:95:b3:21:2a:04:4e:97:6c:c8: 48:81:fc:80:44:71:e4:88:5d:dd:7f:1c:a7:fb:99:fe:ab:2d: 18:7b:f2:a6:58:ac:b6:3c:86:f1:e0:e0:f3:e8:43:30:81:5d: 16:5e:76:cf:b3:3e:b7:fa:2c:9f:16:bd:52:c7:37:2b:01:d2: 9e:d6:81:8c:4e:69:0e:31:95:a3:90:d9:0b:4f:52:bd:5f:aa: 3f:60:ae:85:f9:d7:20:e0:a2:f9:5d:41:99:ee:a1:7d:38:87: 8b:c9:8c:70:31:4a:a6:61:64:16:cb:d5:bc:52:41:7d:de:53: 0e:0e:2d:0f:f0:be:ad:28:1f:c2:35:28:c5:17:81:bd:6f:ab: 7d:e8:5a:6a:b3:96:6b:31:c8:02:4d:9e:88:cc:66:43:6e:23: bc:43:cf:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZVh5YHY5BvomD2org7fq8lzmP2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjA2MTExNDI4NTFaFw0yNjA2MTIxNzUyNTFaMDMxMTAvBgNV BAMTKEJCNzdBNUQ5NzAwNTA1OTU2NUJFNDgyMkMxOEJBMzMwOUYxQjUzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp9E9SOpqqr+DD34P26eNXEzAY fdZIye8b7YIYrPAFHh/1y7lRNt/T38u5lUHXYzGe6jFh0j921YHNtQYjpCoLBlXk W0/lKi9k4OKCLOqYfFv9T6UUDENjygYvUuTDO3DkwqkaHtCe4FLUYiGGYykJVS80 XfuCtgQqzdyPjRGFAdnuqdqOF+iL+SRIYr6DljkmXjj9W2G+PiscZyRq7/DKuBLx 4N0tQeZfz1OeXrHux3xthL5RlYpPjpDCUpTROnqgO5HJvHHLXrq2ae8/U+L59zdX Ez0ALWoed0z4FKnj3etVxFxRmu1EvJzu5opbAQW2ov6F06faRg2ylCY0By0FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUu3el2XAFBZVlvkgiwYujMJ8bU/4wHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE4NDE5MjIvMC81RTY2NURFQTAzNjVD MzhCMjU4N0NBMzg0NzNEQjMwQjAwQjM3MjQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaR/BTRpckCXJ 1/PufGoAK1ieuF8+EpN0FjhrifVFG1uZ1qcBn+sSX5hvoZ00IiHixRwEmFtoxng+ guFCHFY9zPyIIo/nk968rO0y8m4C4r1gRljpA5m9WliD0ODXtSdnG1YKlbMhKgRO l2zISIH8gERx5Ihd3X8cp/uZ/qstGHvyplistjyG8eDg8+hDMIFdFl52z7M+t/os nxa9Usc3KwHSntaBjE5pDjGVo5DZC09SvV+qP2CuhfnXIOCi+V1Bme6hfTiHi8mM cDFKpmFkFsvVvFJBfd5TDg4tD/C+rSgfwjUoxReBvW+rfehaarOWazHIAk2eiMxm Q24jvEPPUA== -----END CERTIFICATE-----Generated at Thu Jun 11 22:41:15 2026 by rpki-client