$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft File: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft (raw, json) Hash identifier: uN/WSV4QB7CRdm2At/uMrpc60NtPAeoECPFZ2FsOfik= Subject key identifier: 82:46:79:97:3D:E9:CF:62:E8:61:96:61:4B:98:91:9E:EB:D7:21:FE Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 019131CC57B96AF724526F3E1DCD1BA27F33DE1C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft Manifest number: 06 Signing time: Mon 13 Apr 2026 09:14:17 +0000 Manifest this update: Mon 13 Apr 2026 09:09:17 +0000 Manifest next update: Tue 14 Apr 2026 11:08:17 +0000 Files and hashes: 1: 35392e3131312e39362e302f31392d3234203d3e203435303632.roa (hash: Pj4OI2gVfEXRCIzzEAM7WxPW7pPOYS8cW1E5AjGFSG0=) 2: 35392e3131312e38382e302f32312d3234203d3e203435303632.roa (hash: A5CDNJxV9gwL9OvrsHIiTUgNrL8ZROPmAep83jl2HXg=) 3: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl (hash: 6K85+xYwEcbgUPTnXi6dTI2QwF11qqxYdw9w6xm3kIo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 11:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:91:31:cc:57:b9:6a:f7:24:52:6f:3e:1d:cd:1b:a2:7f:33:de:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: Apr 13 09:09:17 2026 GMT Not After : Apr 14 11:08:17 2026 GMT Subject: CN=824679973DE9CF62E86196614B98919EEBD721FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:f5:04:ed:84:33:dc:5b:f6:c9:ab:6f:47: 07:22:d7:01:4d:30:1b:b1:a3:b1:56:22:ac:0e:55: 05:bb:bf:db:25:18:70:36:7e:dc:f9:d0:41:17:45: bc:7c:5a:36:b2:d4:81:98:f4:6e:b6:44:f3:47:cf: ae:d8:92:17:07:96:90:7a:7d:f5:5e:ab:5c:43:ae: 42:b2:ec:41:15:3e:77:5f:a0:2e:7d:90:e5:8d:b4: c5:bb:dd:75:59:c6:4e:26:a4:04:cd:30:9d:74:cf: 82:b8:f5:28:34:97:8f:93:9a:53:97:58:9b:c1:84: 38:b1:97:ce:8b:af:dd:cb:cf:47:2f:0f:92:18:21: ea:d6:39:83:64:85:49:61:2c:08:4d:7e:35:a8:bb: ee:26:9a:98:b3:34:08:b7:84:f8:0a:0f:06:ae:0e: 0b:31:ea:c4:d9:99:03:24:04:34:20:07:84:38:41: 98:d5:cf:10:4f:40:0d:77:a0:32:e9:15:8c:37:bf: 9a:71:9d:ae:5c:38:1e:fd:38:a0:6b:24:81:ae:4d: e5:46:a1:f2:eb:ae:01:93:e5:05:d2:f2:84:a4:71: 07:38:2a:3b:c6:0c:d8:b7:30:6d:f5:b7:24:9d:d4: 20:0a:b5:16:9c:a0:20:4c:2e:33:53:71:21:ac:5e: 6d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:46:79:97:3D:E9:CF:62:E8:61:96:61:4B:98:91:9E:EB:D7:21:FE X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:48:f9:d5:e9:59:5b:7f:0e:4f:7b:fe:fc:31:b1:8a:bf:b3: 8d:8b:19:48:13:89:b9:9e:d2:30:6c:e2:70:30:72:fc:f8:1a: bf:95:51:5e:33:45:45:e6:d9:b4:0d:b3:d3:e5:29:39:4a:af: 0e:30:da:22:db:0a:df:40:91:e9:90:c5:a3:74:53:65:c5:fc: b7:27:69:5b:e4:99:00:8d:c1:ed:76:00:17:9e:3e:cd:99:d2: c4:99:b4:f3:17:99:d1:30:2c:58:dd:d1:6f:24:8d:10:7c:e7: 61:6d:ab:05:e3:dd:4d:d2:fe:ca:af:9e:4a:41:d0:8c:ff:41: 92:4d:2f:20:6a:c7:15:66:06:4b:01:11:1c:e7:fc:47:3e:28: f6:39:8a:5a:db:fa:2d:4f:59:75:ca:9c:ae:81:91:05:0d:21: ba:be:ab:79:72:55:03:ab:8d:eb:1a:8d:de:df:8d:62:2f:4b: 9b:58:cf:94:0d:e5:43:c3:60:96:c7:5b:64:8e:c9:4a:32:f3: 58:27:ae:0b:89:48:6c:1e:37:18:c7:a4:cd:5d:d5:01:f5:ab: 1e:7e:36:eb:4f:13:21:ce:6a:c0:8b:d9:ff:8c:3d:b8:12:64: 4c:c9:54:f7:e5:6f:70:1a:f7:b1:a8:e6:a5:29:35:26:4b:e7: 9c:b9:1f:b2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAZExzFe5avckUm8+Hc0bon8z3hwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjA0MTMwOTA5MTdaFw0yNjA0MTQxMTA4MTdaMDMxMTAvBgNV BAMTKDgyNDY3OTk3M0RFOUNGNjJFODYxOTY2MTRCOTg5MTlFRUJENzIxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj4vUE7YQz3Fv2yatvRwci1wFN MBuxo7FWIqwOVQW7v9slGHA2ftz50EEXRbx8Wjay1IGY9G62RPNHz67YkhcHlpB6 ffVeq1xDrkKy7EEVPndfoC59kOWNtMW73XVZxk4mpATNMJ10z4K49Sg0l4+TmlOX WJvBhDixl86Lr93Lz0cvD5IYIerWOYNkhUlhLAhNfjWou+4mmpizNAi3hPgKDwau Dgsx6sTZmQMkBDQgB4Q4QZjVzxBPQA13oDLpFYw3v5pxna5cOB79OKBrJIGuTeVG ofLrrgGT5QXS8oSkcQc4KjvGDNi3MG31tySd1CAKtRacoCBMLjNTcSGsXm17AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgkZ5lz3pz2LoYZZhS5iRnuvXIf4wHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzI4MzQwOTU3MTAyMTEvMC82NUQ5ODdGQjlFOENF MThDNUI1RkY3ODYzMDhDNDkwRUE4MTFBRUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0j51elZW38O T3v+/DGxir+zjYsZSBOJuZ7SMGzicDBy/Pgav5VRXjNFRebZtA2z0+UpOUqvDjDa ItsK30CR6ZDFo3RTZcX8tydpW+SZAI3B7XYAF54+zZnSxJm08xeZ0TAsWN3RbySN EHznYW2rBePdTdL+yq+eSkHQjP9Bkk0vIGrHFWYGSwERHOf8Rz4o9jmKWtv6LU9Z dcqcroGRBQ0hur6reXJVA6uN6xqN3t+NYi9Lm1jPlA3lQ8NglsdbZI7JSjLzWCeu C4lIbB43GMekzV3VAfWrHn42608TIc5qwIvZ/4w9uBJkTMlU9+VvcBr3sajmpSk1 JkvnnLkfsg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:02:16 2026 by rpki-client