$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft File: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft (raw, json) Hash identifier: FnCBZgNOZIlhXNQAZm/SjK1t3CcC6Eah8rEDlsnw5Zk= Subject key identifier: B2:4E:99:84:F7:FF:90:01:06:8A:74:49:90:C9:E4:ED:B7:55:69:28 Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 2A25813F35D0C4487CE4938529E7500CBE417AE0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft Manifest number: 84 Signing time: Tue 14 Jul 2026 18:36:53 +0000 Manifest this update: Tue 14 Jul 2026 18:31:53 +0000 Manifest next update: Wed 15 Jul 2026 18:59:53 +0000 Files and hashes: 1: 35392e3131312e3130372e302f32342d3234203d3e203435303632.roa (hash: NDkXGsU9QQzZDBpgiC2IPLbFhyKSxvwu8KgFTYfHr0w=) 2: 35392e3131312e39362e302f31392d3234203d3e203435303632.roa (hash: Pj4OI2gVfEXRCIzzEAM7WxPW7pPOYS8cW1E5AjGFSG0=) 3: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl (hash: bZF5F/RxQIWs0Z+2oMAg6VYdTZhxpLpJEdeuQ3BagEc=) 4: 35392e3131312e3130342e302f32332d3234203d3e203435303632.roa (hash: LQ+6kf0+KQiFoPSEDgpSjTdcAiC5hG5P6ieS38kc784=) 5: 35392e3131312e38382e302f32312d3234203d3e203435303632.roa (hash: A5CDNJxV9gwL9OvrsHIiTUgNrL8ZROPmAep83jl2HXg=) 6: 35392e3131312e39362e302f32312d3234203d3e203435303632.roa (hash: Z+dNhW7ZTJfYk6Zew4ollhgdQkqLJK02gByVAgIdwOI=) 7: 35392e3131312e3131322e302f32312d3234203d3e203435303632.roa (hash: /z0BCN1UvCNwW6reulSuf8caTR7KvRMHo29m5V49/jU=) 8: 35392e3131312e3130392e302f32342d3234203d3e203435303632.roa (hash: m9/MIJcHOyU7MhMlruNje0CXfeDnOt4kBLehg9tcAxY=) 9: 35392e3131312e3131312e302f32342d3234203d3e203435303632.roa (hash: 5m5HLidh05Y0J5RMsFsEpvSNbIp2q2GDH4LOXYlkfrM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:25:81:3f:35:d0:c4:48:7c:e4:93:85:29:e7:50:0c:be:41:7a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: Jul 14 18:31:53 2026 GMT Not After : Jul 15 18:59:53 2026 GMT Subject: CN=B24E9984F7FF9001068A744990C9E4EDB7556928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:c5:4f:37:df:fe:ac:a5:8b:9a:81:2e:01: 74:37:14:7a:7a:49:16:84:56:4e:f2:bb:12:31:56: 0a:58:cc:86:77:d3:ad:54:93:6e:a1:7a:ff:a9:93: 97:6a:b4:f1:83:66:e5:a7:56:9c:3a:ec:c6:70:f9: af:fa:de:20:fd:a1:7f:88:2a:9f:ba:3b:e2:47:57: 0a:25:85:a1:31:5c:16:f7:33:a6:d4:6e:4c:ae:36: f3:b9:ef:5e:8f:b0:f9:55:a9:d3:d2:8f:a9:03:a9: 27:6e:60:8d:54:92:a2:0c:aa:1a:d3:e5:69:a5:91: 86:cf:e3:1e:48:c8:11:02:51:ab:d2:32:50:50:87: e1:7e:28:bc:2d:05:f0:e3:3c:3b:da:09:a2:33:82: cb:80:21:73:86:3a:2d:20:39:ca:fb:99:a3:b5:74: 0e:6a:76:ca:d2:d1:c6:f5:bd:d8:d8:b3:b5:7f:09: cf:b4:6d:c7:5d:5a:7e:bc:40:ba:33:47:e3:22:7b: 02:d0:ee:9f:b7:6f:e4:c5:95:09:24:37:c0:84:b6: 95:51:23:98:e6:ae:d1:4a:80:b1:ff:28:f0:fa:41: 4b:14:cf:83:39:fc:06:fd:37:73:c1:58:74:20:67: 68:78:37:cb:69:b9:ef:ff:85:dd:56:92:62:e4:3c: 74:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4E:99:84:F7:FF:90:01:06:8A:74:49:90:C9:E4:ED:B7:55:69:28 X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:a0:35:36:21:98:1c:38:75:d9:d4:ad:e5:ec:03:66:14:37: af:1c:84:7b:87:d9:d5:a9:29:cc:1a:76:b2:31:9f:2c:c3:8d: 45:18:49:55:67:62:fe:41:21:6d:f1:e1:42:f8:5e:de:f9:ca: 32:de:b1:43:80:ed:03:eb:e9:17:21:98:f1:6a:89:10:57:d1: 00:f6:8b:14:32:24:e7:44:cc:f0:91:a0:73:3e:73:9d:13:70: 90:e7:2d:31:2d:17:66:6a:ff:68:98:7d:ce:83:88:a2:8f:75: ae:ae:06:09:aa:cf:1f:38:56:ad:72:41:d8:fd:ed:87:4f:62: ef:f0:69:77:56:59:ac:ff:f1:cb:05:1e:50:bb:10:cc:a8:17: b3:68:96:b7:da:3d:46:d8:bb:a1:0f:fc:25:84:c6:0c:97:b5: 3f:86:15:94:5b:c9:ff:50:87:02:da:c0:09:97:aa:32:21:2f: 34:f7:6c:88:6b:11:b8:0d:9c:51:e8:d7:bb:68:d6:ec:b4:d2: 34:54:d3:cc:a1:3f:87:6f:b5:dd:ac:ad:e3:07:a9:f2:ec:c3: f4:68:25:7c:be:9e:dd:6f:d3:92:23:3a:9d:a0:ee:c4:eb:ef: 02:b5:00:e8:d9:55:ea:08:e7:1e:21:f6:7a:82:51:be:f4:e4: c7:ac:84:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKiWBPzXQxEh85JOFKedQDL5BeuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjA3MTQxODMxNTNaFw0yNjA3MTUxODU5NTNaMDMxMTAvBgNV BAMTKEIyNEU5OTg0RjdGRjkwMDEwNjhBNzQ0OTkwQzlFNEVEQjc1NTY5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCg8VPN9/+rKWLmoEuAXQ3FHp6 SRaEVk7yuxIxVgpYzIZ3061Uk26hev+pk5dqtPGDZuWnVpw67MZw+a/63iD9oX+I Kp+6O+JHVwolhaExXBb3M6bUbkyuNvO5716PsPlVqdPSj6kDqSduYI1UkqIMqhrT 5WmlkYbP4x5IyBECUavSMlBQh+F+KLwtBfDjPDvaCaIzgsuAIXOGOi0gOcr7maO1 dA5qdsrS0cb1vdjYs7V/Cc+0bcddWn68QLozR+MiewLQ7p+3b+TFlQkkN8CEtpVR I5jmrtFKgLH/KPD6QUsUz4M5/Ab9N3PBWHQgZ2h4N8tpue//hd1WkmLkPHSHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsk6ZhPf/kAEGinRJkMnk7bdVaSgwHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzI4MzQwOTU3MTAyMTEvMC82NUQ5ODdGQjlFOENF MThDNUI1RkY3ODYzMDhDNDkwRUE4MTFBRUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt6A1NiGYHDh1 2dSt5ewDZhQ3rxyEe4fZ1akpzBp2sjGfLMONRRhJVWdi/kEhbfHhQvhe3vnKMt6x Q4DtA+vpFyGY8WqJEFfRAPaLFDIk50TM8JGgcz5znRNwkOctMS0XZmr/aJh9zoOI oo91rq4GCarPHzhWrXJB2P3th09i7/Bpd1ZZrP/xywUeULsQzKgXs2iWt9o9Rti7 oQ/8JYTGDJe1P4YVlFvJ/1CHAtrACZeqMiEvNPdsiGsRuA2cUejXu2jW7LTSNFTT zKE/h2+13ayt4wep8uzD9GglfL6e3W/TkiM6naDuxOvvArUA6NlV6gjnHiH2eoJR vvTkx6yECA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:09:47 2026 by rpki-client