$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft File: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft (raw, json) Hash identifier: aoHU0q/9TC+x1z7LLwMbv14H+9Q9Lx9W6wTg1zReOVg= Subject key identifier: F8:2C:3C:F5:A9:1D:74:87:D2:DF:D8:93:F0:1F:4E:BD:26:D2:D1:36 Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 7E0FDE5BE3D994A6C65B1E1F1F305C9F4570E3FF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft Manifest number: D5 Signing time: Wed 14 Oct 2026 14:54:17 +0000 Manifest this update: Wed 14 Oct 2026 14:49:17 +0000 Manifest next update: Sat 17 Oct 2026 23:36:17 +0000 Files and hashes: 1: 35392e3131312e3130342e302f32332d3234203d3e203435303632.roa (hash: LQ+6kf0+KQiFoPSEDgpSjTdcAiC5hG5P6ieS38kc784=) 2: 35392e3131312e3131312e302f32342d3234203d3e203435303632.roa (hash: 5m5HLidh05Y0J5RMsFsEpvSNbIp2q2GDH4LOXYlkfrM=) 3: 35392e3131312e38382e302f32312d3234203d3e203435303632.roa (hash: A5CDNJxV9gwL9OvrsHIiTUgNrL8ZROPmAep83jl2HXg=) 4: 35392e3131312e3130392e302f32342d3234203d3e203435303632.roa (hash: m9/MIJcHOyU7MhMlruNje0CXfeDnOt4kBLehg9tcAxY=) 5: 35392e3131312e3131322e302f32312d3234203d3e203435303632.roa (hash: /z0BCN1UvCNwW6reulSuf8caTR7KvRMHo29m5V49/jU=) 6: 35392e3131312e3130372e302f32342d3234203d3e203435303632.roa (hash: NDkXGsU9QQzZDBpgiC2IPLbFhyKSxvwu8KgFTYfHr0w=) 7: 35392e3131312e39362e302f32312d3234203d3e203435303632.roa (hash: Z+dNhW7ZTJfYk6Zew4ollhgdQkqLJK02gByVAgIdwOI=) 8: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl (hash: IIDiYibQyaE9Sig4AnnXEMLTVpVJeOWZTF3KvVd2OCw=) 9: 35392e3131312e39362e302f31392d3234203d3e203435303632.roa (hash: Pj4OI2gVfEXRCIzzEAM7WxPW7pPOYS8cW1E5AjGFSG0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 23:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:0f:de:5b:e3:d9:94:a6:c6:5b:1e:1f:1f:30:5c:9f:45:70:e3:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: Oct 14 14:49:17 2026 GMT Not After : Oct 17 23:36:17 2026 GMT Subject: CN=F82C3CF5A91D7487D2DFD893F01F4EBD26D2D136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:a3:ab:90:4e:7a:2b:ce:17:e2:8f:fc:5b: fe:dc:a1:94:27:1a:c0:76:26:1f:09:2f:b0:87:eb: 06:d2:d2:ae:de:d5:d1:5c:17:55:ed:a7:da:f1:ba: 92:aa:e2:c8:2c:f6:93:3b:80:79:7a:b8:2b:ef:92: 14:cc:23:72:ee:14:db:53:c8:5c:72:ba:ea:bd:a2: c4:dd:f5:0f:8c:98:35:60:b3:c3:47:51:38:e6:66: 15:3f:70:e8:51:9e:02:a5:88:71:8c:32:06:3b:8e: bd:96:ba:b3:36:cc:fd:79:8c:01:9f:7f:8b:6c:3d: 69:76:e2:55:ba:7a:6a:b6:28:69:13:8f:d3:a8:90: c9:ad:40:e0:fe:9b:f3:c4:a5:07:71:b0:91:a0:54: 04:5c:8e:8d:a8:32:02:7a:f0:72:40:49:41:7a:1d: ad:0b:28:12:fb:c3:10:27:de:ad:f5:de:b8:30:71: c6:24:32:2b:57:fd:4f:0c:7b:70:f0:ac:da:5a:0c: 48:46:ef:b8:da:b2:85:ee:c8:01:68:6e:38:01:e1: d9:8a:c2:57:36:90:16:f0:a2:4d:2e:26:90:c3:43: b2:4f:51:38:47:4a:bd:3d:d8:3f:77:fc:d1:27:b6: e9:a4:ca:24:24:e5:07:44:97:8a:07:37:c2:6f:2b: ec:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2C:3C:F5:A9:1D:74:87:D2:DF:D8:93:F0:1F:4E:BD:26:D2:D1:36 X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:8d:85:e9:90:78:3b:bc:89:a2:b9:aa:1f:e6:c3:8a:59:15: c0:b7:f1:44:5d:c7:48:7f:d6:93:b5:13:c0:46:3e:4b:1f:d0: 6a:87:e7:9d:b6:0d:27:40:f8:82:fb:ac:7d:64:89:95:64:89: f4:34:58:dd:e0:21:ac:e8:74:70:38:d3:6b:6c:3d:a6:37:a2: a0:b3:53:6b:30:1c:94:05:4d:70:17:9f:01:91:a2:d6:69:0c: b8:0a:c9:e8:0f:4d:49:13:7e:c0:c6:cd:a3:b5:a0:20:ae:5e: 59:2f:de:09:31:e5:22:e2:f5:6f:ba:4e:ac:2b:56:8f:a4:c2: 39:74:88:77:c1:ea:a8:66:06:f8:f6:38:ea:ad:f9:b1:29:ac: 35:6b:2b:c1:69:b1:44:11:47:dc:77:37:4b:67:3b:de:fd:2d: 6c:ab:0a:98:92:e9:51:ea:f2:e2:0b:55:a9:5f:f4:2b:dc:df: e2:74:61:51:80:78:f5:a5:2b:ec:a4:3a:22:af:77:5b:3d:9d: b6:b0:55:af:3a:94:e7:64:4a:b9:d0:32:46:54:0e:87:3c:af: 7f:f2:18:38:92:94:8b:d6:37:dd:c2:28:d8:1b:00:08:df:cd: 4c:39:e8:0c:82:fa:c9:c6:5b:f1:08:15:94:85:2c:69:ac:77: 83:d6:18:59 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfg/eW+PZlKbGWx4fHzBcn0Vw4/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjEwMTQxNDQ5MTdaFw0yNjEwMTcyMzM2MTdaMDMxMTAvBgNV BAMTKEY4MkMzQ0Y1QTkxRDc0ODdEMkRGRDg5M0YwMUY0RUJEMjZEMkQxMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpX6OrkE56K84X4o/8W/7coZQn GsB2Jh8JL7CH6wbS0q7e1dFcF1Xtp9rxupKq4sgs9pM7gHl6uCvvkhTMI3LuFNtT yFxyuuq9osTd9Q+MmDVgs8NHUTjmZhU/cOhRngKliHGMMgY7jr2WurM2zP15jAGf f4tsPWl24lW6emq2KGkTj9OokMmtQOD+m/PEpQdxsJGgVARcjo2oMgJ68HJASUF6 Ha0LKBL7wxAn3q313rgwccYkMitX/U8Me3DwrNpaDEhG77jasoXuyAFobjgB4dmK wlc2kBbwok0uJpDDQ7JPUThHSr092D93/NEntumkyiQk5QdEl4oHN8JvK+yrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+Cw89akddIfS39iT8B9OvSbS0TYwHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzI4MzQwOTU3MTAyMTEvMC82NUQ5ODdGQjlFOENF MThDNUI1RkY3ODYzMDhDNDkwRUE4MTFBRUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAo2F6ZB4O7yJ ormqH+bDilkVwLfxRF3HSH/Wk7UTwEY+Sx/QaofnnbYNJ0D4gvusfWSJlWSJ9DRY 3eAhrOh0cDjTa2w9pjeioLNTazAclAVNcBefAZGi1mkMuArJ6A9NSRN+wMbNo7Wg IK5eWS/eCTHlIuL1b7pOrCtWj6TCOXSId8HqqGYG+PY46q35sSmsNWsrwWmxRBFH 3Hc3S2c73v0tbKsKmJLpUery4gtVqV/0K9zf4nRhUYB49aUr7KQ6Iq93Wz2dtrBV rzqU52RKudAyRlQOhzyvf/IYOJKUi9Y33cIo2BsACN/NTDnoDIL6ycZb8QgVlIUs aax3g9YYWQ== -----END CERTIFICATE-----Generated at Thu Oct 15 16:14:07 2026 by rpki-client