$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft File: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft (raw, json) Hash identifier: WmE2x6aYoz7zeX0TwoFr9Vd7I0anKiGBrT2+z+J3cNk= Subject key identifier: 7A:54:E0:1C:CE:B1:46:F7:4F:89:38:4D:9B:3F:54:1B:AC:BA:1A:76 Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 4B86CE405AC2224BAEBE3041B4A893B878767919 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft Manifest number: C0 Signing time: Fri 28 Aug 2026 06:48:03 +0000 Manifest this update: Fri 28 Aug 2026 06:43:03 +0000 Manifest next update: Mon 31 Aug 2026 11:08:03 +0000 Files and hashes: 1: 35392e3131312e39362e302f32312d3234203d3e203435303632.roa (hash: Z+dNhW7ZTJfYk6Zew4ollhgdQkqLJK02gByVAgIdwOI=) 2: 35392e3131312e3130342e302f32332d3234203d3e203435303632.roa (hash: LQ+6kf0+KQiFoPSEDgpSjTdcAiC5hG5P6ieS38kc784=) 3: 35392e3131312e3130372e302f32342d3234203d3e203435303632.roa (hash: NDkXGsU9QQzZDBpgiC2IPLbFhyKSxvwu8KgFTYfHr0w=) 4: 35392e3131312e3131322e302f32312d3234203d3e203435303632.roa (hash: /z0BCN1UvCNwW6reulSuf8caTR7KvRMHo29m5V49/jU=) 5: 35392e3131312e3130392e302f32342d3234203d3e203435303632.roa (hash: m9/MIJcHOyU7MhMlruNje0CXfeDnOt4kBLehg9tcAxY=) 6: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl (hash: zfS3zBSFfAbHYlVfXFWULCwIgf6b22gIGMpJPmvEp88=) 7: 35392e3131312e38382e302f32312d3234203d3e203435303632.roa (hash: A5CDNJxV9gwL9OvrsHIiTUgNrL8ZROPmAep83jl2HXg=) 8: 35392e3131312e3131312e302f32342d3234203d3e203435303632.roa (hash: 5m5HLidh05Y0J5RMsFsEpvSNbIp2q2GDH4LOXYlkfrM=) 9: 35392e3131312e39362e302f31392d3234203d3e203435303632.roa (hash: Pj4OI2gVfEXRCIzzEAM7WxPW7pPOYS8cW1E5AjGFSG0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:86:ce:40:5a:c2:22:4b:ae:be:30:41:b4:a8:93:b8:78:76:79:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: Aug 28 06:43:03 2026 GMT Not After : Aug 31 11:08:03 2026 GMT Subject: CN=7A54E01CCEB146F74F89384D9B3F541BACBA1A76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:19:44:08:44:2e:d5:a6:cd:6c:3c:a6:8f: fa:08:8e:c6:69:72:26:0f:b9:27:7b:28:d8:f8:bf: 6e:ea:7a:6b:f1:92:e5:f2:6f:c6:08:10:56:87:38: e4:37:01:87:18:8e:49:ff:01:c1:6b:98:49:b5:80: 95:00:22:ad:b5:8e:2a:58:c6:61:20:4a:a5:bd:1f: cc:a3:82:b4:d7:00:ab:c9:6b:ba:8b:28:40:a9:50: e9:4c:11:0f:7e:21:d4:28:22:40:40:6e:95:19:5c: a9:a4:d4:19:60:da:56:ab:bf:04:a0:6f:3d:fe:8e: 97:3c:8c:3d:45:51:fc:e9:aa:ac:93:46:89:ea:4f: 4d:b0:24:11:59:6b:cd:f3:9e:a6:49:c5:26:1f:1d: d7:1e:0b:eb:90:a6:c6:c1:54:77:18:ed:52:75:8c: 17:85:ad:5a:06:21:28:d1:30:6b:5f:2e:19:bf:36: 1f:fb:95:7d:d5:4b:a8:7f:e5:e0:03:11:b0:84:79: fa:82:83:27:88:43:04:22:2e:b9:99:3a:de:13:90: ad:53:74:0f:15:8b:b6:87:f5:cf:5b:ee:12:54:b0: b9:64:05:f5:6c:10:73:e1:85:0e:a4:08:91:0e:57: d5:1f:ac:72:f7:96:d9:73:21:cb:4b:ac:ea:b2:32: 5a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:54:E0:1C:CE:B1:46:F7:4F:89:38:4D:9B:3F:54:1B:AC:BA:1A:76 X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f6:92:8b:6c:97:28:ea:e4:22:d8:5e:6a:bc:8a:6a:d4:91: 86:be:14:e1:99:34:a8:15:47:56:03:2f:61:db:a3:2f:c2:27: f7:69:f1:3a:88:c6:01:61:0a:83:5f:36:4c:9d:4e:a3:ad:ff: d4:ac:43:b4:fe:63:2d:b0:5e:ae:75:8f:92:ab:d6:a2:52:07: 6c:37:bf:6e:8f:ab:59:81:fa:7f:fe:2d:70:0d:fc:28:da:84: a3:ea:92:73:16:d3:86:af:2d:87:9e:df:22:d9:b8:b4:f7:e1: 99:e2:02:1f:28:ad:17:fd:04:a4:7e:47:24:12:b1:c1:6a:57: fb:37:6b:89:c3:1b:f8:40:6d:df:4d:c1:56:1f:5f:ee:f8:7a: 45:98:77:92:50:dd:f1:99:d2:ee:a2:9b:8f:c1:1b:ff:da:94: fb:cd:08:27:e5:72:b3:54:d2:c8:61:ba:23:86:76:b2:03:46: 59:4d:c5:43:d5:55:e3:58:2d:f6:53:b2:b3:b4:93:6e:62:dc: 3b:09:db:2d:aa:7b:ab:47:ee:75:75:ca:ec:7a:20:cd:72:87: 34:9b:7e:1d:10:5b:cf:b6:45:91:a7:7a:b3:60:e9:07:b3:98: 9f:53:74:c1:1e:34:0c:02:0b:1c:a7:16:27:27:58:0d:36:8c: d7:5b:d7:87 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS4bOQFrCIkuuvjBBtKiTuHh2eRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjA4MjgwNjQzMDNaFw0yNjA4MzExMTA4MDNaMDMxMTAvBgNV BAMTKDdBNTRFMDFDQ0VCMTQ2Rjc0Rjg5Mzg0RDlCM0Y1NDFCQUNCQTFBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXuhlECEQu1abNbDymj/oIjsZp ciYPuSd7KNj4v27qemvxkuXyb8YIEFaHOOQ3AYcYjkn/AcFrmEm1gJUAIq21jipY xmEgSqW9H8yjgrTXAKvJa7qLKECpUOlMEQ9+IdQoIkBAbpUZXKmk1Blg2larvwSg bz3+jpc8jD1FUfzpqqyTRonqT02wJBFZa83znqZJxSYfHdceC+uQpsbBVHcY7VJ1 jBeFrVoGISjRMGtfLhm/Nh/7lX3VS6h/5eADEbCEefqCgyeIQwQiLrmZOt4TkK1T dA8Vi7aH9c9b7hJUsLlkBfVsEHPhhQ6kCJEOV9UfrHL3ltlzIctLrOqyMlrdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUelTgHM6xRvdPiThNmz9UG6y6GnYwHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzI4MzQwOTU3MTAyMTEvMC82NUQ5ODdGQjlFOENF MThDNUI1RkY3ODYzMDhDNDkwRUE4MTFBRUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfaSi2yXKOrk IthearyKatSRhr4U4Zk0qBVHVgMvYdujL8In92nxOojGAWEKg182TJ1Oo63/1KxD tP5jLbBernWPkqvWolIHbDe/bo+rWYH6f/4tcA38KNqEo+qScxbThq8th57fItm4 tPfhmeICHyitF/0EpH5HJBKxwWpX+zdricMb+EBt303BVh9f7vh6RZh3klDd8ZnS 7qKbj8Eb/9qU+80IJ+Vys1TSyGG6I4Z2sgNGWU3FQ9VV41gt9lOys7STbmLcOwnb Lap7q0fudXXK7HogzXKHNJt+HRBbz7ZFkad6s2DpB7OYn1N0wR40DAILHKcWJydY DTaM11vXhw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:20:24 2026 by rpki-client