$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft File: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft (raw, json) Hash identifier: xFuQ1pbD6mSuiMLXPKElmW19EypUgJtbr1hDStwqIrs= Subject key identifier: E9:71:75:96:CF:39:DB:76:3F:39:8D:8D:C5:0E:82:50:E2:DE:08:65 Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 49B763D2A9CFAE0D4C9709A7E7EC652CD6480ACF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft Manifest number: 47 Signing time: Fri 29 May 2026 18:28:04 +0000 Manifest this update: Fri 29 May 2026 18:23:04 +0000 Manifest next update: Sat 30 May 2026 21:36:04 +0000 Files and hashes: 1: 35392e3131312e3131322e302f32312d3234203d3e203435303632.roa (hash: /z0BCN1UvCNwW6reulSuf8caTR7KvRMHo29m5V49/jU=) 2: 35392e3131312e3130342e302f32332d3234203d3e203435303632.roa (hash: LQ+6kf0+KQiFoPSEDgpSjTdcAiC5hG5P6ieS38kc784=) 3: 35392e3131312e39362e302f31392d3234203d3e203435303632.roa (hash: Pj4OI2gVfEXRCIzzEAM7WxPW7pPOYS8cW1E5AjGFSG0=) 4: 35392e3131312e3130372e302f32342d3234203d3e203435303632.roa (hash: NDkXGsU9QQzZDBpgiC2IPLbFhyKSxvwu8KgFTYfHr0w=) 5: 35392e3131312e3131312e302f32342d3234203d3e203435303632.roa (hash: 5m5HLidh05Y0J5RMsFsEpvSNbIp2q2GDH4LOXYlkfrM=) 6: 35392e3131312e3130392e302f32342d3234203d3e203435303632.roa (hash: m9/MIJcHOyU7MhMlruNje0CXfeDnOt4kBLehg9tcAxY=) 7: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl (hash: 8fxq/kaYlWmOFvie3jk3sYRtpQpAQEE1hihWpsDxnoE=) 8: 35392e3131312e38382e302f32312d3234203d3e203435303632.roa (hash: A5CDNJxV9gwL9OvrsHIiTUgNrL8ZROPmAep83jl2HXg=) 9: 35392e3131312e39362e302f32312d3234203d3e203435303632.roa (hash: Z+dNhW7ZTJfYk6Zew4ollhgdQkqLJK02gByVAgIdwOI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b7:63:d2:a9:cf:ae:0d:4c:97:09:a7:e7:ec:65:2c:d6:48:0a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: May 29 18:23:04 2026 GMT Not After : May 30 21:36:04 2026 GMT Subject: CN=E9717596CF39DB763F398D8DC50E8250E2DE0865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:eb:d8:d6:8e:9c:2a:e8:8e:96:b8:c8:fa: 82:91:25:7a:b2:8d:6a:f4:b0:8a:96:47:0c:04:4e: d8:a7:27:ab:d8:1e:90:86:7d:47:80:9d:09:bd:ca: 9c:dc:23:2d:c6:bf:8f:da:f1:a2:08:7e:15:3b:dc: dd:2b:f1:0f:b6:38:75:e4:49:1b:1d:00:1e:ed:6e: 0e:66:c7:37:f1:0b:fa:29:a9:a9:78:0e:f8:5b:df: 81:a2:40:5f:f3:53:05:5c:5f:da:d3:8c:bb:04:5e: bf:f2:6a:f5:0b:3f:dc:44:fa:71:4f:25:c8:e1:5d: fc:be:f0:a9:f8:90:5e:ac:0a:74:42:a9:7c:ad:38: 05:72:ba:ec:85:b4:4e:67:d9:56:d9:9a:f5:38:a5: b4:ac:66:1b:4f:04:62:bd:c9:e2:78:6a:48:39:37: 31:04:c8:b1:c4:c4:c7:b9:09:ff:30:8a:48:76:69: e9:ca:a7:80:75:fb:df:a6:75:75:b7:73:47:9a:aa: cd:bf:ef:e9:ed:80:47:0b:9f:f8:bf:d8:30:d9:01: 67:81:d1:51:d5:26:ae:97:0a:85:36:c5:d0:22:d3: 86:fa:75:22:60:02:7d:f8:83:7c:1b:38:8b:e6:65: 76:62:2b:9a:cf:bb:87:1f:ff:f5:cf:e8:b3:65:65: 72:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:71:75:96:CF:39:DB:76:3F:39:8D:8D:C5:0E:82:50:E2:DE:08:65 X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:36:86:40:95:ad:0c:42:a7:03:07:22:a9:39:a8:7d:fd:5c: 8d:03:99:1b:14:81:0d:6c:2b:0e:9f:3d:fc:b0:7b:4c:81:05: d1:f1:df:7a:4e:59:fb:f5:76:6a:b2:b9:cf:28:d6:9e:9c:9e: 58:20:f8:35:d5:66:11:27:1a:fc:86:e2:17:a4:ed:6b:42:fe: ae:e5:dd:a4:f1:65:df:27:d2:66:55:c0:03:cc:cf:83:04:2f: 52:63:1e:41:4e:96:4b:4d:7e:dd:10:d1:5b:ee:54:9b:4c:0f: 9b:89:48:8c:9c:3d:e1:ac:b8:29:a6:07:ee:eb:63:58:2a:49: b6:67:2a:28:52:75:19:c0:ad:d9:44:0e:39:17:f3:d9:b1:9f: b2:68:24:7a:e8:84:22:41:97:76:52:91:c5:54:14:95:e0:82: b4:ed:72:46:d6:a9:f2:3a:0a:67:d1:d5:da:f6:24:b6:6c:ed: 6a:7d:88:26:c3:8a:f1:b7:04:8b:53:0b:48:f9:7f:34:e1:e5: 7f:56:7d:2a:30:41:15:11:dd:28:74:f5:67:82:c8:da:76:97: 2b:27:d7:59:7c:10:65:07:d0:33:cc:1e:10:e2:5c:fe:f0:f5: e8:d9:9d:10:9b:00:59:06:4e:ba:0c:c9:27:e8:3e:23:7b:be: 0d:64:75:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSbdj0qnPrg1Mlwmn5+xlLNZICs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjA1MjkxODIzMDRaFw0yNjA1MzAyMTM2MDRaMDMxMTAvBgNV BAMTKEU5NzE3NTk2Q0YzOURCNzYzRjM5OEQ4REM1MEU4MjUwRTJERTA4NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4KevY1o6cKuiOlrjI+oKRJXqy jWr0sIqWRwwETtinJ6vYHpCGfUeAnQm9ypzcIy3Gv4/a8aIIfhU73N0r8Q+2OHXk SRsdAB7tbg5mxzfxC/opqal4Dvhb34GiQF/zUwVcX9rTjLsEXr/yavULP9xE+nFP JcjhXfy+8Kn4kF6sCnRCqXytOAVyuuyFtE5n2VbZmvU4pbSsZhtPBGK9yeJ4akg5 NzEEyLHExMe5Cf8wikh2aenKp4B1+9+mdXW3c0eaqs2/7+ntgEcLn/i/2DDZAWeB 0VHVJq6XCoU2xdAi04b6dSJgAn34g3wbOIvmZXZiK5rPu4cf//XP6LNlZXKJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6XF1ls8523Y/OY2NxQ6CUOLeCGUwHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzI4MzQwOTU3MTAyMTEvMC82NUQ5ODdGQjlFOENF MThDNUI1RkY3ODYzMDhDNDkwRUE4MTFBRUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTaGQJWtDEKn AwciqTmoff1cjQOZGxSBDWwrDp89/LB7TIEF0fHfek5Z+/V2arK5zyjWnpyeWCD4 NdVmESca/IbiF6Tta0L+ruXdpPFl3yfSZlXAA8zPgwQvUmMeQU6WS01+3RDRW+5U m0wPm4lIjJw94ay4KaYH7utjWCpJtmcqKFJ1GcCt2UQOORfz2bGfsmgkeuiEIkGX dlKRxVQUleCCtO1yRtap8joKZ9HV2vYktmztan2IJsOK8bcEi1MLSPl/NOHlf1Z9 KjBBFRHdKHT1Z4LI2naXKyfXWXwQZQfQM8weEOJc/vD16NmdEJsAWQZOugzJJ+g+ I3u+DWR1Rg== -----END CERTIFICATE-----Generated at Fri May 29 22:05:49 2026 by rpki-client