$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft File: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft (raw, json) Hash identifier: YZl8zp3yKuQtTsHA/P5bqtnZJ5rYbcAvmPj9b9dmu9s= Subject key identifier: E1:34:19:EC:0A:F2:10:FA:E4:A1:0E:E1:6C:29:71:E2:39:AA:8D:FE Authority key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B Certificate issuer: /CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Certificate serial: 448212FED6FA86D99C0293B4DF68925FA876E290 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft Manifest number: B4 Signing time: Tue 08 Sep 2026 17:34:35 +0000 Manifest this update: Tue 08 Sep 2026 17:29:35 +0000 Manifest next update: Fri 11 Sep 2026 19:52:35 +0000 Files and hashes: 1: 3130332e32352e36362e302f32332d3233203d3e2030.roa (hash: JMo6LH7KCuXdAXtrDjOm3O2HDvLmSMhk1dhzSjfl0Z4=) 2: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl (hash: nMj9xd50SS4iqd3oQJ5NsvztSlv9igGxbtvnuZ5bQK0=) 3: 3130332e32352e36342e302f32332d3233203d3e2034383132.roa (hash: Nq6gNiMaaKFWixnw61ZZIDSmy1W/Glh2AAvq8ITBxjk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:82:12:fe:d6:fa:86:d9:9c:02:93:b4:df:68:92:5f:a8:76:e2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Validity Not Before: Sep 8 17:29:35 2026 GMT Not After : Sep 11 19:52:35 2026 GMT Subject: CN=E13419EC0AF210FAE4A10EE16C2971E239AA8DFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:1e:79:33:ba:72:3c:ef:86:38:43:26:41: 60:59:89:60:8a:05:36:5c:36:77:05:eb:ac:b5:9b: 91:32:0a:34:d7:3f:75:7b:c2:f2:af:25:7f:be:27: 54:f9:96:22:1f:2a:61:b8:83:6c:f4:69:04:67:78: 6a:30:e4:6a:66:7d:8b:f9:90:a1:39:c8:a1:cb:71: 9a:69:83:76:ce:90:2e:72:59:71:59:d7:4b:d3:01: e2:5e:2c:05:4e:6f:97:d7:fa:e8:15:04:73:a0:e7: 8b:e4:b3:8c:48:f6:a3:55:fe:84:5c:2d:45:15:17: 7e:b3:09:62:e4:fb:9d:21:bd:65:8b:84:5b:f6:5a: b8:70:75:1b:60:e2:db:f8:f1:22:1c:9a:2b:81:42: 80:54:13:75:c4:df:59:d5:58:67:39:7f:d7:6c:46: 38:82:44:78:71:e5:27:fd:92:e8:f7:58:31:9f:26: e5:dc:f8:c6:6a:6f:e0:74:ae:84:92:ff:4c:50:86: 03:2b:b8:df:70:5d:4e:ab:08:4d:34:a7:33:78:9e: 3a:23:a8:2a:9f:8f:ad:2e:6a:b7:a2:6d:cf:6b:27: 4c:65:e4:bc:77:e5:9e:79:3d:7e:cf:39:7a:9b:de: 4a:7d:fa:d4:d5:90:cf:80:24:c1:8d:a3:ae:0a:a4: 78:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:34:19:EC:0A:F2:10:FA:E4:A1:0E:E1:6C:29:71:E2:39:AA:8D:FE X509v3 Authority Key Identifier: keyid:65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:39:6f:5a:54:50:14:c6:ab:71:ae:7b:d6:ef:db:53:fe:5a: e0:02:81:57:2b:b2:43:29:a7:c5:74:71:8a:bc:0e:a9:83:58: 26:f8:25:e4:6d:eb:be:44:e3:fd:82:6f:cc:14:a7:e4:e5:4f: e4:20:4e:4b:d3:19:7f:71:2c:d0:1b:f4:89:68:48:17:da:c5: ba:fd:c6:a1:31:67:b0:4c:9e:7b:22:29:c1:28:24:b1:8f:41: 01:36:dc:3f:4f:25:1f:ba:f1:50:2e:56:89:a5:18:14:ae:16: c4:77:5e:3c:b6:92:b0:0c:1f:a3:6f:37:91:7b:4d:27:89:4d: 43:62:9b:c3:6d:32:e1:50:20:98:59:a7:6d:e9:da:f9:a6:59: 04:98:24:91:5c:e8:7f:00:a1:0f:eb:83:a6:97:7b:27:49:49: 23:65:79:5c:4f:90:19:cc:15:6c:7a:43:36:5f:ac:8a:b4:58: df:f7:3d:6d:2b:f8:ee:ee:37:a0:ff:58:0d:c6:9f:4b:68:49: 64:5c:80:87:de:6c:36:97:30:0e:9b:fa:da:00:2e:02:d4:c0: b6:06:2d:79:8b:b0:e3:41:43:7e:71:40:b4:b8:ef:a3:f5:3f: 6e:03:39:49:0e:5b:b5:8f:56:83:4d:2a:50:f2:01:d4:a6:9d: 10:87:6b:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURIIS/tb6htmcApO032iSX6h24pAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUw NTFFMDE4QjAeFw0yNjA5MDgxNzI5MzVaFw0yNjA5MTExOTUyMzVaMDMxMTAvBgNV BAMTKEUxMzQxOUVDMEFGMjEwRkFFNEExMEVFMTZDMjk3MUUyMzlBQThERkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHR55M7pyPO+GOEMmQWBZiWCK BTZcNncF66y1m5EyCjTXP3V7wvKvJX++J1T5liIfKmG4g2z0aQRneGow5GpmfYv5 kKE5yKHLcZppg3bOkC5yWXFZ10vTAeJeLAVOb5fX+ugVBHOg54vks4xI9qNV/oRc LUUVF36zCWLk+50hvWWLhFv2WrhwdRtg4tv48SIcmiuBQoBUE3XE31nVWGc5f9ds RjiCRHhx5Sf9kuj3WDGfJuXc+MZqb+B0roSS/0xQhgMruN9wXU6rCE00pzN4njoj qCqfj60uareibc9rJ0xl5Lx35Z55PX7POXqb3kp9+tTVkM+AJMGNo64KpHg3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4TQZ7AryEPrkoQ7hbClx4jmqjf4wHwYDVR0j BBgwFoAUZTObemt5iKpu9A74ZNWL/gUeAYswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5MTUyNzMzMDYxMTIwMi8wLzY1MzM5QjdBNkI3OTg4QUE2RUY0MEVGODY0RDU4 QkZFMDUxRTAxOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUwNTFFMDE4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTE1MjczMzA2MTEyMDIvMC82NTMzOUI3QTZCNzk4 OEFBNkVGNDBFRjg2NEQ1OEJGRTA1MUUwMThCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjlvWlRQFMar ca571u/bU/5a4AKBVyuyQymnxXRxirwOqYNYJvgl5G3rvkTj/YJvzBSn5OVP5CBO S9MZf3Es0Bv0iWhIF9rFuv3GoTFnsEyeeyIpwSgksY9BATbcP08lH7rxUC5WiaUY FK4WxHdePLaSsAwfo283kXtNJ4lNQ2Kbw20y4VAgmFmnbena+aZZBJgkkVzofwCh D+uDppd7J0lJI2V5XE+QGcwVbHpDNl+sirRY3/c9bSv47u43oP9YDcafS2hJZFyA h95sNpcwDpv62gAuAtTAtgYteYuw40FDfnFAtLjvo/U/bgM5SQ5btY9Wg00qUPIB 1KadEIdrvg== -----END CERTIFICATE-----Generated at Thu Sep 10 10:46:11 2026 by rpki-client