$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft File: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft (raw, json) Hash identifier: VDjeKeyhX2w2KvDpKeWvKbwgTfarH1ng49/gq+Ih+mM= Subject key identifier: D5:A5:04:BC:3F:17:0A:68:42:4C:BF:13:0A:58:D9:A5:3E:07:EB:9C Authority key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B Certificate issuer: /CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Certificate serial: 38DAC8CF01C09BE20B2AEEAEEBE4C83DACE37937 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft Manifest number: 0B Signing time: Mon 27 Apr 2026 05:08:41 +0000 Manifest this update: Mon 27 Apr 2026 05:03:41 +0000 Manifest next update: Tue 28 Apr 2026 06:40:41 +0000 Files and hashes: 1: 3130332e32352e36342e302f32332d3233203d3e2034383132.roa (hash: Nq6gNiMaaKFWixnw61ZZIDSmy1W/Glh2AAvq8ITBxjk=) 2: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl (hash: fYOsG3qvlsC4XJtq7oL7pnFfa/12hn098zvjFHZMnWM=) 3: 3130332e32352e36362e302f32332d3233203d3e2030.roa (hash: JMo6LH7KCuXdAXtrDjOm3O2HDvLmSMhk1dhzSjfl0Z4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:da:c8:cf:01:c0:9b:e2:0b:2a:ee:ae:eb:e4:c8:3d:ac:e3:79:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Validity Not Before: Apr 27 05:03:41 2026 GMT Not After : Apr 28 06:40:41 2026 GMT Subject: CN=D5A504BC3F170A68424CBF130A58D9A53E07EB9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:21:db:6c:b9:bb:50:6e:7c:a0:c1:22:de: 32:32:99:03:e2:1f:cb:b4:b5:23:bf:3c:1b:21:d7: 36:5d:e4:46:71:66:43:65:e0:82:55:a3:ff:07:c8: 51:da:bd:92:78:f2:9d:a6:79:ef:c6:c9:21:c3:a9: 5c:09:81:b2:ff:49:7a:eb:99:2a:0d:12:6a:fd:80: bc:c3:a9:4d:fc:17:1d:aa:df:f6:de:b4:85:42:a3: 91:82:0f:7a:fe:2e:32:1f:a5:aa:52:54:1f:a0:ae: 91:dc:c4:07:cb:ec:46:3f:7b:10:6a:d1:49:7e:8b: 5b:d0:b5:9f:ff:17:30:d0:f6:3a:f1:9f:6a:09:84: 30:2e:f3:18:c8:90:ca:69:0b:b1:89:96:4b:f2:18: a1:40:e8:13:90:31:6b:0e:cd:37:1c:07:0f:20:4d: 29:35:53:70:d6:6b:30:e9:72:db:04:d7:cd:2e:11: a7:5d:c6:83:44:fa:aa:cb:a8:d3:56:64:11:e5:7e: 1d:71:17:80:69:82:cc:3c:8e:bd:49:a6:1f:93:ba: c5:84:16:9d:3e:87:f7:f4:55:3a:76:61:47:82:44: f6:92:d5:2b:9a:cb:d5:df:75:af:f0:25:68:1c:21: 8b:cb:78:fb:83:d7:6c:c6:00:f5:55:ff:a1:e5:ed: 27:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A5:04:BC:3F:17:0A:68:42:4C:BF:13:0A:58:D9:A5:3E:07:EB:9C X509v3 Authority Key Identifier: keyid:65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:27:e7:36:7e:d9:a6:8f:00:20:be:c9:43:0e:8d:31:35:a3: af:9e:e6:2b:31:07:4b:44:62:53:c1:6a:84:78:52:dd:bc:82: f6:dd:22:f9:f3:27:c4:72:e1:66:df:a1:ca:e1:fa:1f:12:26: e2:df:f5:54:6d:f5:97:c2:8d:20:d1:69:a5:d2:8e:51:e4:7a: e0:ec:21:20:5d:69:cd:fc:f3:7e:91:7e:99:7b:95:1a:d4:1c: 2a:49:b1:d5:86:81:c6:5e:12:dc:0a:ef:37:c6:6b:d1:be:56: 5e:c8:64:5c:4a:97:6d:7e:f5:24:50:41:ee:48:cf:e4:dd:a6: ad:9d:03:da:a4:01:f8:04:e2:6d:47:57:e0:7a:ff:cf:b7:6d: a2:9b:19:16:e4:45:df:db:af:01:2a:96:6e:94:c3:ca:4b:03: 7a:34:0b:25:c6:e5:e9:c8:3c:2d:e5:e6:db:23:89:7e:54:ff: 48:93:9a:4d:5d:f5:ec:af:39:0f:04:7a:e7:3b:37:fa:89:dd: a2:84:7f:ac:50:42:43:5c:8a:a7:96:7e:c2:00:12:bf:6d:2f: 65:c0:b0:2d:5e:2e:d9:4d:6e:e5:5a:55:50:0f:c2:aa:ad:f5: 1b:59:26:ea:db:e8:4d:16:bd:42:aa:d1:0e:2e:4e:bb:b1:f8: 9b:a8:a8:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUONrIzwHAm+ILKu6u6+TIPazjeTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUw NTFFMDE4QjAeFw0yNjA0MjcwNTAzNDFaFw0yNjA0MjgwNjQwNDFaMDMxMTAvBgNV BAMTKEQ1QTUwNEJDM0YxNzBBNjg0MjRDQkYxMzBBNThEOUE1M0UwN0VCOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wCHbbLm7UG58oMEi3jIymQPi H8u0tSO/PBsh1zZd5EZxZkNl4IJVo/8HyFHavZJ48p2mee/GySHDqVwJgbL/SXrr mSoNEmr9gLzDqU38Fx2q3/betIVCo5GCD3r+LjIfpapSVB+grpHcxAfL7EY/exBq 0Ul+i1vQtZ//FzDQ9jrxn2oJhDAu8xjIkMppC7GJlkvyGKFA6BOQMWsOzTccBw8g TSk1U3DWazDpctsE180uEaddxoNE+qrLqNNWZBHlfh1xF4Bpgsw8jr1Jph+TusWE Fp0+h/f0VTp2YUeCRPaS1Suay9Xfda/wJWgcIYvLePuD12zGAPVV/6Hl7SfdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1aUEvD8XCmhCTL8TCljZpT4H65wwHwYDVR0j BBgwFoAUZTObemt5iKpu9A74ZNWL/gUeAYswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5MTUyNzMzMDYxMTIwMi8wLzY1MzM5QjdBNkI3OTg4QUE2RUY0MEVGODY0RDU4 QkZFMDUxRTAxOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUwNTFFMDE4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTE1MjczMzA2MTEyMDIvMC82NTMzOUI3QTZCNzk4 OEFBNkVGNDBFRjg2NEQ1OEJGRTA1MUUwMThCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANifnNn7Zpo8A IL7JQw6NMTWjr57mKzEHS0RiU8FqhHhS3byC9t0i+fMnxHLhZt+hyuH6HxIm4t/1 VG31l8KNINFppdKOUeR64OwhIF1pzfzzfpF+mXuVGtQcKkmx1YaBxl4S3ArvN8Zr 0b5WXshkXEqXbX71JFBB7kjP5N2mrZ0D2qQB+ATibUdX4Hr/z7dtopsZFuRF39uv ASqWbpTDyksDejQLJcbl6cg8LeXm2yOJflT/SJOaTV317K85DwR65zs3+ondooR/ rFBCQ1yKp5Z+wgASv20vZcCwLV4u2U1u5VpVUA/Cqq31G1km6tvoTRa9QqrRDi5O u7H4m6iouQ== -----END CERTIFICATE-----Generated at Mon Apr 27 09:39:09 2026 by rpki-client