$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft File: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft (raw, json) Hash identifier: s/K1+ot8+0nNNo3Y7AC0RRYdI5xVWAfI9thyf9hAIWc= Subject key identifier: 36:A0:04:0B:22:3C:10:AA:C2:00:DC:67:0D:4B:DD:71:A6:C0:ED:E6 Authority key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B Certificate issuer: /CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Certificate serial: 37C409FA5927F1879D4153DECD79FA4A1018A828 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft Manifest number: 84 Signing time: Sun 26 Jul 2026 21:17:37 +0000 Manifest this update: Sun 26 Jul 2026 21:12:37 +0000 Manifest next update: Mon 27 Jul 2026 21:41:37 +0000 Files and hashes: 1: 3130332e32352e36362e302f32332d3233203d3e2030.roa (hash: JMo6LH7KCuXdAXtrDjOm3O2HDvLmSMhk1dhzSjfl0Z4=) 2: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl (hash: tsWCcNqzxp6Ap5Yw6oCT9GIsSHzkJGEWqi6HRTnQCSw=) 3: 3130332e32352e36342e302f32332d3233203d3e2034383132.roa (hash: Nq6gNiMaaKFWixnw61ZZIDSmy1W/Glh2AAvq8ITBxjk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 21:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c4:09:fa:59:27:f1:87:9d:41:53:de:cd:79:fa:4a:10:18:a8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Validity Not Before: Jul 26 21:12:37 2026 GMT Not After : Jul 27 21:41:37 2026 GMT Subject: CN=36A0040B223C10AAC200DC670D4BDD71A6C0EDE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:94:26:50:04:d0:7a:fe:1e:62:3a:5f:3f: 40:3c:8d:90:1d:a1:d6:ef:1f:5e:cf:dc:49:af:32: 24:02:09:5e:c5:6c:0d:8e:09:b8:1c:ba:15:68:7d: ef:e1:57:f7:4a:37:33:17:54:e4:a0:0f:93:49:1c: a4:19:17:b4:dd:58:bb:bd:52:a7:52:66:12:60:cd: 01:26:89:38:26:66:99:62:00:11:3f:bc:15:69:7c: 95:1a:60:75:2a:d1:ae:5b:bb:71:59:94:04:6d:9f: 16:cc:7f:e7:b1:6b:b4:27:4a:de:8b:9c:9e:32:5c: d7:05:7c:20:ac:e4:2a:84:ba:43:d6:6d:0e:07:28: 6f:9e:a8:46:ff:5f:f1:82:4c:51:cf:cc:25:7b:7a: 89:f3:f6:47:7d:4c:16:b8:e6:6a:3c:2a:00:0c:65: 8d:14:12:6e:27:2e:23:a1:2c:27:2b:ab:be:17:b1: 5d:25:eb:6f:6c:70:d4:84:ba:2c:1c:80:e5:9d:6e: d2:fc:f9:d1:59:19:16:6c:d8:e5:81:0d:0e:79:e8: e9:68:c3:ad:05:c6:73:ad:b0:f2:76:e3:90:78:81: 88:81:f5:f8:86:bf:a9:d7:60:d4:11:5e:cc:d0:49: d2:08:29:e9:b0:03:b5:ce:a2:11:13:b5:37:dc:0d: ac:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A0:04:0B:22:3C:10:AA:C2:00:DC:67:0D:4B:DD:71:A6:C0:ED:E6 X509v3 Authority Key Identifier: keyid:65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:11:17:b2:fb:14:97:c6:34:db:56:87:84:fc:d8:48:51:30: f5:2b:77:d2:36:db:75:a7:2b:89:0e:13:0b:8d:5c:1e:de:72: 01:ab:80:3f:99:3e:92:8a:74:65:dd:a0:14:27:de:1f:8e:f3: e5:f8:b0:20:b9:d1:4b:49:ad:75:a7:92:28:0e:c4:3a:68:1d: f5:72:94:57:53:58:47:e2:80:de:4a:2c:8f:1c:cf:09:65:4a: 61:02:51:5c:78:f7:37:ce:fd:f3:56:cb:c7:96:80:cd:ef:b2: dd:a7:ca:63:78:6c:f9:b6:3a:e1:ae:9c:38:18:57:00:20:e9: b1:68:8e:4e:11:72:ef:c3:2d:62:54:87:8d:df:a2:7f:06:f5: 12:0f:40:ae:dd:04:5d:4c:bd:2c:3e:56:7d:b0:84:fe:7b:e7: 7e:9f:4d:a2:9b:e3:05:00:2c:1d:18:8c:bd:32:0e:39:ab:c0: 90:59:7f:8e:f8:c8:ae:7e:ad:5d:15:03:7d:17:c6:26:72:f1: 30:37:3b:f6:e3:1f:c7:2d:75:34:3c:ba:a3:fe:5a:8e:94:33: f7:bd:b4:be:49:07:9f:38:4b:5a:0a:de:8a:9c:b2:74:e4:a1: d1:0d:15:ad:0f:9e:09:82:dd:16:cf:dc:f6:2a:80:3c:5a:98: 48:97:de:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN8QJ+lkn8YedQVPezXn6ShAYqCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUw NTFFMDE4QjAeFw0yNjA3MjYyMTEyMzdaFw0yNjA3MjcyMTQxMzdaMDMxMTAvBgNV BAMTKDM2QTAwNDBCMjIzQzEwQUFDMjAwREM2NzBENEJERDcxQTZDMEVERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4g5QmUATQev4eYjpfP0A8jZAd odbvH17P3EmvMiQCCV7FbA2OCbgcuhVofe/hV/dKNzMXVOSgD5NJHKQZF7TdWLu9 UqdSZhJgzQEmiTgmZpliABE/vBVpfJUaYHUq0a5bu3FZlARtnxbMf+exa7QnSt6L nJ4yXNcFfCCs5CqEukPWbQ4HKG+eqEb/X/GCTFHPzCV7eonz9kd9TBa45mo8KgAM ZY0UEm4nLiOhLCcrq74XsV0l629scNSEuiwcgOWdbtL8+dFZGRZs2OWBDQ556Olo w60FxnOtsPJ245B4gYiB9fiGv6nXYNQRXszQSdIIKemwA7XOohETtTfcDawJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNqAECyI8EKrCANxnDUvdcabA7eYwHwYDVR0j BBgwFoAUZTObemt5iKpu9A74ZNWL/gUeAYswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5MTUyNzMzMDYxMTIwMi8wLzY1MzM5QjdBNkI3OTg4QUE2RUY0MEVGODY0RDU4 QkZFMDUxRTAxOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUwNTFFMDE4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTE1MjczMzA2MTEyMDIvMC82NTMzOUI3QTZCNzk4 OEFBNkVGNDBFRjg2NEQ1OEJGRTA1MUUwMThCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbREXsvsUl8Y0 21aHhPzYSFEw9St30jbbdacriQ4TC41cHt5yAauAP5k+kop0Zd2gFCfeH47z5fiw ILnRS0mtdaeSKA7EOmgd9XKUV1NYR+KA3kosjxzPCWVKYQJRXHj3N87981bLx5aA ze+y3afKY3hs+bY64a6cOBhXACDpsWiOThFy78MtYlSHjd+ifwb1Eg9Art0EXUy9 LD5WfbCE/nvnfp9NopvjBQAsHRiMvTIOOavAkFl/jvjIrn6tXRUDfRfGJnLxMDc7 9uMfxy11NDy6o/5ajpQz9720vkkHnzhLWgreipyydOSh0Q0VrQ+eCYLdFs/c9iqA PFqYSJfeVQ== -----END CERTIFICATE-----Generated at Mon Jul 27 06:53:49 2026 by rpki-client