$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft File: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft (raw, json) Hash identifier: rpAM9pxKuElgYR8DLi2jSb3qe8GWR8lo8BjLuHYPU5s= Subject key identifier: 2D:86:AA:95:A8:7B:0F:39:DE:69:31:98:53:22:66:50:FD:90:05:03 Authority key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B Certificate issuer: /CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Certificate serial: 4A355361275998799AA94F4612ABBA8BB6A7AABD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft Manifest number: C9 Signing time: Mon 26 Oct 2026 09:08:35 +0000 Manifest this update: Mon 26 Oct 2026 09:03:35 +0000 Manifest next update: Thu 29 Oct 2026 15:27:35 +0000 Files and hashes: 1: 3130332e32352e36342e302f32332d3233203d3e2034383132.roa (hash: Nq6gNiMaaKFWixnw61ZZIDSmy1W/Glh2AAvq8ITBxjk=) 2: 3130332e32352e36362e302f32332d3233203d3e2030.roa (hash: JMo6LH7KCuXdAXtrDjOm3O2HDvLmSMhk1dhzSjfl0Z4=) 3: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl (hash: 2zJTgeRrJgBtlMgmBmfT0oRV0R7EjW8rydK70Gs+dlQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 15:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:35:53:61:27:59:98:79:9a:a9:4f:46:12:ab:ba:8b:b6:a7:aa:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Validity Not Before: Oct 26 09:03:35 2026 GMT Not After : Oct 29 15:27:35 2026 GMT Subject: CN=2D86AA95A87B0F39DE69319853226650FD900503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:f7:f6:dd:75:cb:59:5f:a0:09:9f:6b:fd: 8f:af:bf:25:06:6d:a2:52:dd:9e:72:74:56:b5:19: a5:dc:10:a2:ec:f6:3e:4d:8f:99:d5:a7:8a:49:2d: 52:3a:fd:73:ee:db:0d:2b:c7:94:30:ba:c7:84:f7: a3:13:0f:00:ba:6e:c2:ad:fb:97:af:ec:bd:e6:6b: df:4d:dc:b4:c4:45:13:db:ab:34:92:17:92:3c:66: 66:21:1e:d0:c0:80:12:5c:96:63:ad:67:44:b3:e3: c9:5c:d3:b2:35:f5:41:19:ed:d1:fd:e5:8c:b5:ad: 1f:95:6a:51:82:c9:bc:da:6b:df:cf:d8:30:43:08: 16:c8:46:f4:25:ed:a1:7f:f1:30:14:b0:fb:71:c4: 67:c7:12:45:f9:6f:fb:20:09:6d:d3:29:01:79:9b: 4d:fc:56:6f:bf:88:5d:98:23:fb:fb:d3:99:7d:48: f2:e9:3d:c4:7b:d8:4d:67:51:5a:d8:85:ec:2b:d7: d7:44:a3:13:af:b4:4d:67:d6:18:43:ed:b0:cb:1d: 3f:f7:c7:e1:27:35:bb:65:83:da:43:54:50:0e:ab: 88:21:2b:d9:ef:56:3a:e3:41:11:95:1e:19:de:04: 1e:f8:b5:e9:9f:26:97:c2:d6:bd:6e:9e:1b:c4:40: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:86:AA:95:A8:7B:0F:39:DE:69:31:98:53:22:66:50:FD:90:05:03 X509v3 Authority Key Identifier: keyid:65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ab:b0:54:2e:50:c9:05:2a:57:82:ba:89:c1:1f:99:d3:c6: 9f:6d:e8:88:d0:01:c7:6d:07:d2:12:d5:af:aa:1f:c8:dd:95: e9:18:54:5e:68:69:5d:ca:95:9b:ff:00:98:2e:31:81:2e:fe: 40:f6:8e:0c:b1:fe:a7:b1:00:30:6c:53:e8:e7:74:0a:f7:b4: 3c:f0:fe:ea:b9:88:26:30:13:90:40:4a:b7:ea:92:2d:db:d0: df:30:d1:55:5a:61:6c:53:bc:d3:f3:96:07:e5:7f:90:84:77: db:ed:cb:b2:30:63:c4:72:f3:94:e2:2c:30:13:fe:e1:f9:01: d7:f8:83:3c:f6:00:21:45:cb:c4:f4:ba:4b:93:4a:0e:a7:11: 0c:bc:c0:bd:fa:3c:f9:65:08:28:87:85:b3:74:5c:f3:28:2c: ae:41:0a:14:df:cf:51:b9:d7:3f:30:c1:32:8c:e1:32:18:52: 33:bd:f8:19:a9:ab:6b:b1:d9:91:a3:c7:dd:5b:30:a8:74:66: 94:00:60:ed:12:07:ea:c7:a3:3f:cc:be:d4:e0:da:56:69:e1: f8:e9:3f:1b:85:fc:2a:10:79:e2:95:80:1c:bb:92:14:b4:7b: b9:47:b7:26:64:93:00:3c:f5:93:af:c1:2b:d4:36:8c:74:4b: dd:5e:e8:db -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSjVTYSdZmHmaqU9GEqu6i7anqr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUw NTFFMDE4QjAeFw0yNjEwMjYwOTAzMzVaFw0yNjEwMjkxNTI3MzVaMDMxMTAvBgNV BAMTKDJEODZBQTk1QTg3QjBGMzlERTY5MzE5ODUzMjI2NjUwRkQ5MDA1MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHTvf23XXLWV+gCZ9r/Y+vvyUG baJS3Z5ydFa1GaXcEKLs9j5Nj5nVp4pJLVI6/XPu2w0rx5QwuseE96MTDwC6bsKt +5ev7L3ma99N3LTERRPbqzSSF5I8ZmYhHtDAgBJclmOtZ0Sz48lc07I19UEZ7dH9 5Yy1rR+ValGCybzaa9/P2DBDCBbIRvQl7aF/8TAUsPtxxGfHEkX5b/sgCW3TKQF5 m038Vm+/iF2YI/v705l9SPLpPcR72E1nUVrYhewr19dEoxOvtE1n1hhD7bDLHT/3 x+EnNbtlg9pDVFAOq4ghK9nvVjrjQRGVHhneBB74temfJpfC1r1unhvEQIkLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULYaqlah7DzneaTGYUyJmUP2QBQMwHwYDVR0j BBgwFoAUZTObemt5iKpu9A74ZNWL/gUeAYswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5MTUyNzMzMDYxMTIwMi8wLzY1MzM5QjdBNkI3OTg4QUE2RUY0MEVGODY0RDU4 QkZFMDUxRTAxOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUwNTFFMDE4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTE1MjczMzA2MTEyMDIvMC82NTMzOUI3QTZCNzk4 OEFBNkVGNDBFRjg2NEQ1OEJGRTA1MUUwMThCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABauwVC5QyQUq V4K6icEfmdPGn23oiNABx20H0hLVr6ofyN2V6RhUXmhpXcqVm/8AmC4xgS7+QPaO DLH+p7EAMGxT6Od0Cve0PPD+6rmIJjATkEBKt+qSLdvQ3zDRVVphbFO80/OWB+V/ kIR32+3LsjBjxHLzlOIsMBP+4fkB1/iDPPYAIUXLxPS6S5NKDqcRDLzAvfo8+WUI KIeFs3Rc8ygsrkEKFN/PUbnXPzDBMozhMhhSM734Gamra7HZkaPH3VswqHRmlABg 7RIH6sejP8y+1ODaVmnh+Ok/G4X8KhB54pWAHLuSFLR7uUe3JmSTADz1k6/BK9Q2 jHRL3V7o2w== -----END CERTIFICATE-----Generated at Wed Oct 28 03:04:52 2026 by rpki-client