$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft File: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft (raw, json) Hash identifier: 8hSj3tuy05LDGRXGKxfZaA4b+CDXKNAQLarPGd5KJeA= Subject key identifier: 1C:3B:24:F3:FE:4F:33:4A:67:ED:4F:E7:60:28:73:11:EA:13:C1:6C Authority key identifier: B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D Certificate issuer: /CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Certificate serial: 7EC3F1324121D7AB6A43D07B3C1CC9B4DB179A3E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft Manifest number: 87 Signing time: Fri 09 Oct 2026 22:43:56 +0000 Manifest this update: Fri 09 Oct 2026 22:38:56 +0000 Manifest next update: Tue 13 Oct 2026 01:03:56 +0000 Files and hashes: 1: 3130332e31342e3133322e302f32342d3234203d3e20313430373236.roa (hash: Ph1dlsU1gsZp5Js2bzwU2W0EFG5DOnt4Suxc6EJUP4U=) 2: 3130332e31342e3133332e302f32342d3234203d3e20313430373236.roa (hash: V+qv7ptj/i5Q0Kg0lA4vCRODMLzJgZmqRhPGd63kKfo=) 3: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl (hash: hV+kUDWCoSZI7CuJWJyY/hnyEoNDsukYuB/Pxh7Fwwc=) 4: 3130332e31342e3133342e302f32332d3233203d3e20313430373236.roa (hash: PohPnTPBADShmZdUjAc+ol5RV4sbT3451odzVbu+B7Y=) 5: 3130332e31342e3133322e302f32332d3233203d3e2034383337.roa (hash: yPZ2e1NPGAMvQsQSyK2kLR5rDUrX/7UynvFoCiT9BQ8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 01:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c3:f1:32:41:21:d7:ab:6a:43:d0:7b:3c:1c:c9:b4:db:17:9a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Validity Not Before: Oct 9 22:38:56 2026 GMT Not After : Oct 13 01:03:56 2026 GMT Subject: CN=1C3B24F3FE4F334A67ED4FE760287311EA13C16C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7a:58:33:00:a6:12:53:b9:3e:a9:8f:2c:19: 38:4c:df:ac:e3:2e:81:99:cb:61:db:72:ff:13:0f: a2:c2:5d:d3:cd:6b:b1:a4:6e:0e:42:76:11:06:c7: 95:20:ca:67:bc:98:82:a3:f3:26:ea:e2:91:08:30: e5:67:02:8b:39:d2:70:b6:52:58:e6:2b:fa:5b:e6: a0:d6:de:9c:88:3a:b4:40:73:7a:9e:75:4e:eb:73: f4:82:81:76:b9:64:06:17:78:6c:4e:d2:8c:de:1b: 80:ee:a2:ff:88:69:97:8a:8f:c4:31:67:36:be:8c: 1b:80:9f:91:e2:7f:c6:3d:3f:42:23:bf:9b:1c:f4: 0c:32:4d:3b:29:19:4b:81:21:3e:37:43:8a:4a:32: 10:53:82:c3:4a:cd:a8:11:2d:21:32:d6:47:bb:67: 71:c1:f0:c0:b3:d8:ae:cc:e9:f6:92:c4:73:0a:c4: 69:03:06:0a:b1:fa:61:87:3e:e0:36:13:42:29:a7: c1:90:a8:1b:40:5c:ff:b2:49:15:87:90:26:cd:1b: 16:07:c1:31:8e:3b:8a:a4:09:a6:5f:df:5c:b7:90: e3:03:0b:24:14:cd:fd:f3:e7:a8:55:c7:79:14:ed: 3b:b4:af:2d:95:89:6d:15:c9:01:11:f0:e8:07:6f: 3f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3B:24:F3:FE:4F:33:4A:67:ED:4F:E7:60:28:73:11:EA:13:C1:6C X509v3 Authority Key Identifier: keyid:B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:cf:52:9e:6b:e7:b3:72:43:02:9d:c0:b4:bc:a4:e0:63:80: 51:24:45:98:01:28:34:18:67:d1:d1:5b:9c:aa:9f:f2:29:6d: 40:f6:91:aa:52:44:a6:e1:0c:5c:fd:f6:17:1d:52:15:59:1b: 16:21:37:f6:21:67:e6:9c:9f:2e:b6:01:72:e8:1d:21:90:d0: 74:af:5d:77:f6:05:17:7c:5c:d0:35:0b:b0:14:13:87:4d:92: b2:55:6a:f4:a5:79:b8:2a:48:f8:db:04:26:65:16:1a:1d:4e: 58:74:9d:ad:2b:5d:b3:81:e0:f9:7a:7b:59:89:dc:27:ac:4d: ff:0e:50:9a:64:9b:8f:5f:94:a3:a4:a4:2b:cb:4e:2b:b6:86: 07:3d:8d:31:6e:2f:85:2a:f5:d7:f6:12:f8:d9:91:bf:c1:48: c6:1f:9a:06:bb:03:64:e8:8f:0d:a9:fd:e8:7b:07:84:11:7f: a0:1a:08:3d:65:d0:35:a2:77:71:71:8f:40:17:7d:32:bb:60: e2:ba:25:df:78:df:44:7f:d2:55:ef:ad:a9:4b:87:53:35:78: 29:79:77:b0:b4:0e:59:d3:b9:0a:f9:a9:3e:be:7c:8d:63:82: 50:55:95:5d:46:af:de:8f:b9:ff:bf:a1:69:21:4b:cb:ad:bb: b2:0d:d9:c2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfsPxMkEh16tqQ9B7PBzJtNsXmj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdG MDYzRkQ2RDAeFw0yNjEwMDkyMjM4NTZaFw0yNjEwMTMwMTAzNTZaMDMxMTAvBgNV BAMTKDFDM0IyNEYzRkU0RjMzNEE2N0VENEZFNzYwMjg3MzExRUExM0MxNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCielgzAKYSU7k+qY8sGThM36zj LoGZy2Hbcv8TD6LCXdPNa7Gkbg5CdhEGx5Ugyme8mIKj8ybq4pEIMOVnAos50nC2 UljmK/pb5qDW3pyIOrRAc3qedU7rc/SCgXa5ZAYXeGxO0ozeG4Duov+IaZeKj8Qx Zza+jBuAn5Hif8Y9P0Ijv5sc9AwyTTspGUuBIT43Q4pKMhBTgsNKzagRLSEy1ke7 Z3HB8MCz2K7M6faSxHMKxGkDBgqx+mGHPuA2E0Ipp8GQqBtAXP+ySRWHkCbNGxYH wTGOO4qkCaZf31y3kOMDCyQUzf3z56hVx3kU7Tu0ry2ViW0VyQER8OgHbz8zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHDsk8/5PM0pn7U/nYChzEeoTwWwwHwYDVR0j BBgwFoAUtl95L4T6HpANpNLaSdzFN/Bj/W0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDk0OTc1ODA1ODc1ODE2OS8wL0I2NUY3OTJGODRGQTFFOTAwREE0RDJEQTQ5REND NTM3RjA2M0ZENkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdGMDYzRkQ2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ5NDk3NTgwNTg3NTgxNjkvMC9CNjVGNzkyRjg0RkEx RTkwMERBNEQyREE0OURDQzUzN0YwNjNGRDZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAks9Snmvns3JD Ap3AtLyk4GOAUSRFmAEoNBhn0dFbnKqf8iltQPaRqlJEpuEMXP32Fx1SFVkbFiE3 9iFn5pyfLrYBcugdIZDQdK9dd/YFF3xc0DULsBQTh02SslVq9KV5uCpI+NsEJmUW Gh1OWHSdrStds4Hg+Xp7WYncJ6xN/w5QmmSbj1+Uo6SkK8tOK7aGBz2NMW4vhSr1 1/YS+NmRv8FIxh+aBrsDZOiPDan96HsHhBF/oBoIPWXQNaJ3cXGPQBd9Mrtg4rol 33jfRH/SVe+tqUuHUzV4KXl3sLQOWdO5CvmpPr58jWOCUFWVXUav3o+5/7+haSFL y627sg3Zwg== -----END CERTIFICATE-----Generated at Sat Oct 10 17:25:39 2026 by rpki-client