$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft File: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft (raw, json) Hash identifier: US7Kp6r5h2YRiswUWF+G27dDkEeKi7AtF8p/dwywPYU= Subject key identifier: 92:F0:54:DB:E1:4F:BC:02:BE:B9:ED:6B:E7:D9:00:7C:E8:84:AA:86 Authority key identifier: B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D Certificate issuer: /CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Certificate serial: 1397E327CDD388342E4DCB828FD179B691AFEC48 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft Manifest number: 2F Signing time: Tue 07 Jul 2026 12:19:12 +0000 Manifest this update: Tue 07 Jul 2026 12:14:12 +0000 Manifest next update: Wed 08 Jul 2026 13:19:12 +0000 Files and hashes: 1: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl (hash: LAOYvyCYnKT3CEvSsXkFKgOH077u8aazph8Ied9TEL4=) 2: 3130332e31342e3133322e302f32332d3233203d3e2034383337.roa (hash: yPZ2e1NPGAMvQsQSyK2kLR5rDUrX/7UynvFoCiT9BQ8=) 3: 3130332e31342e3133322e302f32342d3234203d3e20313430373236.roa (hash: Ph1dlsU1gsZp5Js2bzwU2W0EFG5DOnt4Suxc6EJUP4U=) 4: 3130332e31342e3133342e302f32332d3233203d3e20313430373236.roa (hash: PohPnTPBADShmZdUjAc+ol5RV4sbT3451odzVbu+B7Y=) 5: 3130332e31342e3133332e302f32342d3234203d3e20313430373236.roa (hash: V+qv7ptj/i5Q0Kg0lA4vCRODMLzJgZmqRhPGd63kKfo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 07:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:97:e3:27:cd:d3:88:34:2e:4d:cb:82:8f:d1:79:b6:91:af:ec:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Validity Not Before: Jul 7 12:14:12 2026 GMT Not After : Jul 8 13:19:12 2026 GMT Subject: CN=92F054DBE14FBC02BEB9ED6BE7D9007CE884AA86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:d2:94:f3:0d:89:ff:ba:25:96:f3:29:bb: a3:1d:a1:0c:67:40:fe:38:3d:b6:aa:01:0a:d9:ab: ce:4e:76:2f:98:fd:dc:33:9e:4d:d8:2d:5d:7a:9a: 24:20:41:21:33:b9:42:87:15:66:dc:36:a3:87:67: 0c:98:79:2a:a5:3b:a3:0a:7d:e2:ff:dd:5f:c4:39: 50:09:e9:28:e7:3a:cf:37:41:43:c8:0e:c8:e5:7c: f2:f8:f3:84:ca:ec:d4:a1:ab:5b:3d:b3:bf:f4:d5: c7:79:5d:f0:f0:44:f7:f0:61:14:15:35:ea:a2:de: 48:33:85:8d:b7:eb:a6:51:95:77:e1:82:bd:9b:39: 02:d6:3e:f2:c6:b5:9c:8f:1e:5a:49:a8:87:59:3c: 03:31:0c:f7:ac:ba:8e:66:35:e2:b5:28:76:69:e1: fb:a3:25:06:ca:3c:e4:09:03:6e:84:1f:da:7f:cb: 42:56:29:c8:12:14:61:a0:49:d7:16:75:c4:fe:a7: 7e:1a:e8:4c:1f:40:29:19:49:00:c1:c9:19:db:bb: 93:90:e5:d1:e5:16:91:95:1b:a3:da:9c:00:f0:e2: be:6c:2c:8c:ac:42:aa:11:11:c7:f4:c6:2d:2c:d0: 8c:31:1d:fe:86:94:bf:a7:d3:84:c6:f2:a1:b6:77: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F0:54:DB:E1:4F:BC:02:BE:B9:ED:6B:E7:D9:00:7C:E8:84:AA:86 X509v3 Authority Key Identifier: keyid:B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:76:be:5d:2a:62:0c:4a:8a:84:ed:ca:f5:a4:97:1c:3f:bb: 17:59:34:45:ab:3d:08:e4:2f:ef:36:9c:7d:d7:c3:4e:3c:33: 26:2c:7b:4d:24:03:bd:5c:f3:91:99:25:9a:84:1a:29:69:c3: df:05:f3:2f:df:b3:15:a5:07:1d:80:e4:89:f0:f7:e3:94:17: bf:52:97:04:38:90:c4:e4:51:f3:90:13:82:87:84:a9:dd:63: 3d:6b:db:80:01:f6:6e:83:79:40:e8:31:2f:fc:56:86:4e:7f: ce:f0:83:79:b0:72:dd:2d:5a:57:eb:5a:e6:a1:ce:da:b2:33: 29:93:f8:d4:44:28:92:f5:b5:38:69:a2:ab:d3:3a:b8:48:7d: 63:c6:54:a1:e8:4a:2c:e6:51:f1:fd:9c:70:0e:92:4d:45:69: 6b:c6:96:9f:f2:b3:7a:87:a9:7f:e9:01:16:d3:7f:a7:22:b4: 88:6f:08:99:7b:68:4e:c1:8d:e9:56:cf:04:b2:49:21:f7:b4: 1e:ad:81:8f:fe:f0:7d:be:9d:87:0b:56:9c:de:b4:ec:b7:fd: 62:a5:88:fb:19:a7:1a:2d:99:4f:47:22:66:c5:11:4e:aa:9f: 10:6d:1a:2c:99:91:e2:a7:35:25:1a:6c:6e:69:fa:28:02:46: bd:ca:29:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE5fjJ83TiDQuTcuCj9F5tpGv7EgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdG MDYzRkQ2RDAeFw0yNjA3MDcxMjE0MTJaFw0yNjA3MDgxMzE5MTJaMDMxMTAvBgNV BAMTKDkyRjA1NERCRTE0RkJDMDJCRUI5RUQ2QkU3RDkwMDdDRTg4NEFBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMNKU8w2J/7ollvMpu6MdoQxn QP44PbaqAQrZq85Odi+Y/dwznk3YLV16miQgQSEzuUKHFWbcNqOHZwyYeSqlO6MK feL/3V/EOVAJ6SjnOs83QUPIDsjlfPL484TK7NShq1s9s7/01cd5XfDwRPfwYRQV Neqi3kgzhY2366ZRlXfhgr2bOQLWPvLGtZyPHlpJqIdZPAMxDPesuo5mNeK1KHZp 4fujJQbKPOQJA26EH9p/y0JWKcgSFGGgSdcWdcT+p34a6EwfQCkZSQDByRnbu5OQ 5dHlFpGVG6PanADw4r5sLIysQqoREcf0xi0s0IwxHf6GlL+n04TG8qG2d73dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkvBU2+FPvAK+ue1r59kAfOiEqoYwHwYDVR0j BBgwFoAUtl95L4T6HpANpNLaSdzFN/Bj/W0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDk0OTc1ODA1ODc1ODE2OS8wL0I2NUY3OTJGODRGQTFFOTAwREE0RDJEQTQ5REND NTM3RjA2M0ZENkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdGMDYzRkQ2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ5NDk3NTgwNTg3NTgxNjkvMC9CNjVGNzkyRjg0RkEx RTkwMERBNEQyREE0OURDQzUzN0YwNjNGRDZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXa+XSpiDEqK hO3K9aSXHD+7F1k0Ras9COQv7zacfdfDTjwzJix7TSQDvVzzkZklmoQaKWnD3wXz L9+zFaUHHYDkifD345QXv1KXBDiQxORR85ATgoeEqd1jPWvbgAH2boN5QOgxL/xW hk5/zvCDebBy3S1aV+ta5qHO2rIzKZP41EQokvW1OGmiq9M6uEh9Y8ZUoehKLOZR 8f2ccA6STUVpa8aWn/Kzeoepf+kBFtN/pyK0iG8ImXtoTsGN6VbPBLJJIfe0Hq2B j/7wfb6dhwtWnN607Lf9YqWI+xmnGi2ZT0ciZsURTqqfEG0aLJmR4qc1JRpsbmn6 KAJGvcopjw== -----END CERTIFICATE-----Generated at Tue Jul 7 22:38:19 2026 by rpki-client