$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft File: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft (raw, json) Hash identifier: EEqZrV19GFHZW1aDwm2PRMmN550ColVU9kfmHxZ0avg= Subject key identifier: CC:B0:2E:46:DE:E8:D2:F7:94:45:67:93:94:7D:EE:88:76:29:CF:42 Authority key identifier: B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D Certificate issuer: /CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Certificate serial: 15B4AB35F6ECBA398192E8DEB9148818B9E4E78A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft Manifest number: 6B Signing time: Fri 21 Aug 2026 23:30:56 +0000 Manifest this update: Fri 21 Aug 2026 23:25:56 +0000 Manifest next update: Sun 23 Aug 2026 01:02:56 +0000 Files and hashes: 1: 3130332e31342e3133342e302f32332d3233203d3e20313430373236.roa (hash: PohPnTPBADShmZdUjAc+ol5RV4sbT3451odzVbu+B7Y=) 2: 3130332e31342e3133332e302f32342d3234203d3e20313430373236.roa (hash: V+qv7ptj/i5Q0Kg0lA4vCRODMLzJgZmqRhPGd63kKfo=) 3: 3130332e31342e3133322e302f32342d3234203d3e20313430373236.roa (hash: Ph1dlsU1gsZp5Js2bzwU2W0EFG5DOnt4Suxc6EJUP4U=) 4: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl (hash: 16TBwipZo1DCrO5Wg4w2VW5ASwkQcw2bAgaf//njDh0=) 5: 3130332e31342e3133322e302f32332d3233203d3e2034383337.roa (hash: yPZ2e1NPGAMvQsQSyK2kLR5rDUrX/7UynvFoCiT9BQ8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Aug 2026 01:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:b4:ab:35:f6:ec:ba:39:81:92:e8:de:b9:14:88:18:b9:e4:e7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Validity Not Before: Aug 21 23:25:56 2026 GMT Not After : Aug 23 01:02:56 2026 GMT Subject: CN=CCB02E46DEE8D2F794456793947DEE887629CF42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:aa:23:ba:c8:9b:5b:d1:1f:a1:b8:15:a3:6d: 78:96:3e:ee:2e:d6:d1:27:db:b6:ff:03:1f:1d:10: 72:fa:a0:31:d0:e0:87:67:e3:d6:5a:0d:c4:80:ac: 76:31:ab:30:ca:a6:40:af:f8:45:02:2f:bf:76:10: f3:2f:c6:70:54:2c:ab:c3:b5:9a:ca:68:bc:ee:bc: 60:1a:27:09:26:90:a2:b6:89:57:fa:58:57:95:5b: dd:bc:ba:63:30:fa:4a:78:53:a8:42:e8:85:f3:8d: 90:ae:46:67:40:c1:22:aa:fa:c7:05:f0:dd:6c:aa: c9:0a:a5:dc:2e:0b:5b:5b:7c:c7:c7:e9:e2:c6:c5: 53:3e:37:82:43:d2:f6:65:c5:dc:ec:fd:4e:3c:ff: 6a:70:0d:6e:b2:b7:c1:ae:a3:f2:85:ce:d4:58:5b: 20:2c:7a:4d:39:7a:e8:60:27:49:f5:14:53:79:b5: e2:1b:6f:1a:f6:c4:a1:67:84:b3:46:1c:8b:62:9a: 8f:f4:2b:a8:76:69:a8:a0:be:14:de:f5:f8:ee:f4: af:7a:14:48:f0:fc:ea:7f:d8:18:09:a1:62:de:0b: 5c:45:fc:3f:88:66:39:d3:69:dd:bb:5c:6c:38:d2: 51:b5:da:15:c8:29:b5:ef:60:6a:49:bd:af:54:1c: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B0:2E:46:DE:E8:D2:F7:94:45:67:93:94:7D:EE:88:76:29:CF:42 X509v3 Authority Key Identifier: keyid:B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:87:79:04:6f:e2:e3:75:ea:1f:ba:b9:85:77:7d:d6:c8:ac: e5:2a:a4:ad:39:be:6c:9c:d7:45:b7:13:b9:de:0a:eb:47:4a: 58:32:de:63:8f:d6:c2:53:b9:c1:d3:48:5b:a6:37:43:b9:b3: 1e:96:d9:d4:21:9d:b0:91:3f:c1:70:1b:79:0f:65:5c:68:79: d8:bd:5a:f3:40:0b:43:ff:38:f8:0e:f1:17:aa:42:ae:62:77: c8:94:61:c1:7d:d6:a7:9d:d9:d5:0b:dd:90:73:e4:e7:bb:df: 17:5a:18:50:fa:a0:8c:d7:41:bf:23:ef:06:1c:3f:48:06:32: 68:bf:76:81:2f:93:b2:7a:cb:de:6d:9a:59:be:30:3d:c8:87: 73:8c:92:e7:0a:0c:b7:7e:4e:76:bf:1c:4b:06:b2:1b:65:32: 54:48:d6:69:93:58:5b:b9:f0:8b:0b:5b:15:0a:43:67:c1:3a: c7:96:8b:ba:b1:72:e7:66:e6:3e:8b:3b:33:94:e1:6a:cc:6f: 83:85:b3:e3:01:33:af:1e:97:33:61:2f:10:1d:c9:c7:1e:3c: 69:a6:51:27:3e:ae:e8:80:0a:c7:84:cf:08:6c:3e:da:28:49: 42:56:b0:35:93:ed:68:90:84:76:af:a8:e8:3e:58:59:04:cf: 34:1b:a5:1d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFbSrNfbsujmBkujeuRSIGLnk54owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdG MDYzRkQ2RDAeFw0yNjA4MjEyMzI1NTZaFw0yNjA4MjMwMTAyNTZaMDMxMTAvBgNV BAMTKENDQjAyRTQ2REVFOEQyRjc5NDQ1Njc5Mzk0N0RFRTg4NzYyOUNGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTqiO6yJtb0R+huBWjbXiWPu4u 1tEn27b/Ax8dEHL6oDHQ4Idn49ZaDcSArHYxqzDKpkCv+EUCL792EPMvxnBULKvD tZrKaLzuvGAaJwkmkKK2iVf6WFeVW928umMw+kp4U6hC6IXzjZCuRmdAwSKq+scF 8N1sqskKpdwuC1tbfMfH6eLGxVM+N4JD0vZlxdzs/U48/2pwDW6yt8Guo/KFztRY WyAsek05euhgJ0n1FFN5teIbbxr2xKFnhLNGHItimo/0K6h2aaigvhTe9fju9K96 FEjw/Op/2BgJoWLeC1xF/D+IZjnTad27XGw40lG12hXIKbXvYGpJva9UHAh1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzLAuRt7o0veURWeTlH3uiHYpz0IwHwYDVR0j BBgwFoAUtl95L4T6HpANpNLaSdzFN/Bj/W0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDk0OTc1ODA1ODc1ODE2OS8wL0I2NUY3OTJGODRGQTFFOTAwREE0RDJEQTQ5REND NTM3RjA2M0ZENkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdGMDYzRkQ2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ5NDk3NTgwNTg3NTgxNjkvMC9CNjVGNzkyRjg0RkEx RTkwMERBNEQyREE0OURDQzUzN0YwNjNGRDZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlod5BG/i43Xq H7q5hXd91sis5SqkrTm+bJzXRbcTud4K60dKWDLeY4/WwlO5wdNIW6Y3Q7mzHpbZ 1CGdsJE/wXAbeQ9lXGh52L1a80ALQ/84+A7xF6pCrmJ3yJRhwX3Wp53Z1QvdkHPk 57vfF1oYUPqgjNdBvyPvBhw/SAYyaL92gS+TsnrL3m2aWb4wPciHc4yS5woMt35O dr8cSwayG2UyVEjWaZNYW7nwiwtbFQpDZ8E6x5aLurFy52bmPos7M5Thasxvg4Wz 4wEzrx6XM2EvEB3Jxx48aaZRJz6u6IAKx4TPCGw+2ihJQlawNZPtaJCEdq+o6D5Y WQTPNBulHQ== -----END CERTIFICATE-----Generated at Sat Aug 22 10:17:29 2026 by rpki-client