$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json) Hash identifier: 2syedeItrfeMa2HgSJQcU5so0m4edxR22aRsTDJBGq4= Subject key identifier: 8F:AA:82:E1:D8:9C:B2:ED:39:3D:72:C1:9F:02:8E:32:E9:FB:56:88 Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 192851A41D8641A7563CF5FE859B30CC130AA4B4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft Manifest number: F8 Signing time: Fri 24 Jul 2026 07:20:36 +0000 Manifest this update: Fri 24 Jul 2026 07:15:36 +0000 Manifest next update: Sat 25 Jul 2026 10:46:36 +0000 Files and hashes: 1: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=) 2: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=) 3: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=) 4: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=) 5: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=) 6: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: U6ba+ic1q9oyGJYoJEFsEb/R336rHiSnoo7LAjiPL6w=) 7: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:28:51:a4:1d:86:41:a7:56:3c:f5:fe:85:9b:30:cc:13:0a:a4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Jul 24 07:15:36 2026 GMT Not After : Jul 25 10:46:36 2026 GMT Subject: CN=8FAA82E1D89CB2ED393D72C19F028E32E9FB5688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:a6:fe:b5:49:5a:21:82:e6:e4:d0:e0:5b: 57:0a:9a:3e:41:d4:31:6a:29:0d:75:00:b0:5d:1d: 45:39:ba:62:73:ac:be:8a:47:2f:12:39:4a:87:89: c1:f8:61:71:84:ff:ac:5a:fc:47:9c:95:80:f4:6b: 36:2f:70:8c:09:07:36:56:32:f1:69:27:4c:7d:37: 86:83:b9:15:ce:b4:9f:50:92:41:df:20:6f:f1:24: 9f:a5:2f:82:25:cc:fb:8a:a9:c0:91:ce:de:9a:c6: f5:b1:af:5c:1f:ab:94:48:b8:1d:a1:d4:9b:13:11: d4:10:12:8f:ae:a8:56:56:d5:a5:3a:04:f5:8c:20: 42:91:3a:7b:cb:62:5a:15:84:69:b8:97:ac:56:3e: fb:bf:61:2e:bc:3c:89:9b:4d:00:c4:b5:ac:b2:86: dd:21:ad:e4:33:ea:08:db:33:81:2f:ca:8d:9a:cf: d5:95:50:eb:a6:b7:67:53:cf:85:96:bf:04:b5:4b: 79:08:f8:a5:04:7f:6f:c4:a3:3c:dc:e7:ab:7d:66: 64:a8:99:e7:ee:d1:8e:2b:96:72:19:31:4a:4e:61: fb:24:0b:b9:29:dc:d1:ce:43:16:bc:50:d6:65:cf: cc:9d:cb:da:5f:1a:cd:15:4d:35:a4:b4:92:7b:bd: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AA:82:E1:D8:9C:B2:ED:39:3D:72:C1:9F:02:8E:32:E9:FB:56:88 X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:e8:fa:b2:23:b4:0e:3b:76:c6:3d:c7:de:4a:a8:c4:bc:c3: dd:c4:66:98:69:73:38:79:e0:cf:00:34:56:9a:33:31:14:47: b5:69:3c:12:55:04:8d:92:8f:65:23:47:94:a8:6c:a8:23:1e: 4a:08:30:7f:f9:3e:20:69:3a:10:d8:df:40:bc:01:43:33:64: 62:40:e1:e5:ca:7b:f3:66:ce:6b:23:32:fc:34:af:ed:f2:3e: df:5f:d8:af:3e:87:23:9e:83:6f:e6:5c:d3:80:07:05:3c:e1: a2:63:f4:f0:9b:0c:dd:4a:29:68:9a:9d:04:a5:19:a5:47:04: a4:49:94:9d:2f:b6:b2:c8:2f:7c:83:80:91:5a:f2:d6:f4:b9: eb:30:c4:60:04:c5:dd:95:f8:14:be:3d:9c:13:96:e5:08:bb: e6:08:f2:76:ba:02:22:35:60:80:ab:b1:c9:be:8b:a2:bc:b2: 4b:0b:4a:f7:66:5a:87:4d:f3:a1:c7:2c:c9:c7:cf:92:55:eb: 87:8c:8c:e6:a8:23:2e:c1:e9:22:45:be:e7:75:ad:c4:a4:a9: fa:54:bd:8b:29:d2:8c:f9:9e:5c:f1:ca:80:83:a2:5f:fa:84: 20:63:0f:f5:e0:f5:0d:3a:20:5b:76:fa:83:ac:35:73:76:63: 6c:db:be:2d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGShRpB2GQadWPPX+hZswzBMKpLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjA3MjQwNzE1MzZaFw0yNjA3MjUxMDQ2MzZaMDMxMTAvBgNV BAMTKDhGQUE4MkUxRDg5Q0IyRUQzOTNENzJDMTlGMDI4RTMyRTlGQjU2ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtUqb+tUlaIYLm5NDgW1cKmj5B 1DFqKQ11ALBdHUU5umJzrL6KRy8SOUqHicH4YXGE/6xa/EeclYD0azYvcIwJBzZW MvFpJ0x9N4aDuRXOtJ9QkkHfIG/xJJ+lL4IlzPuKqcCRzt6axvWxr1wfq5RIuB2h 1JsTEdQQEo+uqFZW1aU6BPWMIEKROnvLYloVhGm4l6xWPvu/YS68PImbTQDEtayy ht0hreQz6gjbM4Evyo2az9WVUOumt2dTz4WWvwS1S3kI+KUEf2/Eozzc56t9ZmSo mefu0Y4rlnIZMUpOYfskC7kp3NHOQxa8UNZlz8ydy9pfGs0VTTWktJJ7vf/lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUj6qC4dicsu05PXLBnwKOMun7VogwHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE4NDE5MjIvMC81RTY2NURFQTAzNjVD MzhCMjU4N0NBMzg0NzNEQjMwQjAwQjM3MjQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOj6siO0Djt2 xj3H3kqoxLzD3cRmmGlzOHngzwA0VpozMRRHtWk8ElUEjZKPZSNHlKhsqCMeSggw f/k+IGk6ENjfQLwBQzNkYkDh5cp782bOayMy/DSv7fI+31/Yrz6HI56Db+Zc04AH BTzhomP08JsM3UopaJqdBKUZpUcEpEmUnS+2ssgvfIOAkVry1vS56zDEYATF3ZX4 FL49nBOW5Qi75gjydroCIjVggKuxyb6LoryySwtK92Zah03zoccsycfPklXrh4yM 5qgjLsHpIkW+53WtxKSp+lS9iynSjPmeXPHKgIOiX/qEIGMP9eD1DTogW3b6g6w1 c3ZjbNu+LQ== -----END CERTIFICATE-----Generated at Fri Jul 24 17:45:33 2026 by rpki-client