$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json) Hash identifier: 3t/m7eycQYKhxTaZR5CpMtg0GWIA7rMjn3ujyjtKD34= Subject key identifier: CE:21:79:BD:B7:26:82:98:E1:F2:6C:0C:AC:50:B0:04:1A:EF:25:50 Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 6C73728A8509AD9B5AD0FE2CCC3FE55B1C8DBC6A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft Manifest number: 98 Signing time: Wed 13 May 2026 03:30:55 +0000 Manifest this update: Wed 13 May 2026 03:25:55 +0000 Manifest next update: Thu 14 May 2026 04:41:55 +0000 Files and hashes: 1: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=) 2: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=) 3: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=) 4: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=) 5: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=) 6: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=) 7: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: HVlvZgAm+B7IXngeJ0XCnKw4yqfiO5wsAPt+giB/ido=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:73:72:8a:85:09:ad:9b:5a:d0:fe:2c:cc:3f:e5:5b:1c:8d:bc:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: May 13 03:25:55 2026 GMT Not After : May 14 04:41:55 2026 GMT Subject: CN=CE2179BDB7268298E1F26C0CAC50B0041AEF2550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bc:db:3e:c2:fa:a6:c7:2e:3f:69:24:81:4b: 2e:04:a0:32:77:6f:91:35:69:b8:d2:25:df:88:b6: 96:41:ab:ff:cd:fa:c4:55:83:be:e6:98:40:c6:d9: d8:9c:da:0c:c5:e9:fd:bb:5c:20:e8:61:ce:f2:c1: e4:cb:42:91:72:2e:07:55:8c:ee:39:cc:e8:23:24: f9:4d:cd:33:e6:6c:38:63:cd:6e:ef:1b:bf:7d:5d: d5:eb:39:3f:74:a5:e5:91:cb:f3:68:a6:97:f3:c6: bf:5b:86:39:c0:ac:8d:19:12:ec:0e:42:ab:1f:ea: b7:f3:61:99:b6:49:ad:74:74:f5:ae:26:07:8c:a6: c5:fd:8b:c1:0b:9d:09:43:8e:c6:01:ff:8a:96:da: 35:71:10:a7:65:b7:65:1e:fa:12:cb:a8:a5:5e:d4: 64:f2:a2:1a:61:ae:e4:52:df:27:c1:ad:8c:aa:55: 82:32:8b:25:09:37:25:94:dc:a4:2c:20:ca:d3:c8: 68:ed:40:72:51:6f:4d:d0:83:3a:11:5e:fb:12:ee: 1a:fc:af:ca:03:39:9a:b3:8a:86:b8:21:21:4b:52: 4a:7f:1b:cd:75:fa:e2:c9:22:ef:06:de:6b:98:d9: b8:d7:f1:e9:23:3c:c8:68:82:1e:12:0b:9b:cb:2a: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:21:79:BD:B7:26:82:98:E1:F2:6C:0C:AC:50:B0:04:1A:EF:25:50 X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:99:9e:1c:fc:4d:7f:3d:8b:b1:7d:1e:fc:81:ea:43:c8:c4: cb:f5:c2:9e:e8:ba:3f:c6:51:1d:33:a1:76:ab:dd:6b:7b:62: ae:c6:6b:c2:09:fe:02:ca:ed:81:e3:da:f8:3d:c2:e6:2f:8f: 68:09:bc:74:89:55:cf:d0:df:d5:66:97:7b:76:35:15:ed:a6: df:ae:75:c4:09:ff:12:72:2a:07:46:eb:d6:bd:57:1c:0e:e4: fa:7a:f4:70:db:7c:2d:c2:bf:22:00:ae:3c:a2:b5:5a:af:89: 47:1b:e9:76:6f:f7:99:08:91:a4:4a:f3:57:6e:59:a8:ee:87: f1:d6:d9:6a:09:9c:e7:a3:8c:5d:58:fd:00:93:2b:76:96:70: dc:1a:ea:93:8a:c8:df:d3:b5:64:1c:59:eb:59:df:c6:f6:92: 2d:b1:d8:ea:97:fd:48:9e:7d:78:6a:d0:9d:3e:a4:88:7c:29: c6:5c:5b:70:ed:4a:60:76:fc:1a:4a:d9:dd:25:2d:37:88:f6: 20:74:a4:fc:a5:0d:8c:ba:ef:aa:df:db:84:9a:6c:3f:4f:55: ef:0a:6d:72:27:db:64:08:5d:81:bc:dc:3a:49:9c:9d:2e:1a: df:f0:6d:52:ff:31:69:0c:84:b7:18:3f:0a:58:de:b4:1c:f0: c5:0d:08:59 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbHNyioUJrZta0P4szD/lWxyNvGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjA1MTMwMzI1NTVaFw0yNjA1MTQwNDQxNTVaMDMxMTAvBgNV BAMTKENFMjE3OUJEQjcyNjgyOThFMUYyNkMwQ0FDNTBCMDA0MUFFRjI1NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtvNs+wvqmxy4/aSSBSy4EoDJ3 b5E1abjSJd+ItpZBq//N+sRVg77mmEDG2dic2gzF6f27XCDoYc7yweTLQpFyLgdV jO45zOgjJPlNzTPmbDhjzW7vG799XdXrOT90peWRy/Noppfzxr9bhjnArI0ZEuwO Qqsf6rfzYZm2Sa10dPWuJgeMpsX9i8ELnQlDjsYB/4qW2jVxEKdlt2Ue+hLLqKVe 1GTyohphruRS3yfBrYyqVYIyiyUJNyWU3KQsIMrTyGjtQHJRb03QgzoRXvsS7hr8 r8oDOZqzioa4ISFLUkp/G811+uLJIu8G3muY2bjX8ekjPMhogh4SC5vLKqDZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUziF5vbcmgpjh8mwMrFCwBBrvJVAwHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE4NDE5MjIvMC81RTY2NURFQTAzNjVD MzhCMjU4N0NBMzg0NzNEQjMwQjAwQjM3MjQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZmeHPxNfz2L sX0e/IHqQ8jEy/XCnui6P8ZRHTOhdqvda3tirsZrwgn+AsrtgePa+D3C5i+PaAm8 dIlVz9Df1WaXe3Y1Fe2m3651xAn/EnIqB0br1r1XHA7k+nr0cNt8LcK/IgCuPKK1 Wq+JRxvpdm/3mQiRpErzV25ZqO6H8dbZagmc56OMXVj9AJMrdpZw3Brqk4rI39O1 ZBxZ61nfxvaSLbHY6pf9SJ59eGrQnT6kiHwpxlxbcO1KYHb8GkrZ3SUtN4j2IHSk /KUNjLrvqt/bhJpsP09V7wptcifbZAhdgbzcOkmcnS4a3/BtUv8xaQyEtxg/Clje tBzwxQ0IWQ== -----END CERTIFICATE-----Generated at Wed May 13 17:18:33 2026 by rpki-client