$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft File: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft (raw, json) Hash identifier: hhSKywDyn7XBDfqXKzyEg/oi+cyFKcIgFGmXU0kFtBQ= Subject key identifier: 1D:6F:CC:4B:03:DB:7B:44:37:2A:29:B8:C4:A8:71:7E:47:E1:35:72 Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 77827F069ABDCF63109F71C046A24EA540A9CAD0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft Manifest number: 91 Signing time: Fri 24 Jul 2026 13:56:20 +0000 Manifest this update: Fri 24 Jul 2026 13:51:20 +0000 Manifest next update: Sat 25 Jul 2026 14:44:20 +0000 Files and hashes: 1: 35392e3131312e39362e302f32312d3234203d3e203435303632.roa (hash: Z+dNhW7ZTJfYk6Zew4ollhgdQkqLJK02gByVAgIdwOI=) 2: 35392e3131312e3130392e302f32342d3234203d3e203435303632.roa (hash: m9/MIJcHOyU7MhMlruNje0CXfeDnOt4kBLehg9tcAxY=) 3: 35392e3131312e3130372e302f32342d3234203d3e203435303632.roa (hash: NDkXGsU9QQzZDBpgiC2IPLbFhyKSxvwu8KgFTYfHr0w=) 4: 35392e3131312e38382e302f32312d3234203d3e203435303632.roa (hash: A5CDNJxV9gwL9OvrsHIiTUgNrL8ZROPmAep83jl2HXg=) 5: 35392e3131312e3131322e302f32312d3234203d3e203435303632.roa (hash: /z0BCN1UvCNwW6reulSuf8caTR7KvRMHo29m5V49/jU=) 6: 35392e3131312e3130342e302f32332d3234203d3e203435303632.roa (hash: LQ+6kf0+KQiFoPSEDgpSjTdcAiC5hG5P6ieS38kc784=) 7: 35392e3131312e3131312e302f32342d3234203d3e203435303632.roa (hash: 5m5HLidh05Y0J5RMsFsEpvSNbIp2q2GDH4LOXYlkfrM=) 8: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl (hash: Zm1bzlRs+XRv+nLn1Q8646ANYSlJgEU0KSFpp0ZNIzI=) 9: 35392e3131312e39362e302f31392d3234203d3e203435303632.roa (hash: Pj4OI2gVfEXRCIzzEAM7WxPW7pPOYS8cW1E5AjGFSG0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:82:7f:06:9a:bd:cf:63:10:9f:71:c0:46:a2:4e:a5:40:a9:ca:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: Jul 24 13:51:20 2026 GMT Not After : Jul 25 14:44:20 2026 GMT Subject: CN=1D6FCC4B03DB7B44372A29B8C4A8717E47E13572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fc:3b:59:4f:8a:0c:e2:7b:b0:88:82:7f:0b: dc:09:68:70:38:7e:0e:8d:e7:52:d4:e4:d5:ea:95: 8e:16:49:1b:34:d2:5f:7c:ac:b8:53:9d:b0:1f:95: 02:92:c2:72:56:95:f1:05:37:66:ad:e0:ec:cf:5e: c6:1f:47:c0:36:cb:e2:ba:aa:d3:82:a8:81:4c:cf: e4:b6:16:db:04:ac:97:48:dd:63:44:28:cc:f9:6f: 79:0c:1e:f5:34:ec:d7:81:6c:c5:7e:52:47:41:f4: cb:1b:70:19:30:1f:0b:61:d9:5e:e3:30:27:eb:5f: 7e:56:59:df:3a:ce:21:3a:47:ef:28:f3:4e:ca:c0: e0:5a:9e:2a:74:77:91:9a:6d:d0:7d:0c:2f:bb:df: bc:8e:5d:ce:36:24:27:a3:0b:93:73:b8:4d:35:ca: d1:4a:9e:1c:d6:15:86:d5:27:d9:bd:cd:1c:d7:7f: 0c:ed:0b:57:b2:8d:89:9a:84:58:ee:22:6a:8c:f1: 48:39:96:1d:9a:58:05:18:10:54:46:ef:8d:77:47: 14:e3:c4:77:3e:f8:94:8a:23:72:01:86:14:33:64: 48:f6:49:f5:e1:a7:33:bc:ef:00:ee:62:f4:91:1b: 83:19:50:a2:28:c2:64:65:92:10:e2:9a:98:5d:5f: 85:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6F:CC:4B:03:DB:7B:44:37:2A:29:B8:C4:A8:71:7E:47:E1:35:72 X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:6c:52:ce:20:60:7b:bb:b0:71:ed:9b:d9:fe:26:7f:c6:0d: 14:96:3c:f7:bd:03:87:3c:62:0f:ec:fe:59:f5:a4:ce:7b:e6: e1:5e:cd:dc:7c:f1:69:a4:f3:87:4c:4a:15:4c:ea:c1:0c:01: 5a:4e:40:3c:c3:c9:71:d6:48:71:57:8b:2d:de:99:29:ff:7a: 2b:16:92:e6:75:13:6f:01:1f:f5:40:18:c6:bd:fb:a4:f6:6c: 7e:92:d8:b0:62:9a:b6:40:dd:a3:48:b6:4c:09:76:12:3c:2b: ad:86:74:e2:07:3c:71:07:60:9b:ff:7a:47:fa:37:50:b1:e1: 64:75:49:39:44:5b:c0:94:bf:62:ba:09:95:24:f1:e1:6d:bb: fa:3c:59:d3:54:ce:4f:79:ee:83:ec:b8:09:73:25:c1:fa:8c: d4:58:8a:69:39:1d:b4:3a:7e:11:5f:a5:b4:cd:c1:ca:69:60: 9e:e8:1b:3d:5d:56:81:34:80:fc:d6:b3:97:a9:e4:40:ff:17: 7e:82:b6:b6:6c:a6:d3:75:98:3f:2a:49:82:02:f1:88:aa:84: 0c:ed:92:e1:37:b0:d1:49:5e:36:77:cb:9b:28:59:f9:d8:89: be:f7:06:02:59:77:c8:f0:b9:a5:05:44:95:de:60:36:9e:cf: 11:ef:ee:5c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd4J/Bpq9z2MQn3HARqJOpUCpytAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjA3MjQxMzUxMjBaFw0yNjA3MjUxNDQ0MjBaMDMxMTAvBgNV BAMTKDFENkZDQzRCMDNEQjdCNDQzNzJBMjlCOEM0QTg3MTdFNDdFMTM1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/DtZT4oM4nuwiIJ/C9wJaHA4 fg6N51LU5NXqlY4WSRs00l98rLhTnbAflQKSwnJWlfEFN2at4OzPXsYfR8A2y+K6 qtOCqIFMz+S2FtsErJdI3WNEKMz5b3kMHvU07NeBbMV+UkdB9MsbcBkwHwth2V7j MCfrX35WWd86ziE6R+8o807KwOBanip0d5GabdB9DC+737yOXc42JCejC5NzuE01 ytFKnhzWFYbVJ9m9zRzXfwztC1eyjYmahFjuImqM8Ug5lh2aWAUYEFRG7413RxTj xHc++JSKI3IBhhQzZEj2SfXhpzO87wDuYvSRG4MZUKIowmRlkhDimphdX4V1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHW/MSwPbe0Q3Kim4xKhxfkfhNXIwHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzI4MzQwOTU3MTAyMTEvMC82NUQ5ODdGQjlFOENF MThDNUI1RkY3ODYzMDhDNDkwRUE4MTFBRUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqmxSziBge7uw ce2b2f4mf8YNFJY8970DhzxiD+z+WfWkznvm4V7N3HzxaaTzh0xKFUzqwQwBWk5A PMPJcdZIcVeLLd6ZKf96KxaS5nUTbwEf9UAYxr37pPZsfpLYsGKatkDdo0i2TAl2 EjwrrYZ04gc8cQdgm/96R/o3ULHhZHVJOURbwJS/YroJlSTx4W27+jxZ01TOT3nu g+y4CXMlwfqM1FiKaTkdtDp+EV+ltM3BymlgnugbPV1WgTSA/Nazl6nkQP8XfoK2 tmym03WYPypJggLxiKqEDO2S4Tew0UleNnfLmyhZ+diJvvcGAll3yPC5pQVEld5g Np7PEe/uXA== -----END CERTIFICATE-----Generated at Fri Jul 24 18:58:49 2026 by rpki-client