$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft File: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft (raw, json) Hash identifier: xAsVPkgerkhZBh2hzWtDDUb98Luky6dEPQlOqRLIun0= Subject key identifier: 17:54:C7:0D:AF:90:23:8C:9E:93:66:FC:C2:64:32:A6:88:7D:E0:79 Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 6A0811C80335FDE951A87B29964121964E41EDAE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft Manifest number: 2F Signing time: Wed 13 May 2026 13:16:05 +0000 Manifest this update: Wed 13 May 2026 13:11:05 +0000 Manifest next update: Thu 14 May 2026 14:04:05 +0000 Files and hashes: 1: 35392e3131312e38382e302f32312d3234203d3e203435303632.roa (hash: A5CDNJxV9gwL9OvrsHIiTUgNrL8ZROPmAep83jl2HXg=) 2: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl (hash: UeI2SiTM55dEhb9/AFJSd0adEAv6AzsDc+L5iZXfHEg=) 3: 35392e3131312e39362e302f31392d3234203d3e203435303632.roa (hash: Pj4OI2gVfEXRCIzzEAM7WxPW7pPOYS8cW1E5AjGFSG0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:08:11:c8:03:35:fd:e9:51:a8:7b:29:96:41:21:96:4e:41:ed:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: May 13 13:11:05 2026 GMT Not After : May 14 14:04:05 2026 GMT Subject: CN=1754C70DAF90238C9E9366FCC26432A6887DE079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:a7:3c:ca:fe:5f:d8:08:8a:8e:22:79:44: e7:23:ab:40:90:f0:4f:ed:1f:27:88:4f:b8:8c:2f: 8b:7b:a6:ee:a1:06:24:eb:02:12:10:a9:ba:0b:97: a5:ca:d7:c3:fb:6d:9b:00:1e:87:9c:59:79:dd:48: 11:46:f4:ed:bd:83:d5:52:e7:fc:9e:c5:d1:5a:e6: bb:3b:2e:45:57:ba:de:4c:54:ff:15:d7:fb:5b:38: c7:53:a8:6c:bc:6c:46:e1:b5:8e:c7:0e:f6:a3:67: 93:cc:36:b5:af:d0:d9:a3:f5:2e:b6:b8:fc:58:3b: 7e:ed:69:97:b9:1a:97:22:a0:2d:2b:dc:03:0d:66: 76:93:70:c6:9e:25:11:f2:27:ff:23:9a:db:35:b6: 1d:76:09:cf:89:58:45:a8:37:60:8f:ad:7a:ea:5e: cb:e0:1c:21:da:eb:4b:93:38:32:21:13:f3:fb:33: 5e:4e:39:15:4f:eb:04:89:62:5f:a1:73:4b:1d:09: 1e:77:37:6a:fe:3f:bf:d4:fd:a1:1e:8d:95:c2:6f: 70:66:e0:98:26:a2:95:28:f2:95:ec:c5:90:c0:11: 00:97:94:ed:dc:47:ef:78:f2:ef:bc:76:75:95:92: 62:7f:fa:40:22:4c:5f:d1:a0:05:3d:d1:16:3a:f3: 88:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:54:C7:0D:AF:90:23:8C:9E:93:66:FC:C2:64:32:A6:88:7D:E0:79 X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8a:82:52:2c:02:a9:ea:13:61:c6:e3:b4:de:03:b2:da:b5: e5:6a:c4:b7:6c:ff:53:a7:77:6f:de:63:3b:5f:cf:f1:47:aa: 47:bf:f6:8b:b7:6d:34:ce:5d:d2:d7:8a:95:56:f1:d1:f2:b5: 1e:01:0d:40:e2:44:f5:44:bc:e4:45:bf:e9:8b:99:31:ec:56: b7:71:72:9e:17:4d:3c:21:84:b6:14:4e:6f:42:da:8f:cb:76: c0:3e:85:30:12:7c:9a:74:3d:87:cf:3d:87:8b:2f:fc:85:ac: b6:56:42:1d:3e:13:10:aa:f3:e1:2c:d4:01:46:64:f7:aa:45: a3:3f:87:1b:7d:24:fb:cf:30:cc:db:ea:4b:48:2a:46:a3:53: 34:7f:be:e6:16:52:0f:d6:d1:be:9b:6e:36:aa:b8:c6:e8:91: 38:c2:31:c9:b6:d2:30:1c:be:c0:a1:50:d1:7f:82:38:9d:50: 9a:73:c6:93:f9:df:23:33:15:79:67:aa:6a:9e:5d:07:76:f3: b7:ab:a9:84:92:fa:ff:df:67:66:44:00:4b:de:c7:be:b9:dc: cd:b3:33:5b:d8:e2:a3:86:3e:57:da:ae:07:13:fc:42:22:a6: 0b:3a:83:5c:12:23:04:f3:6d:fc:79:37:5b:57:10:09:64:fa: 7f:27:bc:69 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaggRyAM1/elRqHsplkEhlk5B7a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjA1MTMxMzExMDVaFw0yNjA1MTQxNDA0MDVaMDMxMTAvBgNV BAMTKDE3NTRDNzBEQUY5MDIzOEM5RTkzNjZGQ0MyNjQzMkE2ODg3REUwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Yqc8yv5f2AiKjiJ5ROcjq0CQ 8E/tHyeIT7iML4t7pu6hBiTrAhIQqboLl6XK18P7bZsAHoecWXndSBFG9O29g9VS 5/yexdFa5rs7LkVXut5MVP8V1/tbOMdTqGy8bEbhtY7HDvajZ5PMNrWv0Nmj9S62 uPxYO37taZe5GpcioC0r3AMNZnaTcMaeJRHyJ/8jmts1th12Cc+JWEWoN2CPrXrq XsvgHCHa60uTODIhE/P7M15OORVP6wSJYl+hc0sdCR53N2r+P7/U/aEejZXCb3Bm 4JgmopUo8pXsxZDAEQCXlO3cR+948u+8dnWVkmJ/+kAiTF/RoAU90RY684ibAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUF1THDa+QI4yek2b8wmQypoh94HkwHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzI4MzQwOTU3MTAyMTEvMC82NUQ5ODdGQjlFOENF MThDNUI1RkY3ODYzMDhDNDkwRUE4MTFBRUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYqCUiwCqeoT YcbjtN4Dstq15WrEt2z/U6d3b95jO1/P8UeqR7/2i7dtNM5d0teKlVbx0fK1HgEN QOJE9US85EW/6YuZMexWt3FynhdNPCGEthROb0Laj8t2wD6FMBJ8mnQ9h889h4sv /IWstlZCHT4TEKrz4SzUAUZk96pFoz+HG30k+88wzNvqS0gqRqNTNH++5hZSD9bR vptuNqq4xuiROMIxybbSMBy+wKFQ0X+COJ1QmnPGk/nfIzMVeWeqap5dB3bzt6up hJL6/99nZkQAS97HvrnczbMzW9jio4Y+V9quBxP8QiKmCzqDXBIjBPNt/Hk3W1cQ CWT6fye8aQ== -----END CERTIFICATE-----Generated at Wed May 13 20:28:27 2026 by rpki-client