$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft File: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft (raw, json) Hash identifier: KleGqsnMvuFIlKrRnWvDUR9epKil7G+jArEladBIrek= Subject key identifier: 8B:BF:59:3D:6B:1F:7B:56:D2:5D:A7:25:87:48:F1:7D:A3:AB:FE:84 Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 06705C1F3B954E69EA2380F3EF9204555A4F8FCD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft Manifest number: D6 Signing time: Fri 16 Oct 2026 23:38:12 +0000 Manifest this update: Fri 16 Oct 2026 23:33:12 +0000 Manifest next update: Tue 20 Oct 2026 03:22:12 +0000 Files and hashes: 1: 35392e3131312e3131312e302f32342d3234203d3e203435303632.roa (hash: 5m5HLidh05Y0J5RMsFsEpvSNbIp2q2GDH4LOXYlkfrM=) 2: 35392e3131312e39362e302f31392d3234203d3e203435303632.roa (hash: Pj4OI2gVfEXRCIzzEAM7WxPW7pPOYS8cW1E5AjGFSG0=) 3: 35392e3131312e38382e302f32312d3234203d3e203435303632.roa (hash: A5CDNJxV9gwL9OvrsHIiTUgNrL8ZROPmAep83jl2HXg=) 4: 35392e3131312e3130372e302f32342d3234203d3e203435303632.roa (hash: NDkXGsU9QQzZDBpgiC2IPLbFhyKSxvwu8KgFTYfHr0w=) 5: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl (hash: G/FWdCdAY5aZh3OvYX8KGNYC3LDL7nw2m5iv9j4IdCU=) 6: 35392e3131312e3130342e302f32332d3234203d3e203435303632.roa (hash: LQ+6kf0+KQiFoPSEDgpSjTdcAiC5hG5P6ieS38kc784=) 7: 35392e3131312e3131322e302f32312d3234203d3e203435303632.roa (hash: /z0BCN1UvCNwW6reulSuf8caTR7KvRMHo29m5V49/jU=) 8: 35392e3131312e3130392e302f32342d3234203d3e203435303632.roa (hash: m9/MIJcHOyU7MhMlruNje0CXfeDnOt4kBLehg9tcAxY=) 9: 35392e3131312e39362e302f32312d3234203d3e203435303632.roa (hash: Z+dNhW7ZTJfYk6Zew4ollhgdQkqLJK02gByVAgIdwOI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 03:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:70:5c:1f:3b:95:4e:69:ea:23:80:f3:ef:92:04:55:5a:4f:8f:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: Oct 16 23:33:12 2026 GMT Not After : Oct 20 03:22:12 2026 GMT Subject: CN=8BBF593D6B1F7B56D25DA7258748F17DA3ABFE84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:d7:a0:11:a4:1d:47:f9:7e:41:d5:11:d2: 3c:aa:a9:2e:47:46:6e:9c:ca:60:1f:38:5e:6d:4d: f5:a1:d3:2a:de:ab:2c:65:a8:4a:40:07:dd:98:20: e6:3f:3d:e9:64:cb:fb:a2:9a:b3:06:d1:1e:c1:f0: 7c:27:5b:28:8b:59:64:b5:ec:b8:75:8c:64:4b:97: e8:fc:19:c2:ac:c2:1f:fc:02:b2:f6:88:0f:bd:05: 2e:f4:76:34:2a:2d:50:2d:95:db:fa:d7:04:3d:e9: 2f:60:80:93:53:e4:ce:6b:71:bd:d0:c2:eb:e0:e8: 01:9b:ac:20:19:67:de:15:3f:c7:98:54:13:67:06: 82:57:08:f7:ca:ec:e8:df:91:92:32:3d:ea:fb:ce: b0:1c:ff:90:67:28:2b:8c:23:c3:e3:5e:24:53:64: f6:4f:e3:a7:26:74:99:2e:2b:be:a8:64:13:ca:a7: 20:a7:13:85:cd:2f:32:55:8b:da:12:a1:31:f1:5e: 21:b4:ec:5d:a7:d4:7e:5d:ae:29:8e:2c:53:16:c8: cc:41:89:d4:17:3e:57:02:5e:23:2a:63:ab:4f:86: ba:46:01:5d:9a:10:e6:5a:f7:57:07:b0:25:5f:a3: a9:dd:5d:86:ab:78:9d:76:62:b3:be:82:72:a3:6e: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:BF:59:3D:6B:1F:7B:56:D2:5D:A7:25:87:48:F1:7D:A3:AB:FE:84 X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6b:5d:cb:9e:8c:f7:63:c4:73:5d:96:fc:14:28:74:15:52: 8c:84:7f:0e:95:d6:de:5a:77:66:6e:42:b8:e3:44:32:ff:2c: 2f:8f:02:b6:6f:ea:e8:91:2a:9e:6c:b5:dd:c7:0b:71:d0:48: d0:a1:f0:12:47:0e:e2:59:00:ad:69:6e:f4:27:35:5e:b8:47: 4b:69:c2:73:20:d1:6b:2a:ad:64:12:df:f6:c6:dd:01:a1:79: 78:ff:63:19:9c:48:a7:c7:7c:f6:12:5b:5a:bb:cf:3c:12:6e: 2c:75:f1:13:e8:6b:a3:df:ad:a5:30:ee:21:24:a0:c5:db:68: b2:94:67:95:75:f6:d2:70:1a:c1:0f:84:fd:23:0b:97:87:96: ba:9a:6c:75:4c:d5:ea:88:66:98:c2:f0:4d:f1:a5:84:52:f9: 31:82:1b:dd:c6:58:b2:51:86:a0:58:bd:41:b0:a3:22:93:93: 88:bf:f3:15:86:95:21:73:eb:70:2b:20:97:11:ec:e6:f7:89: 8d:94:5f:ea:fa:44:07:b8:ce:5f:c1:1c:9b:5f:6a:06:4f:4a: 77:e2:64:24:8c:ea:66:05:a0:17:d3:5a:c7:d6:3b:d0:10:8a: e0:d7:67:5f:26:01:c5:bc:dc:9c:d8:90:57:53:dc:1e:05:9d: 9c:b6:3f:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBnBcHzuVTmnqI4Dz75IEVVpPj80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjEwMTYyMzMzMTJaFw0yNjEwMjAwMzIyMTJaMDMxMTAvBgNV BAMTKDhCQkY1OTNENkIxRjdCNTZEMjVEQTcyNTg3NDhGMTdEQTNBQkZFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOQ9egEaQdR/l+QdUR0jyqqS5H Rm6cymAfOF5tTfWh0yreqyxlqEpAB92YIOY/Pelky/uimrMG0R7B8HwnWyiLWWS1 7Lh1jGRLl+j8GcKswh/8ArL2iA+9BS70djQqLVAtldv61wQ96S9ggJNT5M5rcb3Q wuvg6AGbrCAZZ94VP8eYVBNnBoJXCPfK7OjfkZIyPer7zrAc/5BnKCuMI8PjXiRT ZPZP46cmdJkuK76oZBPKpyCnE4XNLzJVi9oSoTHxXiG07F2n1H5drimOLFMWyMxB idQXPlcCXiMqY6tPhrpGAV2aEOZa91cHsCVfo6ndXYareJ12YrO+gnKjbhmvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUi79ZPWsfe1bSXaclh0jxfaOr/oQwHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzI4MzQwOTU3MTAyMTEvMC82NUQ5ODdGQjlFOENF MThDNUI1RkY3ODYzMDhDNDkwRUE4MTFBRUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2tdy56M92PE c12W/BQodBVSjIR/DpXW3lp3Zm5CuONEMv8sL48Ctm/q6JEqnmy13ccLcdBI0KHw EkcO4lkArWlu9Cc1XrhHS2nCcyDRayqtZBLf9sbdAaF5eP9jGZxIp8d89hJbWrvP PBJuLHXxE+hro9+tpTDuISSgxdtospRnlXX20nAawQ+E/SMLl4eWuppsdUzV6ohm mMLwTfGlhFL5MYIb3cZYslGGoFi9QbCjIpOTiL/zFYaVIXPrcCsglxHs5veJjZRf 6vpEB7jOX8Ecm19qBk9Kd+JkJIzqZgWgF9Nax9Y70BCK4NdnXyYBxbzcnNiQV1Pc HgWdnLY/YA== -----END CERTIFICATE-----Generated at Sun Oct 18 13:04:57 2026 by rpki-client