$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft File: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft (raw, json) Hash identifier: 37JN4BBthnRRgkmcj359GyHdrqDPxmgLiRv2tpTDYP8= Subject key identifier: 59:BA:41:F1:F4:0C:51:56:D1:1E:64:74:A7:82:E7:BE:2A:A3:E0:E0 Authority key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B Certificate issuer: /CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Certificate serial: 23AF1C3A7BD58196E604DE0F1DA2380F6FFCD437 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft Manifest number: 80 Signing time: Thu 23 Jul 2026 20:39:30 +0000 Manifest this update: Thu 23 Jul 2026 20:34:30 +0000 Manifest next update: Fri 24 Jul 2026 21:53:30 +0000 Files and hashes: 1: 3130332e32352e36362e302f32332d3233203d3e2030.roa (hash: JMo6LH7KCuXdAXtrDjOm3O2HDvLmSMhk1dhzSjfl0Z4=) 2: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl (hash: vvWOPuba5PeRJSg48QJP2jo24UwmnFvX5ta1Igvcf8I=) 3: 3130332e32352e36342e302f32332d3233203d3e2034383132.roa (hash: Nq6gNiMaaKFWixnw61ZZIDSmy1W/Glh2AAvq8ITBxjk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:af:1c:3a:7b:d5:81:96:e6:04:de:0f:1d:a2:38:0f:6f:fc:d4:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Validity Not Before: Jul 23 20:34:30 2026 GMT Not After : Jul 24 21:53:30 2026 GMT Subject: CN=59BA41F1F40C5156D11E6474A782E7BE2AA3E0E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:67:32:c9:33:a2:a3:5a:8d:a2:6d:63:01: 12:64:e4:14:de:44:9a:be:ac:d0:3f:a9:9e:1a:c0: 25:6a:1a:d0:2f:e5:ff:13:35:48:c8:d9:02:5a:b2: af:da:b0:b1:60:28:61:e6:29:88:94:c6:35:75:e7: 8b:fd:9a:ff:dc:12:5c:e4:4a:2e:fc:af:bc:b9:e6: fd:1a:26:56:ba:66:e3:68:41:c9:f7:0c:47:a6:91: e2:c0:0a:f1:0b:9e:2f:f2:ee:15:c2:17:65:bf:a1: 66:7f:e6:11:02:ce:fd:6e:32:ee:ee:07:4d:10:86: 5f:b8:b3:46:cb:71:f8:a2:31:32:6f:eb:ed:b2:f7: 23:27:d6:21:ac:a1:98:58:0c:33:71:49:9d:f1:bb: de:55:1d:29:53:34:b7:90:59:fd:e8:f7:78:bf:cb: 27:71:80:c0:95:e6:ef:f0:a1:f4:2e:5a:7d:f0:9f: ed:32:76:79:b3:38:ec:01:07:bd:59:26:7f:a5:a3: b2:82:13:d8:f0:25:ed:0b:b9:7e:f1:87:38:b6:b1: eb:08:e9:36:58:2a:27:72:8e:6e:0e:34:8d:da:9a: c6:d1:0d:63:95:93:f6:1c:83:cf:7e:30:f1:ff:96: e8:03:6d:8a:e0:ad:b7:89:3a:aa:f5:48:25:7e:e3: 4c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BA:41:F1:F4:0C:51:56:D1:1E:64:74:A7:82:E7:BE:2A:A3:E0:E0 X509v3 Authority Key Identifier: keyid:65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:eb:44:df:08:75:ce:43:bd:4e:f5:e1:6b:27:5d:e5:f2:d2: 08:9b:69:a6:f9:ff:46:e5:68:76:c5:db:3c:76:a8:d1:18:c9: e3:0a:e8:74:eb:b1:be:3e:af:be:c9:30:ba:25:df:24:39:10: 87:36:e1:42:e3:d4:a2:d0:aa:8c:16:60:76:9b:fa:ea:d2:31: f0:e9:b8:fd:79:66:a5:c8:8e:e3:37:cb:a1:55:82:0e:44:73: 3c:a3:71:6c:c7:ad:43:bc:ce:90:4e:85:50:e2:52:a2:19:60: 44:3e:5e:fb:58:a7:09:8a:3d:db:0a:9b:be:f8:30:28:6c:55: 8d:ae:ea:49:14:3e:a4:0d:6a:ae:a0:24:72:e4:64:ae:26:01: b1:e7:af:a0:6d:98:e1:63:17:6d:26:82:29:31:45:86:62:15: ba:a7:3f:3e:0e:67:e0:3f:20:eb:9f:19:3c:2c:76:3a:1f:9f: 02:0d:f4:3d:9e:e2:e5:88:24:5f:fe:6c:4d:79:d6:d9:5f:8b: 23:c0:93:66:f1:ed:6f:1b:8a:73:a2:5f:6b:a1:05:5d:29:90: b7:7c:34:0a:3d:45:6c:bd:1d:e6:41:4e:f9:14:e1:0f:40:70: 9c:c3:12:59:01:75:1a:4e:37:e5:3e:ac:c4:17:1f:6f:d9:4e: e2:12:25:59 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI68cOnvVgZbmBN4PHaI4D2/81DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUw NTFFMDE4QjAeFw0yNjA3MjMyMDM0MzBaFw0yNjA3MjQyMTUzMzBaMDMxMTAvBgNV BAMTKDU5QkE0MUYxRjQwQzUxNTZEMTFFNjQ3NEE3ODJFN0JFMkFBM0UwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCGcyyTOio1qNom1jARJk5BTe RJq+rNA/qZ4awCVqGtAv5f8TNUjI2QJasq/asLFgKGHmKYiUxjV154v9mv/cElzk Si78r7y55v0aJla6ZuNoQcn3DEemkeLACvELni/y7hXCF2W/oWZ/5hECzv1uMu7u B00Qhl+4s0bLcfiiMTJv6+2y9yMn1iGsoZhYDDNxSZ3xu95VHSlTNLeQWf3o93i/ yydxgMCV5u/wofQuWn3wn+0ydnmzOOwBB71ZJn+lo7KCE9jwJe0LuX7xhzi2sesI 6TZYKidyjm4ONI3amsbRDWOVk/Ycg89+MPH/lugDbYrgrbeJOqr1SCV+40zFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWbpB8fQMUVbRHmR0p4Lnviqj4OAwHwYDVR0j BBgwFoAUZTObemt5iKpu9A74ZNWL/gUeAYswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5MTUyNzMzMDYxMTIwMi8wLzY1MzM5QjdBNkI3OTg4QUE2RUY0MEVGODY0RDU4 QkZFMDUxRTAxOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUwNTFFMDE4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTE1MjczMzA2MTEyMDIvMC82NTMzOUI3QTZCNzk4 OEFBNkVGNDBFRjg2NEQ1OEJGRTA1MUUwMThCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApetE3wh1zkO9 TvXhaydd5fLSCJtppvn/RuVodsXbPHao0RjJ4wrodOuxvj6vvskwuiXfJDkQhzbh QuPUotCqjBZgdpv66tIx8Om4/XlmpciO4zfLoVWCDkRzPKNxbMetQ7zOkE6FUOJS ohlgRD5e+1inCYo92wqbvvgwKGxVja7qSRQ+pA1qrqAkcuRkriYBseevoG2Y4WMX bSaCKTFFhmIVuqc/Pg5n4D8g658ZPCx2Oh+fAg30PZ7i5YgkX/5sTXnW2V+LI8CT ZvHtbxuKc6Jfa6EFXSmQt3w0Cj1FbL0d5kFO+RThD0BwnMMSWQF1Gk435T6sxBcf b9lO4hIlWQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:26:51 2026 by rpki-client