$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft File: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft (raw, json) Hash identifier: 4mZB2/f6jZgBnTimTBP32t8SVHucC5blDrMbcT6r68k= Subject key identifier: 1F:A0:94:43:5A:BB:25:8A:E7:DB:6B:EC:A5:9D:34:9B:37:3A:E7:A3 Authority key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B Certificate issuer: /CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Certificate serial: 32C512644042F83ACA3CC8481DCDAACA5CF675C5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft Manifest number: 21 Signing time: Wed 13 May 2026 10:21:03 +0000 Manifest this update: Wed 13 May 2026 10:16:03 +0000 Manifest next update: Thu 14 May 2026 12:20:03 +0000 Files and hashes: 1: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl (hash: 37hBqWFakrujwVD3oY/+iyAXwtsYHaD1MzfJgH6vaIY=) 2: 3130332e32352e36362e302f32332d3233203d3e2030.roa (hash: JMo6LH7KCuXdAXtrDjOm3O2HDvLmSMhk1dhzSjfl0Z4=) 3: 3130332e32352e36342e302f32332d3233203d3e2034383132.roa (hash: Nq6gNiMaaKFWixnw61ZZIDSmy1W/Glh2AAvq8ITBxjk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c5:12:64:40:42:f8:3a:ca:3c:c8:48:1d:cd:aa:ca:5c:f6:75:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Validity Not Before: May 13 10:16:03 2026 GMT Not After : May 14 12:20:03 2026 GMT Subject: CN=1FA094435ABB258AE7DB6BECA59D349B373AE7A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:79:aa:6b:4e:a3:54:40:6e:bd:be:4b:47: 47:a6:0a:2c:3a:42:bb:31:32:c7:5e:c9:28:44:1e: c0:a7:8d:da:51:82:93:f7:39:60:76:f5:bc:ee:fb: 22:a2:de:e7:17:d2:16:22:a9:1e:d4:2d:8f:51:58: e7:d2:f9:9e:0f:2f:59:f5:fc:55:5c:21:00:24:74: 25:2f:de:f1:91:71:b9:e4:dc:4c:0e:76:ae:28:2e: 4c:5d:ed:13:2d:5b:eb:1f:0c:b6:4e:83:76:0b:28: a8:2f:ec:99:3d:fb:49:4c:e7:b2:88:18:46:28:85: 11:04:32:ba:f6:77:88:46:2e:56:e5:92:94:df:a2: d8:a7:6b:4f:8c:eb:da:c4:60:75:31:4b:c8:a0:56: bf:4a:db:72:5b:c8:8e:f0:84:49:d5:99:e3:09:57: f1:e2:1e:a9:17:ae:b5:15:b8:90:66:67:e9:f6:48: 41:16:55:b4:f6:59:c4:36:22:e6:96:88:ec:45:79: dd:7c:68:90:b9:21:16:a4:73:10:85:be:10:86:e0: a3:ab:4d:71:24:8e:3b:4a:92:4b:5e:90:d0:e0:00: e5:c9:3d:69:fa:19:37:dc:c8:bf:91:c4:62:52:ff: 23:95:a9:76:18:b8:15:3a:64:97:c4:40:7c:f0:85: cf:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A0:94:43:5A:BB:25:8A:E7:DB:6B:EC:A5:9D:34:9B:37:3A:E7:A3 X509v3 Authority Key Identifier: keyid:65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:7a:a1:63:07:2f:33:07:d3:4c:25:43:84:34:a4:5a:22:c6: ec:1e:0a:31:ec:b4:5c:41:bf:04:d8:37:b5:e7:43:59:eb:a0: 0e:69:b9:45:83:94:cd:9c:9f:b1:9d:be:a5:c7:5e:7d:14:e3: 71:c3:c5:e4:8d:e7:d0:bb:10:31:d3:9c:14:a1:82:6c:a2:f3: 8d:e0:31:02:43:6d:32:9c:13:05:26:0e:bf:bd:79:92:78:80: 28:4f:10:b8:af:15:36:f6:84:7e:00:00:a1:81:0d:2a:74:61: 2b:5c:fe:55:fc:5a:1a:de:2b:2d:3a:de:62:5c:9a:05:b2:f5: 65:7c:a7:9c:96:1e:f1:a6:ab:94:70:9e:e8:63:9c:8b:76:af: cd:35:f9:7f:6a:24:3e:dd:c5:e6:5c:af:38:2b:1f:4e:c5:d1: 09:f5:c6:6b:32:7e:44:85:0b:ba:00:d9:81:1e:62:4f:c1:e4: 66:bb:75:95:3b:13:5b:9a:da:49:93:df:49:10:2b:f6:bd:a0: b7:a6:84:66:cc:0a:83:d2:b1:13:a6:b7:9c:32:1a:2a:8d:32: e7:bd:68:94:73:1f:10:8a:a5:1c:35:e1:5a:ea:57:9d:f9:1e: 70:a2:68:c1:36:4b:a9:a8:18:8d:0e:f5:0f:70:5e:4b:eb:32: 3c:6a:4d:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMsUSZEBC+DrKPMhIHc2qylz2dcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUw NTFFMDE4QjAeFw0yNjA1MTMxMDE2MDNaFw0yNjA1MTQxMjIwMDNaMDMxMTAvBgNV BAMTKDFGQTA5NDQzNUFCQjI1OEFFN0RCNkJFQ0E1OUQzNDlCMzczQUU3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJ3mqa06jVEBuvb5LR0emCiw6 QrsxMsdeyShEHsCnjdpRgpP3OWB29bzu+yKi3ucX0hYiqR7ULY9RWOfS+Z4PL1n1 /FVcIQAkdCUv3vGRcbnk3EwOdq4oLkxd7RMtW+sfDLZOg3YLKKgv7Jk9+0lM57KI GEYohREEMrr2d4hGLlblkpTfotina0+M69rEYHUxS8igVr9K23JbyI7whEnVmeMJ V/HiHqkXrrUVuJBmZ+n2SEEWVbT2WcQ2IuaWiOxFed18aJC5IRakcxCFvhCG4KOr TXEkjjtKkktekNDgAOXJPWn6GTfcyL+RxGJS/yOVqXYYuBU6ZJfEQHzwhc/tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUH6CUQ1q7JYrn22vspZ00mzc656MwHwYDVR0j BBgwFoAUZTObemt5iKpu9A74ZNWL/gUeAYswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5MTUyNzMzMDYxMTIwMi8wLzY1MzM5QjdBNkI3OTg4QUE2RUY0MEVGODY0RDU4 QkZFMDUxRTAxOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUwNTFFMDE4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTE1MjczMzA2MTEyMDIvMC82NTMzOUI3QTZCNzk4 OEFBNkVGNDBFRjg2NEQ1OEJGRTA1MUUwMThCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnqhYwcvMwfT TCVDhDSkWiLG7B4KMey0XEG/BNg3tedDWeugDmm5RYOUzZyfsZ2+pcdefRTjccPF 5I3n0LsQMdOcFKGCbKLzjeAxAkNtMpwTBSYOv715kniAKE8QuK8VNvaEfgAAoYEN KnRhK1z+VfxaGt4rLTreYlyaBbL1ZXynnJYe8aarlHCe6GOci3avzTX5f2okPt3F 5lyvOCsfTsXRCfXGazJ+RIULugDZgR5iT8HkZrt1lTsTW5raSZPfSRAr9r2gt6aE ZswKg9KxE6a3nDIaKo0y571olHMfEIqlHDXhWupXnfkecKJowTZLqagYjQ71D3Be S+syPGpNVw== -----END CERTIFICATE-----Generated at Wed May 13 16:12:06 2026 by rpki-client