$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft File: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft (raw, json) Hash identifier: aVmUtX8ifFUyTSALag5ftowgq3hMaZBjR2lip5peXeA= Subject key identifier: A3:D0:1A:1F:1F:B3:7D:89:09:4B:78:A1:C3:5F:4D:93:ED:BD:66:C2 Authority key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B Certificate issuer: /CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Certificate serial: 47F36F411D5FCC68E9E5EA552DAD770058207CA4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft Manifest number: C2 Signing time: Sat 10 Oct 2026 16:29:47 +0000 Manifest this update: Sat 10 Oct 2026 16:24:47 +0000 Manifest next update: Wed 14 Oct 2026 02:19:47 +0000 Files and hashes: 1: 3130332e32352e36342e302f32332d3233203d3e2034383132.roa (hash: Nq6gNiMaaKFWixnw61ZZIDSmy1W/Glh2AAvq8ITBxjk=) 2: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl (hash: IML1AYKBL2hYfudjal8Ueitb5uwUfBf9mAlpM00Abs0=) 3: 3130332e32352e36362e302f32332d3233203d3e2030.roa (hash: JMo6LH7KCuXdAXtrDjOm3O2HDvLmSMhk1dhzSjfl0Z4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f3:6f:41:1d:5f:cc:68:e9:e5:ea:55:2d:ad:77:00:58:20:7c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Validity Not Before: Oct 10 16:24:47 2026 GMT Not After : Oct 14 02:19:47 2026 GMT Subject: CN=A3D01A1F1FB37D89094B78A1C35F4D93EDBD66C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:91:6d:78:f9:3e:2c:82:f7:43:06:27:00:7a: 74:bc:77:c6:84:66:c6:1c:a7:76:4e:39:4d:6a:f8: 2d:60:fa:8a:d6:5b:f2:ac:90:fe:b8:c9:14:74:80: dd:09:06:ec:2e:b0:4f:b5:55:37:53:f0:b3:74:de: 1b:c3:65:9d:5c:57:f6:fe:b8:65:9b:14:f3:8b:77: b8:27:6a:a1:c0:b7:ea:29:25:db:0e:4a:49:b3:14: e6:f1:0b:05:fc:a7:f1:31:2b:a2:d0:f2:39:22:ee: ce:c4:32:d0:4f:14:3c:59:45:38:9d:8e:eb:da:09: d7:41:68:5f:54:d1:98:ed:36:d4:d3:33:27:af:22: cd:e0:41:a9:41:4a:e3:a5:40:08:05:bc:65:aa:80: 15:6a:ec:80:4d:01:a9:8b:b8:e0:80:28:a3:b0:16: 94:37:04:2b:89:80:e0:84:f7:11:03:4d:f4:45:6d: 80:5f:13:8a:16:15:06:86:16:a2:d7:af:88:f4:8c: 0e:d1:a9:67:e0:8b:6c:da:ec:b5:10:32:d4:b8:73: 88:5d:44:5a:c6:5d:73:fb:1c:b7:33:6f:9c:ea:49: 9f:ac:89:af:71:01:b1:ce:d2:49:42:43:a9:c7:b3: af:04:75:bf:61:6c:73:80:60:1d:a5:9d:97:a8:e7: 0a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D0:1A:1F:1F:B3:7D:89:09:4B:78:A1:C3:5F:4D:93:ED:BD:66:C2 X509v3 Authority Key Identifier: keyid:65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:9b:1f:29:8f:b8:aa:2e:e8:b1:fc:c0:5d:78:73:97:a0:bb: 43:5b:ea:e5:73:7f:d8:48:ab:04:71:0e:d9:95:5e:69:10:64: 29:56:79:9e:9b:57:83:56:93:4d:be:dc:aa:b9:50:53:65:7b: 4e:07:f7:64:e6:4e:1b:f5:5f:cb:5e:ff:bd:d8:e1:46:aa:99: 4a:16:f4:62:48:2c:bc:38:1b:2c:32:fc:cb:c8:25:56:d4:2c: 62:43:a7:ef:41:de:c1:e5:0d:53:c4:fb:14:9a:20:f7:c4:26: 17:49:ff:79:3b:e8:25:93:8c:9f:ea:e4:ff:6a:29:e3:88:80: 0d:be:63:3b:f0:85:ab:cf:e1:d0:0b:07:22:df:8c:2c:58:05: ba:29:32:d0:3e:61:78:23:2e:e6:d4:78:15:44:01:71:c4:1d: 9f:a5:fd:96:01:70:15:19:f5:cf:39:a4:be:08:f3:42:83:bb: eb:47:6a:b2:bd:30:b8:57:27:0e:7d:9a:b7:96:b4:39:df:ba: 09:2e:6e:ff:03:19:4f:5c:49:f4:78:30:1b:df:0f:35:5c:36: a9:63:82:ea:36:43:17:33:1d:fe:ec:78:4c:8c:87:07:27:c4: f6:48:3d:35:e4:86:c6:ca:c9:52:d7:d8:5f:f0:5f:6f:5e:3f: 3c:21:6e:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR/NvQR1fzGjp5epVLa13AFggfKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUw NTFFMDE4QjAeFw0yNjEwMTAxNjI0NDdaFw0yNjEwMTQwMjE5NDdaMDMxMTAvBgNV BAMTKEEzRDAxQTFGMUZCMzdEODkwOTRCNzhBMUMzNUY0RDkzRURCRDY2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfkW14+T4sgvdDBicAenS8d8aE ZsYcp3ZOOU1q+C1g+orWW/KskP64yRR0gN0JBuwusE+1VTdT8LN03hvDZZ1cV/b+ uGWbFPOLd7gnaqHAt+opJdsOSkmzFObxCwX8p/ExK6LQ8jki7s7EMtBPFDxZRTid juvaCddBaF9U0ZjtNtTTMyevIs3gQalBSuOlQAgFvGWqgBVq7IBNAamLuOCAKKOw FpQ3BCuJgOCE9xEDTfRFbYBfE4oWFQaGFqLXr4j0jA7RqWfgi2za7LUQMtS4c4hd RFrGXXP7HLczb5zqSZ+sia9xAbHO0klCQ6nHs68Edb9hbHOAYB2lnZeo5wr9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUo9AaHx+zfYkJS3ihw19Nk+29ZsIwHwYDVR0j BBgwFoAUZTObemt5iKpu9A74ZNWL/gUeAYswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5MTUyNzMzMDYxMTIwMi8wLzY1MzM5QjdBNkI3OTg4QUE2RUY0MEVGODY0RDU4 QkZFMDUxRTAxOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUwNTFFMDE4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTE1MjczMzA2MTEyMDIvMC82NTMzOUI3QTZCNzk4 OEFBNkVGNDBFRjg2NEQ1OEJGRTA1MUUwMThCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJsfKY+4qi7o sfzAXXhzl6C7Q1vq5XN/2EirBHEO2ZVeaRBkKVZ5nptXg1aTTb7cqrlQU2V7Tgf3 ZOZOG/Vfy17/vdjhRqqZShb0YkgsvDgbLDL8y8glVtQsYkOn70HeweUNU8T7FJog 98QmF0n/eTvoJZOMn+rk/2op44iADb5jO/CFq8/h0AsHIt+MLFgFuiky0D5heCMu 5tR4FUQBccQdn6X9lgFwFRn1zzmkvgjzQoO760dqsr0wuFcnDn2at5a0Od+6CS5u /wMZT1xJ9HgwG98PNVw2qWOC6jZDFzMd/ux4TIyHByfE9kg9NeSGxsrJUtfYX/Bf b14/PCFu/w== -----END CERTIFICATE-----Generated at Sun Oct 11 09:36:44 2026 by rpki-client