$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft File: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft (raw, json) Hash identifier: eqp4mA1K/6vImxyj2y9csBIvEo+Ww41zvOGUG72rklI= Subject key identifier: 47:24:F0:01:B2:3C:49:F3:2B:5E:43:DE:59:5D:19:7F:19:2E:03:FC Authority key identifier: B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D Certificate issuer: /CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Certificate serial: 5CE2C6650794EBB5E56A9E152B19185700B9017F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft Manifest number: 81 Signing time: Fri 25 Sep 2026 20:12:50 +0000 Manifest this update: Fri 25 Sep 2026 20:07:50 +0000 Manifest next update: Tue 29 Sep 2026 08:07:50 +0000 Files and hashes: 1: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl (hash: KK2aW2zkNnU4fCALXCU5clguSW1jq3ZKgEfeZ50IL10=) 2: 3130332e31342e3133342e302f32332d3233203d3e20313430373236.roa (hash: PohPnTPBADShmZdUjAc+ol5RV4sbT3451odzVbu+B7Y=) 3: 3130332e31342e3133332e302f32342d3234203d3e20313430373236.roa (hash: V+qv7ptj/i5Q0Kg0lA4vCRODMLzJgZmqRhPGd63kKfo=) 4: 3130332e31342e3133322e302f32342d3234203d3e20313430373236.roa (hash: Ph1dlsU1gsZp5Js2bzwU2W0EFG5DOnt4Suxc6EJUP4U=) 5: 3130332e31342e3133322e302f32332d3233203d3e2034383337.roa (hash: yPZ2e1NPGAMvQsQSyK2kLR5rDUrX/7UynvFoCiT9BQ8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 08:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e2:c6:65:07:94:eb:b5:e5:6a:9e:15:2b:19:18:57:00:b9:01:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Validity Not Before: Sep 25 20:07:50 2026 GMT Not After : Sep 29 08:07:50 2026 GMT Subject: CN=4724F001B23C49F32B5E43DE595D197F192E03FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:db:f0:26:dc:a4:66:03:cf:0b:7b:34:5c:b7: 01:ef:6a:6a:df:7b:d6:5c:b6:cb:61:ba:f3:6f:e8: 6b:38:cd:f9:82:33:25:94:77:08:aa:5c:3b:48:44: 4c:35:60:6f:69:40:5a:b4:04:46:18:af:9b:5a:06: 69:d1:6e:96:33:2d:ab:5c:3c:7b:6f:d3:d3:d1:62: 72:fb:12:a1:df:20:f1:36:87:8d:06:b0:28:66:1b: 1b:b5:dc:72:03:2a:46:bb:7a:30:56:c3:60:b4:d6: ae:b3:6e:8e:9c:f6:48:40:7c:a9:39:4a:43:3c:b3: 31:86:23:ad:ce:6d:cc:1c:94:d9:1e:b5:52:0e:c2: 43:d1:15:05:48:17:6b:a4:81:c5:24:d4:4c:ec:e3: f5:47:02:2e:94:bb:a4:f7:83:7b:1d:27:82:7c:13: d2:7c:ac:8f:22:11:d3:93:53:2a:b8:f3:a2:19:22: a8:d5:43:a7:4c:2a:3a:98:b1:da:70:3f:71:6f:fe: 43:02:cf:da:2d:bb:6f:92:14:32:b9:af:30:52:d3: 05:6c:f1:46:3c:8b:d2:37:ae:46:75:f4:99:6b:19: 8d:ae:12:57:61:f0:ee:c6:df:35:95:ee:52:cd:27: c3:d3:1c:65:2d:e0:8c:7e:fa:10:29:97:8a:96:74: 12:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:24:F0:01:B2:3C:49:F3:2B:5E:43:DE:59:5D:19:7F:19:2E:03:FC X509v3 Authority Key Identifier: keyid:B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f3:40:ad:04:13:67:fd:25:f2:1b:db:20:f1:68:8a:34:52: f4:35:59:a0:42:55:60:11:9a:e1:fc:94:14:db:30:4c:f6:a4: df:f9:df:9e:93:3e:fa:46:8a:a7:62:bc:41:6d:35:70:ba:82: 56:66:fb:95:9e:22:d0:aa:0c:b5:c8:4e:a1:1b:e2:ce:b0:0c: dd:86:16:47:72:6b:4f:44:c4:22:27:2a:8d:54:83:d3:84:79: a6:fc:cb:bc:f1:5a:5b:0a:95:74:ac:1d:b2:c2:1e:d3:d6:5d: 61:5a:80:ce:4c:ea:6c:ee:4f:b6:c1:40:0f:aa:80:eb:18:ea: d1:20:19:d4:23:3c:7a:79:92:8d:79:82:6d:30:04:4c:0c:7d: b0:59:88:91:95:2e:01:85:ee:45:ad:ef:02:a3:75:56:d4:55: 54:84:e2:2b:29:76:4e:59:98:fb:fa:04:db:92:0b:8e:f7:70: d6:a9:f8:07:11:69:77:5e:26:41:36:e5:1a:d6:28:98:4b:01: 20:3e:28:44:21:3d:5e:77:db:56:d5:76:24:cd:79:c2:7d:74: a8:64:23:d3:d6:62:cf:c8:6e:38:a6:17:53:11:85:c9:42:61: 09:ce:74:3d:8b:d5:64:d7:2e:f8:6f:2c:a4:2f:26:2e:42:d8: df:d0:fe:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXOLGZQeU67Xlap4VKxkYVwC5AX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdG MDYzRkQ2RDAeFw0yNjA5MjUyMDA3NTBaFw0yNjA5MjkwODA3NTBaMDMxMTAvBgNV BAMTKDQ3MjRGMDAxQjIzQzQ5RjMyQjVFNDNERTU5NUQxOTdGMTkyRTAzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb2/Am3KRmA88LezRctwHvamrf e9ZctsthuvNv6Gs4zfmCMyWUdwiqXDtIREw1YG9pQFq0BEYYr5taBmnRbpYzLatc PHtv09PRYnL7EqHfIPE2h40GsChmGxu13HIDKka7ejBWw2C01q6zbo6c9khAfKk5 SkM8szGGI63ObcwclNketVIOwkPRFQVIF2ukgcUk1Ezs4/VHAi6Uu6T3g3sdJ4J8 E9J8rI8iEdOTUyq486IZIqjVQ6dMKjqYsdpwP3Fv/kMCz9otu2+SFDK5rzBS0wVs 8UY8i9I3rkZ19JlrGY2uEldh8O7G3zWV7lLNJ8PTHGUt4Ix++hApl4qWdBL1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURyTwAbI8SfMrXkPeWV0ZfxkuA/wwHwYDVR0j BBgwFoAUtl95L4T6HpANpNLaSdzFN/Bj/W0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDk0OTc1ODA1ODc1ODE2OS8wL0I2NUY3OTJGODRGQTFFOTAwREE0RDJEQTQ5REND NTM3RjA2M0ZENkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdGMDYzRkQ2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ5NDk3NTgwNTg3NTgxNjkvMC9CNjVGNzkyRjg0RkEx RTkwMERBNEQyREE0OURDQzUzN0YwNjNGRDZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfNArQQTZ/0l 8hvbIPFoijRS9DVZoEJVYBGa4fyUFNswTPak3/nfnpM++kaKp2K8QW01cLqCVmb7 lZ4i0KoMtchOoRvizrAM3YYWR3JrT0TEIicqjVSD04R5pvzLvPFaWwqVdKwdssIe 09ZdYVqAzkzqbO5PtsFAD6qA6xjq0SAZ1CM8enmSjXmCbTAETAx9sFmIkZUuAYXu Ra3vAqN1VtRVVITiKyl2TlmY+/oE25ILjvdw1qn4BxFpd14mQTblGtYomEsBID4o RCE9XnfbVtV2JM15wn10qGQj09Ziz8huOKYXUxGFyUJhCc50PYvVZNcu+G8spC8m LkLY39D+Fg== -----END CERTIFICATE-----Generated at Sun Sep 27 23:16:00 2026 by rpki-client