$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft File: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft (raw, json) Hash identifier: 15D2gI3/7ECUojoSnF5OneCTdTRaN42mpI2qskDzVJM= Subject key identifier: D5:13:EE:2A:CB:71:34:75:A4:F8:2D:6F:60:F5:53:C0:B3:9D:9E:7C Authority key identifier: B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D Certificate issuer: /CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Certificate serial: 4FE424EEFD2962D56BCFD301B264CB9C03412B00 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft Manifest number: 82 Signing time: Mon 28 Sep 2026 08:10:34 +0000 Manifest this update: Mon 28 Sep 2026 08:05:34 +0000 Manifest next update: Thu 01 Oct 2026 16:15:34 +0000 Files and hashes: 1: 3130332e31342e3133332e302f32342d3234203d3e20313430373236.roa (hash: V+qv7ptj/i5Q0Kg0lA4vCRODMLzJgZmqRhPGd63kKfo=) 2: 3130332e31342e3133322e302f32332d3233203d3e2034383337.roa (hash: yPZ2e1NPGAMvQsQSyK2kLR5rDUrX/7UynvFoCiT9BQ8=) 3: 3130332e31342e3133322e302f32342d3234203d3e20313430373236.roa (hash: Ph1dlsU1gsZp5Js2bzwU2W0EFG5DOnt4Suxc6EJUP4U=) 4: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl (hash: zJgmm1uyG1i2XzWuMyqB2DKYBijvjEQfd8KnTO2Gq9Y=) 5: 3130332e31342e3133342e302f32332d3233203d3e20313430373236.roa (hash: PohPnTPBADShmZdUjAc+ol5RV4sbT3451odzVbu+B7Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e4:24:ee:fd:29:62:d5:6b:cf:d3:01:b2:64:cb:9c:03:41:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Validity Not Before: Sep 28 08:05:34 2026 GMT Not After : Oct 1 16:15:34 2026 GMT Subject: CN=D513EE2ACB713475A4F82D6F60F553C0B39D9E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:4e:94:fb:eb:22:81:59:a4:bb:a0:99:5c: 2b:b8:87:10:67:75:45:7b:03:1a:65:e9:47:22:70: 70:1b:b6:1f:2e:16:f3:1e:0e:f6:24:97:fe:69:ae: f2:f6:a1:1e:d1:de:87:c3:7b:c0:cb:44:91:39:41: a8:d6:5c:63:98:d9:47:e0:06:fa:ab:91:05:59:95: b0:97:5e:bd:74:4e:f1:d4:e9:0f:d2:e7:c8:2b:93: 32:30:36:bc:6e:3f:d0:78:8e:0c:a8:d2:f1:05:4d: c7:55:9a:c5:ee:6c:48:e0:ec:08:9d:55:62:36:2b: 37:25:82:86:95:98:f1:61:fd:17:51:75:ab:6b:f1: b9:01:ad:b2:14:d6:09:9a:4b:0d:50:c8:46:ea:c2: b0:de:f7:6c:45:5b:a7:9b:e8:c3:e6:f0:8d:f1:2e: 2d:d7:dc:7e:52:aa:3a:96:e6:e4:07:69:90:b7:8d: 0c:c5:22:06:94:a5:dc:4b:bd:46:fc:e9:a9:ae:f7: 3a:45:1f:5c:d2:4b:6b:04:f5:69:25:ca:2e:b2:55: 62:c2:40:e9:98:f4:12:c3:35:d9:85:c9:d0:b7:c5: ef:18:04:e3:3d:33:23:da:ab:cc:45:14:04:cb:4d: e0:7a:34:0a:88:fb:da:1f:6d:b5:05:9a:2f:40:5e: 96:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:13:EE:2A:CB:71:34:75:A4:F8:2D:6F:60:F5:53:C0:B3:9D:9E:7C X509v3 Authority Key Identifier: keyid:B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:70:e9:e9:57:11:5d:16:76:3d:3e:8f:25:0a:e0:b0:4e:14: 3e:7b:d4:a0:11:88:d0:59:5b:6f:1e:d1:ae:8a:ba:74:2d:bc: eb:cf:06:78:a9:c6:0a:d4:6d:25:74:4b:80:5f:01:ff:68:68: 07:46:b6:2a:37:8a:1f:a5:91:6a:40:cc:8d:25:af:b0:ac:3e: 11:25:9f:ba:04:3d:34:80:37:f3:28:b9:ee:63:90:99:f9:db: 37:8c:7b:24:af:2d:16:56:a9:a4:c1:ac:7b:1f:7d:8b:20:82: ec:06:67:62:a4:0a:39:2e:20:4b:45:bb:28:c8:bb:16:05:73: 60:55:b7:d1:4e:5b:ba:5b:12:e5:bc:0a:f7:3d:f1:4c:f4:93: fb:1c:61:63:db:94:c9:fa:55:85:65:8e:c4:e7:e0:2e:c4:6d: 89:79:f8:a7:1f:56:65:4b:5d:0c:87:ec:23:4f:95:49:1e:40: 43:62:9f:9a:aa:07:a7:42:e9:ed:c9:a6:1b:70:45:0b:8f:8f: b9:f3:6b:09:e6:28:7f:57:b6:7d:9f:c6:27:10:93:96:6a:19: 35:89:9c:e3:f0:67:b8:7f:a8:5c:63:38:2f:9c:3f:b6:d4:fb: 92:cc:59:58:28:1a:82:58:38:9e:d8:24:6c:79:71:36:45:75: f2:7d:6a:01 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT+Qk7v0pYtVrz9MBsmTLnANBKwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdG MDYzRkQ2RDAeFw0yNjA5MjgwODA1MzRaFw0yNjEwMDExNjE1MzRaMDMxMTAvBgNV BAMTKEQ1MTNFRTJBQ0I3MTM0NzVBNEY4MkQ2RjYwRjU1M0MwQjM5RDlFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYaU6U++sigVmku6CZXCu4hxBn dUV7Axpl6UcicHAbth8uFvMeDvYkl/5prvL2oR7R3ofDe8DLRJE5QajWXGOY2Ufg BvqrkQVZlbCXXr10TvHU6Q/S58grkzIwNrxuP9B4jgyo0vEFTcdVmsXubEjg7Aid VWI2KzclgoaVmPFh/RdRdatr8bkBrbIU1gmaSw1QyEbqwrDe92xFW6eb6MPm8I3x Li3X3H5SqjqW5uQHaZC3jQzFIgaUpdxLvUb86amu9zpFH1zSS2sE9Wklyi6yVWLC QOmY9BLDNdmFydC3xe8YBOM9MyPaq8xFFATLTeB6NAqI+9ofbbUFmi9AXpahAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1RPuKstxNHWk+C1vYPVTwLOdnnwwHwYDVR0j BBgwFoAUtl95L4T6HpANpNLaSdzFN/Bj/W0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDk0OTc1ODA1ODc1ODE2OS8wL0I2NUY3OTJGODRGQTFFOTAwREE0RDJEQTQ5REND NTM3RjA2M0ZENkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdGMDYzRkQ2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ5NDk3NTgwNTg3NTgxNjkvMC9CNjVGNzkyRjg0RkEx RTkwMERBNEQyREE0OURDQzUzN0YwNjNGRDZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHDp6VcRXRZ2 PT6PJQrgsE4UPnvUoBGI0Flbbx7Rroq6dC28688GeKnGCtRtJXRLgF8B/2hoB0a2 KjeKH6WRakDMjSWvsKw+ESWfugQ9NIA38yi57mOQmfnbN4x7JK8tFlappMGsex99 iyCC7AZnYqQKOS4gS0W7KMi7FgVzYFW30U5bulsS5bwK9z3xTPST+xxhY9uUyfpV hWWOxOfgLsRtiXn4px9WZUtdDIfsI0+VSR5AQ2KfmqoHp0Lp7cmmG3BFC4+PufNr CeYof1e2fZ/GJxCTlmoZNYmc4/BnuH+oXGM4L5w/ttT7ksxZWCgaglg4ntgkbHlx NkV18n1qAQ== -----END CERTIFICATE-----Generated at Wed Sep 30 12:06:06 2026 by rpki-client