$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft File: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft (raw, json) Hash identifier: sjhsS8uW/CLAW1N2LSdvlJDMRo6YHp0k16K+PLHeJzc= Subject key identifier: F6:0B:EE:4A:E5:56:81:01:B8:AD:1A:C2:65:F5:70:30:57:48:CA:5C Authority key identifier: B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D Certificate issuer: /CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Certificate serial: 0EE2F40A97530CBAF19A193A15431467E5C67D1B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft Manifest number: 45 Signing time: Thu 23 Jul 2026 21:29:36 +0000 Manifest this update: Thu 23 Jul 2026 21:24:36 +0000 Manifest next update: Fri 24 Jul 2026 21:31:36 +0000 Files and hashes: 1: 3130332e31342e3133322e302f32342d3234203d3e20313430373236.roa (hash: Ph1dlsU1gsZp5Js2bzwU2W0EFG5DOnt4Suxc6EJUP4U=) 2: 3130332e31342e3133332e302f32342d3234203d3e20313430373236.roa (hash: V+qv7ptj/i5Q0Kg0lA4vCRODMLzJgZmqRhPGd63kKfo=) 3: 3130332e31342e3133322e302f32332d3233203d3e2034383337.roa (hash: yPZ2e1NPGAMvQsQSyK2kLR5rDUrX/7UynvFoCiT9BQ8=) 4: 3130332e31342e3133342e302f32332d3233203d3e20313430373236.roa (hash: PohPnTPBADShmZdUjAc+ol5RV4sbT3451odzVbu+B7Y=) 5: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl (hash: ILs9yUkBrBwLSsMStncqQX94L3iQ2xYR5/ka62+XNz4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e2:f4:0a:97:53:0c:ba:f1:9a:19:3a:15:43:14:67:e5:c6:7d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Validity Not Before: Jul 23 21:24:36 2026 GMT Not After : Jul 24 21:31:36 2026 GMT Subject: CN=F60BEE4AE5568101B8AD1AC265F570305748CA5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:88:eb:a8:9a:c8:f2:06:b6:e9:40:77:d8:c0: 25:b2:b9:f0:45:61:c1:70:f0:b2:95:35:f7:ed:25: d3:a4:de:8f:ba:5a:83:d6:43:99:77:b3:85:bb:8a: e2:e1:95:3b:31:b8:0d:b0:b1:df:f5:af:7d:f7:07: d2:37:79:e3:c3:7d:50:b2:2b:02:6f:63:3f:56:c1: af:da:78:ca:5d:d1:ff:80:61:42:52:0c:db:05:20: 29:08:a2:07:ad:f5:87:c3:4f:17:1d:64:2d:9b:57: 24:31:8e:5d:f4:91:03:db:69:78:46:93:90:f5:2f: 3d:f0:cf:28:48:a0:f8:8e:9b:2d:41:99:fb:52:1b: ba:f8:71:ee:35:cd:e6:bf:50:c7:19:19:41:a9:a3: 5c:bd:1d:5e:8c:72:56:5b:95:37:4e:fb:0e:bf:53: c5:17:47:be:89:90:3e:c9:e9:43:fa:64:36:89:dc: 39:f3:cf:5f:8f:b7:8e:54:f1:91:ef:de:75:c1:72: 23:2a:8f:aa:f2:bb:db:c1:de:56:ad:73:bc:8b:19: 6a:b5:e8:29:51:a4:ef:a4:df:53:52:fd:99:c4:26: 7f:b9:77:4d:c1:4d:08:bc:4c:76:21:f4:44:6c:0d: a0:be:45:a8:a1:fc:02:b1:21:6b:c9:2f:8f:26:8a: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0B:EE:4A:E5:56:81:01:B8:AD:1A:C2:65:F5:70:30:57:48:CA:5C X509v3 Authority Key Identifier: keyid:B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:5d:88:e4:56:80:18:14:42:45:d4:dd:04:2a:64:af:9c:b6: 87:25:c6:23:a9:7d:a9:1c:c7:c9:ba:db:49:02:9a:55:30:54: 9a:b8:d6:ea:e2:9b:36:fd:39:83:a3:fa:59:02:24:9c:df:d4: 82:9f:e9:4a:68:53:06:77:39:e3:d0:ba:b9:ff:7b:fd:9e:f5: ac:ce:57:d8:ee:9a:80:97:39:3b:bf:c1:9d:56:28:02:2b:b8: f0:51:e0:3f:37:c8:4e:87:45:41:c2:75:d0:fa:48:db:08:4e: f4:af:63:08:d1:91:9a:5c:5c:c9:70:70:4f:74:5f:9a:f4:3d: 77:4c:85:9a:93:22:2d:94:61:e8:6b:33:c0:98:78:94:cb:0e: 5a:39:56:41:04:ea:f0:e5:8a:2a:fb:3c:e0:94:11:3a:27:35: 6d:b4:65:75:b0:f1:3c:27:d4:c3:f9:c2:5f:ab:78:9d:40:85: 5b:4c:cd:d3:4e:99:ce:4d:b8:f4:39:18:b6:56:b7:a4:4b:a7: 2f:29:b5:18:6a:be:de:af:e4:84:9a:1a:05:22:5a:ed:eb:98: 70:66:27:71:64:7e:4e:f3:16:36:f1:fc:db:72:3c:78:8c:84: d2:9c:32:2c:6d:7b:4e:bb:52:97:ea:f6:df:fd:1d:55:94:9f: d8:56:53:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDuL0CpdTDLrxmhk6FUMUZ+XGfRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdG MDYzRkQ2RDAeFw0yNjA3MjMyMTI0MzZaFw0yNjA3MjQyMTMxMzZaMDMxMTAvBgNV BAMTKEY2MEJFRTRBRTU1NjgxMDFCOEFEMUFDMjY1RjU3MDMwNTc0OENBNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTiOuomsjyBrbpQHfYwCWyufBF YcFw8LKVNfftJdOk3o+6WoPWQ5l3s4W7iuLhlTsxuA2wsd/1r333B9I3eePDfVCy KwJvYz9Wwa/aeMpd0f+AYUJSDNsFICkIoget9YfDTxcdZC2bVyQxjl30kQPbaXhG k5D1Lz3wzyhIoPiOmy1BmftSG7r4ce41zea/UMcZGUGpo1y9HV6MclZblTdO+w6/ U8UXR76JkD7J6UP6ZDaJ3Dnzz1+Pt45U8ZHv3nXBciMqj6ryu9vB3latc7yLGWq1 6ClRpO+k31NS/ZnEJn+5d03BTQi8THYh9ERsDaC+Raih/AKxIWvJL48migNnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9gvuSuVWgQG4rRrCZfVwMFdIylwwHwYDVR0j BBgwFoAUtl95L4T6HpANpNLaSdzFN/Bj/W0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDk0OTc1ODA1ODc1ODE2OS8wL0I2NUY3OTJGODRGQTFFOTAwREE0RDJEQTQ5REND NTM3RjA2M0ZENkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdGMDYzRkQ2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ5NDk3NTgwNTg3NTgxNjkvMC9CNjVGNzkyRjg0RkEx RTkwMERBNEQyREE0OURDQzUzN0YwNjNGRDZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWl2I5FaAGBRC RdTdBCpkr5y2hyXGI6l9qRzHybrbSQKaVTBUmrjW6uKbNv05g6P6WQIknN/Ugp/p SmhTBnc549C6uf97/Z71rM5X2O6agJc5O7/BnVYoAiu48FHgPzfITodFQcJ10PpI 2whO9K9jCNGRmlxcyXBwT3RfmvQ9d0yFmpMiLZRh6GszwJh4lMsOWjlWQQTq8OWK Kvs84JQROic1bbRldbDxPCfUw/nCX6t4nUCFW0zN006Zzk249DkYtla3pEunLym1 GGq+3q/khJoaBSJa7euYcGYncWR+TvMWNvH823I8eIyE0pwyLG17TrtSl+r23/0d VZSf2FZT9Q== -----END CERTIFICATE-----Generated at Fri Jul 24 04:27:46 2026 by rpki-client