$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft File: 5E665DEA0365C38B2587CA38473DB30B00B37247.mft (raw, json) Hash identifier: BNXI15zW79EOqskDtfsIzuYBH9qLObwcuBg78w3U0pY= Subject key identifier: 3A:D7:C6:EC:1E:2C:3F:83:84:BB:FB:6D:69:28:02:C4:28:6D:05:26 Authority key identifier: 5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 Certificate issuer: /CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Certificate serial: 42610D7893DC2E42F17D2811CC56A087B8819CC1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft Manifest number: FE Signing time: Tue 28 Jul 2026 22:22:52 +0000 Manifest this update: Tue 28 Jul 2026 22:17:52 +0000 Manifest next update: Thu 30 Jul 2026 01:17:52 +0000 Files and hashes: 1: 5E665DEA0365C38B2587CA38473DB30B00B37247.crl (hash: P1lj7J9871WJALT5Fe10wVaenjjrdrPR8csGU52QhK8=) 2: 3130332e39362e3232352e302f32342d3234203d3e2034383132.roa (hash: bZxwSRx56JjIlKGA2jcK+4HdA45GjFP93qu+mdvVd/M=) 3: 3130332e39362e3232342e302f32332d3234203d3e203137363231.roa (hash: 8vx2+wRk4VL70svd/ttMpMVn0pHYHjFomLVjc18fgDY=) 4: 3130332e39362e3232342e302f32342d3234203d3e203137363231.roa (hash: KERpBlqbDNsSi1k8aC9k/SKEGKPfzqSEvJkd4i4yGP0=) 5: 3130332e39362e3232352e302f32342d3234203d3e203137363231.roa (hash: dIkQ5GWLCx2vGkX63fjbffML1X4phj6zmldcaSpdQDw=) 6: 3130332e39362e3232342e302f32332d3234203d3e2034383132.roa (hash: BBjZulEHtpdbemiPB81vbCs1TdNmI9wFsxN+ufW/MMI=) 7: 3130332e39362e3232342e302f32342d3234203d3e2034383132.roa (hash: x2Dj5aFyTA16EX9HyRCNL66NSC22dWjBvcZv8itjT08=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:61:0d:78:93:dc:2e:42:f1:7d:28:11:cc:56:a0:87:b8:81:9c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E665DEA0365C38B2587CA38473DB30B00B37247 Validity Not Before: Jul 28 22:17:52 2026 GMT Not After : Jul 30 01:17:52 2026 GMT Subject: CN=3AD7C6EC1E2C3F8384BBFB6D692802C4286D0526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b7:f1:75:67:90:36:b7:40:71:00:ea:f2:e1: 5f:cb:94:41:89:5e:7d:85:76:ac:1f:ce:aa:36:c5: cc:15:ff:ff:b3:44:bc:5f:94:f6:2c:a9:a8:8e:26: 84:92:19:b7:8a:b2:89:67:44:d1:67:fd:27:00:19: c9:32:32:a8:c0:2e:da:ad:22:40:fd:86:0d:4b:62: 8a:8e:f9:7b:45:80:3b:7c:04:ba:4f:fc:0f:95:ab: 71:c5:35:0f:53:2a:db:3b:3b:e0:67:cb:80:b9:9d: 02:34:08:50:ff:13:1f:fd:a2:43:3e:30:59:21:e6: 04:9d:bd:d1:af:9e:94:c3:21:96:9a:c9:23:af:18: 55:56:9d:cd:6a:f0:43:fb:51:7b:3b:f3:82:ba:eb: 8d:89:5b:c0:1f:42:4c:3b:41:ca:f6:5a:ed:2d:41: f6:32:be:a3:89:79:f3:60:ba:16:48:99:b6:31:c1: 6a:93:7c:3a:ec:c3:04:c6:25:ea:18:47:36:90:67: 6c:ba:cd:4b:b1:dd:25:8b:6d:c9:08:84:0c:43:eb: 0a:2e:cd:43:a1:04:08:05:d8:06:80:fb:3f:34:15: 01:6c:b8:be:f2:c5:06:2c:c1:87:fe:45:88:37:d6: ab:57:9f:02:83:3e:fa:38:94:38:30:a5:64:1a:59: 06:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D7:C6:EC:1E:2C:3F:83:84:BB:FB:6D:69:28:02:C4:28:6D:05:26 X509v3 Authority Key Identifier: keyid:5E:66:5D:EA:03:65:C3:8B:25:87:CA:38:47:3D:B3:0B:00:B3:72:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5E665DEA0365C38B2587CA38473DB30B00B37247.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061841922/0/5E665DEA0365C38B2587CA38473DB30B00B37247.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:33:8f:fa:4d:b8:61:a3:63:0f:54:8d:5c:84:28:4f:c7:db: 09:a5:33:6b:ad:7c:d8:4c:06:97:fd:86:20:47:e6:0a:5d:d9: 9b:5f:1b:85:b9:f9:a6:26:19:57:49:cb:ae:f6:8f:d0:c9:25: 4f:d7:33:53:16:35:c1:91:ec:96:df:20:76:ea:e0:38:47:76: 72:53:75:7e:f1:16:8f:fd:3d:0c:85:6f:84:19:87:55:f3:5d: 29:92:17:44:06:8c:85:f9:c4:70:4c:81:44:71:0b:8a:af:dd: 11:cc:81:7c:99:44:65:ee:ff:a4:10:41:ae:de:8e:8f:8e:7f: 04:fb:6e:64:83:3a:bc:73:7a:0e:eb:c0:14:f8:ba:37:0d:68: 16:4f:94:91:be:6e:7b:ce:24:d4:f9:17:d6:92:a9:a4:90:3e: 63:52:99:30:6e:62:0c:7a:90:2a:d0:2d:88:77:0a:39:d0:69: 9d:51:2f:e2:36:e3:20:5f:4f:7e:68:f1:e8:2d:27:17:0d:64: c5:7d:e6:b7:41:17:63:22:95:87:72:5b:57:0d:64:65:f4:b8: e1:b4:3c:f6:ad:91:0f:3e:5b:7e:a6:dd:45:a2:a8:bb:0f:6d: d8:a5:26:0e:fa:30:98:66:e3:c9:e6:54:23:3b:fa:49:4e:62: 06:39:a7:39 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQmENeJPcLkLxfSgRzFagh7iBnMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIw MEIzNzI0NzAeFw0yNjA3MjgyMjE3NTJaFw0yNjA3MzAwMTE3NTJaMDMxMTAvBgNV BAMTKDNBRDdDNkVDMUUyQzNGODM4NEJCRkI2RDY5MjgwMkM0Mjg2RDA1MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwt/F1Z5A2t0BxAOry4V/LlEGJ Xn2Fdqwfzqo2xcwV//+zRLxflPYsqaiOJoSSGbeKsolnRNFn/ScAGckyMqjALtqt IkD9hg1LYoqO+XtFgDt8BLpP/A+Vq3HFNQ9TKts7O+Bny4C5nQI0CFD/Ex/9okM+ MFkh5gSdvdGvnpTDIZaaySOvGFVWnc1q8EP7UXs784K6642JW8AfQkw7Qcr2Wu0t QfYyvqOJefNguhZImbYxwWqTfDrswwTGJeoYRzaQZ2y6zUux3SWLbckIhAxD6wou zUOhBAgF2AaA+z80FQFsuL7yxQYswYf+RYg31qtXnwKDPvo4lDgwpWQaWQZlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOtfG7B4sP4OEu/ttaSgCxChtBSYwHwYDVR0j BBgwFoAUXmZd6gNlw4slh8o4Rz2zCwCzckcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTg0MTkyMi8wLzVFNjY1REVBMDM2NUMzOEIyNTg3Q0EzODQ3M0RC MzBCMDBCMzcyNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUU2NjVERUEwMzY1QzM4QjI1ODdDQTM4NDczREIzMEIwMEIzNzI0Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE4NDE5MjIvMC81RTY2NURFQTAzNjVD MzhCMjU4N0NBMzg0NzNEQjMwQjAwQjM3MjQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjOP+k24YaNj D1SNXIQoT8fbCaUza6182EwGl/2GIEfmCl3Zm18bhbn5piYZV0nLrvaP0MklT9cz UxY1wZHslt8gdurgOEd2clN1fvEWj/09DIVvhBmHVfNdKZIXRAaMhfnEcEyBRHEL iq/dEcyBfJlEZe7/pBBBrt6Oj45/BPtuZIM6vHN6DuvAFPi6Nw1oFk+Ukb5ue84k 1PkX1pKppJA+Y1KZMG5iDHqQKtAtiHcKOdBpnVEv4jbjIF9Pfmjx6C0nFw1kxX3m t0EXYyKVh3JbVw1kZfS44bQ89q2RDz5bfqbdRaKouw9t2KUmDvowmGbjyeZUIzv6 SU5iBjmnOQ== -----END CERTIFICATE-----Generated at Wed Jul 29 11:26:53 2026 by rpki-client