
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft
File: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft (raw, json)
Hash identifier: 6ojYxsdDLaCMffFS1a3e8sUfbJSCfzCF9EhQUhVnzH8=
Subject key identifier: 06:9A:23:1D:60:2A:9D:3E:89:A8:E7:DE:46:6F:CB:95:88:DC:89:E3
Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6
Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6
Certificate serial: 7B5914D82B759D722692B6CB437E9FD6F62B1E0A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft
Manifest number: 97
Signing time: Wed 29 Jul 2026 05:38:35 +0000
Manifest this update: Wed 29 Jul 2026 05:33:35 +0000
Manifest next update: Thu 30 Jul 2026 06:42:35 +0000
Files and hashes: 1: 35392e3131312e3130342e302f32332d3234203d3e203435303632.roa (hash: LQ+6kf0+KQiFoPSEDgpSjTdcAiC5hG5P6ieS38kc784=)
2: 35392e3131312e3131322e302f32312d3234203d3e203435303632.roa (hash: /z0BCN1UvCNwW6reulSuf8caTR7KvRMHo29m5V49/jU=)
3: 35392e3131312e39362e302f32312d3234203d3e203435303632.roa (hash: Z+dNhW7ZTJfYk6Zew4ollhgdQkqLJK02gByVAgIdwOI=)
4: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl (hash: Dn+7v3+/7gVrQmOZKmpvDYJSRpUkbH4LJ1VBaJDVXX8=)
5: 35392e3131312e3131312e302f32342d3234203d3e203435303632.roa (hash: 5m5HLidh05Y0J5RMsFsEpvSNbIp2q2GDH4LOXYlkfrM=)
6: 35392e3131312e3130372e302f32342d3234203d3e203435303632.roa (hash: NDkXGsU9QQzZDBpgiC2IPLbFhyKSxvwu8KgFTYfHr0w=)
7: 35392e3131312e39362e302f31392d3234203d3e203435303632.roa (hash: Pj4OI2gVfEXRCIzzEAM7WxPW7pPOYS8cW1E5AjGFSG0=)
8: 35392e3131312e3130392e302f32342d3234203d3e203435303632.roa (hash: m9/MIJcHOyU7MhMlruNje0CXfeDnOt4kBLehg9tcAxY=)
9: 35392e3131312e38382e302f32312d3234203d3e203435303632.roa (hash: A5CDNJxV9gwL9OvrsHIiTUgNrL8ZROPmAep83jl2HXg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:59:14:d8:2b:75:9d:72:26:92:b6:cb:43:7e:9f:d6:f6:2b:1e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6
Validity
Not Before: Jul 29 05:33:35 2026 GMT
Not After : Jul 30 06:42:35 2026 GMT
Subject: CN=069A231D602A9D3E89A8E7DE466FCB9588DC89E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:5f:6a:7c:95:9c:5d:ae:cf:d9:fd:12:c8:1e:
c6:a1:8f:76:32:a4:ca:73:f2:4e:b7:f4:7e:cf:2b:
79:ca:a3:3b:3b:1d:7a:b0:0e:48:6d:ed:bc:9f:39:
0c:37:b9:90:59:a8:a0:7c:ee:6b:87:d2:c1:a1:35:
33:ee:ac:09:30:9f:12:74:88:a3:44:82:90:95:9f:
9f:94:90:34:14:7c:2d:09:04:09:ca:de:64:fe:f8:
d0:9e:4e:85:bc:af:89:8a:cb:bd:3c:dd:b3:20:51:
b4:1a:39:70:db:8a:06:42:cf:0e:16:b8:ad:21:ea:
03:19:10:3e:e1:6f:75:af:5c:01:86:43:2e:d1:da:
bd:5e:34:e1:41:3b:f5:ec:fa:3f:10:2d:16:f8:50:
02:d8:89:07:16:ed:10:33:85:43:81:32:4d:28:91:
d5:6d:87:47:86:b7:72:61:e3:b3:38:41:4d:61:12:
c5:a5:a1:79:12:78:e3:95:ab:2e:d2:43:fc:eb:d1:
7d:7c:57:3b:6e:82:ac:dc:26:c8:00:44:d1:bd:7b:
bf:20:36:a8:14:06:e4:0f:24:03:a5:7b:19:9a:1b:
89:cb:e5:51:37:fb:45:0c:c1:0a:8f:8a:6e:3d:3e:
5a:e1:4b:04:35:03:9e:a3:70:d6:e2:0a:fe:6f:98:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9A:23:1D:60:2A:9D:3E:89:A8:E7:DE:46:6F:CB:95:88:DC:89:E3
X509v3 Authority Key Identifier:
keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:da:16:8a:64:3e:6d:4b:d4:6b:79:7b:9a:c1:d9:21:33:64:
b4:32:87:e5:cb:e0:0e:70:79:5b:c1:b4:75:dc:07:24:38:fe:
24:6a:c9:4d:4c:f6:95:1c:3e:2c:a6:4f:d8:e8:aa:8f:ba:e0:
2d:c5:6b:bf:6d:eb:de:1e:29:7f:a8:0f:00:15:87:50:43:06:
bf:7e:7b:6d:36:ca:18:e5:72:86:59:bd:79:84:c9:63:7a:2a:
11:af:4d:29:45:d4:47:02:45:3a:26:5d:44:2a:07:f2:f0:da:
25:5b:cb:b6:a7:33:11:59:7f:14:82:42:93:b2:a2:5c:a7:1b:
31:b0:1b:8d:24:de:99:cb:28:92:13:c9:75:8f:4b:b2:fb:b6:
e4:9d:88:b8:d6:9a:11:bb:c0:6b:50:b6:2a:5e:85:52:88:ed:
aa:1d:bf:2b:53:41:f7:60:dc:f3:e4:0d:db:b1:8b:f4:c4:8d:
85:a4:68:00:13:68:93:f8:b4:54:42:e0:01:00:60:a0:7a:8a:
35:7d:62:7f:45:1a:00:eb:1b:3a:e1:bc:ea:4c:93:22:dc:15:
42:69:1a:ac:8f:3d:c8:22:a8:93:d7:11:3b:d4:d2:5d:cc:5f:
ff:a0:e8:62:2f:7b:35:94:9d:3b:2a:e9:2b:79:4b:03:fa:19:
9d:30:41:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:10:17 2026 by rpki-client