$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft File: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft (raw, json) Hash identifier: A4UgsEbI8nMGNgizLOOamLobFEqEzgstoPEs3sz9DQE= Subject key identifier: BC:4F:31:20:12:4C:91:1D:F7:BE:B0:58:D4:80:DE:E5:CD:3C:C3:2A Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 52BE9867C7262ACE1467AA66FB9A6260E182D796 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft Manifest number: 5B Signing time: Sun 14 Jun 2026 02:27:37 +0000 Manifest this update: Sun 14 Jun 2026 02:22:37 +0000 Manifest next update: Mon 15 Jun 2026 06:24:37 +0000 Files and hashes: 1: 35392e3131312e39362e302f32312d3234203d3e203435303632.roa (hash: Z+dNhW7ZTJfYk6Zew4ollhgdQkqLJK02gByVAgIdwOI=) 2: 35392e3131312e3130342e302f32332d3234203d3e203435303632.roa (hash: LQ+6kf0+KQiFoPSEDgpSjTdcAiC5hG5P6ieS38kc784=) 3: 35392e3131312e38382e302f32312d3234203d3e203435303632.roa (hash: A5CDNJxV9gwL9OvrsHIiTUgNrL8ZROPmAep83jl2HXg=) 4: 35392e3131312e3131312e302f32342d3234203d3e203435303632.roa (hash: 5m5HLidh05Y0J5RMsFsEpvSNbIp2q2GDH4LOXYlkfrM=) 5: 35392e3131312e3131322e302f32312d3234203d3e203435303632.roa (hash: /z0BCN1UvCNwW6reulSuf8caTR7KvRMHo29m5V49/jU=) 6: 35392e3131312e39362e302f31392d3234203d3e203435303632.roa (hash: Pj4OI2gVfEXRCIzzEAM7WxPW7pPOYS8cW1E5AjGFSG0=) 7: 35392e3131312e3130392e302f32342d3234203d3e203435303632.roa (hash: m9/MIJcHOyU7MhMlruNje0CXfeDnOt4kBLehg9tcAxY=) 8: 35392e3131312e3130372e302f32342d3234203d3e203435303632.roa (hash: NDkXGsU9QQzZDBpgiC2IPLbFhyKSxvwu8KgFTYfHr0w=) 9: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl (hash: Dyr5wdqQe/kbrM3ouYqByHp+NIETBtYZdpkA6dsdmuA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:be:98:67:c7:26:2a:ce:14:67:aa:66:fb:9a:62:60:e1:82:d7:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: Jun 14 02:22:37 2026 GMT Not After : Jun 15 06:24:37 2026 GMT Subject: CN=BC4F3120124C911DF7BEB058D480DEE5CD3CC32A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6c:53:60:6d:eb:db:c4:df:aa:6b:b1:52:7a: 96:ff:4b:1b:3b:69:c1:46:6c:76:ef:24:37:2f:b6: d2:22:0f:24:da:49:7f:47:d8:00:a5:40:65:cf:24: 92:29:af:eb:bc:3c:09:3f:51:bf:e5:39:17:71:f2: 99:74:69:02:dd:2e:84:ea:d6:09:d9:f7:1c:84:f3: aa:c0:6a:ab:af:c8:dc:87:9e:dc:0b:e4:c7:1d:a6: 40:34:f7:b6:79:64:25:b1:78:51:bc:b9:13:c2:b0: 8a:03:dc:94:86:5d:46:50:de:2f:f4:9e:cc:05:4e: 3e:50:11:19:b0:36:99:10:cb:8b:7b:fb:8e:cc:c1: fd:9f:60:b2:fb:77:89:ce:2f:2c:27:3b:1b:09:d6: 4a:9c:b4:70:f2:c2:f3:7f:6c:61:6d:87:57:36:c9: b8:b2:51:e4:cd:64:16:26:36:33:59:c8:f3:1d:e5: c9:a5:83:3a:03:d3:76:a9:b3:ad:c8:9d:98:cc:ef: 25:22:e3:68:55:53:5f:cd:d4:fe:81:df:64:4a:35: 5c:0a:74:89:df:78:10:96:9a:50:66:3f:cf:2e:1b: 05:de:65:bb:f1:9d:31:0f:82:70:3e:7f:a6:be:59: d2:56:99:f6:b1:1c:be:ce:97:bd:95:35:4b:87:c4: 67:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4F:31:20:12:4C:91:1D:F7:BE:B0:58:D4:80:DE:E5:CD:3C:C3:2A X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d4:26:8a:80:7d:43:e0:f8:e0:76:6d:0b:b2:c1:0b:f2:d3: 99:39:30:a1:62:c6:6d:e2:09:c8:e0:8b:ab:71:a9:2c:66:e1: 21:e4:81:e9:ef:79:c8:4c:6b:e8:43:33:ab:25:25:c6:b8:69: c6:93:5c:e1:3f:78:df:19:2b:90:a9:03:c9:09:5f:d0:ba:0a: d0:20:89:4c:c2:45:47:66:df:11:a0:9d:03:3a:f4:f7:df:89: 1c:bf:2c:0b:12:2c:8b:0a:6a:70:f9:21:ac:15:5d:17:27:f9: 2b:24:fd:46:3c:34:68:35:b1:d3:73:43:d7:51:5c:6f:0c:7c: cc:34:a4:5e:95:fa:d1:af:f3:5b:01:08:c6:4c:2c:8a:47:e0: 7d:49:70:7f:dc:19:e7:50:b9:88:66:77:6b:51:d2:a6:ad:98: 8e:bf:fa:37:40:60:6a:03:a7:de:7d:91:e3:5a:a0:a9:b4:c7: da:b2:80:71:c3:b1:78:03:d0:79:4e:7a:e0:2f:4f:0e:9a:23: 63:09:b7:ad:68:33:3d:87:9e:d4:d1:95:a6:ab:ba:0c:72:18: b5:60:d3:8d:9e:87:d9:a0:3a:95:17:48:b9:a4:d0:41:15:cc: 8f:97:99:fc:17:b3:a3:24:b1:e7:70:35:46:51:14:14:47:6a: 86:ae:ee:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUr6YZ8cmKs4UZ6pm+5piYOGC15YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjA2MTQwMjIyMzdaFw0yNjA2MTUwNjI0MzdaMDMxMTAvBgNV BAMTKEJDNEYzMTIwMTI0QzkxMURGN0JFQjA1OEQ0ODBERUU1Q0QzQ0MzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbFNgbevbxN+qa7FSepb/Sxs7 acFGbHbvJDcvttIiDyTaSX9H2AClQGXPJJIpr+u8PAk/Ub/lORdx8pl0aQLdLoTq 1gnZ9xyE86rAaquvyNyHntwL5McdpkA097Z5ZCWxeFG8uRPCsIoD3JSGXUZQ3i/0 nswFTj5QERmwNpkQy4t7+47Mwf2fYLL7d4nOLywnOxsJ1kqctHDywvN/bGFth1c2 ybiyUeTNZBYmNjNZyPMd5cmlgzoD03aps63InZjM7yUi42hVU1/N1P6B32RKNVwK dInfeBCWmlBmP88uGwXeZbvxnTEPgnA+f6a+WdJWmfaxHL7Ol72VNUuHxGfJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvE8xIBJMkR33vrBY1IDe5c08wyowHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzI4MzQwOTU3MTAyMTEvMC82NUQ5ODdGQjlFOENF MThDNUI1RkY3ODYzMDhDNDkwRUE4MTFBRUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNQmioB9Q+D4 4HZtC7LBC/LTmTkwoWLGbeIJyOCLq3GpLGbhIeSB6e95yExr6EMzqyUlxrhpxpNc 4T943xkrkKkDyQlf0LoK0CCJTMJFR2bfEaCdAzr099+JHL8sCxIsiwpqcPkhrBVd Fyf5KyT9Rjw0aDWx03ND11Fcbwx8zDSkXpX60a/zWwEIxkwsikfgfUlwf9wZ51C5 iGZ3a1HSpq2Yjr/6N0BgagOn3n2R41qgqbTH2rKAccOxeAPQeU564C9PDpojYwm3 rWgzPYee1NGVpqu6DHIYtWDTjZ6H2aA6lRdIuaTQQRXMj5eZ/BezoySx53A1RlEU FEdqhq7uCQ== -----END CERTIFICATE-----Generated at Sun Jun 14 06:17:04 2026 by rpki-client