$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft File: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft (raw, json) Hash identifier: TdDM19eu8bR7GX6DADdCnDHqfiFvyg9l9g/4KaUrBSU= Subject key identifier: 20:1D:0B:A0:14:28:E9:A1:AE:54:38:88:5A:00:A8:15:5F:95:19:5A Authority key identifier: 65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 Certificate issuer: /CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Certificate serial: 2E3FA2690C5B5C2C6AC8D5E516AD0F3ADEC9FB2F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft Manifest number: 0E Signing time: Sun 19 Apr 2026 05:39:58 +0000 Manifest this update: Sun 19 Apr 2026 05:34:58 +0000 Manifest next update: Mon 20 Apr 2026 08:39:58 +0000 Files and hashes: 1: 35392e3131312e38382e302f32312d3234203d3e203435303632.roa (hash: A5CDNJxV9gwL9OvrsHIiTUgNrL8ZROPmAep83jl2HXg=) 2: 65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl (hash: N/RBYbQSsLJtYyNnMeAxNbw962DrukZo+wKS7suAYRw=) 3: 35392e3131312e39362e302f31392d3234203d3e203435303632.roa (hash: Pj4OI2gVfEXRCIzzEAM7WxPW7pPOYS8cW1E5AjGFSG0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3f:a2:69:0c:5b:5c:2c:6a:c8:d5:e5:16:ad:0f:3a:de:c9:fb:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65D987FB9E8CE18C5B5FF786308C490EA811AEE6 Validity Not Before: Apr 19 05:34:58 2026 GMT Not After : Apr 20 08:39:58 2026 GMT Subject: CN=201D0BA01428E9A1AE5438885A00A8155F95195A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dc:b8:59:c4:16:79:a2:9e:2c:5e:b7:62:1e: 2f:fa:ee:3c:47:cd:9b:00:13:f0:94:63:db:8d:1a: 5e:2a:be:9d:75:8e:cf:50:7b:49:54:65:9b:c7:4d: 91:e0:9d:56:ef:8f:8b:d5:33:f2:b7:ee:04:e0:69: 07:de:39:07:8f:41:1e:ee:b5:36:50:b1:dc:40:14: db:40:3b:c2:7e:94:38:33:8a:ab:da:9e:da:da:dc: ec:96:e2:14:cc:71:c5:7b:13:36:3e:82:4c:be:ed: 6e:87:8d:5a:3b:ac:d3:a8:a0:bc:5c:4f:dd:86:63: 08:59:8f:49:6f:01:f0:30:15:9e:ab:26:08:72:11: 33:f5:06:1a:87:44:1f:4c:1c:35:9c:54:cc:31:1f: b5:65:f8:d9:29:0b:bf:e8:df:74:b8:85:3c:a7:aa: b1:13:04:23:37:5f:56:ef:b2:29:13:71:a9:ff:54: 87:81:12:bd:a0:42:81:f6:ed:e1:be:4d:05:fb:ec: 99:40:34:71:4e:fd:c6:26:c0:15:94:9e:f7:eb:fc: 86:68:89:3e:23:86:39:87:1b:ff:47:34:b7:80:62: 52:cb:d4:0a:db:c8:be:83:ed:ee:8c:d4:ec:c3:07: a0:bc:41:ea:ee:b4:a8:83:2c:c5:9c:71:a7:de:28: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1D:0B:A0:14:28:E9:A1:AE:54:38:88:5A:00:A8:15:5F:95:19:5A X509v3 Authority Key Identifier: keyid:65:D9:87:FB:9E:8C:E1:8C:5B:5F:F7:86:30:8C:49:0E:A8:11:AE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094872834095710211/0/65D987FB9E8CE18C5B5FF786308C490EA811AEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cf:05:ef:c8:49:27:b3:5d:68:94:eb:b4:3f:ab:01:b6:16: a1:5b:24:1d:20:0f:a5:e2:8f:12:ba:a9:a4:69:49:0f:3a:e3: f3:ba:37:89:8b:58:22:e0:b9:07:0f:60:69:ae:6e:e7:a7:fa: f1:cc:03:e5:0d:d9:bb:4d:ec:b5:fd:e3:83:23:b3:bf:f6:c8: 04:3f:3b:72:45:3a:46:9e:d1:00:30:1a:53:d3:e5:25:1e:67: 58:13:a3:74:96:47:61:bd:2a:35:1a:4e:45:7a:b4:7b:22:94: 7f:b5:61:b0:ae:90:71:62:0e:71:a4:ad:ff:c3:a6:4a:d4:7c: e1:16:5f:87:03:04:dd:6f:3e:3a:85:a1:17:50:dc:e9:df:c1: c0:f2:8d:c2:6f:04:33:a5:be:43:5f:11:8f:d8:47:7a:7b:10: a1:bc:5c:77:b3:bd:c2:51:31:47:e1:98:1e:e3:d0:49:2e:41: 2c:fb:4f:a5:e1:8d:6a:87:ea:db:a0:18:ec:b7:7b:d5:e3:50: fc:0c:06:2a:49:25:7e:03:4e:59:4b:3b:36:df:1f:c7:45:8d: 8a:54:81:2d:eb:86:07:4e:2a:61:1f:8e:70:3b:3a:2d:b1:c5: 83:2a:c4:8b:64:43:9b:a5:af:44:6b:5c:85:a4:25:92:85:48: 47:39:5e:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULj+iaQxbXCxqyNXlFq0POt7J+y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVB ODExQUVFNjAeFw0yNjA0MTkwNTM0NThaFw0yNjA0MjAwODM5NThaMDMxMTAvBgNV BAMTKDIwMUQwQkEwMTQyOEU5QTFBRTU0Mzg4ODVBMDBBODE1NUY5NTE5NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT3LhZxBZ5op4sXrdiHi/67jxH zZsAE/CUY9uNGl4qvp11js9Qe0lUZZvHTZHgnVbvj4vVM/K37gTgaQfeOQePQR7u tTZQsdxAFNtAO8J+lDgziqvantra3OyW4hTMccV7EzY+gky+7W6HjVo7rNOooLxc T92GYwhZj0lvAfAwFZ6rJghyETP1BhqHRB9MHDWcVMwxH7Vl+NkpC7/o33S4hTyn qrETBCM3X1bvsikTcan/VIeBEr2gQoH27eG+TQX77JlANHFO/cYmwBWUnvfr/IZo iT4jhjmHG/9HNLeAYlLL1ArbyL6D7e6M1OzDB6C8QerutKiDLMWccafeKNThAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIB0LoBQo6aGuVDiIWgCoFV+VGVowHwYDVR0j BBgwFoAUZdmH+56M4YxbX/eGMIxJDqgRruYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3MjgzNDA5NTcxMDIxMS8wLzY1RDk4N0ZCOUU4Q0UxOEM1QjVGRjc4NjMwOEM0 OTBFQTgxMUFFRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjVEOTg3RkI5RThDRTE4QzVCNUZGNzg2MzA4QzQ5MEVBODExQUVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4NzI4MzQwOTU3MTAyMTEvMC82NUQ5ODdGQjlFOENF MThDNUI1RkY3ODYzMDhDNDkwRUE4MTFBRUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAms8F78hJJ7Nd aJTrtD+rAbYWoVskHSAPpeKPErqppGlJDzrj87o3iYtYIuC5Bw9gaa5u56f68cwD 5Q3Zu03stf3jgyOzv/bIBD87ckU6Rp7RADAaU9PlJR5nWBOjdJZHYb0qNRpORXq0 eyKUf7VhsK6QcWIOcaSt/8OmStR84RZfhwME3W8+OoWhF1Dc6d/BwPKNwm8EM6W+ Q18Rj9hHensQobxcd7O9wlExR+GYHuPQSS5BLPtPpeGNaofq26AY7Ld71eNQ/AwG KkklfgNOWUs7Nt8fx0WNilSBLeuGB04qYR+OcDs6LbHFgyrEi2RDm6WvRGtchaQl koVIRzleeA== -----END CERTIFICATE-----Generated at Sun Apr 19 09:04:48 2026 by rpki-client