$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft File: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft (raw, json) Hash identifier: uw/ClXq8Gmnc0MWMBUhZo/3QG50YuXcGpNdPSn8rObE= Subject key identifier: 5E:4C:EE:E6:83:A2:0C:BC:C0:AD:7E:48:9D:61:2D:77:5F:FF:6D:2F Authority key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B Certificate issuer: /CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Certificate serial: 6488AE4FAC8DB2C5C9015C5EFE095389A455F7E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft Manifest number: 88 Signing time: Wed 29 Jul 2026 20:15:09 +0000 Manifest this update: Wed 29 Jul 2026 20:10:09 +0000 Manifest next update: Thu 30 Jul 2026 23:54:09 +0000 Files and hashes: 1: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl (hash: pDZ3ZDrJ+Y5chbzC669JY52OB+Ycl3uwjm4fPsrnBqw=) 2: 3130332e32352e36362e302f32332d3233203d3e2030.roa (hash: JMo6LH7KCuXdAXtrDjOm3O2HDvLmSMhk1dhzSjfl0Z4=) 3: 3130332e32352e36342e302f32332d3233203d3e2034383132.roa (hash: Nq6gNiMaaKFWixnw61ZZIDSmy1W/Glh2AAvq8ITBxjk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:88:ae:4f:ac:8d:b2:c5:c9:01:5c:5e:fe:09:53:89:a4:55:f7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Validity Not Before: Jul 29 20:10:09 2026 GMT Not After : Jul 30 23:54:09 2026 GMT Subject: CN=5E4CEEE683A20CBCC0AD7E489D612D775FFF6D2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:51:d1:c9:7b:7f:26:20:ff:83:16:29:2e: c8:32:42:e4:a9:81:4d:16:a1:65:95:b8:74:99:22: 7a:e1:81:06:bf:11:ac:b3:1f:df:90:dc:6b:e9:29: b6:1b:48:82:fe:1d:29:3e:67:1e:04:c1:9d:58:ce: 5e:b6:49:3c:6d:a7:28:37:bb:c2:e3:d3:d2:32:a0: ce:f6:93:52:bf:3c:4d:37:72:2d:0c:94:7f:95:34: 63:c2:d3:be:9a:f5:58:c4:fa:d9:1c:98:65:87:73: 01:05:11:59:ef:f5:bb:26:2c:a8:77:58:de:82:46: 99:0f:30:ee:43:a1:71:26:5b:15:e4:02:35:d5:7c: 4c:ee:fa:22:d2:70:5b:c7:35:11:1a:f8:6c:70:31: 22:fa:44:cb:bd:6e:f1:33:a0:c0:64:87:2b:2e:1a: d3:14:30:b3:a3:c7:d6:4a:72:30:1e:fa:27:33:06: 01:e4:cc:73:07:dd:5f:14:29:5f:4b:ab:b5:32:a9: 96:c4:13:2d:43:56:0b:3d:47:47:0a:06:80:b8:8f: 17:92:2c:93:5a:67:d5:a7:7d:74:ad:a2:6b:cc:b2: 30:ea:32:90:0d:1a:b0:42:bb:71:3c:a7:10:43:a4: cc:87:1e:da:11:af:10:ef:07:7f:f6:ae:81:a5:72: 51:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:4C:EE:E6:83:A2:0C:BC:C0:AD:7E:48:9D:61:2D:77:5F:FF:6D:2F X509v3 Authority Key Identifier: keyid:65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:7d:fa:5b:9a:a4:09:b7:bd:81:56:5b:36:9a:e2:26:6e:0a: 7d:ab:02:3d:e9:ce:fb:a3:91:26:1e:ba:dc:a1:6e:8b:d0:2c: 5b:91:93:03:c2:5d:22:26:8f:61:84:30:c3:bb:38:62:41:69: ed:aa:f5:d0:35:4f:05:bb:77:dc:51:7d:c9:da:ab:bd:cb:86: 65:28:d3:36:1d:1b:f6:ec:1a:f1:29:51:6a:9b:d2:86:e3:f8: 13:3b:30:7b:9a:3a:49:73:a9:ac:1d:52:8b:1e:ec:83:b8:c6: 08:12:d1:8e:d1:96:3c:91:3e:c4:50:97:f7:50:f9:38:16:96: d0:6a:0a:8c:c8:08:f9:fe:e6:b2:3b:84:c9:e6:73:5d:98:3d: 45:44:8b:40:78:5a:10:65:cd:d0:05:85:d4:47:ea:8a:53:32: bb:fd:dd:6a:49:83:f1:dc:fd:99:e0:5b:78:8c:8f:fa:00:a1: c0:2d:ca:f1:e4:7e:2a:9b:1a:ed:4a:ed:a4:fd:de:d3:89:ea: 3e:75:06:79:41:74:03:b6:7e:1d:25:52:67:67:0a:4a:2f:38: 03:65:8d:0e:9a:0a:97:0d:05:b4:88:8e:a7:ed:03:53:f5:f6: 07:2a:3a:46:3a:00:46:59:79:3f:af:fe:ec:2e:0b:d7:3b:9f: ca:e1:66:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZIiuT6yNssXJAVxe/glTiaRV9+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUw NTFFMDE4QjAeFw0yNjA3MjkyMDEwMDlaFw0yNjA3MzAyMzU0MDlaMDMxMTAvBgNV BAMTKDVFNENFRUU2ODNBMjBDQkNDMEFEN0U0ODlENjEyRDc3NUZGRjZEMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFnlHRyXt/JiD/gxYpLsgyQuSp gU0WoWWVuHSZInrhgQa/EayzH9+Q3GvpKbYbSIL+HSk+Zx4EwZ1Yzl62STxtpyg3 u8Lj09IyoM72k1K/PE03ci0MlH+VNGPC076a9VjE+tkcmGWHcwEFEVnv9bsmLKh3 WN6CRpkPMO5DoXEmWxXkAjXVfEzu+iLScFvHNREa+GxwMSL6RMu9bvEzoMBkhysu GtMUMLOjx9ZKcjAe+iczBgHkzHMH3V8UKV9Lq7UyqZbEEy1DVgs9R0cKBoC4jxeS LJNaZ9WnfXStomvMsjDqMpANGrBCu3E8pxBDpMyHHtoRrxDvB3/2roGlclH9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXkzu5oOiDLzArX5InWEtd1//bS8wHwYDVR0j BBgwFoAUZTObemt5iKpu9A74ZNWL/gUeAYswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5MTUyNzMzMDYxMTIwMi8wLzY1MzM5QjdBNkI3OTg4QUE2RUY0MEVGODY0RDU4 QkZFMDUxRTAxOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUwNTFFMDE4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTE1MjczMzA2MTEyMDIvMC82NTMzOUI3QTZCNzk4 OEFBNkVGNDBFRjg2NEQ1OEJGRTA1MUUwMThCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmX36W5qkCbe9 gVZbNpriJm4KfasCPenO+6ORJh663KFui9AsW5GTA8JdIiaPYYQww7s4YkFp7ar1 0DVPBbt33FF9ydqrvcuGZSjTNh0b9uwa8SlRapvShuP4Ezswe5o6SXOprB1Six7s g7jGCBLRjtGWPJE+xFCX91D5OBaW0GoKjMgI+f7msjuEyeZzXZg9RUSLQHhaEGXN 0AWF1EfqilMyu/3dakmD8dz9meBbeIyP+gChwC3K8eR+Kpsa7UrtpP3e04nqPnUG eUF0A7Z+HSVSZ2cKSi84A2WNDpoKlw0FtIiOp+0DU/X2Byo6RjoARll5P6/+7C4L 1zufyuFmZQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:13:37 2026 by rpki-client