$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft File: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft (raw, json) Hash identifier: khyYZdy6cby03YRdesC8ot/SJjQahx1izpNah1sH3X8= Subject key identifier: BC:CA:32:AA:2D:F0:B0:91:D3:DB:4B:EE:13:20:88:BB:C0:2D:01:EE Authority key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B Certificate issuer: /CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Certificate serial: 01ECD4970B75457E261463B1759F421F18A42172 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft Manifest number: 4B Signing time: Sat 13 Jun 2026 19:12:08 +0000 Manifest this update: Sat 13 Jun 2026 19:07:08 +0000 Manifest next update: Sun 14 Jun 2026 22:45:08 +0000 Files and hashes: 1: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl (hash: PsoHN93wJw/Zfzvqix93+AXbAEnzylPMRj8I84DXZW0=) 2: 3130332e32352e36342e302f32332d3233203d3e2034383132.roa (hash: Nq6gNiMaaKFWixnw61ZZIDSmy1W/Glh2AAvq8ITBxjk=) 3: 3130332e32352e36362e302f32332d3233203d3e2030.roa (hash: JMo6LH7KCuXdAXtrDjOm3O2HDvLmSMhk1dhzSjfl0Z4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ec:d4:97:0b:75:45:7e:26:14:63:b1:75:9f:42:1f:18:a4:21:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B Validity Not Before: Jun 13 19:07:08 2026 GMT Not After : Jun 14 22:45:08 2026 GMT Subject: CN=BCCA32AA2DF0B091D3DB4BEE132088BBC02D01EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:3a:ea:5b:43:4a:eb:bc:5b:3e:ea:45:8d: 9f:bc:4b:73:09:93:37:f7:11:f3:52:cc:d0:47:7d: e7:42:68:0a:e3:40:eb:16:a1:f1:4d:bd:ca:a3:61: b6:df:a2:25:28:e8:96:dc:0c:47:f0:42:64:11:1f: 2a:ab:89:9f:9d:b4:b5:b4:c9:4d:d5:ae:2c:f7:77: 37:6a:5c:2d:8e:63:8d:ba:81:fc:d5:c2:91:0d:e4: 7b:6a:9f:f4:92:9c:19:36:09:91:39:5b:1c:2d:f8: f2:40:c0:96:0c:53:b4:5c:6b:1d:a6:97:c3:10:92: 09:cb:69:ea:24:d1:06:1c:df:9d:03:bf:5f:02:de: 2c:0a:d8:c0:ae:7a:e3:ea:fe:f8:5c:4f:3c:e7:a2: 9e:60:9a:9f:ea:b8:93:cb:dc:f6:2d:94:14:f8:49: 1d:2f:82:15:4c:4e:a1:84:c7:68:d4:86:4f:27:1b: 10:c5:4f:8a:a6:f6:2f:6d:4b:09:f0:1a:6b:e2:c6: 90:58:a1:32:32:fb:31:3f:c2:69:c8:c0:d1:83:0d: 86:62:d1:92:49:13:4b:51:d8:e1:f9:81:60:5b:84: 07:07:34:82:cc:82:32:66:7a:d1:53:56:29:d4:9e: b7:a6:47:d8:11:77:2e:80:c7:56:8c:95:48:c9:59: 84:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CA:32:AA:2D:F0:B0:91:D3:DB:4B:EE:13:20:88:BB:C0:2D:01:EE X509v3 Authority Key Identifier: keyid:65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:bc:22:bc:3d:0e:1b:1b:26:b5:7d:94:63:e6:be:37:f8:4d: 8a:5f:18:01:af:f3:6c:fd:30:14:3a:09:16:54:17:b4:9d:e2: 29:9f:f0:e3:39:d2:03:d9:28:fd:7b:87:e7:25:fd:bf:6a:e4: 23:6b:0b:ee:42:70:0b:21:63:d5:35:57:b8:a2:ef:f8:cd:e0: f0:86:18:26:0d:a7:17:d6:c5:1b:dc:23:5b:60:6c:c3:11:b2: 7b:03:d8:b4:c3:5f:4e:22:5c:66:4a:63:ae:fc:54:77:bb:da: 57:cc:83:e5:09:a9:4d:aa:a3:62:89:fe:32:8c:62:67:08:20: f7:a2:af:71:7c:3b:da:ac:30:a3:0f:48:22:99:82:62:94:12: d1:2c:56:48:88:42:4c:e5:52:45:82:02:62:fe:13:10:de:92: 08:8c:aa:55:3a:aa:b6:eb:ed:79:81:19:d3:6c:40:ea:94:87: 10:c2:0d:0f:27:c5:ff:2b:e2:f8:08:a0:9c:d6:d5:22:b9:64: 97:6b:4b:a9:27:12:b7:a6:c3:64:a5:b2:bf:3b:25:ae:54:e4: 69:82:a2:eb:c2:80:38:06:25:67:b3:49:1f:ce:ec:c7:29:cd: 17:e9:57:03:45:f0:61:34:e0:f8:62:00:71:74:3e:6b:44:ca: 63:13:91:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAezUlwt1RX4mFGOxdZ9CHxikIXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUw NTFFMDE4QjAeFw0yNjA2MTMxOTA3MDhaFw0yNjA2MTQyMjQ1MDhaMDMxMTAvBgNV BAMTKEJDQ0EzMkFBMkRGMEIwOTFEM0RCNEJFRTEzMjA4OEJCQzAyRDAxRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnDzrqW0NK67xbPupFjZ+8S3MJ kzf3EfNSzNBHfedCaArjQOsWofFNvcqjYbbfoiUo6JbcDEfwQmQRHyqriZ+dtLW0 yU3Vriz3dzdqXC2OY426gfzVwpEN5Htqn/SSnBk2CZE5Wxwt+PJAwJYMU7Rcax2m l8MQkgnLaeok0QYc350Dv18C3iwK2MCueuPq/vhcTzznop5gmp/quJPL3PYtlBT4 SR0vghVMTqGEx2jUhk8nGxDFT4qm9i9tSwnwGmvixpBYoTIy+zE/wmnIwNGDDYZi 0ZJJE0tR2OH5gWBbhAcHNILMgjJmetFTVinUnremR9gRdy6Ax1aMlUjJWYQBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvMoyqi3wsJHT20vuEyCIu8AtAe4wHwYDVR0j BBgwFoAUZTObemt5iKpu9A74ZNWL/gUeAYswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5MTUyNzMzMDYxMTIwMi8wLzY1MzM5QjdBNkI3OTg4QUE2RUY0MEVGODY0RDU4 QkZFMDUxRTAxOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjUzMzlCN0E2Qjc5ODhBQTZFRjQwRUY4NjRENThCRkUwNTFFMDE4Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTE1MjczMzA2MTEyMDIvMC82NTMzOUI3QTZCNzk4 OEFBNkVGNDBFRjg2NEQ1OEJGRTA1MUUwMThCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7wivD0OGxsm tX2UY+a+N/hNil8YAa/zbP0wFDoJFlQXtJ3iKZ/w4znSA9ko/XuH5yX9v2rkI2sL 7kJwCyFj1TVXuKLv+M3g8IYYJg2nF9bFG9wjW2BswxGyewPYtMNfTiJcZkpjrvxU d7vaV8yD5QmpTaqjYon+MoxiZwgg96KvcXw72qwwow9IIpmCYpQS0SxWSIhCTOVS RYICYv4TEN6SCIyqVTqqtuvteYEZ02xA6pSHEMINDyfF/yvi+AignNbVIrlkl2tL qScSt6bDZKWyvzslrlTkaYKi68KAOAYlZ7NJH87sxynNF+lXA0XwYTTg+GIAcXQ+ a0TKYxOR9w== -----END CERTIFICATE-----Generated at Sun Jun 14 02:25:45 2026 by rpki-client