$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft File: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft (raw, json) Hash identifier: z+dxBVEXPzuzr2+Ut/g22UPtr4k+9QBLHCRbQqXvh+4= Subject key identifier: 4F:F5:B3:62:A6:D3:26:7A:4E:87:3E:84:D1:50:B4:6C:E4:54:7E:D4 Authority key identifier: B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D Certificate issuer: /CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Certificate serial: 19D84529D32E433D5D48B74677B0BAB909F24029 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft Manifest number: 0D Signing time: Fri 12 Jun 2026 19:35:40 +0000 Manifest this update: Fri 12 Jun 2026 19:30:40 +0000 Manifest next update: Sat 13 Jun 2026 21:29:40 +0000 Files and hashes: 1: 3130332e31342e3133342e302f32332d3233203d3e20313430373236.roa (hash: PohPnTPBADShmZdUjAc+ol5RV4sbT3451odzVbu+B7Y=) 2: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl (hash: xVojP+SzqLI64JRcyj1iVrhVkGLjcsvAyoBlW3dKRZ0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 21:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d8:45:29:d3:2e:43:3d:5d:48:b7:46:77:b0:ba:b9:09:f2:40:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D Validity Not Before: Jun 12 19:30:40 2026 GMT Not After : Jun 13 21:29:40 2026 GMT Subject: CN=4FF5B362A6D3267A4E873E84D150B46CE4547ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:68:36:68:a0:68:ab:b0:32:5f:81:1d:20: db:dd:1a:f8:1c:a3:73:1b:c6:12:ec:e5:d5:6f:b2: d3:03:b6:06:49:1f:08:91:cf:e8:0b:69:e8:fb:ee: 9a:f1:de:f1:14:69:d6:60:2b:48:c4:e1:6c:1a:21: 53:94:8b:1c:36:ad:d1:71:90:74:0b:6d:42:3a:60: cd:08:76:2a:d0:c6:83:ce:5c:3b:85:50:55:0d:70: bb:4e:2a:96:3e:80:35:1e:f1:0b:ff:97:92:6b:f4: 4e:3d:7a:11:ad:2b:92:3a:23:95:55:d5:1e:2c:1a: 2d:53:c1:6c:ae:f5:2b:30:a4:5b:95:1e:6a:09:bb: 20:cc:f7:27:52:57:4b:75:24:73:8a:4a:b7:6f:a2: 2f:45:48:47:68:fe:33:53:93:df:f0:f9:2f:af:55: 85:a2:b9:31:33:d0:05:fa:c7:9c:cc:1f:0e:9f:88: 50:0a:65:10:61:48:60:da:c4:b9:1b:a9:c1:23:e2: 51:78:7b:09:6f:79:4f:d2:bf:54:1b:8c:ef:9e:16: 41:b2:ce:dc:19:cf:6f:0f:ac:14:f2:39:bb:0b:31: 2f:dd:5b:0e:5d:db:ae:01:ca:f7:90:59:c4:d8:ea: f3:24:57:a2:78:e7:6a:26:9c:57:a2:b7:be:73:82: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F5:B3:62:A6:D3:26:7A:4E:87:3E:84:D1:50:B4:6C:E4:54:7E:D4 X509v3 Authority Key Identifier: keyid:B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f0:8f:24:8c:e2:56:d1:a4:90:31:76:c8:76:b7:3d:78:2f: e3:6d:a7:c3:88:b7:3d:29:ff:2d:2d:df:73:83:9e:d3:21:0c: 6e:94:ce:e1:17:57:e2:de:4a:5e:d6:ea:e0:98:e9:c9:cb:9d: 89:db:3c:3f:9f:d2:d6:e7:04:a1:34:ce:30:95:fc:bb:33:d5: 2f:27:19:4c:3d:9a:2f:d5:97:97:41:d2:d5:7b:0a:be:ca:92: 90:5e:a2:6c:15:2b:22:cf:cc:95:9a:55:6b:0b:6b:ae:6a:66: 6b:7a:3b:6c:6d:f6:1f:1f:4c:ae:7a:41:b1:d2:8f:8c:bd:b3: 14:81:eb:31:43:5e:e4:e0:8c:6f:18:6d:3a:9c:00:58:09:08: 7a:5a:7e:e4:c7:54:e7:46:d3:8c:f6:24:9e:a1:6f:62:5e:ad: c7:0e:e1:50:48:91:f4:56:ad:63:9d:ff:15:a0:b8:86:d2:d4: ee:6f:e0:bb:9c:e7:3f:89:d8:03:ee:d0:19:86:f3:9a:5a:49: 65:64:86:bd:5f:4c:fa:d2:0e:14:66:b3:31:6c:66:43:f1:a4: ba:96:d4:73:17:d2:7a:ed:7e:d7:6e:f7:ff:21:28:6e:02:5c: 78:b4:ca:3b:52:f9:98:b8:01:99:35:54:d8:62:18:36:d8:5b: e0:13:72:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGdhFKdMuQz1dSLdGd7C6uQnyQCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdG MDYzRkQ2RDAeFw0yNjA2MTIxOTMwNDBaFw0yNjA2MTMyMTI5NDBaMDMxMTAvBgNV BAMTKDRGRjVCMzYyQTZEMzI2N0E0RTg3M0U4NEQxNTBCNDZDRTQ1NDdFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsS2g2aKBoq7AyX4EdINvdGvgc o3MbxhLs5dVvstMDtgZJHwiRz+gLaej77prx3vEUadZgK0jE4WwaIVOUixw2rdFx kHQLbUI6YM0IdirQxoPOXDuFUFUNcLtOKpY+gDUe8Qv/l5Jr9E49ehGtK5I6I5VV 1R4sGi1TwWyu9SswpFuVHmoJuyDM9ydSV0t1JHOKSrdvoi9FSEdo/jNTk9/w+S+v VYWiuTEz0AX6x5zMHw6fiFAKZRBhSGDaxLkbqcEj4lF4ewlveU/Sv1QbjO+eFkGy ztwZz28PrBTyObsLMS/dWw5d264ByveQWcTY6vMkV6J452omnFeit75zgnVxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUT/WzYqbTJnpOhz6E0VC0bORUftQwHwYDVR0j BBgwFoAUtl95L4T6HpANpNLaSdzFN/Bj/W0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDk0OTc1ODA1ODc1ODE2OS8wL0I2NUY3OTJGODRGQTFFOTAwREE0RDJEQTQ5REND NTM3RjA2M0ZENkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY1Rjc5MkY4NEZBMUU5MDBEQTREMkRBNDlEQ0M1MzdGMDYzRkQ2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ5NDk3NTgwNTg3NTgxNjkvMC9CNjVGNzkyRjg0RkEx RTkwMERBNEQyREE0OURDQzUzN0YwNjNGRDZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPCPJIziVtGk kDF2yHa3PXgv422nw4i3PSn/LS3fc4Oe0yEMbpTO4RdX4t5KXtbq4Jjpycudids8 P5/S1ucEoTTOMJX8uzPVLycZTD2aL9WXl0HS1XsKvsqSkF6ibBUrIs/MlZpVawtr rmpma3o7bG32Hx9MrnpBsdKPjL2zFIHrMUNe5OCMbxhtOpwAWAkIelp+5MdU50bT jPYknqFvYl6txw7hUEiR9FatY53/FaC4htLU7m/gu5znP4nYA+7QGYbzmlpJZWSG vV9M+tIOFGazMWxmQ/GkupbUcxfSeu1+1273/yEobgJceLTKO1L5mLgBmTVU2GIY Nthb4BNyUA== -----END CERTIFICATE-----Generated at Sat Jun 13 14:05:52 2026 by rpki-client