$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft File: C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft (raw, json) Hash identifier: BQN0J4Ef1E8WoBLoewWv+2nCM/u0QwX8+CVoMCkwD8g= Subject key identifier: C9:98:CF:5C:03:C8:29:DE:14:B9:88:00:B1:48:B2:D4:CB:1D:0B:09 Authority key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 Certificate issuer: /CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Certificate serial: 7BB6644F625EF29F4B3C049686567FF7B93A6CCA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft Manifest number: 84 Signing time: Mon 27 Apr 2026 09:53:46 +0000 Manifest this update: Mon 27 Apr 2026 09:48:46 +0000 Manifest next update: Tue 28 Apr 2026 13:31:46 +0000 Files and hashes: 1: 3130332e3138362e342e302f32332d3233203d3e2034383337.roa (hash: g16mnH71Qj1bPuqlcVtQzrjwxCLSRBcOfDTFIIRHIWM=) 2: 3130332e3138362e342e302f32332d3233203d3e20313436373639.roa (hash: KnnUSl5FdwvWqZ4/LTb7QCPFknrMDu6wSlVCKOn0qY0=) 3: C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl (hash: +SCGS38b0NMq7AgQDBXht9IGgz/DfpQ/Ybnup21XUKw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b6:64:4f:62:5e:f2:9f:4b:3c:04:96:86:56:7f:f7:b9:3a:6c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Validity Not Before: Apr 27 09:48:46 2026 GMT Not After : Apr 28 13:31:46 2026 GMT Subject: CN=C998CF5C03C829DE14B98800B148B2D4CB1D0B09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:51:1c:11:f4:b7:f7:ca:67:11:bf:4d:88:2f: 87:dd:4b:ee:82:f8:55:02:ce:34:d2:0c:36:d8:77: de:8d:26:53:e3:ff:fe:9a:4b:72:24:c2:1c:fd:d5: ea:37:cc:af:7a:6a:25:47:f7:eb:b5:e0:96:bc:44: 37:4e:de:e5:3f:3c:e2:37:1e:5a:cf:54:1f:5e:dc: 59:34:a4:f2:59:2c:46:30:72:8e:7c:f7:49:07:15: 01:8c:26:7a:b3:02:f3:be:51:69:c6:54:69:59:9c: c9:01:e5:e2:45:8a:88:ab:e5:89:45:70:d5:9a:d3: cf:da:3c:d7:2d:55:98:43:bb:17:05:3c:ee:f9:d8: c1:60:ed:68:0c:40:ae:48:68:e2:4e:88:d4:f0:f3: 01:6b:ba:bf:f6:ee:a2:3b:8d:c9:66:53:14:d3:d9: e1:0a:e3:92:15:c9:b7:81:36:ea:97:bc:58:ca:f6: dd:13:ae:d5:30:0b:46:84:ac:df:38:bf:77:3d:b3: 1a:36:ce:79:46:ac:a6:3c:95:e2:d2:dc:b6:74:95: 0f:88:ab:19:85:2c:56:35:7d:99:14:8a:f8:a6:a8: 2a:56:a3:3d:28:b8:d4:26:18:a3:0a:a5:ba:6c:6a: a3:1e:d2:62:fb:a1:79:46:89:29:27:7a:e0:6a:a7: be:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:98:CF:5C:03:C8:29:DE:14:B9:88:00:B1:48:B2:D4:CB:1D:0B:09 X509v3 Authority Key Identifier: keyid:C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:1e:46:8d:5e:1d:38:99:31:7a:8b:16:45:16:41:00:25:06: 2f:f5:6d:64:36:39:1a:1a:21:90:be:18:e8:e2:39:2c:03:78: 21:13:84:6e:68:e0:99:4a:a2:34:9a:83:e7:0c:c8:aa:69:9e: 94:ea:04:2b:2d:0f:23:97:7a:38:7d:68:ce:88:39:83:0c:d6: 13:20:26:cd:98:87:ae:0f:c9:28:76:78:9d:7d:7b:c9:9e:f2: 96:6f:00:9d:56:e2:f4:59:f7:5e:1f:44:e6:f1:88:43:af:7b: 79:6d:cb:65:78:dc:41:49:05:5d:9a:64:45:a0:26:aa:c3:76: 40:f0:32:88:09:e6:35:c7:23:59:e3:74:f2:0d:40:08:65:a6: a9:0d:4b:28:2c:33:13:35:e5:8e:d4:ee:9a:e5:72:09:71:55: f5:c5:51:d9:06:fb:42:48:c6:b2:22:37:8e:b8:7f:b8:24:34: 3f:3d:98:a3:f4:37:c4:7d:62:be:79:57:dd:8c:c1:c9:e7:13: e0:fd:a5:9a:7c:f8:6e:d4:b9:d7:57:12:8f:8a:19:fe:da:0b: 83:40:df:c1:82:4f:6e:85:c3:8c:ac:d8:10:c1:c9:b8:00:08: de:e2:10:c5:2d:15:0c:9e:1a:47:8f:28:09:64:a6:61:5a:61: 60:c9:91:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe7ZkT2Je8p9LPASWhlZ/97k6bMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBF M0NDNTg4NjAeFw0yNjA0MjcwOTQ4NDZaFw0yNjA0MjgxMzMxNDZaMDMxMTAvBgNV BAMTKEM5OThDRjVDMDNDODI5REUxNEI5ODgwMEIxNDhCMkQ0Q0IxRDBCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQURwR9Lf3ymcRv02IL4fdS+6C +FUCzjTSDDbYd96NJlPj//6aS3Ikwhz91eo3zK96aiVH9+u14Ja8RDdO3uU/POI3 HlrPVB9e3Fk0pPJZLEYwco5890kHFQGMJnqzAvO+UWnGVGlZnMkB5eJFioir5YlF cNWa08/aPNctVZhDuxcFPO752MFg7WgMQK5IaOJOiNTw8wFrur/27qI7jclmUxTT 2eEK45IVybeBNuqXvFjK9t0TrtUwC0aErN84v3c9sxo2znlGrKY8leLS3LZ0lQ+I qxmFLFY1fZkUivimqCpWoz0ouNQmGKMKpbpsaqMe0mL7oXlGiSkneuBqp74fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyZjPXAPIKd4UuYgAsUiy1MsdCwkwHwYDVR0j BBgwFoAUwMIllbKRhI+/VoL2uafFIOPMWIYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTY0NTMxNC8wL0MwQzIyNTk1QjI5MTg0OEZCRjU2ODJGNkI5QTdD NTIwRTNDQzU4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBFM0NDNTg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE2NDUzMTQvMC9DMEMyMjU5NUIyOTE4 NDhGQkY1NjgyRjZCOUE3QzUyMEUzQ0M1ODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABx5GjV4dOJkx eosWRRZBACUGL/VtZDY5GhohkL4Y6OI5LAN4IROEbmjgmUqiNJqD5wzIqmmelOoE Ky0PI5d6OH1ozog5gwzWEyAmzZiHrg/JKHZ4nX17yZ7ylm8AnVbi9Fn3Xh9E5vGI Q697eW3LZXjcQUkFXZpkRaAmqsN2QPAyiAnmNccjWeN08g1ACGWmqQ1LKCwzEzXl jtTumuVyCXFV9cVR2Qb7QkjGsiI3jrh/uCQ0Pz2Yo/Q3xH1ivnlX3YzByecT4P2l mnz4btS511cSj4oZ/toLg0DfwYJPboXDjKzYEMHJuAAI3uIQxS0VDJ4aR48oCWSm YVphYMmR5A== -----END CERTIFICATE-----Generated at Mon Apr 27 22:10:17 2026 by rpki-client