$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft File: C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft (raw, json) Hash identifier: 5pnmSr3Et78WqFUv2IbIWD4dxU3jFYJ2j/xvxRN4GLg= Subject key identifier: 6B:49:70:11:C6:1C:A6:BB:88:4A:BB:83:CF:D8:6C:BA:28:B1:AF:18 Authority key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 Certificate issuer: /CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Certificate serial: 2E48A3F3C5396382B1788987140ED5BBEA8E5385 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft Manifest number: C1 Signing time: Thu 11 Jun 2026 20:59:24 +0000 Manifest this update: Thu 11 Jun 2026 20:54:24 +0000 Manifest next update: Fri 12 Jun 2026 23:36:24 +0000 Files and hashes: 1: 3130332e3138362e342e302f32332d3233203d3e2034383337.roa (hash: g16mnH71Qj1bPuqlcVtQzrjwxCLSRBcOfDTFIIRHIWM=) 2: 3130332e3138362e342e302f32332d3233203d3e20313436373639.roa (hash: KnnUSl5FdwvWqZ4/LTb7QCPFknrMDu6wSlVCKOn0qY0=) 3: C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl (hash: HkngjWU9RnPr+ELOHz8B03FfHxqt5S5FKTaeH27nWhs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 23:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:48:a3:f3:c5:39:63:82:b1:78:89:87:14:0e:d5:bb:ea:8e:53:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Validity Not Before: Jun 11 20:54:24 2026 GMT Not After : Jun 12 23:36:24 2026 GMT Subject: CN=6B497011C61CA6BB884ABB83CFD86CBA28B1AF18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:d8:09:98:9c:ea:61:f6:f8:50:f8:34:fe: 29:71:83:ab:13:cb:f8:de:e5:00:29:3d:47:99:a0: dc:6e:f4:ac:23:a7:ca:0f:be:d7:b4:c5:8c:9e:c2: 67:2e:d1:69:c2:d8:33:8d:c0:73:2e:77:9a:1c:c5: 66:06:e5:95:c6:6d:d6:8e:ce:c5:27:5b:64:70:1e: 3c:ea:5a:a9:1d:d8:42:82:a4:05:a0:06:e0:e7:f0: ed:ae:80:34:c8:56:07:8e:4b:aa:8a:03:6e:1e:b8: b7:4d:1a:c3:f1:3c:70:68:43:a5:f4:fa:d4:6e:83: 31:e0:53:9d:0b:f6:2a:59:10:41:0f:a9:b3:ba:b7: ca:13:45:9a:0a:64:f2:09:94:e8:cd:a0:a8:17:43: 99:1f:fa:86:d4:7f:d0:63:b8:54:a9:60:4f:98:47: bf:ce:30:b3:fb:a2:d7:9b:88:95:3c:09:c0:f3:12: 33:fb:a3:20:28:67:7a:72:b9:aa:e1:87:4d:a8:93: d6:92:1a:1f:8e:60:b1:89:17:b2:58:d8:1e:7e:a8: d8:90:b8:fa:3f:35:23:08:77:b7:3a:f1:0f:89:33: 59:94:df:bc:ec:03:ee:74:44:0c:dc:50:12:46:7d: 47:3d:51:90:1e:fa:aa:a0:9f:cf:f9:a9:4a:81:c8: b3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:49:70:11:C6:1C:A6:BB:88:4A:BB:83:CF:D8:6C:BA:28:B1:AF:18 X509v3 Authority Key Identifier: keyid:C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:a3:45:76:b7:08:24:1d:39:6c:af:66:b0:12:42:eb:58:1f: da:44:49:d8:5a:f5:ba:61:a2:31:3c:66:e8:71:ef:77:3f:aa: ed:f7:a5:b0:82:af:5e:ad:f1:3c:7a:ec:e7:65:44:8f:57:8f: 3f:7d:14:f3:0a:9b:c5:cf:6b:09:c8:31:90:4f:6f:68:36:ee: 2b:64:cd:c3:95:d7:83:80:98:39:98:2a:fe:5a:c8:0b:af:64: dd:1f:22:8b:eb:0f:4e:47:9c:e7:1a:94:6b:2c:25:26:8d:40: 48:ef:6f:de:d0:64:f5:62:21:8a:68:c2:3f:ef:08:5f:83:72: 13:e9:7e:9c:89:93:61:ef:3a:16:ae:83:bd:97:00:f3:09:6d: e5:c7:bc:80:d7:a5:08:a9:e4:49:60:79:5f:5f:f1:a5:fb:93: 86:12:b7:fb:48:37:98:1a:83:06:b5:b5:9b:b1:2e:63:be:fe: c8:34:18:1d:7c:1e:d2:8f:fc:12:4f:35:ca:7b:4e:3e:fc:f4: 56:57:3c:31:aa:c2:e1:26:c8:b4:02:56:40:e1:df:7c:76:a1: 94:a0:22:c0:b3:2f:ad:aa:37:7f:f1:1a:cd:18:6a:5c:41:65: 89:2f:86:bc:7b:38:6c:4e:98:99:72:56:4b:96:b1:69:67:a4: 54:e8:48:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULkij88U5Y4KxeImHFA7Vu+qOU4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBF M0NDNTg4NjAeFw0yNjA2MTEyMDU0MjRaFw0yNjA2MTIyMzM2MjRaMDMxMTAvBgNV BAMTKDZCNDk3MDExQzYxQ0E2QkI4ODRBQkI4M0NGRDg2Q0JBMjhCMUFGMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIkNgJmJzqYfb4UPg0/ilxg6sT y/je5QApPUeZoNxu9Kwjp8oPvte0xYyewmcu0WnC2DONwHMud5ocxWYG5ZXGbdaO zsUnW2RwHjzqWqkd2EKCpAWgBuDn8O2ugDTIVgeOS6qKA24euLdNGsPxPHBoQ6X0 +tRugzHgU50L9ipZEEEPqbO6t8oTRZoKZPIJlOjNoKgXQ5kf+obUf9BjuFSpYE+Y R7/OMLP7otebiJU8CcDzEjP7oyAoZ3pyuarhh02ok9aSGh+OYLGJF7JY2B5+qNiQ uPo/NSMId7c68Q+JM1mU37zsA+50RAzcUBJGfUc9UZAe+qqgn8/5qUqByLNRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUa0lwEcYcpruISruDz9hsuiixrxgwHwYDVR0j BBgwFoAUwMIllbKRhI+/VoL2uafFIOPMWIYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTY0NTMxNC8wL0MwQzIyNTk1QjI5MTg0OEZCRjU2ODJGNkI5QTdD NTIwRTNDQzU4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBFM0NDNTg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE2NDUzMTQvMC9DMEMyMjU5NUIyOTE4 NDhGQkY1NjgyRjZCOUE3QzUyMEUzQ0M1ODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6NFdrcIJB05 bK9msBJC61gf2kRJ2Fr1umGiMTxm6HHvdz+q7felsIKvXq3xPHrs52VEj1ePP30U 8wqbxc9rCcgxkE9vaDbuK2TNw5XXg4CYOZgq/lrIC69k3R8ii+sPTkec5xqUaywl Jo1ASO9v3tBk9WIhimjCP+8IX4NyE+l+nImTYe86Fq6DvZcA8wlt5ce8gNelCKnk SWB5X1/xpfuThhK3+0g3mBqDBrW1m7EuY77+yDQYHXwe0o/8Ek81yntOPvz0Vlc8 MarC4SbItAJWQOHffHahlKAiwLMvrao3f/EazRhqXEFliS+GvHs4bE6YmXJWS5ax aWekVOhIQQ== -----END CERTIFICATE-----Generated at Fri Jun 12 07:54:59 2026 by rpki-client