$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft File: C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft (raw, json) Hash identifier: KD11PUwRJeYnd3bchd422cv0B1wMI0eq7xKzO6Sd33A= Subject key identifier: E8:95:BB:29:DD:30:74:CE:FB:F5:9D:48:A6:64:13:03:2E:F1:C4:B5 Authority key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 Certificate issuer: /CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Certificate serial: 77A0BFC90703D77C40A9442A1D84B7E4DE9FF71E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft Manifest number: FD Signing time: Mon 27 Jul 2026 00:07:51 +0000 Manifest this update: Mon 27 Jul 2026 00:02:51 +0000 Manifest next update: Tue 28 Jul 2026 03:26:51 +0000 Files and hashes: 1: C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl (hash: sf6iZw6q2MjCNhAPvU+6zQHsXSWf5NhAWUfEhYdR0h4=) 2: 3130332e3138362e342e302f32332d3233203d3e2034383337.roa (hash: g16mnH71Qj1bPuqlcVtQzrjwxCLSRBcOfDTFIIRHIWM=) 3: 3130332e3138362e342e302f32332d3233203d3e20313436373639.roa (hash: KnnUSl5FdwvWqZ4/LTb7QCPFknrMDu6wSlVCKOn0qY0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 03:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a0:bf:c9:07:03:d7:7c:40:a9:44:2a:1d:84:b7:e4:de:9f:f7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Validity Not Before: Jul 27 00:02:51 2026 GMT Not After : Jul 28 03:26:51 2026 GMT Subject: CN=E895BB29DD3074CEFBF59D48A66413032EF1C4B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3f:65:83:f9:c9:71:8b:91:e4:84:24:0e:17: 0a:ce:eb:4d:a3:a5:da:fc:c0:2c:8a:af:0c:5e:2f: a8:06:84:1c:43:d3:1e:a0:37:91:7a:d8:52:0e:fe: 2e:cc:62:0e:24:ec:d3:d8:fb:fa:2c:dd:7f:46:f2: 6b:ab:c8:e6:9e:4b:23:f0:05:2e:fd:a3:22:f9:f5: ac:29:a3:5b:28:76:d0:7a:72:a3:2c:72:f9:bd:42: 8e:6c:ce:22:05:b3:7d:6a:1c:dc:52:d6:df:fb:e5: d5:59:1f:bf:07:c2:16:f4:81:e3:17:4d:e0:1c:9e: 03:97:63:71:ab:92:cc:2b:6d:46:b7:4c:fe:7a:e1: 89:56:89:10:39:69:96:5b:5f:d4:f6:37:e0:a6:8b: b5:d7:e7:e5:ff:01:8a:ae:7d:20:2d:04:ef:ed:f8: 7f:ac:f6:11:78:33:af:38:3e:01:31:70:7b:5f:c0: 46:5e:cc:b0:f0:5b:ad:ec:fd:d7:58:ce:84:4c:cc: ea:a9:05:50:cf:bc:6b:fe:2b:2f:5d:82:bd:bc:bc: 26:c5:59:b8:26:b3:a0:3a:e2:a3:d3:cf:2d:6a:3b: b4:7d:15:4f:4e:61:07:5d:ba:6a:34:18:f5:7c:8e: f1:a1:23:b3:c8:e5:8b:f0:75:17:05:69:26:b7:9c: 89:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:95:BB:29:DD:30:74:CE:FB:F5:9D:48:A6:64:13:03:2E:F1:C4:B5 X509v3 Authority Key Identifier: keyid:C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:32:2b:91:b8:31:68:4e:bd:e3:87:a2:d9:65:1e:0c:18:1d: cb:bb:bc:da:4d:ba:2f:7d:f8:a1:bc:18:ed:f2:8a:bf:1e:da: db:f1:8d:80:14:be:d6:ad:d3:2c:e4:ac:8f:85:d0:e6:c0:20: 38:6a:60:3d:72:d6:6f:cf:24:af:1b:ef:c9:32:2f:ee:f1:a2: a1:38:84:67:88:e6:f0:04:15:47:34:bf:8b:ce:0e:5c:97:df: 1b:69:59:ae:9f:cb:e8:cf:eb:ed:60:54:0a:5d:e4:26:84:6b: 74:cc:93:fa:2d:24:0f:bb:0c:bb:07:53:05:74:ce:be:c4:51: 6b:67:e3:13:10:97:81:2d:4a:fe:8c:d8:65:34:fe:c6:42:eb: 9a:01:e7:8b:4f:76:70:a2:06:4a:55:16:09:7d:37:c3:0c:6d: cb:17:74:20:a6:e1:b6:5d:02:d5:20:b2:82:e7:72:04:98:b2: b0:8a:02:d0:4e:1e:e6:ad:1e:7a:56:49:09:9c:76:bb:25:0d: d7:fd:39:eb:6f:77:3b:5c:7d:ae:97:5b:99:ec:28:43:42:60: 66:1a:19:7c:66:56:48:9b:d2:a5:1b:8e:41:46:29:a3:34:e7: 23:32:ff:e5:82:16:13:97:8a:97:ce:5c:a5:0f:40:59:32:d1: 6e:b9:13:b5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd6C/yQcD13xAqUQqHYS35N6f9x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBF M0NDNTg4NjAeFw0yNjA3MjcwMDAyNTFaFw0yNjA3MjgwMzI2NTFaMDMxMTAvBgNV BAMTKEU4OTVCQjI5REQzMDc0Q0VGQkY1OUQ0OEE2NjQxMzAzMkVGMUM0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbP2WD+clxi5HkhCQOFwrO602j pdr8wCyKrwxeL6gGhBxD0x6gN5F62FIO/i7MYg4k7NPY+/os3X9G8muryOaeSyPw BS79oyL59awpo1sodtB6cqMscvm9Qo5sziIFs31qHNxS1t/75dVZH78Hwhb0geMX TeAcngOXY3GrkswrbUa3TP564YlWiRA5aZZbX9T2N+Cmi7XX5+X/AYqufSAtBO/t +H+s9hF4M684PgExcHtfwEZezLDwW63s/ddYzoRMzOqpBVDPvGv+Ky9dgr28vCbF Wbgms6A64qPTzy1qO7R9FU9OYQddumo0GPV8jvGhI7PI5YvwdRcFaSa3nImDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6JW7Kd0wdM779Z1IpmQTAy7xxLUwHwYDVR0j BBgwFoAUwMIllbKRhI+/VoL2uafFIOPMWIYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTY0NTMxNC8wL0MwQzIyNTk1QjI5MTg0OEZCRjU2ODJGNkI5QTdD NTIwRTNDQzU4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBFM0NDNTg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE2NDUzMTQvMC9DMEMyMjU5NUIyOTE4 NDhGQkY1NjgyRjZCOUE3QzUyMEUzQ0M1ODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjIrkbgxaE69 44ei2WUeDBgdy7u82k26L334obwY7fKKvx7a2/GNgBS+1q3TLOSsj4XQ5sAgOGpg PXLWb88krxvvyTIv7vGioTiEZ4jm8AQVRzS/i84OXJffG2lZrp/L6M/r7WBUCl3k JoRrdMyT+i0kD7sMuwdTBXTOvsRRa2fjExCXgS1K/ozYZTT+xkLrmgHni092cKIG SlUWCX03wwxtyxd0IKbhtl0C1SCygudyBJiysIoC0E4e5q0eelZJCZx2uyUN1/05 6293O1x9rpdbmewoQ0JgZhoZfGZWSJvSpRuOQUYpozTnIzL/5YIWE5eKl85cpQ9A WTLRbrkTtQ== -----END CERTIFICATE-----Generated at Mon Jul 27 15:49:18 2026 by rpki-client