$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft File: C05947A00A72638CD4BE67C4BF53224357777E0A.mft (raw, json) Hash identifier: q6tvde4nNpC3ksnmM1G0F0bve2jhhobQX5IqQbehRS4= Subject key identifier: 41:19:AB:BF:F7:71:1F:0D:40:8A:4B:98:DA:F7:69:51:45:93:92:CB Authority key identifier: C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A Certificate issuer: /CN=C05947A00A72638CD4BE67C4BF53224357777E0A Certificate serial: 19C5A2BCF48154A2DCA669613E9EEEEBFC9321A5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft Manifest number: 95 Signing time: Fri 28 Aug 2026 06:48:18 +0000 Manifest this update: Fri 28 Aug 2026 06:43:18 +0000 Manifest next update: Mon 31 Aug 2026 12:10:18 +0000 Files and hashes: 1: 3130332e3231322e3130392e302f32342d3234203d3e2034383136.roa (hash: KKCqpde6Dhe4+7RyJYUAxN7mjehJt+BZVg2xReVpvv0=) 2: C05947A00A72638CD4BE67C4BF53224357777E0A.crl (hash: 0fpX+zweLV1t+quIYaw44j0LURNmDV7711UNR/19USY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c5:a2:bc:f4:81:54:a2:dc:a6:69:61:3e:9e:ee:eb:fc:93:21:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C05947A00A72638CD4BE67C4BF53224357777E0A Validity Not Before: Aug 28 06:43:18 2026 GMT Not After : Aug 31 12:10:18 2026 GMT Subject: CN=4119ABBFF7711F0D408A4B98DAF76951459392CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ae:63:23:2e:8e:50:7e:27:96:33:77:b4:a3: c0:de:ab:d7:ba:69:fb:04:b5:04:3c:dc:b5:8a:92: 6e:3c:9d:55:52:c0:46:d3:61:61:8b:96:65:c1:f9: cf:ce:58:bc:48:d8:40:0c:bd:28:80:1d:99:1c:80: 4d:28:15:73:79:81:b7:34:39:67:78:65:85:42:65: 66:47:5a:e0:fd:14:d7:e7:f3:7d:1d:d2:2e:34:43: b5:93:38:99:4f:88:c4:45:ef:47:44:e8:b7:74:39: 67:5d:dc:f5:07:e8:2e:3b:50:26:5b:b0:05:28:1e: 6c:ca:dd:d2:45:f7:6f:db:35:95:46:31:97:6c:25: 81:eb:4b:cb:b2:49:da:25:a6:8c:58:9a:97:ab:ca: 76:61:8d:3e:73:0c:2a:7a:ca:c0:83:50:5c:f2:50: 3d:67:a9:49:25:eb:8e:f7:15:e8:46:2c:99:17:90: bd:cb:82:75:43:5a:c3:7b:3d:0a:66:b4:af:c8:cb: 00:30:7d:53:fb:bf:15:05:ae:3f:dc:46:ac:77:28: a4:30:8d:b4:16:1f:4d:7c:2b:34:e5:81:08:38:15: b6:c7:98:8c:46:fc:6d:5f:6f:23:db:82:8e:a5:6e: 46:1b:2a:7d:e4:05:0a:d3:8d:35:07:f3:a9:f5:6e: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:19:AB:BF:F7:71:1F:0D:40:8A:4B:98:DA:F7:69:51:45:93:92:CB X509v3 Authority Key Identifier: keyid:C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:29:22:cc:14:26:13:39:ac:b4:19:6a:f3:d0:7d:c1:9c:80: ec:49:3f:a0:76:f3:78:16:2e:f3:37:40:eb:a3:85:48:ee:66: 62:40:95:cf:25:f4:b9:50:f7:75:3d:24:db:6c:9f:24:19:f1: fd:43:ea:33:1d:cc:2f:a9:8f:c0:62:8c:38:4f:4b:ed:a8:69: c9:ad:41:b3:0b:d6:4c:8e:78:7c:54:25:7f:8e:26:64:b6:ec: 6e:a9:53:2e:05:f2:01:fd:c6:3c:81:65:da:04:11:00:e4:5c: b6:34:98:35:5b:e1:c5:86:21:00:c3:6e:fb:61:60:15:7d:5c: f2:0f:32:05:d4:25:6b:02:20:00:70:2e:07:f9:f0:e2:d8:8d: be:a0:0f:07:25:a9:93:1f:bf:d9:11:a1:a2:a0:a3:35:6e:8e: 48:1f:86:42:3c:eb:80:79:e7:04:92:2f:59:17:a2:d2:69:d3: b6:c1:14:e3:d5:a8:50:8d:00:6e:30:ac:df:a7:95:cb:fd:7c: 7d:41:6e:ff:37:31:c0:af:d0:df:7a:51:3c:31:e7:c0:7f:ae: 2c:41:a2:5f:c2:69:0d:bb:5c:86:e0:be:ab:f8:b7:0c:14:c1: 08:34:7e:0b:6c:39:17:06:2e:f7:20:25:18:80:2c:07:b1:34: cf:3f:73:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGcWivPSBVKLcpmlhPp7u6/yTIaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1 Nzc3N0UwQTAeFw0yNjA4MjgwNjQzMThaFw0yNjA4MzExMjEwMThaMDMxMTAvBgNV BAMTKDQxMTlBQkJGRjc3MTFGMEQ0MDhBNEI5OERBRjc2OTUxNDU5MzkyQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrmMjLo5QfieWM3e0o8Deq9e6 afsEtQQ83LWKkm48nVVSwEbTYWGLlmXB+c/OWLxI2EAMvSiAHZkcgE0oFXN5gbc0 OWd4ZYVCZWZHWuD9FNfn830d0i40Q7WTOJlPiMRF70dE6Ld0OWdd3PUH6C47UCZb sAUoHmzK3dJF92/bNZVGMZdsJYHrS8uySdolpoxYmperynZhjT5zDCp6ysCDUFzy UD1nqUkl6473FehGLJkXkL3LgnVDWsN7PQpmtK/IywAwfVP7vxUFrj/cRqx3KKQw jbQWH018KzTlgQg4FbbHmIxG/G1fbyPbgo6lbkYbKn3kBQrTjTUH86n1bhr/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQRmrv/dxHw1AikuY2vdpUUWTksswHwYDVR0j BBgwFoAUwFlHoApyY4zUvmfEv1MiQ1d3fgowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA2NzkzODI2OTg4ODUyNS8wL0MwNTk0N0EwMEE3MjYzOENENEJFNjdDNEJGNTMy MjQzNTc3NzdFMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1Nzc3N0UwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNjc5MzgyNjk4ODg1MjUvMC9DMDU5NDdBMDBBNzI2 MzhDRDRCRTY3QzRCRjUzMjI0MzU3Nzc3RTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwykizBQmEzms tBlq89B9wZyA7Ek/oHbzeBYu8zdA66OFSO5mYkCVzyX0uVD3dT0k22yfJBnx/UPq Mx3ML6mPwGKMOE9L7ahpya1BswvWTI54fFQlf44mZLbsbqlTLgXyAf3GPIFl2gQR AORctjSYNVvhxYYhAMNu+2FgFX1c8g8yBdQlawIgAHAuB/nw4tiNvqAPByWpkx+/ 2RGhoqCjNW6OSB+GQjzrgHnnBJIvWRei0mnTtsEU49WoUI0AbjCs36eVy/18fUFu /zcxwK/Q33pRPDHnwH+uLEGiX8JpDbtchuC+q/i3DBTBCDR+C2w5FwYu9yAlGIAs B7E0zz9zYA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:36 2026 by rpki-client