$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft File: C05947A00A72638CD4BE67C4BF53224357777E0A.mft (raw, json) Hash identifier: SMxt6TQBKMxoI9Jb58o0o1UqyAu05z8afges4j5Eyyw= Subject key identifier: 6D:36:C3:66:94:F7:80:07:98:4D:61:9A:D7:3C:A2:02:93:E7:EF:1D Authority key identifier: C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A Certificate issuer: /CN=C05947A00A72638CD4BE67C4BF53224357777E0A Certificate serial: 0A6766A459DBCB49807BC0930551C6E5A78B4EE6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft Manifest number: 1E Signing time: Fri 29 May 2026 10:47:47 +0000 Manifest this update: Fri 29 May 2026 10:42:47 +0000 Manifest next update: Sat 30 May 2026 12:37:47 +0000 Files and hashes: 1: C05947A00A72638CD4BE67C4BF53224357777E0A.crl (hash: 5zjTSCvyD8xX1KNsGhKlC4GtumTfixUoT7CZivXy70w=) 2: 3130332e3231322e3130392e302f32342d3234203d3e2034383136.roa (hash: KKCqpde6Dhe4+7RyJYUAxN7mjehJt+BZVg2xReVpvv0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:67:66:a4:59:db:cb:49:80:7b:c0:93:05:51:c6:e5:a7:8b:4e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C05947A00A72638CD4BE67C4BF53224357777E0A Validity Not Before: May 29 10:42:47 2026 GMT Not After : May 30 12:37:47 2026 GMT Subject: CN=6D36C36694F78007984D619AD73CA20293E7EF1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cc:69:a0:fa:75:69:e0:13:e8:18:ff:2e:a0: 0b:05:0b:32:5e:c2:5f:66:f1:51:4f:8c:75:e2:87: c9:54:7a:65:95:01:5d:49:f8:94:f7:7e:27:6c:4c: bb:c6:60:84:c0:b5:c9:2c:74:29:20:e6:36:2a:c1: e2:7e:f0:bd:14:62:6a:80:2e:72:65:1f:43:d8:03: cd:fa:fb:ee:bf:cf:36:46:f5:65:85:fa:7e:7d:67: bc:8a:25:ac:88:af:97:eb:81:25:d8:e1:44:71:fb: 5f:b1:84:2b:6d:f4:f3:40:6d:3b:74:ce:a7:75:aa: 6f:eb:53:6e:7e:b6:f2:34:6e:ed:9b:92:bc:32:a2: e4:b9:a1:84:3e:49:7a:dc:53:de:4f:e7:7e:6a:ee: b5:b9:4f:eb:60:1e:6f:4b:ab:3c:da:87:27:59:93: 2a:d6:f3:70:31:08:bd:df:85:7a:37:be:5d:9a:a1: 2f:89:d5:61:18:c0:68:e5:e3:34:1f:df:48:ae:2a: 7a:2b:88:b8:b9:9f:f0:24:02:75:a1:f3:3d:81:d2: cf:c2:bb:cb:d4:66:c5:a5:cb:6b:62:0d:6c:19:ea: 27:1e:ad:59:f1:5d:e6:30:a5:48:0e:0d:34:61:71: 17:14:13:af:4d:b4:14:da:f2:33:2a:bd:32:b6:ee: 96:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:36:C3:66:94:F7:80:07:98:4D:61:9A:D7:3C:A2:02:93:E7:EF:1D X509v3 Authority Key Identifier: keyid:C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:24:a7:0e:96:69:aa:5c:5d:a6:08:8f:ef:57:ba:c8:aa:89: 14:4c:57:e1:d1:2a:8b:12:05:a1:99:9e:00:e1:d7:21:11:ce: ac:4d:05:98:ff:5b:1d:91:8d:0b:c2:ed:31:22:5d:2e:6e:dd: cc:f9:17:d8:f2:41:c1:cc:b0:0a:23:b6:a5:32:aa:aa:50:e9: 4f:14:d1:1b:a5:0a:67:bc:3b:a4:92:be:5d:b5:17:97:5e:9b: d2:57:ce:02:78:80:8b:3f:79:07:c3:b8:0d:46:c1:fb:35:36: 6c:45:81:e7:49:9c:95:4f:6c:f1:0a:85:64:58:97:09:61:c1: c3:f0:24:5f:31:e0:9c:db:e0:54:7b:66:aa:44:6f:cd:4f:1c: 05:14:f8:d9:d1:95:77:dd:e2:17:4a:e7:6b:ca:9a:14:50:22: b7:a6:86:16:13:a6:46:f4:58:fc:17:62:c5:77:5c:22:2e:87: 73:ce:c9:8f:af:fa:31:47:8f:d9:2b:b1:06:f6:8d:0f:b3:69: 4b:81:a4:2b:98:35:d3:65:9b:99:67:bb:e4:f1:be:fc:f4:29: 7b:cb:7f:ad:01:89:c8:6a:07:67:23:9a:21:5b:04:28:06:00: a6:63:4f:d7:bc:24:2f:28:a0:4f:61:c7:e4:5d:66:d3:09:dd: 0f:32:36:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCmdmpFnby0mAe8CTBVHG5aeLTuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1 Nzc3N0UwQTAeFw0yNjA1MjkxMDQyNDdaFw0yNjA1MzAxMjM3NDdaMDMxMTAvBgNV BAMTKDZEMzZDMzY2OTRGNzgwMDc5ODRENjE5QUQ3M0NBMjAyOTNFN0VGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPzGmg+nVp4BPoGP8uoAsFCzJe wl9m8VFPjHXih8lUemWVAV1J+JT3fidsTLvGYITAtcksdCkg5jYqweJ+8L0UYmqA LnJlH0PYA836++6/zzZG9WWF+n59Z7yKJayIr5frgSXY4URx+1+xhCtt9PNAbTt0 zqd1qm/rU25+tvI0bu2bkrwyouS5oYQ+SXrcU95P535q7rW5T+tgHm9LqzzahydZ kyrW83AxCL3fhXo3vl2aoS+J1WEYwGjl4zQf30iuKnoriLi5n/AkAnWh8z2B0s/C u8vUZsWly2tiDWwZ6icerVnxXeYwpUgODTRhcRcUE69NtBTa8jMqvTK27pbbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbTbDZpT3gAeYTWGa1zyiApPn7x0wHwYDVR0j BBgwFoAUwFlHoApyY4zUvmfEv1MiQ1d3fgowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA2NzkzODI2OTg4ODUyNS8wL0MwNTk0N0EwMEE3MjYzOENENEJFNjdDNEJGNTMy MjQzNTc3NzdFMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1Nzc3N0UwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNjc5MzgyNjk4ODg1MjUvMC9DMDU5NDdBMDBBNzI2 MzhDRDRCRTY3QzRCRjUzMjI0MzU3Nzc3RTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwSSnDpZpqlxd pgiP71e6yKqJFExX4dEqixIFoZmeAOHXIRHOrE0FmP9bHZGNC8LtMSJdLm7dzPkX 2PJBwcywCiO2pTKqqlDpTxTRG6UKZ7w7pJK+XbUXl16b0lfOAniAiz95B8O4DUbB +zU2bEWB50mclU9s8QqFZFiXCWHBw/AkXzHgnNvgVHtmqkRvzU8cBRT42dGVd93i F0rna8qaFFAit6aGFhOmRvRY/BdixXdcIi6Hc87Jj6/6MUeP2SuxBvaND7NpS4Gk K5g102WbmWe75PG+/PQpe8t/rQGJyGoHZyOaIVsEKAYApmNP17wkLyigT2HH5F1m 0wndDzI21w== -----END CERTIFICATE-----Generated at Fri May 29 22:02:54 2026 by rpki-client