$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft File: C05947A00A72638CD4BE67C4BF53224357777E0A.mft (raw, json) Hash identifier: jJlIwOGD09CfFIXu8vsTBI+0kpwi3U2K3ql6oSNvShE= Subject key identifier: 22:D4:3C:5E:D5:D1:9A:38:B8:73:69:B1:FF:B0:A8:C8:0B:30:BA:76 Authority key identifier: C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A Certificate issuer: /CN=C05947A00A72638CD4BE67C4BF53224357777E0A Certificate serial: 08539E71A81A041CCE0D25E6182B146153DD34EA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft Manifest number: A9 Signing time: Sun 11 Oct 2026 20:41:03 +0000 Manifest this update: Sun 11 Oct 2026 20:36:03 +0000 Manifest next update: Thu 15 Oct 2026 07:48:03 +0000 Files and hashes: 1: 3130332e3231322e3130392e302f32342d3234203d3e2034383136.roa (hash: KKCqpde6Dhe4+7RyJYUAxN7mjehJt+BZVg2xReVpvv0=) 2: C05947A00A72638CD4BE67C4BF53224357777E0A.crl (hash: B38OstHYguoQRQJfPoIdar8gb0i4WSm6J5UAAdE2RFg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:53:9e:71:a8:1a:04:1c:ce:0d:25:e6:18:2b:14:61:53:dd:34:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C05947A00A72638CD4BE67C4BF53224357777E0A Validity Not Before: Oct 11 20:36:03 2026 GMT Not After : Oct 15 07:48:03 2026 GMT Subject: CN=22D43C5ED5D19A38B87369B1FFB0A8C80B30BA76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:b2:ab:c7:b2:92:3f:98:74:0a:9a:f9:b5: 86:f7:28:e7:a9:f0:4a:05:29:ad:78:b5:c7:ec:39: 3c:5c:8f:90:c5:00:7b:47:3c:20:a3:e2:71:a1:77: 19:60:44:03:ef:02:34:84:aa:1d:ea:95:b2:52:fb: 51:a3:fc:bd:49:94:55:89:e6:66:43:61:fb:c7:f7: 7f:6f:60:cb:86:95:2a:88:dc:b7:71:d2:6c:dd:f5: e3:15:51:17:7c:95:30:81:96:e6:58:44:5c:b9:6d: af:dc:8c:41:8d:79:39:e4:f2:10:d2:06:7d:86:55: e2:f5:8f:0f:f4:ef:0f:f9:67:9b:dd:c0:43:fd:35: f7:8f:40:cf:f9:05:95:3e:7f:ce:09:d5:e2:a8:d9: e5:4b:e4:62:d8:50:a0:5c:44:b7:ce:24:21:86:a6: ac:6c:cc:ae:29:2a:30:06:cc:62:ce:26:eb:29:e4: 3e:04:ee:da:a0:9c:d7:11:d7:35:2e:91:e9:d7:42: f3:22:72:ec:a4:ac:5e:86:fc:12:92:10:0b:bf:d2: 1a:4c:71:7b:d6:c7:04:b7:be:b9:35:b8:29:72:78: 54:ab:15:25:01:e3:db:54:d5:f5:f7:db:23:5e:06: 42:92:2b:fa:ff:01:10:d0:2b:20:14:24:e3:2c:2c: d4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D4:3C:5E:D5:D1:9A:38:B8:73:69:B1:FF:B0:A8:C8:0B:30:BA:76 X509v3 Authority Key Identifier: keyid:C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b5:8d:93:35:d8:8b:91:4f:38:c4:9e:61:90:30:3c:6c:6f: 54:01:4b:e8:71:e1:b7:74:e5:82:5b:46:f1:dd:60:f4:29:5d: 20:d2:4c:52:e4:7b:84:d1:dc:f0:e3:22:7e:52:b3:a7:0b:3d: 71:a2:d0:d1:87:ca:a4:e9:60:60:61:0b:44:4e:87:95:6f:83: 90:78:4c:64:cf:1c:6c:dd:bb:ca:b3:e4:b2:6f:63:a9:a4:a3: 5a:33:63:6e:79:1b:2c:cf:57:09:92:4e:4e:10:f8:d9:8d:16: 3c:02:02:f8:81:c5:90:b9:5d:57:0a:d7:ff:c4:7d:a9:93:7c: 37:26:38:70:7d:4d:67:29:98:93:b7:16:6b:68:dc:13:f8:ca: 99:16:65:d1:cc:f1:e9:78:14:a1:36:7e:46:8b:51:9f:05:79: db:bc:72:6f:a7:ae:c7:3a:d4:64:33:c6:a5:f5:b6:e3:45:b6: f8:ee:06:34:2c:5b:b4:b8:88:be:59:87:b4:30:81:d6:b1:4b: f7:8e:03:bc:c4:22:d1:2c:78:68:a0:ab:43:52:21:51:3f:f1: ec:91:9a:c6:fe:d4:ad:21:f0:1d:ca:f1:68:69:c1:6c:73:d3: 36:ab:bd:fe:ab:91:48:fa:e0:2d:96:81:80:27:f9:3b:c3:7a: 11:7c:cb:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCFOecagaBBzODSXmGCsUYVPdNOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1 Nzc3N0UwQTAeFw0yNjEwMTEyMDM2MDNaFw0yNjEwMTUwNzQ4MDNaMDMxMTAvBgNV BAMTKDIyRDQzQzVFRDVEMTlBMzhCODczNjlCMUZGQjBBOEM4MEIzMEJBNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgabKrx7KSP5h0Cpr5tYb3KOep 8EoFKa14tcfsOTxcj5DFAHtHPCCj4nGhdxlgRAPvAjSEqh3qlbJS+1Gj/L1JlFWJ 5mZDYfvH939vYMuGlSqI3Ldx0mzd9eMVURd8lTCBluZYRFy5ba/cjEGNeTnk8hDS Bn2GVeL1jw/07w/5Z5vdwEP9NfePQM/5BZU+f84J1eKo2eVL5GLYUKBcRLfOJCGG pqxszK4pKjAGzGLOJusp5D4E7tqgnNcR1zUukenXQvMicuykrF6G/BKSEAu/0hpM cXvWxwS3vrk1uClyeFSrFSUB49tU1fX32yNeBkKSK/r/ARDQKyAUJOMsLNTJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUItQ8XtXRmji4c2mx/7CoyAswunYwHwYDVR0j BBgwFoAUwFlHoApyY4zUvmfEv1MiQ1d3fgowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA2NzkzODI2OTg4ODUyNS8wL0MwNTk0N0EwMEE3MjYzOENENEJFNjdDNEJGNTMy MjQzNTc3NzdFMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1Nzc3N0UwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNjc5MzgyNjk4ODg1MjUvMC9DMDU5NDdBMDBBNzI2 MzhDRDRCRTY3QzRCRjUzMjI0MzU3Nzc3RTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7WNkzXYi5FP OMSeYZAwPGxvVAFL6HHht3TlgltG8d1g9CldINJMUuR7hNHc8OMiflKzpws9caLQ 0YfKpOlgYGELRE6HlW+DkHhMZM8cbN27yrPksm9jqaSjWjNjbnkbLM9XCZJOThD4 2Y0WPAIC+IHFkLldVwrX/8R9qZN8NyY4cH1NZymYk7cWa2jcE/jKmRZl0czx6XgU oTZ+RotRnwV527xyb6euxzrUZDPGpfW240W2+O4GNCxbtLiIvlmHtDCB1rFL944D vMQi0Sx4aKCrQ1IhUT/x7JGaxv7UrSHwHcrxaGnBbHPTNqu9/quRSPrgLZaBgCf5 O8N6EXzL0g== -----END CERTIFICATE-----Generated at Wed Oct 14 02:14:33 2026 by rpki-client