$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft File: C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft (raw, json) Hash identifier: 9qALkMpxhmaROaqZMrgUk7imMMBji00ll3Ftyf0ZL+M= Subject key identifier: CD:EE:26:F1:85:0F:52:40:DC:83:87:08:A7:64:A5:D5:71:79:E9:46 Authority key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 Certificate issuer: /CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Certificate serial: 206F0C7BDC6635261BEB2448C84655D5F9B044DC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft Manifest number: 0138 Signing time: Thu 01 Oct 2026 04:09:06 +0000 Manifest this update: Thu 01 Oct 2026 04:04:06 +0000 Manifest next update: Sun 04 Oct 2026 09:55:06 +0000 Files and hashes: 1: 3130332e3138362e342e302f32332d3233203d3e20313436373639.roa (hash: KnnUSl5FdwvWqZ4/LTb7QCPFknrMDu6wSlVCKOn0qY0=) 2: C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl (hash: 6CqdnfWaQQPbwh0VvhAvJ9kxOFALc7X9pILs4tmiCGg=) 3: 3130332e3138362e342e302f32332d3233203d3e2034383337.roa (hash: g16mnH71Qj1bPuqlcVtQzrjwxCLSRBcOfDTFIIRHIWM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 09:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6f:0c:7b:dc:66:35:26:1b:eb:24:48:c8:46:55:d5:f9:b0:44:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Validity Not Before: Oct 1 04:04:06 2026 GMT Not After : Oct 4 09:55:06 2026 GMT Subject: CN=CDEE26F1850F5240DC838708A764A5D57179E946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:91:5f:a9:f8:17:23:0f:ac:67:c7:ef:57: 71:51:49:47:b3:b9:25:fa:a4:3a:fc:88:7d:6e:10: 38:37:84:f2:7f:d9:28:d3:77:06:3f:60:27:b3:4b: bb:35:0b:5c:c5:56:1f:d4:1c:4c:b6:f4:c3:65:7a: bb:04:9b:57:1e:99:20:ee:32:c7:7e:d4:28:7f:a8: 0e:47:ef:e3:0e:ac:c0:28:da:30:94:1f:76:62:a9: c9:99:2d:2e:f5:ae:a1:1e:b4:d6:f7:b8:44:a0:0a: d7:58:7c:c7:76:42:e5:1e:3f:73:03:83:8e:5c:55: 51:d2:65:c9:eb:ec:20:2a:4a:4e:58:1b:11:6a:e5: b5:85:e1:17:3a:fe:7d:ea:1c:2f:27:22:3f:bc:17: 67:19:72:ce:f9:90:d1:f2:2d:4a:d8:6b:6c:04:9d: 00:4d:53:62:d8:84:92:94:49:d6:bc:93:15:1b:d7: 10:38:79:ed:26:cb:51:56:b6:2a:4b:cc:da:09:1a: e7:d7:2a:de:e1:0c:b9:4a:c4:b2:01:eb:1c:f3:1c: 4d:5b:22:21:ac:8f:88:d6:7e:39:29:ab:65:90:dd: 68:65:18:d8:c9:89:19:f1:b4:22:6a:e1:cc:45:97: e4:9c:a4:84:53:b2:2c:cb:25:66:2e:78:b7:ff:50: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EE:26:F1:85:0F:52:40:DC:83:87:08:A7:64:A5:D5:71:79:E9:46 X509v3 Authority Key Identifier: keyid:C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:fe:3f:4e:da:3a:f4:81:39:15:df:c6:9d:f9:c3:ea:f0:ff: 12:d5:c8:66:d1:29:ca:9f:6b:8b:e3:92:2f:9e:18:d1:d0:07: 2a:43:85:a8:c4:d8:7e:d4:bb:8d:83:8a:2d:d7:c3:69:3d:89: 99:1d:f7:a3:89:ac:67:8a:30:6c:93:d0:6a:de:3e:71:04:b1: 9c:2f:f6:3b:7c:86:5e:e7:95:8f:3d:b9:53:10:26:82:65:d0: 52:97:90:5e:d7:68:e5:ca:ad:06:19:84:d4:ca:a7:87:89:ae: 8e:8f:7c:85:a4:3c:cb:c3:18:2e:4a:6f:9e:5f:de:f2:9e:ba: b2:3a:33:9a:65:56:f1:a2:b3:bd:68:cb:9b:9c:aa:bc:09:e1: d8:cf:d5:a8:8f:53:82:c4:de:9c:e1:10:65:84:ac:7e:e4:9e: 00:9d:e1:27:ed:e4:95:4e:01:3c:f6:ee:16:90:4d:86:a3:2d: 16:0d:f2:70:d9:03:f1:4b:92:48:64:90:bd:ac:3e:95:36:9b: de:5f:6a:8f:11:ee:f6:cf:d9:d9:51:9e:91:12:ae:65:7a:95: a3:93:13:c5:7e:1f:1a:d0:95:db:b9:ce:08:40:29:ea:3f:03: bc:19:da:68:37:70:8a:a9:49:4f:c3:d9:85:a2:a7:01:f2:38: 08:ae:eb:fb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIG8Me9xmNSYb6yRIyEZV1fmwRNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBF M0NDNTg4NjAeFw0yNjEwMDEwNDA0MDZaFw0yNjEwMDQwOTU1MDZaMDMxMTAvBgNV BAMTKENERUUyNkYxODUwRjUyNDBEQzgzODcwOEE3NjRBNUQ1NzE3OUU5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLZFfqfgXIw+sZ8fvV3FRSUez uSX6pDr8iH1uEDg3hPJ/2SjTdwY/YCezS7s1C1zFVh/UHEy29MNlersEm1cemSDu Msd+1Ch/qA5H7+MOrMAo2jCUH3ZiqcmZLS71rqEetNb3uESgCtdYfMd2QuUeP3MD g45cVVHSZcnr7CAqSk5YGxFq5bWF4Rc6/n3qHC8nIj+8F2cZcs75kNHyLUrYa2wE nQBNU2LYhJKUSda8kxUb1xA4ee0my1FWtipLzNoJGufXKt7hDLlKxLIB6xzzHE1b IiGsj4jWfjkpq2WQ3WhlGNjJiRnxtCJq4cxFl+ScpIRTsizLJWYueLf/UKDJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUze4m8YUPUkDcg4cIp2Sl1XF56UYwHwYDVR0j BBgwFoAUwMIllbKRhI+/VoL2uafFIOPMWIYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTY0NTMxNC8wL0MwQzIyNTk1QjI5MTg0OEZCRjU2ODJGNkI5QTdD NTIwRTNDQzU4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBFM0NDNTg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE2NDUzMTQvMC9DMEMyMjU5NUIyOTE4 NDhGQkY1NjgyRjZCOUE3QzUyMEUzQ0M1ODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqv4/Tto69IE5 Fd/GnfnD6vD/EtXIZtEpyp9ri+OSL54Y0dAHKkOFqMTYftS7jYOKLdfDaT2JmR33 o4msZ4owbJPQat4+cQSxnC/2O3yGXueVjz25UxAmgmXQUpeQXtdo5cqtBhmE1Mqn h4mujo98haQ8y8MYLkpvnl/e8p66sjozmmVW8aKzvWjLm5yqvAnh2M/VqI9TgsTe nOEQZYSsfuSeAJ3hJ+3klU4BPPbuFpBNhqMtFg3ycNkD8UuSSGSQvaw+lTab3l9q jxHu9s/Z2VGekRKuZXqVo5MTxX4fGtCV27nOCEAp6j8DvBnaaDdwiqlJT8PZhaKn AfI4CK7r+w== -----END CERTIFICATE-----Generated at Sat Oct 3 10:52:14 2026 by rpki-client