$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft File: C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft (raw, json) Hash identifier: NmI8tPiPYuTo3AXoVJGktIW6FelzVNsYk+wimbELKs4= Subject key identifier: 09:A1:DC:82:8A:AD:44:36:7B:E4:F2:B7:A6:4D:45:0C:5F:9B:AD:53 Authority key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 Certificate issuer: /CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Certificate serial: 7CD76A7E8B42A458C69574646A93AE04A902BAAF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft Manifest number: FA Signing time: Fri 24 Jul 2026 14:41:28 +0000 Manifest this update: Fri 24 Jul 2026 14:36:28 +0000 Manifest next update: Sat 25 Jul 2026 18:14:28 +0000 Files and hashes: 1: C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl (hash: 50QPJdVWHBY72YSmKvuG8ovMPzXcog+f9224/nCQ+Uk=) 2: 3130332e3138362e342e302f32332d3233203d3e2034383337.roa (hash: g16mnH71Qj1bPuqlcVtQzrjwxCLSRBcOfDTFIIRHIWM=) 3: 3130332e3138362e342e302f32332d3233203d3e20313436373639.roa (hash: KnnUSl5FdwvWqZ4/LTb7QCPFknrMDu6wSlVCKOn0qY0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d7:6a:7e:8b:42:a4:58:c6:95:74:64:6a:93:ae:04:a9:02:ba:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Validity Not Before: Jul 24 14:36:28 2026 GMT Not After : Jul 25 18:14:28 2026 GMT Subject: CN=09A1DC828AAD44367BE4F2B7A64D450C5F9BAD53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:c1:b2:dd:5b:6b:72:e6:45:e5:5f:cf:4a: 50:df:0f:f4:69:a5:15:78:34:fb:6c:91:ae:dc:57: 74:c0:07:af:fa:2a:44:7d:b8:91:4c:4a:78:91:bf: 6e:75:f4:30:7e:c3:31:b9:d1:dd:ee:21:f6:61:71: 80:a9:7d:f9:a3:74:f2:47:ef:6c:2c:0b:1e:89:b9: 28:fc:5a:5b:5b:a7:c5:c2:0e:46:fb:30:98:96:8e: f1:e8:9d:91:a5:07:cb:ec:56:cb:ac:56:bb:57:13: 29:f1:f3:3a:7f:8d:9e:1f:a4:72:68:7d:e4:43:33: 96:ee:5f:c5:3e:ea:05:a0:d1:38:32:bd:9e:05:f9: 03:cc:2a:eb:ed:cd:09:5c:f2:74:58:df:e9:bd:db: ad:02:14:b2:5c:4c:dc:7f:44:06:8e:41:68:8d:25: 19:2e:e1:be:00:36:4b:d7:77:bf:a4:1a:db:11:7a: c2:e6:57:6f:24:f0:93:73:e3:69:00:7c:78:6f:18: 2a:bd:d4:41:20:53:d5:41:66:c5:86:38:74:41:60: 8f:59:b9:3e:2b:98:78:2e:b7:fe:fd:8a:1d:75:cf: c0:8d:b8:23:b2:47:d3:5b:ec:70:25:c0:75:5e:9f: 87:22:ef:ec:5d:43:a6:4f:77:be:29:b6:97:8d:04: a5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A1:DC:82:8A:AD:44:36:7B:E4:F2:B7:A6:4D:45:0C:5F:9B:AD:53 X509v3 Authority Key Identifier: keyid:C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:34:2a:ab:bb:11:16:91:f7:ee:f2:29:f3:63:0b:cc:fc:e3: 76:0d:f7:54:bc:e1:4f:03:36:85:d7:c3:43:24:31:6d:bf:3d: 29:77:5f:fc:96:6a:5d:22:dc:52:bc:2d:0b:1a:7b:ca:af:d3: 92:29:a8:4e:7f:ed:51:ea:b5:f3:e0:4b:13:52:d5:cb:98:86: 6d:74:34:60:e7:66:09:26:67:d1:ff:b1:76:64:93:f3:d3:37: 07:a4:22:0a:9e:2e:a9:8b:b2:ee:9e:21:af:96:b4:b8:e6:7c: d8:01:5a:eb:d6:22:be:98:34:c4:5d:8a:e6:62:23:5f:0d:17: ce:ed:ab:21:d6:a9:93:b8:59:68:30:12:a1:80:d0:9f:02:ac: af:3c:f5:3d:e1:c8:a9:c4:74:a7:35:48:92:d7:f8:80:04:98: ee:fb:b3:18:67:06:82:28:1e:96:40:9c:ab:d5:ca:b1:0a:1a: de:7f:05:d9:a4:c9:b1:ef:98:e1:df:64:68:66:38:f8:a4:ad: e7:94:85:14:c3:2b:0c:71:a6:12:fe:1e:b5:09:95:38:0a:d7: 67:0a:2f:cf:69:0b:e0:5b:c6:c6:7f:89:41:00:c5:10:7e:08: 2f:6b:b5:08:c9:7c:56:22:86:8a:de:61:0f:a4:2e:2b:f1:a1: ba:8b:ed:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfNdqfotCpFjGlXRkapOuBKkCuq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBF M0NDNTg4NjAeFw0yNjA3MjQxNDM2MjhaFw0yNjA3MjUxODE0MjhaMDMxMTAvBgNV BAMTKDA5QTFEQzgyOEFBRDQ0MzY3QkU0RjJCN0E2NEQ0NTBDNUY5QkFENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJWsGy3VtrcuZF5V/PSlDfD/Rp pRV4NPtska7cV3TAB6/6KkR9uJFMSniRv2519DB+wzG50d3uIfZhcYCpffmjdPJH 72wsCx6JuSj8Wltbp8XCDkb7MJiWjvHonZGlB8vsVsusVrtXEynx8zp/jZ4fpHJo feRDM5buX8U+6gWg0TgyvZ4F+QPMKuvtzQlc8nRY3+m9260CFLJcTNx/RAaOQWiN JRku4b4ANkvXd7+kGtsResLmV28k8JNz42kAfHhvGCq91EEgU9VBZsWGOHRBYI9Z uT4rmHgut/79ih11z8CNuCOyR9Nb7HAlwHVen4ci7+xdQ6ZPd74ptpeNBKUjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCaHcgoqtRDZ75PK3pk1FDF+brVMwHwYDVR0j BBgwFoAUwMIllbKRhI+/VoL2uafFIOPMWIYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTY0NTMxNC8wL0MwQzIyNTk1QjI5MTg0OEZCRjU2ODJGNkI5QTdD NTIwRTNDQzU4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBFM0NDNTg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE2NDUzMTQvMC9DMEMyMjU5NUIyOTE4 NDhGQkY1NjgyRjZCOUE3QzUyMEUzQ0M1ODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTQqq7sRFpH3 7vIp82MLzPzjdg33VLzhTwM2hdfDQyQxbb89KXdf/JZqXSLcUrwtCxp7yq/Tkimo Tn/tUeq18+BLE1LVy5iGbXQ0YOdmCSZn0f+xdmST89M3B6QiCp4uqYuy7p4hr5a0 uOZ82AFa69Yivpg0xF2K5mIjXw0Xzu2rIdapk7hZaDASoYDQnwKsrzz1PeHIqcR0 pzVIktf4gASY7vuzGGcGgigelkCcq9XKsQoa3n8F2aTJse+Y4d9kaGY4+KSt55SF FMMrDHGmEv4etQmVOArXZwovz2kL4FvGxn+JQQDFEH4IL2u1CMl8ViKGit5hD6Qu K/GhuovtuQ== -----END CERTIFICATE-----Generated at Fri Jul 24 19:53:38 2026 by rpki-client