$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft File: C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft (raw, json) Hash identifier: PRYtuR6/ipoFf4in/UO70SGEwvy7am9N/tX++Z/ywOA= Subject key identifier: 1F:C7:BE:94:90:9C:6C:D7:CE:AD:92:6E:51:9E:BC:29:15:F2:6D:87 Authority key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 Certificate issuer: /CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Certificate serial: 736C5D4917691F1759E2BA3956629636F9B98EC8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft Manifest number: 99 Signing time: Wed 13 May 2026 01:00:50 +0000 Manifest this update: Wed 13 May 2026 00:55:50 +0000 Manifest next update: Thu 14 May 2026 03:40:50 +0000 Files and hashes: 1: C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl (hash: HnruSHp1lTOiIoSG2LJLgAVFFtWCAUqIe/wHmvzoHZo=) 2: 3130332e3138362e342e302f32332d3233203d3e2034383337.roa (hash: g16mnH71Qj1bPuqlcVtQzrjwxCLSRBcOfDTFIIRHIWM=) 3: 3130332e3138362e342e302f32332d3233203d3e20313436373639.roa (hash: KnnUSl5FdwvWqZ4/LTb7QCPFknrMDu6wSlVCKOn0qY0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:6c:5d:49:17:69:1f:17:59:e2:ba:39:56:62:96:36:f9:b9:8e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Validity Not Before: May 13 00:55:50 2026 GMT Not After : May 14 03:40:50 2026 GMT Subject: CN=1FC7BE94909C6CD7CEAD926E519EBC2915F26D87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:98:4c:95:34:e9:9c:19:f4:de:58:8c:7c:c1: 05:b8:9e:09:a7:26:06:fe:92:1d:55:50:a7:b2:9b: 21:3f:e0:d4:42:b6:2d:52:4e:2a:c4:87:73:d9:5f: 75:5a:55:61:e6:bf:be:fa:52:87:ec:36:6a:da:14: b2:66:8d:bf:2c:64:7c:d7:1b:d6:77:ec:80:b7:97: b9:fa:ac:5b:f6:c3:1f:97:5a:eb:78:b2:f3:68:f2: 08:9d:14:01:d7:77:5e:c2:72:1b:1b:45:1c:09:7b: 54:da:00:11:10:e5:33:30:dc:0a:dc:4e:88:09:18: a0:94:ca:04:0f:a6:69:b5:92:80:d4:56:74:b4:7b: 30:dd:65:38:c8:c8:cb:de:55:75:05:33:9f:e7:e5: d6:fb:ad:84:9c:8a:d5:49:1e:60:85:14:ca:5e:bb: 5b:1b:21:27:76:8a:f3:b4:78:77:b5:29:ad:53:12: 11:e2:c3:f4:e2:22:77:45:f7:16:60:fe:e8:36:23: 22:93:a7:96:e1:87:f9:7e:a1:78:8f:bf:bf:80:80: 97:f3:08:38:93:5e:d2:39:62:12:2b:e5:b9:a2:73: 7c:d3:7b:e0:e4:fa:97:0b:fb:cb:94:55:b5:41:1b: 53:54:35:d1:8d:3a:a3:1b:98:7a:f4:93:f4:fe:34: e8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C7:BE:94:90:9C:6C:D7:CE:AD:92:6E:51:9E:BC:29:15:F2:6D:87 X509v3 Authority Key Identifier: keyid:C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1e:f4:dc:ab:09:c0:f8:43:e9:e5:b4:85:03:6e:0d:90:33: 9d:55:e3:ad:ef:c1:c9:66:4f:a3:48:13:70:b8:90:46:ec:e1: 1b:97:b9:6f:b3:23:56:64:c7:49:56:b5:08:7c:c5:75:3d:a6: e5:25:52:4f:35:da:ec:3f:bb:60:a6:aa:64:b4:b1:81:0b:c4: 51:e9:4b:ae:6f:41:95:5e:6f:d2:ee:c9:46:75:1b:f1:f8:a8: 00:9c:2e:cf:3d:3a:3d:02:42:74:6e:92:b4:6a:3f:7d:58:9f: 4d:70:47:e3:9d:71:75:3f:ed:05:a7:c5:02:3a:7b:fa:fc:18: c3:05:74:9f:d2:01:22:76:74:d2:a6:ff:71:59:5f:82:bd:81: 4d:68:a3:1e:e3:cd:c8:bb:55:4b:04:cc:b8:48:00:57:1a:ed: 94:5d:d3:20:74:e2:77:93:96:81:9c:dc:12:48:0c:a7:0b:df: a8:28:24:98:c6:fa:8f:6e:6b:28:44:18:72:2c:2a:49:36:9d: 5b:78:5e:df:fd:6e:72:8a:1f:0f:de:c3:e6:0b:2a:6b:e0:f2: d5:e9:55:37:77:cc:aa:f4:23:bd:1b:c2:0d:2e:cd:63:ba:78: 5b:3d:f9:f5:4c:1a:7d:8d:4e:b5:bd:4a:4c:70:8b:4e:00:13: e6:ff:0c:c8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc2xdSRdpHxdZ4ro5VmKWNvm5jsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBF M0NDNTg4NjAeFw0yNjA1MTMwMDU1NTBaFw0yNjA1MTQwMzQwNTBaMDMxMTAvBgNV BAMTKDFGQzdCRTk0OTA5QzZDRDdDRUFEOTI2RTUxOUVCQzI5MTVGMjZEODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCymEyVNOmcGfTeWIx8wQW4ngmn Jgb+kh1VUKeymyE/4NRCti1STirEh3PZX3VaVWHmv776UofsNmraFLJmjb8sZHzX G9Z37IC3l7n6rFv2wx+XWut4svNo8gidFAHXd17CchsbRRwJe1TaABEQ5TMw3Arc TogJGKCUygQPpmm1koDUVnS0ezDdZTjIyMveVXUFM5/n5db7rYScitVJHmCFFMpe u1sbISd2ivO0eHe1Ka1TEhHiw/TiIndF9xZg/ug2IyKTp5bhh/l+oXiPv7+AgJfz CDiTXtI5YhIr5bmic3zTe+Dk+pcL+8uUVbVBG1NUNdGNOqMbmHr0k/T+NOg1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUH8e+lJCcbNfOrZJuUZ68KRXybYcwHwYDVR0j BBgwFoAUwMIllbKRhI+/VoL2uafFIOPMWIYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTY0NTMxNC8wL0MwQzIyNTk1QjI5MTg0OEZCRjU2ODJGNkI5QTdD NTIwRTNDQzU4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBFM0NDNTg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE2NDUzMTQvMC9DMEMyMjU5NUIyOTE4 NDhGQkY1NjgyRjZCOUE3QzUyMEUzQ0M1ODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKh703KsJwPhD 6eW0hQNuDZAznVXjre/ByWZPo0gTcLiQRuzhG5e5b7MjVmTHSVa1CHzFdT2m5SVS TzXa7D+7YKaqZLSxgQvEUelLrm9BlV5v0u7JRnUb8fioAJwuzz06PQJCdG6StGo/ fVifTXBH451xdT/tBafFAjp7+vwYwwV0n9IBInZ00qb/cVlfgr2BTWijHuPNyLtV SwTMuEgAVxrtlF3TIHTid5OWgZzcEkgMpwvfqCgkmMb6j25rKEQYciwqSTadW3he 3/1ucoofD97D5gsqa+Dy1elVN3fMqvQjvRvCDS7NY7p4Wz359UwafY1Otb1KTHCL TgAT5v8MyA== -----END CERTIFICATE-----Generated at Wed May 13 15:30:08 2026 by rpki-client