$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft File: C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft (raw, json) Hash identifier: kT9komwXNwSw5XDWuqknMLsM8R9GzVBju3nNR5D675o= Subject key identifier: B7:AD:A4:2F:46:0C:8D:6E:DD:16:74:C1:50:D4:A7:C8:5B:F8:6C:A4 Authority key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 Certificate issuer: /CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Certificate serial: 779000E1BB6F4646CD0DA34AD0616FFD38C97A42 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 11:38:28 +0000 Manifest this update: Thu 26 Mar 2026 11:33:28 +0000 Manifest next update: Fri 27 Mar 2026 13:06:28 +0000 Files and hashes: 1: 3130332e3138362e342e302f32332d3233203d3e2034383337.roa (hash: g16mnH71Qj1bPuqlcVtQzrjwxCLSRBcOfDTFIIRHIWM=) 2: 3130332e3138362e342e302f32332d3233203d3e20313436373639.roa (hash: KnnUSl5FdwvWqZ4/LTb7QCPFknrMDu6wSlVCKOn0qY0=) 3: C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl (hash: dWLutIaHF37n0VbjZWQ6f4HbdM1OIxtWLC86/qcCqZE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:90:00:e1:bb:6f:46:46:cd:0d:a3:4a:d0:61:6f:fd:38:c9:7a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Validity Not Before: Mar 26 11:33:28 2026 GMT Not After : Mar 27 13:06:28 2026 GMT Subject: CN=B7ADA42F460C8D6EDD1674C150D4A7C85BF86CA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:d1:ba:76:ae:4a:11:8e:14:4b:a5:02:ef: c4:08:7b:e8:84:53:5e:09:d3:d3:0f:54:5e:9e:9e: da:85:a9:02:7f:83:48:fd:6b:7e:89:4b:8d:2f:07: 5b:f8:27:9b:e7:79:0b:8e:62:74:c0:3d:ea:2a:3b: 80:43:26:1e:4a:e6:34:85:0a:b5:72:81:70:88:77: 03:b7:9a:91:c5:d2:8d:06:6c:78:6e:38:8a:fc:5f: 0e:85:b6:c8:13:a0:82:14:7e:c9:c8:83:9e:2f:04: 8d:07:1a:94:3d:2e:1b:3a:03:83:f2:ee:d8:1a:b2: 66:56:ac:05:2b:e2:9e:33:f6:11:89:09:27:93:7c: a9:10:ff:f3:e8:2d:26:77:74:10:d6:06:ff:8a:c1: 14:56:b8:e1:5e:9a:61:12:18:c7:3e:22:52:79:69: 7e:f7:2c:c3:09:02:0a:39:5f:58:ba:01:73:b2:d3: a9:a7:e3:e7:05:fa:eb:de:71:62:19:a1:b6:f1:1d: 1a:72:96:55:98:ee:54:16:b9:c8:a1:52:af:ec:64: a6:00:ff:73:f0:d4:dd:f2:20:55:36:14:ba:d1:23: cb:0d:a9:c1:f9:2b:93:57:33:5d:85:99:8a:d8:01: 48:1f:8a:56:6d:39:c9:69:c2:76:7d:e1:22:07:88: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AD:A4:2F:46:0C:8D:6E:DD:16:74:C1:50:D4:A7:C8:5B:F8:6C:A4 X509v3 Authority Key Identifier: keyid:C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:54:73:d0:ce:51:97:70:f4:9d:32:20:4c:ea:c7:78:01:44: 5e:89:02:df:db:03:63:d8:ac:85:5b:86:d7:89:26:bb:c3:0e: 01:24:12:fc:d5:95:aa:3a:3c:21:3e:ff:33:22:f1:a6:c1:75: eb:01:6c:17:d9:e4:37:64:aa:b8:03:49:fb:0a:96:9e:c6:a2: 7f:ce:d3:61:61:79:1c:cf:69:f0:44:fc:22:a3:60:71:1a:86: bb:ac:f8:5b:82:17:c1:79:f1:e4:a7:43:18:81:93:5d:b8:15: 53:3a:03:b4:68:bb:cd:96:22:8f:40:d3:ed:0b:20:e8:d3:90: 9a:83:b9:4e:8c:be:e8:3a:b4:c7:79:f1:af:f2:4b:9a:ef:c8: 1b:63:a3:49:cb:6b:af:b5:be:a6:e2:be:64:53:11:07:61:94: bc:22:d5:a0:a4:01:6d:38:69:24:bf:f1:50:e1:4f:4e:53:da: 5f:b0:8b:28:c3:17:53:a8:c3:da:68:42:73:f9:6e:13:65:4f: da:d7:bd:3a:9c:9c:ec:02:e8:e0:81:90:0e:42:04:aa:a5:d7: 7e:38:be:d4:85:07:f8:12:b9:57:9f:dc:48:31:84:fc:e6:92: cb:15:8f:d4:ff:b6:03:85:e4:e9:c9:22:7f:e2:42:a4:4e:29: 79:c6:23:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd5AA4btvRkbNDaNK0GFv/TjJekIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBF M0NDNTg4NjAeFw0yNjAzMjYxMTMzMjhaFw0yNjAzMjcxMzA2MjhaMDMxMTAvBgNV BAMTKEI3QURBNDJGNDYwQzhENkVERDE2NzRDMTUwRDRBN0M4NUJGODZDQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNNG6dq5KEY4US6UC78QIe+iE U14J09MPVF6entqFqQJ/g0j9a36JS40vB1v4J5vneQuOYnTAPeoqO4BDJh5K5jSF CrVygXCIdwO3mpHF0o0GbHhuOIr8Xw6FtsgToIIUfsnIg54vBI0HGpQ9Lhs6A4Py 7tgasmZWrAUr4p4z9hGJCSeTfKkQ//PoLSZ3dBDWBv+KwRRWuOFemmESGMc+IlJ5 aX73LMMJAgo5X1i6AXOy06mn4+cF+uvecWIZobbxHRpyllWY7lQWucihUq/sZKYA /3Pw1N3yIFU2FLrRI8sNqcH5K5NXM12FmYrYAUgfilZtOclpwnZ94SIHiBUpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUt62kL0YMjW7dFnTBUNSnyFv4bKQwHwYDVR0j BBgwFoAUwMIllbKRhI+/VoL2uafFIOPMWIYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTY0NTMxNC8wL0MwQzIyNTk1QjI5MTg0OEZCRjU2ODJGNkI5QTdD NTIwRTNDQzU4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBFM0NDNTg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE2NDUzMTQvMC9DMEMyMjU5NUIyOTE4 NDhGQkY1NjgyRjZCOUE3QzUyMEUzQ0M1ODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVRz0M5Rl3D0 nTIgTOrHeAFEXokC39sDY9ishVuG14kmu8MOASQS/NWVqjo8IT7/MyLxpsF16wFs F9nkN2SquANJ+wqWnsaif87TYWF5HM9p8ET8IqNgcRqGu6z4W4IXwXnx5KdDGIGT XbgVUzoDtGi7zZYij0DT7Qsg6NOQmoO5Toy+6Dq0x3nxr/JLmu/IG2OjSctrr7W+ puK+ZFMRB2GUvCLVoKQBbThpJL/xUOFPTlPaX7CLKMMXU6jD2mhCc/luE2VP2te9 Opyc7ALo4IGQDkIEqqXXfji+1IUH+BK5V5/cSDGE/OaSyxWP1P+2A4Xk6ckif+JC pE4pecYjXQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:11:37 2026 by rpki-client