$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft File: C05947A00A72638CD4BE67C4BF53224357777E0A.mft (raw, json) Hash identifier: 70H/srISUWq9dAPpVFAZVoPMvtXDzFl9D8p6RNUyMBs= Subject key identifier: B7:2C:76:57:C8:6D:BD:A5:EC:92:5D:AC:4B:14:F8:1E:66:AE:E6:EA Authority key identifier: C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A Certificate issuer: /CN=C05947A00A72638CD4BE67C4BF53224357777E0A Certificate serial: 3AB112E81B0C3C313A314CD6EBE5C47AC17BA2EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft Manifest number: A2 Signing time: Sun 27 Sep 2026 01:24:34 +0000 Manifest this update: Sun 27 Sep 2026 01:19:33 +0000 Manifest next update: Wed 30 Sep 2026 02:56:33 +0000 Files and hashes: 1: C05947A00A72638CD4BE67C4BF53224357777E0A.crl (hash: wYghV2ggDcDfVKzgM6I9T8Sv+t7vjFpKeK80S5q+yGQ=) 2: 3130332e3231322e3130392e302f32342d3234203d3e2034383136.roa (hash: KKCqpde6Dhe4+7RyJYUAxN7mjehJt+BZVg2xReVpvv0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b1:12:e8:1b:0c:3c:31:3a:31:4c:d6:eb:e5:c4:7a:c1:7b:a2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C05947A00A72638CD4BE67C4BF53224357777E0A Validity Not Before: Sep 27 01:19:33 2026 GMT Not After : Sep 30 02:56:33 2026 GMT Subject: CN=B72C7657C86DBDA5EC925DAC4B14F81E66AEE6EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:4a:1f:97:44:9d:db:78:56:1f:0c:15:76: 22:54:32:57:e7:d0:5c:68:13:3b:78:87:85:f7:6c: bb:3e:8b:d0:2d:1c:4f:95:f4:31:82:0a:7a:bc:52: 5f:01:bf:ae:d7:ad:44:23:7b:9a:a2:5a:0d:21:57: fc:28:ff:02:fe:7e:f9:c2:aa:75:99:c5:e4:24:52: c9:cc:5e:c6:7a:5e:98:df:4e:b9:89:f7:89:ef:2c: cd:45:a4:86:f5:b2:48:87:6f:3f:b0:fa:91:95:b3: ce:04:7c:19:c7:5a:38:5a:b0:ad:64:f1:6d:62:da: c6:2b:c3:68:8a:89:65:6e:c7:38:06:09:1a:e2:38: 82:70:87:de:7f:4c:99:ce:0d:49:b7:d4:bc:cf:29: b1:58:1a:64:a2:07:0a:d1:90:ca:52:21:83:c2:99: ed:8d:35:83:7e:e8:03:09:26:c9:77:18:c8:bc:30: c9:d6:e6:6d:77:2d:90:71:3a:a3:8b:f0:03:8d:c4: 77:6b:ea:8f:34:2e:b7:b2:38:7f:f5:95:86:4f:19: 20:ff:50:3c:5a:67:15:a7:28:e9:86:54:6d:e1:85: e5:06:bb:d6:08:9e:54:57:93:48:17:37:7f:50:be: 08:31:da:92:79:99:cc:45:34:3c:38:ac:0c:dc:04: e7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2C:76:57:C8:6D:BD:A5:EC:92:5D:AC:4B:14:F8:1E:66:AE:E6:EA X509v3 Authority Key Identifier: keyid:C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:ca:c4:6e:41:1a:39:40:01:2a:7f:d2:4f:c6:ff:cd:90:75: 9e:47:6c:c4:e5:fd:eb:7b:b7:1b:43:19:42:8c:b2:9d:df:2f: 2b:8b:2b:a6:35:32:f5:33:5f:c9:18:99:2c:29:7d:65:74:f9: 76:bd:35:f4:24:fa:ea:bf:56:e7:6b:17:87:9b:53:62:dd:26: d0:b4:6e:29:74:84:13:48:1f:c8:4b:f0:8b:6b:40:a0:ee:17: e7:2c:d8:ef:73:63:c2:d4:60:95:64:91:f8:67:f8:a2:1e:8d: 5e:d4:20:c9:01:72:ae:52:eb:a0:15:cc:af:34:72:86:bb:a5: 1c:92:2d:e5:ca:4c:d9:88:d8:86:69:e5:48:52:19:7f:5b:8e: ff:63:5f:07:f8:91:d1:f2:b3:50:86:7c:8b:43:93:e6:8e:44: 72:dc:87:39:14:fc:80:88:14:2c:86:75:cf:92:29:26:04:b9: cc:91:b0:39:33:63:77:1e:8a:a8:e8:04:99:b4:89:a5:a9:80: 2b:30:55:1a:f1:8c:54:c6:ab:e5:47:24:e5:29:af:ab:d2:bc: 3b:dc:27:52:83:ba:e8:23:36:65:4f:66:6b:78:2f:5b:cd:92: ab:d8:a9:a5:81:a5:b4:87:30:05:f6:4d:70:b5:90:fa:c3:70: 4c:3c:1c:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOrES6BsMPDE6MUzW6+XEesF7ouswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1 Nzc3N0UwQTAeFw0yNjA5MjcwMTE5MzNaFw0yNjA5MzAwMjU2MzNaMDMxMTAvBgNV BAMTKEI3MkM3NjU3Qzg2REJEQTVFQzkyNURBQzRCMTRGODFFNjZBRUU2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYh0ofl0Sd23hWHwwVdiJUMlfn 0FxoEzt4h4X3bLs+i9AtHE+V9DGCCnq8Ul8Bv67XrUQje5qiWg0hV/wo/wL+fvnC qnWZxeQkUsnMXsZ6XpjfTrmJ94nvLM1FpIb1skiHbz+w+pGVs84EfBnHWjhasK1k 8W1i2sYrw2iKiWVuxzgGCRriOIJwh95/TJnODUm31LzPKbFYGmSiBwrRkMpSIYPC me2NNYN+6AMJJsl3GMi8MMnW5m13LZBxOqOL8AONxHdr6o80LreyOH/1lYZPGSD/ UDxaZxWnKOmGVG3hheUGu9YInlRXk0gXN39Qvggx2pJ5mcxFNDw4rAzcBOexAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtyx2V8htvaXskl2sSxT4Hmau5uowHwYDVR0j BBgwFoAUwFlHoApyY4zUvmfEv1MiQ1d3fgowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA2NzkzODI2OTg4ODUyNS8wL0MwNTk0N0EwMEE3MjYzOENENEJFNjdDNEJGNTMy MjQzNTc3NzdFMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1Nzc3N0UwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNjc5MzgyNjk4ODg1MjUvMC9DMDU5NDdBMDBBNzI2 MzhDRDRCRTY3QzRCRjUzMjI0MzU3Nzc3RTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8rEbkEaOUAB Kn/ST8b/zZB1nkdsxOX963u3G0MZQoyynd8vK4srpjUy9TNfyRiZLCl9ZXT5dr01 9CT66r9W52sXh5tTYt0m0LRuKXSEE0gfyEvwi2tAoO4X5yzY73NjwtRglWSR+Gf4 oh6NXtQgyQFyrlLroBXMrzRyhrulHJIt5cpM2YjYhmnlSFIZf1uO/2NfB/iR0fKz UIZ8i0OT5o5EctyHORT8gIgULIZ1z5IpJgS5zJGwOTNjdx6KqOgEmbSJpamAKzBV GvGMVMar5Uck5Smvq9K8O9wnUoO66CM2ZU9ma3gvW82Sq9ippYGltIcwBfZNcLWQ +sNwTDwcQQ== -----END CERTIFICATE-----Generated at Tue Sep 29 05:10:22 2026 by rpki-client