$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft File: C05947A00A72638CD4BE67C4BF53224357777E0A.mft (raw, json) Hash identifier: euVCdfJSVwl7qn/VE8yJXrfML9Q8LLTRmdp89kiRaOQ= Subject key identifier: D9:02:C8:DF:18:55:A1:B8:31:3D:09:D0:A3:C3:38:6A:F1:71:3D:E6 Authority key identifier: C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A Certificate issuer: /CN=C05947A00A72638CD4BE67C4BF53224357777E0A Certificate serial: 7FF498DFA95494FE44DB388C230D88FF4128FF83 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft Manifest number: 68 Signing time: Fri 24 Jul 2026 19:01:56 +0000 Manifest this update: Fri 24 Jul 2026 18:56:56 +0000 Manifest next update: Sat 25 Jul 2026 22:25:56 +0000 Files and hashes: 1: C05947A00A72638CD4BE67C4BF53224357777E0A.crl (hash: /m7HZeI0cSgPFSI2N7jCyGpcvZWFnLbYFuboIeaHamg=) 2: 3130332e3231322e3130392e302f32342d3234203d3e2034383136.roa (hash: KKCqpde6Dhe4+7RyJYUAxN7mjehJt+BZVg2xReVpvv0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 22:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f4:98:df:a9:54:94:fe:44:db:38:8c:23:0d:88:ff:41:28:ff:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C05947A00A72638CD4BE67C4BF53224357777E0A Validity Not Before: Jul 24 18:56:56 2026 GMT Not After : Jul 25 22:25:56 2026 GMT Subject: CN=D902C8DF1855A1B8313D09D0A3C3386AF1713DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:e5:9a:e9:dc:c1:0d:80:49:f8:e8:a0:24: 10:0a:d4:64:c7:b7:50:f7:5f:19:55:7b:00:9e:a7: 26:91:da:60:b5:b0:19:7d:02:3a:d2:c1:14:bc:60: b6:87:2c:4c:49:c7:39:c4:4f:53:81:88:79:94:07: 54:ba:b1:84:6c:f6:2b:91:5c:26:83:2f:73:b0:35: 42:04:7c:4c:e9:92:38:c5:36:99:25:cf:c0:fb:66: 68:2f:b0:d1:3b:06:fa:80:c8:d0:72:3c:e1:33:4b: 8f:a4:98:a7:b5:1b:29:0e:7a:e1:03:76:c4:0b:fb: f1:90:94:c2:7f:f8:27:0d:b2:1c:4c:f2:cd:71:d8: 68:e4:b6:10:32:91:5f:4c:a5:60:12:a1:2c:b9:1d: a7:e9:f0:c2:03:51:a3:d8:d4:d3:47:34:0f:79:da: cc:b9:4f:df:63:fa:09:d0:79:f7:3a:52:f5:61:80: b2:ff:27:b6:f1:c0:68:0b:0a:86:68:db:ff:af:8e: b2:96:a5:1c:6c:96:40:69:6b:19:86:39:c7:e1:7c: fa:31:9b:13:39:86:3a:7c:7d:c8:f4:f7:d3:c8:67: c5:dc:68:1d:9b:aa:e4:96:3d:92:cb:56:3d:87:61: 23:55:c9:6b:6c:f6:13:14:d2:ee:51:75:3d:19:74: 9f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:02:C8:DF:18:55:A1:B8:31:3D:09:D0:A3:C3:38:6A:F1:71:3D:E6 X509v3 Authority Key Identifier: keyid:C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ec:c0:f6:2f:81:bc:99:8c:9c:b3:e8:62:9b:c3:e7:77:62: bd:bb:e2:82:de:6b:8a:ff:2d:b3:8f:5d:a9:f3:b8:ea:f4:13: a1:e5:e1:ba:0f:21:fb:c2:5c:82:34:06:23:aa:3b:64:44:e6: d0:15:87:5b:e1:c7:fc:40:37:9a:45:d5:9e:9b:03:40:14:fe: 01:4a:19:d7:da:70:a2:8a:5f:e7:82:ef:ca:6b:42:06:ee:91: 47:65:a6:26:eb:ac:e9:c2:79:31:4c:b3:cb:2e:a0:46:ad:9b: 07:1e:00:61:27:84:4c:84:95:d0:57:64:24:70:97:20:7e:6f: dd:05:53:b6:8d:98:03:9a:6e:1b:17:6a:f5:1f:fe:5d:27:d7: f0:67:6d:7a:4c:26:bb:a1:33:41:a7:8d:81:42:32:13:8d:2f: 96:59:0e:25:c1:32:b5:33:bd:e2:a0:c5:0b:e1:24:d3:23:1c: aa:1f:44:d9:7f:9e:55:fb:a5:ce:42:b2:a5:da:9d:5c:15:72: 2e:7f:d5:24:f6:2a:cd:d5:23:6f:a9:93:e9:ae:25:6c:98:94: 81:3d:d7:5a:2b:6a:ea:91:d5:57:f4:72:e5:a7:f1:6a:27:ef: f5:47:c9:fd:76:ab:c4:4a:0e:f1:15:10:42:5f:30:92:6d:8e: d3:ad:99:c1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf/SY36lUlP5E2ziMIw2I/0Eo/4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1 Nzc3N0UwQTAeFw0yNjA3MjQxODU2NTZaFw0yNjA3MjUyMjI1NTZaMDMxMTAvBgNV BAMTKEQ5MDJDOERGMTg1NUExQjgzMTNEMDlEMEEzQzMzODZBRjE3MTNERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa1OWa6dzBDYBJ+OigJBAK1GTH t1D3XxlVewCepyaR2mC1sBl9AjrSwRS8YLaHLExJxznET1OBiHmUB1S6sYRs9iuR XCaDL3OwNUIEfEzpkjjFNpklz8D7ZmgvsNE7BvqAyNByPOEzS4+kmKe1GykOeuED dsQL+/GQlMJ/+CcNshxM8s1x2GjkthAykV9MpWASoSy5Hafp8MIDUaPY1NNHNA95 2sy5T99j+gnQefc6UvVhgLL/J7bxwGgLCoZo2/+vjrKWpRxslkBpaxmGOcfhfPox mxM5hjp8fcj099PIZ8XcaB2bquSWPZLLVj2HYSNVyWts9hMU0u5RdT0ZdJ/nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2QLI3xhVobgxPQnQo8M4avFxPeYwHwYDVR0j BBgwFoAUwFlHoApyY4zUvmfEv1MiQ1d3fgowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA2NzkzODI2OTg4ODUyNS8wL0MwNTk0N0EwMEE3MjYzOENENEJFNjdDNEJGNTMy MjQzNTc3NzdFMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1Nzc3N0UwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNjc5MzgyNjk4ODg1MjUvMC9DMDU5NDdBMDBBNzI2 MzhDRDRCRTY3QzRCRjUzMjI0MzU3Nzc3RTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuzA9i+BvJmM nLPoYpvD53divbvigt5riv8ts49dqfO46vQToeXhug8h+8JcgjQGI6o7ZETm0BWH W+HH/EA3mkXVnpsDQBT+AUoZ19pwoopf54LvymtCBu6RR2WmJuus6cJ5MUyzyy6g Rq2bBx4AYSeETISV0FdkJHCXIH5v3QVTto2YA5puGxdq9R/+XSfX8Gdtekwmu6Ez QaeNgUIyE40vllkOJcEytTO94qDFC+Ek0yMcqh9E2X+eVfulzkKypdqdXBVyLn/V JPYqzdUjb6mT6a4lbJiUgT3XWitq6pHVV/Ry5afxaifv9UfJ/XarxEoO8RUQQl8w km2O062ZwQ== -----END CERTIFICATE-----Generated at Fri Jul 24 22:18:36 2026 by rpki-client