$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft File: C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft (raw, json) Hash identifier: YIYZpbp26eAs0s4GwabtqPUyNg5nDsGSjhB4DQmez0E= Subject key identifier: 98:D1:E8:E1:8D:5F:87:BD:3B:BA:C4:C3:08:84:F3:F5:D2:E0:A4:C1 Authority key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 Certificate issuer: /CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Certificate serial: 0D18940F45A66666C86EFB3D6B8CD9D51DA250F4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 08:28:53 +0000 Manifest this update: Wed 29 Jul 2026 08:23:53 +0000 Manifest next update: Thu 30 Jul 2026 12:05:53 +0000 Files and hashes: 1: C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl (hash: dgzQkmN1IzSK8/hFEr06jT3uwOGw2tuFJcQcE0oWQOo=) 2: 3130332e3138362e342e302f32332d3233203d3e2034383337.roa (hash: g16mnH71Qj1bPuqlcVtQzrjwxCLSRBcOfDTFIIRHIWM=) 3: 3130332e3138362e342e302f32332d3233203d3e20313436373639.roa (hash: KnnUSl5FdwvWqZ4/LTb7QCPFknrMDu6wSlVCKOn0qY0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 12:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:18:94:0f:45:a6:66:66:c8:6e:fb:3d:6b:8c:d9:d5:1d:a2:50:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Validity Not Before: Jul 29 08:23:53 2026 GMT Not After : Jul 30 12:05:53 2026 GMT Subject: CN=98D1E8E18D5F87BD3BBAC4C30884F3F5D2E0A4C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:34:56:df:6d:e8:e2:7f:80:1d:51:30:2b: 6c:d7:1e:17:e6:31:43:0b:24:b4:64:b7:f9:a7:9d: b1:18:38:ba:86:1a:38:76:ca:1c:31:cd:3b:ea:d1: b0:04:8d:6a:b5:fc:dc:d9:55:ad:4c:fb:df:ef:a2: 31:9f:8c:c1:98:b5:f0:b5:9c:33:90:55:4a:e7:15: 46:58:a4:73:0a:22:34:d0:1f:95:66:45:bd:8d:e1: b1:a1:f0:9d:01:0a:42:57:69:d9:86:29:0f:f8:e3: 89:ff:88:4f:df:55:91:d9:4a:e3:df:de:91:1a:b2: d9:dc:d9:73:5c:ca:c6:8d:51:9c:bb:2f:6d:7f:42: 2d:d3:e6:54:69:cc:de:ce:2e:09:cd:88:ee:3a:a6: 89:11:ad:0a:fb:ed:a8:ea:14:cd:12:ba:d6:83:eb: 1c:1a:f9:5a:3c:b0:02:ed:55:68:2c:be:bb:6b:bf: 4b:62:00:57:69:35:3f:4e:41:cc:fc:55:6d:62:bd: 4e:eb:ef:22:44:c4:5c:bc:2e:65:02:d4:3f:46:a4: ea:cc:84:77:f7:2c:cf:de:5a:2a:26:f0:4f:05:40: 5e:e9:ed:be:32:8c:4f:db:d8:e4:8c:ce:c3:f7:4c: 03:58:70:c5:4d:bc:a8:c7:2d:88:cf:0a:9a:08:0a: 35:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D1:E8:E1:8D:5F:87:BD:3B:BA:C4:C3:08:84:F3:F5:D2:E0:A4:C1 X509v3 Authority Key Identifier: keyid:C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:63:ee:eb:fc:ca:9b:12:95:30:91:70:ae:e6:84:4d:03:81: 45:91:53:92:ba:52:01:06:5e:7d:2b:bf:a2:c4:e5:47:73:70: c5:bf:4c:eb:65:10:e7:a6:3b:86:3c:9a:f8:5f:18:0a:5f:e0: e4:e7:09:22:4a:41:b6:db:56:a6:f9:96:53:82:03:d9:b6:b7: b7:6b:2e:ac:2a:a8:f6:30:89:0e:33:7d:97:cc:ba:17:bd:1b: 43:41:1b:2a:87:a7:7f:86:8e:39:0b:f3:7d:c6:4b:d3:8f:ac: d6:ef:cc:69:e4:24:ab:f1:99:17:4c:bb:60:b0:40:70:1c:c5: 01:4c:5e:1e:d7:0d:b8:89:d7:85:a1:aa:ea:0a:a5:2a:de:af: 4c:6c:3d:36:42:c1:bb:da:4b:75:5e:3b:ef:fa:08:19:58:85: cd:c8:fd:cf:05:cd:82:33:2d:bb:1d:a1:a8:64:38:32:64:2d: 3f:0b:03:1f:3f:93:11:ad:6d:60:11:a6:c5:b7:cc:57:27:a9: 4a:e5:da:76:e0:de:e4:bb:27:63:1f:e7:20:a5:4f:c8:e4:bd: 33:58:b3:50:e6:df:99:3f:f8:e0:0c:b8:a2:55:c1:af:ac:49: 9e:15:17:30:77:cd:7f:f9:be:40:c4:ae:0d:c0:e4:f7:0a:c0: b0:77:e9:79 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDRiUD0WmZmbIbvs9a4zZ1R2iUPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBF M0NDNTg4NjAeFw0yNjA3MjkwODIzNTNaFw0yNjA3MzAxMjA1NTNaMDMxMTAvBgNV BAMTKDk4RDFFOEUxOEQ1Rjg3QkQzQkJBQzRDMzA4ODRGM0Y1RDJFMEE0QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmzRW323o4n+AHVEwK2zXHhfm MUMLJLRkt/mnnbEYOLqGGjh2yhwxzTvq0bAEjWq1/NzZVa1M+9/vojGfjMGYtfC1 nDOQVUrnFUZYpHMKIjTQH5VmRb2N4bGh8J0BCkJXadmGKQ/444n/iE/fVZHZSuPf 3pEastnc2XNcysaNUZy7L21/Qi3T5lRpzN7OLgnNiO46pokRrQr77ajqFM0SutaD 6xwa+Vo8sALtVWgsvrtrv0tiAFdpNT9OQcz8VW1ivU7r7yJExFy8LmUC1D9GpOrM hHf3LM/eWiom8E8FQF7p7b4yjE/b2OSMzsP3TANYcMVNvKjHLYjPCpoICjVbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmNHo4Y1fh707usTDCITz9dLgpMEwHwYDVR0j BBgwFoAUwMIllbKRhI+/VoL2uafFIOPMWIYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTY0NTMxNC8wL0MwQzIyNTk1QjI5MTg0OEZCRjU2ODJGNkI5QTdD NTIwRTNDQzU4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBFM0NDNTg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE2NDUzMTQvMC9DMEMyMjU5NUIyOTE4 NDhGQkY1NjgyRjZCOUE3QzUyMEUzQ0M1ODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGPu6/zKmxKV MJFwruaETQOBRZFTkrpSAQZefSu/osTlR3Nwxb9M62UQ56Y7hjya+F8YCl/g5OcJ IkpBtttWpvmWU4ID2ba3t2surCqo9jCJDjN9l8y6F70bQ0EbKoenf4aOOQvzfcZL 04+s1u/MaeQkq/GZF0y7YLBAcBzFAUxeHtcNuInXhaGq6gqlKt6vTGw9NkLBu9pL dV477/oIGViFzcj9zwXNgjMtux2hqGQ4MmQtPwsDHz+TEa1tYBGmxbfMVyepSuXa duDe5LsnYx/nIKVPyOS9M1izUObfmT/44Ay4olXBr6xJnhUXMHfNf/m+QMSuDcDk 9wrAsHfpeQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:02 2026 by rpki-client