$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft File: C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft (raw, json) Hash identifier: 27MRD7Qu5evgvQr1/C+E4cleMnL06pW9fw6h7IGnAGI= Subject key identifier: 45:55:12:37:00:AB:73:83:69:C5:2B:99:2D:27:E8:46:F5:18:23:8A Authority key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 Certificate issuer: /CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Certificate serial: 05DFE1D090EA0EA248ED7FAF774567F4EF6DBDC8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 08:43:17 +0000 Manifest this update: Mon 02 Mar 2026 08:38:17 +0000 Manifest next update: Tue 03 Mar 2026 12:16:17 +0000 Files and hashes: 1: C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl (hash: AD+xISt+WO1oww5/OPhR7lz+kq8KFGoFfETexLf0ano=) 2: 3130332e3138362e342e302f32332d3233203d3e20313436373639.roa (hash: KnnUSl5FdwvWqZ4/LTb7QCPFknrMDu6wSlVCKOn0qY0=) 3: 3130332e3138362e342e302f32332d3233203d3e2034383337.roa (hash: g16mnH71Qj1bPuqlcVtQzrjwxCLSRBcOfDTFIIRHIWM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:df:e1:d0:90:ea:0e:a2:48:ed:7f:af:77:45:67:f4:ef:6d:bd:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Validity Not Before: Mar 2 08:38:17 2026 GMT Not After : Mar 3 12:16:17 2026 GMT Subject: CN=4555123700AB738369C52B992D27E846F518238A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:27:27:50:c0:df:4d:ea:c2:5b:0c:a1:e8: 62:bc:7f:e0:9e:84:ca:44:4c:0a:83:6f:c1:90:ac: 76:e8:33:b3:4e:2e:0b:95:2c:46:9d:01:da:b1:2d: aa:b6:6c:ed:ba:84:35:49:8f:56:67:e3:1b:cb:42: e7:24:11:99:39:c4:61:c6:b3:e3:12:b5:35:75:34: a1:a5:9a:74:9e:2c:10:1f:9d:5e:23:43:97:63:84: c9:c6:5c:f7:ac:bc:76:37:c0:20:17:84:0a:e0:23: a0:19:f0:f0:b7:97:f3:5b:cb:b0:91:2b:05:98:c0: 31:97:08:3a:d9:e8:6e:63:0b:0a:7b:a6:e6:e1:64: 5a:dc:fb:4b:60:59:7f:75:52:a3:36:5a:58:f5:de: c3:64:93:f7:bf:22:92:bb:73:da:b1:4b:6b:9b:d8: 10:87:a2:4e:0a:34:81:ca:11:25:77:4a:e0:b4:77: 9f:fb:77:56:81:b4:7f:d8:c4:4d:35:ed:39:05:40: 2a:4b:c0:69:d2:f0:96:08:03:df:20:c7:85:1e:cc: 44:07:ce:f0:e6:c5:75:41:28:87:db:d9:54:15:ad: 0f:40:d1:cb:3d:f0:dd:61:3a:b3:c5:c3:49:21:54: ef:14:24:78:8d:b6:03:e7:fa:32:a4:db:92:4b:72: a1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:55:12:37:00:AB:73:83:69:C5:2B:99:2D:27:E8:46:F5:18:23:8A X509v3 Authority Key Identifier: keyid:C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:52:f6:5e:2b:ad:62:1e:e3:a1:96:b7:7d:54:eb:e8:e5:39: 76:35:29:d7:8f:fa:2e:34:ff:7f:c7:12:c3:4f:d5:f5:cf:ea: 04:3c:bd:b2:47:d2:a6:df:9b:83:a9:88:e3:bc:6f:82:93:da: ae:86:be:64:c1:5c:9b:b8:93:7b:df:65:ca:8d:6f:ac:10:db: cf:da:d8:eb:22:45:71:3c:ab:f8:74:f7:87:48:75:f5:4d:21: 82:56:dc:6a:08:a7:bc:de:3c:39:1a:31:89:9b:21:88:73:7a: 4b:c0:c5:e8:a7:91:32:9a:ab:3f:b3:0f:52:72:9d:74:72:44: 4f:88:5c:2a:5a:28:ff:e1:8e:b6:00:4e:59:81:e0:81:7b:0c: d6:53:6b:14:b5:7c:33:cb:7e:c6:a2:de:80:9b:eb:e5:de:6d: c9:77:ea:45:60:72:b9:14:8f:2c:1d:b3:85:60:32:50:75:ac: 89:89:f8:10:fb:84:38:67:8e:e0:94:38:eb:20:ae:18:de:1b: 6b:36:bb:8a:27:19:cc:48:ad:06:52:ea:33:3c:f7:bb:46:4b: f7:06:44:73:81:a8:81:4f:c3:df:9f:19:42:04:1c:1a:e7:f6: d3:bb:9c:68:42:6d:bc:2f:fc:b3:be:19:b0:3d:f6:b9:9f:f8: 11:19:82:d1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBd/h0JDqDqJI7X+vd0Vn9O9tvcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBF M0NDNTg4NjAeFw0yNjAzMDIwODM4MTdaFw0yNjAzMDMxMjE2MTdaMDMxMTAvBgNV BAMTKDQ1NTUxMjM3MDBBQjczODM2OUM1MkI5OTJEMjdFODQ2RjUxODIzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dScnUMDfTerCWwyh6GK8f+Ce hMpETAqDb8GQrHboM7NOLguVLEadAdqxLaq2bO26hDVJj1Zn4xvLQuckEZk5xGHG s+MStTV1NKGlmnSeLBAfnV4jQ5djhMnGXPesvHY3wCAXhArgI6AZ8PC3l/Nby7CR KwWYwDGXCDrZ6G5jCwp7pubhZFrc+0tgWX91UqM2Wlj13sNkk/e/IpK7c9qxS2ub 2BCHok4KNIHKESV3SuC0d5/7d1aBtH/YxE017TkFQCpLwGnS8JYIA98gx4UezEQH zvDmxXVBKIfb2VQVrQ9A0cs98N1hOrPFw0khVO8UJHiNtgPn+jKk25JLcqHTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURVUSNwCrc4NpxSuZLSfoRvUYI4owHwYDVR0j BBgwFoAUwMIllbKRhI+/VoL2uafFIOPMWIYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTY0NTMxNC8wL0MwQzIyNTk1QjI5MTg0OEZCRjU2ODJGNkI5QTdD NTIwRTNDQzU4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBFM0NDNTg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE2NDUzMTQvMC9DMEMyMjU5NUIyOTE4 NDhGQkY1NjgyRjZCOUE3QzUyMEUzQ0M1ODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVL2XiutYh7j oZa3fVTr6OU5djUp14/6LjT/f8cSw0/V9c/qBDy9skfSpt+bg6mI47xvgpParoa+ ZMFcm7iTe99lyo1vrBDbz9rY6yJFcTyr+HT3h0h19U0hglbcaginvN48ORoxiZsh iHN6S8DF6KeRMpqrP7MPUnKddHJET4hcKloo/+GOtgBOWYHggXsM1lNrFLV8M8t+ xqLegJvr5d5tyXfqRWByuRSPLB2zhWAyUHWsiYn4EPuEOGeO4JQ46yCuGN4baza7 iicZzEitBlLqMzz3u0ZL9wZEc4GogU/D358ZQgQcGuf207ucaEJtvC/8s74ZsD32 uZ/4ERmC0Q== -----END CERTIFICATE-----Generated at Mon Mar 2 12:44:50 2026 by rpki-client