$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft File: C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft (raw, json) Hash identifier: /rOPfC/Hn+MLfrq3JR8bump4iZo+XqG5mEr7vBYY0Bk= Subject key identifier: 89:28:D3:89:CD:84:C5:55:C5:1E:1E:D6:78:1B:61:11:4D:32:EE:76 Authority key identifier: C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 Certificate issuer: /CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Certificate serial: 5ECAAFB064EEB0B409F3D2ED9B3677787B925C89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 18:04:46 +0000 Manifest this update: Fri 17 Apr 2026 17:59:46 +0000 Manifest next update: Sat 18 Apr 2026 19:32:46 +0000 Files and hashes: 1: 3130332e3138362e342e302f32332d3233203d3e2034383337.roa (hash: g16mnH71Qj1bPuqlcVtQzrjwxCLSRBcOfDTFIIRHIWM=) 2: C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl (hash: ifa0Be62ciuZBU+WeDiYn5mCqN34464/NlfzIquioeU=) 3: 3130332e3138362e342e302f32332d3233203d3e20313436373639.roa (hash: KnnUSl5FdwvWqZ4/LTb7QCPFknrMDu6wSlVCKOn0qY0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ca:af:b0:64:ee:b0:b4:09:f3:d2:ed:9b:36:77:78:7b:92:5c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0C22595B291848FBF5682F6B9A7C520E3CC5886 Validity Not Before: Apr 17 17:59:46 2026 GMT Not After : Apr 18 19:32:46 2026 GMT Subject: CN=8928D389CD84C555C51E1ED6781B61114D32EE76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:ba:64:69:f1:54:63:0f:fa:93:ec:a9:2a: ea:61:fa:39:63:45:f0:2a:c5:10:cf:b0:cd:10:be: 0d:fe:6e:e8:67:34:37:42:48:e3:b8:af:97:19:3c: 1b:ab:3f:fd:0b:3c:65:5a:d1:8e:08:85:bf:24:bf: da:1f:4d:0d:25:ae:8b:36:ac:d2:35:8c:22:d9:24: 8d:e0:50:ed:77:bb:f8:89:ee:4b:e9:e1:bd:70:64: d1:a7:64:6f:5f:20:16:2b:76:b8:be:39:5b:ef:9d: 49:a6:24:54:d3:0e:1b:d6:f4:69:60:d2:2c:fe:7d: 6d:24:ba:23:bf:37:e2:3c:17:5c:4c:9a:e8:f7:b4: fd:66:b2:bc:2e:8d:cb:84:5a:3c:bc:ad:cd:38:a0: 1c:af:ec:c6:25:c0:5e:6b:fd:fe:77:9c:f0:0f:7b: 60:e5:c3:7f:08:ad:da:ac:ea:2f:1a:8c:b3:9c:84: 22:25:b8:7a:04:34:ec:ed:fd:0c:14:b9:fb:d9:9b: 10:fc:dd:9d:ac:06:17:e6:75:f8:d5:ab:ab:ff:18: 72:e6:2f:7d:42:87:47:ae:c9:7b:04:e3:8d:db:78: cc:42:2a:7f:6e:3f:b0:2a:32:a5:87:5a:d4:ad:04: 15:7b:8c:d3:85:ef:86:be:f9:b4:45:56:ed:5f:4e: 1e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:28:D3:89:CD:84:C5:55:C5:1E:1E:D6:78:1B:61:11:4D:32:EE:76 X509v3 Authority Key Identifier: keyid:C0:C2:25:95:B2:91:84:8F:BF:56:82:F6:B9:A7:C5:20:E3:CC:58:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C0C22595B291848FBF5682F6B9A7C520E3CC5886.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061645314/0/C0C22595B291848FBF5682F6B9A7C520E3CC5886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6f:fb:38:70:fc:4d:e1:83:d7:b8:6b:8d:9d:8a:9d:08:d0: 9e:24:d3:49:43:de:01:4f:f1:d6:54:b0:10:d6:02:9c:18:09: 76:59:83:37:7d:ce:a8:3b:0d:24:4c:2f:03:71:d7:dc:e3:c3: 16:87:15:28:13:ce:9f:77:b5:ed:48:a6:f7:9e:4c:a7:10:ea: f1:d3:03:f2:0c:d8:b9:a5:de:e5:8c:f9:63:89:53:0b:59:2b: f2:f6:42:7e:97:a8:44:8e:67:35:10:2b:3f:9d:83:48:08:b9: 3c:9b:ba:d1:6d:39:00:51:6b:c5:35:30:19:81:6d:4f:4f:38: 9e:72:99:5b:e2:4b:4f:1a:07:ae:10:ee:d0:fd:5d:45:2d:c3: 48:c5:e8:ab:01:6a:04:82:45:f1:83:83:a2:37:2d:eb:7f:dc: c9:91:ec:3f:b4:96:88:5c:d5:e1:a6:ba:a8:76:ff:c3:e6:c0: 55:6d:e1:2b:30:15:15:75:87:30:17:b3:30:fb:92:49:95:4b: d3:bf:3f:d6:4b:58:26:b0:a0:40:2b:39:9f:32:d1:06:9b:cd: 37:42:bc:39:28:11:78:0c:1f:f0:fa:e8:2a:a7:09:b3:9a:58: f4:17:8f:6d:c4:58:7b:18:79:22:2c:a2:6f:64:7d:ab:90:b1: 9e:75:39:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXsqvsGTusLQJ89LtmzZ3eHuSXIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBF M0NDNTg4NjAeFw0yNjA0MTcxNzU5NDZaFw0yNjA0MTgxOTMyNDZaMDMxMTAvBgNV BAMTKDg5MjhEMzg5Q0Q4NEM1NTVDNTFFMUVENjc4MUI2MTExNEQzMkVFNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFAbpkafFUYw/6k+ypKuph+jlj RfAqxRDPsM0Qvg3+buhnNDdCSOO4r5cZPBurP/0LPGVa0Y4Ihb8kv9ofTQ0lros2 rNI1jCLZJI3gUO13u/iJ7kvp4b1wZNGnZG9fIBYrdri+OVvvnUmmJFTTDhvW9Glg 0iz+fW0kuiO/N+I8F1xMmuj3tP1msrwujcuEWjy8rc04oByv7MYlwF5r/f53nPAP e2Dlw38Irdqs6i8ajLOchCIluHoENOzt/QwUufvZmxD83Z2sBhfmdfjVq6v/GHLm L31Ch0euyXsE443beMxCKn9uP7AqMqWHWtStBBV7jNOF74a++bRFVu1fTh4DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiSjTic2ExVXFHh7WeBthEU0y7nYwHwYDVR0j BBgwFoAUwMIllbKRhI+/VoL2uafFIOPMWIYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTY0NTMxNC8wL0MwQzIyNTk1QjI5MTg0OEZCRjU2ODJGNkI5QTdD NTIwRTNDQzU4ODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzBDMjI1OTVCMjkxODQ4RkJGNTY4MkY2QjlBN0M1MjBFM0NDNTg4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE2NDUzMTQvMC9DMEMyMjU5NUIyOTE4 NDhGQkY1NjgyRjZCOUE3QzUyMEUzQ0M1ODg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiW/7OHD8TeGD 17hrjZ2KnQjQniTTSUPeAU/x1lSwENYCnBgJdlmDN33OqDsNJEwvA3HX3OPDFocV KBPOn3e17Uim955MpxDq8dMD8gzYuaXe5Yz5Y4lTC1kr8vZCfpeoRI5nNRArP52D SAi5PJu60W05AFFrxTUwGYFtT084nnKZW+JLTxoHrhDu0P1dRS3DSMXoqwFqBIJF 8YODojct63/cyZHsP7SWiFzV4aa6qHb/w+bAVW3hKzAVFXWHMBezMPuSSZVL078/ 1ktYJrCgQCs5nzLRBpvNN0K8OSgReAwf8ProKqcJs5pY9BePbcRYexh5Iiyib2R9 q5CxnnU5vg== -----END CERTIFICATE-----Generated at Sat Apr 18 01:44:10 2026 by rpki-client