$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft File: C05947A00A72638CD4BE67C4BF53224357777E0A.mft (raw, json) Hash identifier: WuniMOBnD8UVZlgqYzzDtPeKJ/7G46MzBXEDK2IOsFw= Subject key identifier: 7B:3D:0D:CC:B8:50:14:F0:2D:34:A8:0D:57:44:CD:6F:CE:28:67:0A Authority key identifier: C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A Certificate issuer: /CN=C05947A00A72638CD4BE67C4BF53224357777E0A Certificate serial: 2A10E9EA568141342BD92BBA0A9D61CAA6A392D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft Manifest number: 6D Signing time: Tue 28 Jul 2026 17:22:20 +0000 Manifest this update: Tue 28 Jul 2026 17:17:20 +0000 Manifest next update: Wed 29 Jul 2026 17:59:20 +0000 Files and hashes: 1: 3130332e3231322e3130392e302f32342d3234203d3e2034383136.roa (hash: KKCqpde6Dhe4+7RyJYUAxN7mjehJt+BZVg2xReVpvv0=) 2: C05947A00A72638CD4BE67C4BF53224357777E0A.crl (hash: Aha9XwF+0zR303If3xNiMk6PmjR9ar9cK0YJ5ytzmBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:10:e9:ea:56:81:41:34:2b:d9:2b:ba:0a:9d:61:ca:a6:a3:92:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C05947A00A72638CD4BE67C4BF53224357777E0A Validity Not Before: Jul 28 17:17:20 2026 GMT Not After : Jul 29 17:59:20 2026 GMT Subject: CN=7B3D0DCCB85014F02D34A80D5744CD6FCE28670A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:af:c9:0a:1a:a2:ef:10:da:a4:16:69:6c: ec:35:41:46:7f:b9:8f:65:89:91:1a:95:c0:f9:4d: 12:19:ae:e1:10:00:90:6b:80:84:ef:58:c0:4f:6a: 07:d3:f8:33:5e:b2:b1:f2:c2:d3:7a:13:6f:c1:5a: 1e:a5:fe:09:16:09:f4:0c:a7:54:fe:45:f0:7c:a1: fb:cd:39:34:ac:90:be:84:30:23:ef:ff:6d:f6:58: a6:32:da:0c:5a:f6:f7:73:e5:11:f2:24:d5:ae:f7: 93:a9:4e:2b:57:67:aa:e9:31:45:67:18:ad:d0:93: ab:47:c4:c0:64:44:22:ec:06:fd:71:30:26:27:eb: b8:00:6f:75:bb:ab:1c:a1:16:e0:cf:83:c1:1b:01: fa:fd:12:c2:e0:ed:ef:bb:a0:8c:a8:58:d2:15:1c: 4c:db:0e:7f:51:99:3f:5d:72:e5:ac:eb:42:05:20: 29:9a:68:5e:82:8b:f1:a9:05:e4:b7:06:e2:58:6d: 18:56:d0:cc:e3:92:f0:c4:42:9f:2e:58:3d:e2:14: 3c:ab:f1:0d:24:85:61:dc:a8:75:64:eb:78:a9:c0: 85:9a:cb:11:69:42:64:ab:a5:7e:34:7f:ba:96:f7: cc:53:21:07:03:f6:29:ff:c9:f1:ae:23:38:cb:5e: 39:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3D:0D:CC:B8:50:14:F0:2D:34:A8:0D:57:44:CD:6F:CE:28:67:0A X509v3 Authority Key Identifier: keyid:C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ba:1d:0a:e0:99:0f:a9:2b:9e:fc:46:c5:fa:52:50:99:2e: 92:4c:65:8f:f1:bd:54:7c:b9:02:29:88:fb:de:38:56:25:ce: b0:31:a8:a0:61:ec:15:55:6a:1f:a5:de:6c:2d:49:de:6e:90: 88:86:5c:c8:63:cc:28:4d:04:88:38:13:10:e4:a7:9c:20:5f: 42:b9:f6:48:3c:47:54:72:a5:f3:dc:69:e2:03:2b:d9:05:89: 43:9e:47:d2:13:a1:34:04:40:20:ea:17:29:07:78:25:8e:68: 0d:18:c2:b8:b9:95:a9:93:72:22:c1:83:d6:d0:0e:bc:7d:13: 09:2f:5d:df:e7:92:34:61:f6:10:c3:3f:62:17:57:85:7e:92: 8a:52:d7:89:7e:c2:59:81:d5:8b:8a:80:c6:93:4f:7c:2c:0a: 58:f3:41:22:30:ec:60:89:f2:d7:b1:39:c8:e7:80:ed:1f:0a: 38:44:11:5d:ea:1c:dd:c8:a6:47:c0:ee:0c:02:2f:77:43:5d: ba:65:c6:1f:de:18:e8:ab:7c:89:c8:f6:17:7a:c6:62:46:f8: 0b:0c:b2:70:99:2f:aa:b1:08:bb:02:59:73:97:e8:bd:9c:33: 67:73:87:b7:96:6d:5f:cf:83:e7:61:62:37:54:fd:55:28:80: 86:ba:22:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKhDp6laBQTQr2Su6Cp1hyqajktkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1 Nzc3N0UwQTAeFw0yNjA3MjgxNzE3MjBaFw0yNjA3MjkxNzU5MjBaMDMxMTAvBgNV BAMTKDdCM0QwRENDQjg1MDE0RjAyRDM0QTgwRDU3NDRDRDZGQ0UyODY3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+q/JChqi7xDapBZpbOw1QUZ/ uY9liZEalcD5TRIZruEQAJBrgITvWMBPagfT+DNesrHywtN6E2/BWh6l/gkWCfQM p1T+RfB8ofvNOTSskL6EMCPv/232WKYy2gxa9vdz5RHyJNWu95OpTitXZ6rpMUVn GK3Qk6tHxMBkRCLsBv1xMCYn67gAb3W7qxyhFuDPg8EbAfr9EsLg7e+7oIyoWNIV HEzbDn9RmT9dcuWs60IFICmaaF6Ci/GpBeS3BuJYbRhW0MzjkvDEQp8uWD3iFDyr 8Q0khWHcqHVk63ipwIWayxFpQmSrpX40f7qW98xTIQcD9in/yfGuIzjLXjkVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUez0NzLhQFPAtNKgNV0TNb84oZwowHwYDVR0j BBgwFoAUwFlHoApyY4zUvmfEv1MiQ1d3fgowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA2NzkzODI2OTg4ODUyNS8wL0MwNTk0N0EwMEE3MjYzOENENEJFNjdDNEJGNTMy MjQzNTc3NzdFMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1Nzc3N0UwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNjc5MzgyNjk4ODg1MjUvMC9DMDU5NDdBMDBBNzI2 MzhDRDRCRTY3QzRCRjUzMjI0MzU3Nzc3RTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrodCuCZD6kr nvxGxfpSUJkukkxlj/G9VHy5AimI+944ViXOsDGooGHsFVVqH6XebC1J3m6QiIZc yGPMKE0EiDgTEOSnnCBfQrn2SDxHVHKl89xp4gMr2QWJQ55H0hOhNARAIOoXKQd4 JY5oDRjCuLmVqZNyIsGD1tAOvH0TCS9d3+eSNGH2EMM/YhdXhX6SilLXiX7CWYHV i4qAxpNPfCwKWPNBIjDsYIny17E5yOeA7R8KOEQRXeoc3cimR8DuDAIvd0NdumXG H94Y6Kt8icj2F3rGYkb4CwyycJkvqrEIuwJZc5fovZwzZ3OHt5ZtX8+D52FiN1T9 VSiAhroieA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:10:27 2026 by rpki-client