$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft File: C05947A00A72638CD4BE67C4BF53224357777E0A.mft (raw, json) Hash identifier: xdxhyASyguwpfxBCOJNggMePIaVPtseRozyo/5MDknE= Subject key identifier: F9:BF:C0:30:A5:54:AC:EA:45:BB:32:18:BA:52:56:48:88:76:B5:A7 Authority key identifier: C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A Certificate issuer: /CN=C05947A00A72638CD4BE67C4BF53224357777E0A Certificate serial: 64D578F07EF2A29D28814BF62AA9B911BC30D400 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft Manifest number: AB Signing time: Fri 16 Oct 2026 19:23:02 +0000 Manifest this update: Fri 16 Oct 2026 19:18:02 +0000 Manifest next update: Mon 19 Oct 2026 22:02:02 +0000 Files and hashes: 1: 3130332e3231322e3130392e302f32342d3234203d3e2034383136.roa (hash: KKCqpde6Dhe4+7RyJYUAxN7mjehJt+BZVg2xReVpvv0=) 2: C05947A00A72638CD4BE67C4BF53224357777E0A.crl (hash: CrpZQMR5YP4Ys8teLDFKu21SgCSQyVAyCProS45jHcQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d5:78:f0:7e:f2:a2:9d:28:81:4b:f6:2a:a9:b9:11:bc:30:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C05947A00A72638CD4BE67C4BF53224357777E0A Validity Not Before: Oct 16 19:18:02 2026 GMT Not After : Oct 19 22:02:02 2026 GMT Subject: CN=F9BFC030A554ACEA45BB3218BA5256488876B5A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:70:92:1d:8b:b0:0a:bb:23:33:87:28:db:be: 29:b4:b6:56:3c:20:1a:62:83:26:f6:e4:68:6a:c4: 6c:ca:72:2a:56:35:73:cf:90:6c:2f:b9:0f:ee:8d: a9:0d:43:73:3b:49:2e:b0:8a:fe:d2:15:d4:63:9f: d0:9e:89:57:05:75:bb:23:67:2a:45:27:99:e0:7d: cf:52:fb:21:3d:8b:7a:83:e1:5f:ed:44:89:8a:46: a7:0d:da:27:b4:c2:4e:af:7d:19:d1:57:7d:59:dd: 9a:1c:8d:0e:86:01:02:e2:d5:58:66:b0:f6:4b:c1: 84:2c:24:be:36:e5:92:38:42:a7:72:0c:92:a1:4f: 4a:1c:a6:a2:75:12:f0:59:a7:ef:a4:bd:be:b0:d5: 47:b1:7c:15:ad:0a:6e:c5:e3:09:c6:84:b7:bf:03: 1e:ff:0a:dc:8a:52:57:57:28:e1:37:bc:e8:e0:11: db:41:c6:0c:bf:7d:7f:dc:5f:33:5e:16:3a:b1:d2: f7:28:4b:b8:c3:1d:69:8b:a6:c2:1f:d4:ee:fb:e1: 02:76:0d:be:fe:8e:f6:1b:9c:9b:e3:ad:f9:34:d1: ee:ab:b7:5b:ec:41:82:b8:7c:c6:31:33:8d:e7:8a: 46:4c:ba:bd:ee:c8:a4:75:1c:b5:6e:6f:4a:3f:96: a2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BF:C0:30:A5:54:AC:EA:45:BB:32:18:BA:52:56:48:88:76:B5:A7 X509v3 Authority Key Identifier: keyid:C0:59:47:A0:0A:72:63:8C:D4:BE:67:C4:BF:53:22:43:57:77:7E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C05947A00A72638CD4BE67C4BF53224357777E0A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105067938269888525/0/C05947A00A72638CD4BE67C4BF53224357777E0A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:80:ac:c2:51:41:ea:a3:e6:c7:af:c5:be:7c:24:0d:5f:09: cf:8e:f9:b1:63:8d:33:ef:19:87:93:af:17:78:df:d7:7f:83: 02:24:53:22:e1:78:06:39:d3:6f:1d:2a:87:84:fa:0f:c4:f1: c7:3b:9c:14:e2:70:79:f6:49:58:fc:0a:7e:ef:62:a4:75:f2: 30:cd:df:54:73:7a:3e:3e:fb:e7:48:60:26:27:7c:37:42:a4: 30:f9:59:de:7a:d3:3b:85:38:9a:f2:34:10:75:f2:5a:79:f7: a4:95:f8:bf:7a:fc:bc:92:93:f8:61:d3:2b:75:58:27:d4:b9: c0:a3:4b:4d:08:25:4d:b6:a6:21:06:3e:88:83:8d:be:aa:85: 3a:01:f2:db:d3:c4:88:ba:3f:03:26:85:db:05:df:ab:b0:50: 3f:17:2b:39:a1:81:c1:86:93:fc:25:c4:33:fc:b3:3f:01:be: c3:a4:a9:d3:68:e8:45:94:3e:ff:05:b4:63:d0:79:6c:87:9c: 33:dc:eb:0e:bb:bf:4d:1f:5a:0b:57:43:b7:97:5a:ce:51:ae: ce:2f:d8:b1:3f:4e:74:bc:13:fe:5f:20:24:d2:62:de:78:58: 21:49:5f:c6:81:f0:6f:b8:63:55:e5:49:4c:f8:80:ad:72:1f: d2:85:37:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZNV48H7yop0ogUv2Kqm5Ebww1AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1 Nzc3N0UwQTAeFw0yNjEwMTYxOTE4MDJaFw0yNjEwMTkyMjAyMDJaMDMxMTAvBgNV BAMTKEY5QkZDMDMwQTU1NEFDRUE0NUJCMzIxOEJBNTI1NjQ4ODg3NkI1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZcJIdi7AKuyMzhyjbvim0tlY8 IBpigyb25GhqxGzKcipWNXPPkGwvuQ/ujakNQ3M7SS6wiv7SFdRjn9CeiVcFdbsj ZypFJ5ngfc9S+yE9i3qD4V/tRImKRqcN2ie0wk6vfRnRV31Z3ZocjQ6GAQLi1Vhm sPZLwYQsJL425ZI4QqdyDJKhT0ocpqJ1EvBZp++kvb6w1UexfBWtCm7F4wnGhLe/ Ax7/CtyKUldXKOE3vOjgEdtBxgy/fX/cXzNeFjqx0vcoS7jDHWmLpsIf1O774QJ2 Db7+jvYbnJvjrfk00e6rt1vsQYK4fMYxM43nikZMur3uyKR1HLVub0o/lqJRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+b/AMKVUrOpFuzIYulJWSIh2tacwHwYDVR0j BBgwFoAUwFlHoApyY4zUvmfEv1MiQ1d3fgowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA2NzkzODI2OTg4ODUyNS8wL0MwNTk0N0EwMEE3MjYzOENENEJFNjdDNEJGNTMy MjQzNTc3NzdFMEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzA1OTQ3QTAwQTcyNjM4Q0Q0QkU2N0M0QkY1MzIyNDM1Nzc3N0UwQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwNjc5MzgyNjk4ODg1MjUvMC9DMDU5NDdBMDBBNzI2 MzhDRDRCRTY3QzRCRjUzMjI0MzU3Nzc3RTBBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYCswlFB6qPm x6/FvnwkDV8Jz475sWONM+8Zh5OvF3jf13+DAiRTIuF4BjnTbx0qh4T6D8Txxzuc FOJwefZJWPwKfu9ipHXyMM3fVHN6Pj7750hgJid8N0KkMPlZ3nrTO4U4mvI0EHXy Wnn3pJX4v3r8vJKT+GHTK3VYJ9S5wKNLTQglTbamIQY+iIONvqqFOgHy29PEiLo/ AyaF2wXfq7BQPxcrOaGBwYaT/CXEM/yzPwG+w6Sp02joRZQ+/wW0Y9B5bIecM9zr Dru/TR9aC1dDt5dazlGuzi/YsT9OdLwT/l8gJNJi3nhYIUlfxoHwb7hjVeVJTPiA rXIf0oU3Mg== -----END CERTIFICATE-----Generated at Sat Oct 17 23:28:02 2026 by rpki-client