$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft File: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft (raw, json) Hash identifier: CxlBVSsqX+zgpxECIOfg4cUh0VZ6B0P9ifKhVgKs5CA= Subject key identifier: CC:49:FD:AD:AA:87:D7:7F:14:24:31:24:83:5B:BF:A8:2B:33:98:F5 Authority key identifier: 0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E Certificate issuer: /CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E Certificate serial: 7A63DC99984D6A7C7D90E6C7EADAC99F025AD66C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft Manifest number: BD Signing time: Fri 28 Aug 2026 06:47:55 +0000 Manifest this update: Fri 28 Aug 2026 06:42:55 +0000 Manifest next update: Mon 31 Aug 2026 13:45:55 +0000 Files and hashes: 1: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl (hash: 8qo8qkdje85ZfzYmGN2gLo0yoXpX/L8YAaFHaRSxNAw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:63:dc:99:98:4d:6a:7c:7d:90:e6:c7:ea:da:c9:9f:02:5a:d6:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E Validity Not Before: Aug 28 06:42:55 2026 GMT Not After : Aug 31 13:45:55 2026 GMT Subject: CN=CC49FDADAA87D77F14243124835BBFA82B3398F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1f:68:a3:e4:df:23:19:a4:9d:0e:25:5c:10: ba:51:8e:56:f3:3f:4b:08:8c:03:0f:03:76:29:21: b0:c5:de:dc:ba:c2:dd:02:4c:5f:a1:d1:74:a2:ea: a1:7b:77:9a:39:1f:6b:5b:ad:8b:a6:82:b7:46:64: 3e:98:42:21:bf:8f:4e:53:d7:af:0f:ce:93:86:18: 4e:11:8f:0a:e3:f5:88:45:2c:51:ea:5a:e6:f0:c2: b2:89:df:9a:7a:56:81:a5:0b:a4:b9:3e:e1:a3:df: 26:c5:68:84:5c:a4:dd:7c:ff:7d:7f:64:e1:05:b3: 3c:e5:62:a1:20:16:52:71:31:cd:a5:cc:3c:e4:b3: 20:53:9d:6d:54:25:2d:f8:89:d7:47:f0:53:4c:d1: 48:94:a8:eb:52:36:f4:e9:69:bc:3f:32:e2:62:1c: 1b:ec:49:97:1d:07:7f:00:d0:4d:8c:00:97:bc:75: 02:7f:86:fb:ce:9b:4e:ee:79:fd:1e:b8:94:6b:64: 13:34:ed:e4:ce:1d:5e:55:8d:51:36:48:df:6d:ff: 1e:76:ce:60:f6:bf:c7:aa:91:b9:62:6b:94:f2:43: 6e:86:ab:54:a5:7e:51:cd:7c:1e:ff:08:0a:d7:d3: a2:2c:99:45:96:b2:0f:12:41:8d:b5:b6:68:b1:23: 0a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:49:FD:AD:AA:87:D7:7F:14:24:31:24:83:5B:BF:A8:2B:33:98:F5 X509v3 Authority Key Identifier: keyid:0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1b:82:05:30:35:d2:1f:c7:24:18:ff:26:05:18:f5:3c:93: 69:ea:c2:1f:53:37:72:01:4d:61:8a:88:19:3d:c1:d6:72:37: 56:3d:b3:14:46:cb:98:c0:76:15:12:86:d2:94:9f:89:c0:3b: 2e:01:4b:51:7f:20:6b:33:99:5e:db:2d:f4:85:e2:42:8d:2e: 64:37:5c:69:cb:cf:88:22:5f:a4:88:de:fc:60:5e:42:ce:14: 83:d4:ee:ba:b9:f1:1a:06:ee:3a:1f:e5:3f:e0:eb:a3:97:40: ad:39:28:7a:9e:78:9a:83:69:66:35:b1:9a:61:cd:b6:27:df: 3a:52:50:fb:a7:34:40:93:ae:0d:ba:3a:59:50:70:63:c1:c1: ac:e0:a7:68:18:d0:10:25:76:63:ab:18:f0:f8:a7:8c:7a:2b: 5f:54:3f:53:dd:17:e7:4d:33:08:a5:de:18:6b:0d:1c:1c:5e: 44:19:f8:a3:d9:b4:52:ff:ca:ee:55:c6:95:13:fb:24:d7:61: c7:3a:38:20:96:27:46:20:d0:87:3a:d9:06:1a:ff:f2:02:e7: 2e:53:62:c1:85:49:ea:8d:61:51:d7:c7:cc:01:d5:48:73:66: 3a:71:c6:c9:ef:c6:01:02:a6:47:13:2d:33:6f:78:03:36:46: dd:2d:e2:7f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUemPcmZhNanx9kObH6trJnwJa1mwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwQTA3QTlFOEI4Q0RBQkY0MkU5Q0M0NTMxNDNGNUM1 NkU5RkY2RTAeFw0yNjA4MjgwNjQyNTVaFw0yNjA4MzExMzQ1NTVaMDMxMTAvBgNV BAMTKENDNDlGREFEQUE4N0Q3N0YxNDI0MzEyNDgzNUJCRkE4MkIzMzk4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwH2ij5N8jGaSdDiVcELpRjlbz P0sIjAMPA3YpIbDF3ty6wt0CTF+h0XSi6qF7d5o5H2tbrYumgrdGZD6YQiG/j05T 168PzpOGGE4Rjwrj9YhFLFHqWubwwrKJ35p6VoGlC6S5PuGj3ybFaIRcpN18/31/ ZOEFszzlYqEgFlJxMc2lzDzksyBTnW1UJS34iddH8FNM0UiUqOtSNvTpabw/MuJi HBvsSZcdB38A0E2MAJe8dQJ/hvvOm07uef0euJRrZBM07eTOHV5VjVE2SN9t/x52 zmD2v8eqkblia5TyQ26Gq1SlflHNfB7/CArX06IsmUWWsg8SQY21tmixIwpnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzEn9raqH138UJDEkg1u/qCszmPUwHwYDVR0j BBgwFoAUDAoHqei4zav0LpzEUxQ/XFbp/24wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ2ODMxMDY5NjcyMjQzNS8xLzBDMEEwN0E5RThCOENEQUJGNDJFOUNDNDUzMTQz RjVDNTZFOUZGNkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwQTA3QTlFOEI4Q0RBQkY0MkU5Q0M0NTMxNDNGNUM1NkU5RkY2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0NjgzMTA2OTY3MjI0MzUvMS8wQzBBMDdBOUU4QjhD REFCRjQyRTlDQzQ1MzE0M0Y1QzU2RTlGRjZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBuCBTA10h/H JBj/JgUY9TyTaerCH1M3cgFNYYqIGT3B1nI3Vj2zFEbLmMB2FRKG0pSficA7LgFL UX8gazOZXtst9IXiQo0uZDdcacvPiCJfpIje/GBeQs4Ug9TuurnxGgbuOh/lP+Dr o5dArTkoep54moNpZjWxmmHNtiffOlJQ+6c0QJOuDbo6WVBwY8HBrOCnaBjQECV2 Y6sY8PinjHorX1Q/U90X500zCKXeGGsNHBxeRBn4o9m0Uv/K7lXGlRP7JNdhxzo4 IJYnRiDQhzrZBhr/8gLnLlNiwYVJ6o1hUdfHzAHVSHNmOnHGye/GAQKmRxMtM294 AzZG3S3ifw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:01 2026 by rpki-client