$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft File: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft (raw, json) Hash identifier: tr+9iGWy+v+huG6axNlwrT+e6eU3Pu5IUHggIUxdA/k= Subject key identifier: CE:5C:E2:07:63:8C:29:C7:5E:78:F8:75:98:2F:E3:2B:DE:DD:3E:66 Authority key identifier: 0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E Certificate issuer: /CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E Certificate serial: 7DF80E46685A9AF7447B9AD56DE2B59F844F01F2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft Manifest number: 06 Signing time: Sun 12 Apr 2026 21:34:17 +0000 Manifest this update: Sun 12 Apr 2026 21:29:17 +0000 Manifest next update: Mon 13 Apr 2026 21:36:17 +0000 Files and hashes: 1: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl (hash: F0GJPWqZ52pyUgZPpnYuAKPO0NxUvXwFtwEWaqfc3lc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 21:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f8:0e:46:68:5a:9a:f7:44:7b:9a:d5:6d:e2:b5:9f:84:4f:01:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E Validity Not Before: Apr 12 21:29:17 2026 GMT Not After : Apr 13 21:36:17 2026 GMT Subject: CN=CE5CE207638C29C75E78F875982FE32BDEDD3E66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:97:09:fd:91:6c:76:1a:4f:f5:07:77:e8: 20:da:34:93:3b:6d:88:36:91:66:e3:73:02:d2:97: 77:48:b1:fb:05:b9:d1:de:b9:3f:de:44:28:5f:bc: d2:ea:b7:73:54:27:84:40:67:5e:a1:86:37:3c:38: f0:52:ce:8e:a7:cf:47:eb:d3:8d:1c:b8:34:fd:29: ed:07:3a:de:31:04:87:0e:88:f1:13:e5:c3:ec:fc: 0a:0f:d8:22:20:1a:72:6f:d1:b6:7a:0c:03:14:a6: bc:0e:6d:9a:c6:4e:3f:5c:f5:af:3e:f2:a9:01:b2: 08:b4:f8:8d:6c:63:e6:72:e2:f2:78:50:50:3b:2f: 6e:c1:c1:05:a6:3d:2c:4b:05:20:70:a5:64:b9:38: c7:e9:33:7b:75:6a:82:d7:6b:ee:91:0a:ae:25:23: 82:39:9d:0a:82:e4:05:da:0b:14:e9:da:16:f5:ed: 06:5c:22:2a:96:99:bd:b3:42:c7:d2:1a:b8:ad:c7: 6f:bb:5d:6c:49:bf:35:1b:83:f6:bd:5a:79:06:bc: be:2f:b3:64:03:9d:b3:ee:e0:3b:8a:07:f3:b1:01: 61:14:b0:fd:2c:76:cd:81:ca:d8:c8:33:7f:f6:d9: df:79:dd:f4:88:9d:e4:ca:5c:45:53:6c:5e:1f:5b: 06:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5C:E2:07:63:8C:29:C7:5E:78:F8:75:98:2F:E3:2B:DE:DD:3E:66 X509v3 Authority Key Identifier: keyid:0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:53:a2:bc:f0:0c:a1:0f:b1:fb:ae:33:e4:d0:1a:99:74:d6: e8:e1:f6:ae:b1:3f:c5:4a:18:88:78:40:a2:f1:6f:b9:34:97: d9:d1:6b:83:9a:cb:0c:cd:28:fe:a5:8c:40:9b:30:7b:65:9b: 93:70:5f:a5:84:4b:04:36:4d:f6:01:4c:b7:02:ae:70:4d:eb: 9c:e9:cf:6b:b5:54:8e:ec:eb:96:36:4b:5d:03:ba:c4:26:07: e6:55:2e:30:9e:12:5e:c9:2a:6c:70:6b:20:69:a7:5d:80:93: 85:39:73:3a:0d:94:f6:39:70:0e:c8:fb:f8:c8:16:02:86:93: 1e:63:68:a9:12:3f:d2:fa:40:2c:4b:30:66:9f:c6:22:0f:1a: a6:78:2e:ed:69:1f:01:f4:13:0c:2a:e4:09:74:33:66:f7:1b: 68:04:62:2a:a1:e1:ea:3a:c6:e2:cc:f5:89:e5:15:3e:e8:72: 5e:af:0e:99:ef:9c:5e:41:ae:92:73:86:b5:0e:59:4b:bb:74: a3:bf:e2:97:7d:a0:6a:03:54:12:a7:26:7f:21:45:f6:7e:d6: 92:ab:06:27:e1:4e:96:26:b3:a4:08:42:de:ac:9a:ca:19:8c: 04:e4:1c:ad:0f:bf:d1:40:84:79:d7:31:4a:ac:df:8c:ee:af: bd:c5:c7:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUffgORmhamvdEe5rVbeK1n4RPAfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwQTA3QTlFOEI4Q0RBQkY0MkU5Q0M0NTMxNDNGNUM1 NkU5RkY2RTAeFw0yNjA0MTIyMTI5MTdaFw0yNjA0MTMyMTM2MTdaMDMxMTAvBgNV BAMTKENFNUNFMjA3NjM4QzI5Qzc1RTc4Rjg3NTk4MkZFMzJCREVERDNFNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9ZcJ/ZFsdhpP9Qd36CDaNJM7 bYg2kWbjcwLSl3dIsfsFudHeuT/eRChfvNLqt3NUJ4RAZ16hhjc8OPBSzo6nz0fr 040cuDT9Ke0HOt4xBIcOiPET5cPs/AoP2CIgGnJv0bZ6DAMUprwObZrGTj9c9a8+ 8qkBsgi0+I1sY+Zy4vJ4UFA7L27BwQWmPSxLBSBwpWS5OMfpM3t1aoLXa+6RCq4l I4I5nQqC5AXaCxTp2hb17QZcIiqWmb2zQsfSGritx2+7XWxJvzUbg/a9WnkGvL4v s2QDnbPu4DuKB/OxAWEUsP0sds2BytjIM3/22d953fSIneTKXEVTbF4fWwavAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzlziB2OMKcdeePh1mC/jK97dPmYwHwYDVR0j BBgwFoAUDAoHqei4zav0LpzEUxQ/XFbp/24wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ2ODMxMDY5NjcyMjQzNS8xLzBDMEEwN0E5RThCOENEQUJGNDJFOUNDNDUzMTQz RjVDNTZFOUZGNkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwQTA3QTlFOEI4Q0RBQkY0MkU5Q0M0NTMxNDNGNUM1NkU5RkY2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0NjgzMTA2OTY3MjI0MzUvMS8wQzBBMDdBOUU4QjhD REFCRjQyRTlDQzQ1MzE0M0Y1QzU2RTlGRjZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFOivPAMoQ+x +64z5NAamXTW6OH2rrE/xUoYiHhAovFvuTSX2dFrg5rLDM0o/qWMQJswe2Wbk3Bf pYRLBDZN9gFMtwKucE3rnOnPa7VUjuzrljZLXQO6xCYH5lUuMJ4SXskqbHBrIGmn XYCThTlzOg2U9jlwDsj7+MgWAoaTHmNoqRI/0vpALEswZp/GIg8apngu7WkfAfQT DCrkCXQzZvcbaARiKqHh6jrG4sz1ieUVPuhyXq8Ome+cXkGuknOGtQ5ZS7t0o7/i l32gagNUEqcmfyFF9n7WkqsGJ+FOliazpAhC3qyayhmMBOQcrQ+/0UCEedcxSqzf jO6vvcXHEg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:05:11 2026 by rpki-client