$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft File: 0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft (raw, json) Hash identifier: 7Iz7QlAgcLWhLBaUkb8k6yn8PLwXI85VQ8aShxA+GZM= Subject key identifier: 19:F9:9B:99:B3:03:30:4E:76:75:BB:CD:58:30:1B:94:2B:B4:8E:14 Authority key identifier: 0C:6F:DD:BB:C0:EC:F9:C3:4B:E9:CF:EC:F9:AF:07:1D:8B:B6:E6:E2 Certificate issuer: /CN=0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2 Certificate serial: 1537BC260DFAF0116E19CE97792DC707A2F9390D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft Manifest number: 75 Signing time: Fri 28 Aug 2026 06:48:17 +0000 Manifest this update: Fri 28 Aug 2026 06:43:17 +0000 Manifest next update: Mon 31 Aug 2026 11:11:17 +0000 Files and hashes: 1: 3130332e38312e3132302e302f32322d3232203d3e203633373232.roa (hash: i0xS9mmPro5YpqsYMEwbwKsuNl3W83AWZ9CPEUwv3YI=) 2: 0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl (hash: aRqbcQrhXMym5xJhwtJsyidsnJeZ0YU3e7S17ho4Bkk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:37:bc:26:0d:fa:f0:11:6e:19:ce:97:79:2d:c7:07:a2:f9:39:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2 Validity Not Before: Aug 28 06:43:17 2026 GMT Not After : Aug 31 11:11:17 2026 GMT Subject: CN=19F99B99B303304E7675BBCD58301B942BB48E14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:78:2e:d9:e2:40:25:f4:d4:df:1e:91:21:7e: 9e:be:7d:9c:c6:3a:b4:27:ec:2c:19:6d:d4:b9:93: ba:d8:81:28:68:c8:36:7a:05:08:5a:e4:63:d3:25: 53:52:69:51:17:7f:fd:80:c1:85:b1:71:eb:bd:5f: 43:e6:e8:13:db:57:eb:ca:a4:9c:41:88:1a:99:41: b4:07:32:ec:19:f6:85:e9:19:c0:69:f3:c7:6b:1f: 81:3b:2b:c3:28:21:d8:2b:68:92:62:8e:f1:cc:e6: 4a:47:c0:b8:a3:e5:37:43:f7:d9:54:f2:75:31:82: ee:8e:37:44:fb:8d:7c:71:b5:a4:9e:9c:e1:14:e3: 10:c2:ac:5a:9b:57:04:82:d0:d5:ac:5f:77:4f:40: 67:6e:50:cf:76:1d:6f:8d:3e:4b:1e:f5:fc:a4:55: 7e:8c:1c:f7:98:70:f3:28:16:59:59:9c:7e:d3:28: 95:ac:09:52:41:36:c6:15:40:3d:e6:b8:ed:8b:58: ff:28:3d:73:46:89:ea:ff:fb:f3:68:e7:00:b3:2f: c4:5f:01:5e:83:6c:38:db:bf:b5:3b:03:8f:c8:76: bb:82:f9:e6:1c:fe:2e:c0:80:50:cf:6e:85:ff:28: 90:7d:ab:1e:cd:26:bf:a6:0a:00:ff:00:ac:a7:78: 86:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F9:9B:99:B3:03:30:4E:76:75:BB:CD:58:30:1B:94:2B:B4:8E:14 X509v3 Authority Key Identifier: keyid:0C:6F:DD:BB:C0:EC:F9:C3:4B:E9:CF:EC:F9:AF:07:1D:8B:B6:E6:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:06:cf:1b:b9:85:4e:02:f9:13:2f:24:29:39:e2:ce:a9:4a: 34:59:9d:b9:c1:ba:ca:b5:ad:7e:dd:1f:c7:64:05:4f:57:69: 78:20:b3:61:30:f8:a9:d0:e7:ca:82:a5:6c:c5:fd:a9:a6:2e: b4:7f:85:3a:36:f9:52:a9:a7:51:c9:5d:7a:2f:2e:ea:52:57: 0d:b2:a4:7c:a4:54:ca:ce:d9:d0:27:14:03:e9:6f:6b:a3:d6: 46:85:68:39:01:54:af:d0:38:74:6d:47:cf:1e:a7:f1:a3:37: 25:85:09:56:2a:d1:2b:2d:ea:71:fb:9c:69:02:b2:0a:f7:94: 94:ca:07:9f:fc:cf:96:79:b8:46:e6:6d:4d:83:bf:e1:ec:e9: 46:c5:d5:0e:00:f9:ad:3c:e7:c9:c8:4b:e7:55:9b:e5:c9:7d: 34:cf:8c:41:d5:aa:bf:7c:05:6b:0b:de:e2:38:ca:85:5e:93: 0e:e8:2b:60:fa:aa:ee:3d:b7:27:b5:9e:5a:42:75:d1:08:6d: c6:87:e9:ae:cc:c1:7d:f9:9a:60:79:e6:4d:87:57:a4:cf:1e: 94:78:a6:9a:11:51:5a:b6:63:6c:c1:33:7c:5f:ab:d9:7c:6c: 6c:b2:76:4d:11:6c:5b:c7:ec:97:3e:4b:56:82:55:d3:db:83: ee:d7:de:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFTe8Jg368BFuGc6XeS3HB6L5OQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM2RkREQkJDMEVDRjlDMzRCRTlDRkVDRjlBRjA3MUQ4 QkI2RTZFMjAeFw0yNjA4MjgwNjQzMTdaFw0yNjA4MzExMTExMTdaMDMxMTAvBgNV BAMTKDE5Rjk5Qjk5QjMwMzMwNEU3Njc1QkJDRDU4MzAxQjk0MkJCNDhFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmeC7Z4kAl9NTfHpEhfp6+fZzG OrQn7CwZbdS5k7rYgShoyDZ6BQha5GPTJVNSaVEXf/2AwYWxceu9X0Pm6BPbV+vK pJxBiBqZQbQHMuwZ9oXpGcBp88drH4E7K8MoIdgraJJijvHM5kpHwLij5TdD99lU 8nUxgu6ON0T7jXxxtaSenOEU4xDCrFqbVwSC0NWsX3dPQGduUM92HW+NPkse9fyk VX6MHPeYcPMoFllZnH7TKJWsCVJBNsYVQD3muO2LWP8oPXNGier/+/No5wCzL8Rf AV6DbDjbv7U7A4/IdruC+eYc/i7AgFDPboX/KJB9qx7NJr+mCgD/AKyneIbdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGfmbmbMDME52dbvNWDAblCu0jhQwHwYDVR0j BBgwFoAUDG/du8Ds+cNL6c/s+a8HHYu25uIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDM2NDIyNTc1ODY5MTM0Ny8wLzBDNkZEREJCQzBFQ0Y5QzM0QkU5Q0ZFQ0Y5QUYw NzFEOEJCNkU2RTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEM2RkREQkJDMEVDRjlDMzRCRTlDRkVDRjlBRjA3MUQ4QkI2RTZFMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQzNjQyMjU3NTg2OTEzNDcvMC8wQzZGRERCQkMwRUNG OUMzNEJFOUNGRUNGOUFGMDcxRDhCQjZFNkUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggbPG7mFTgL5 Ey8kKTnizqlKNFmducG6yrWtft0fx2QFT1dpeCCzYTD4qdDnyoKlbMX9qaYutH+F Ojb5UqmnUcldei8u6lJXDbKkfKRUys7Z0CcUA+lva6PWRoVoOQFUr9A4dG1Hzx6n 8aM3JYUJVirRKy3qcfucaQKyCveUlMoHn/zPlnm4RuZtTYO/4ezpRsXVDgD5rTzn ychL51Wb5cl9NM+MQdWqv3wFawve4jjKhV6TDugrYPqq7j23J7WeWkJ10Qhtxofp rszBffmaYHnmTYdXpM8elHimmhFRWrZjbMEzfF+r2XxsbLJ2TRFsW8fslz5LVoJV 09uD7tfepg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:17 2026 by rpki-client