$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft File: 0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft (raw, json) Hash identifier: mLwRgaSTVEeMeVFBbyOxOifs80NSZfMVa+Cqtpjq/p4= Subject key identifier: 3B:13:8B:F9:A9:EB:7D:20:24:14:AF:3B:F6:80:B7:59:21:7E:6E:55 Authority key identifier: 0C:6F:DD:BB:C0:EC:F9:C3:4B:E9:CF:EC:F9:AF:07:1D:8B:B6:E6:E2 Certificate issuer: /CN=0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2 Certificate serial: 456EF38CC17C355C3B29B7A8CD236B765385708E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft Manifest number: 39 Signing time: Tue 14 Jul 2026 14:11:28 +0000 Manifest this update: Tue 14 Jul 2026 14:06:28 +0000 Manifest next update: Wed 15 Jul 2026 14:27:28 +0000 Files and hashes: 1: 3130332e38312e3132302e302f32322d3232203d3e203633373232.roa (hash: i0xS9mmPro5YpqsYMEwbwKsuNl3W83AWZ9CPEUwv3YI=) 2: 0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl (hash: Z5F0ystd8jxFbPAyKBLmobtCRSuUnctL3Cyu7ltoqXY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 14:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6e:f3:8c:c1:7c:35:5c:3b:29:b7:a8:cd:23:6b:76:53:85:70:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2 Validity Not Before: Jul 14 14:06:28 2026 GMT Not After : Jul 15 14:27:28 2026 GMT Subject: CN=3B138BF9A9EB7D202414AF3BF680B759217E6E55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:dd:73:d7:5b:72:c7:1a:24:55:18:36:4f: 93:0c:e1:fa:8c:10:a8:28:98:ef:67:88:26:15:52: 7c:43:f6:af:ee:a4:eb:aa:77:9d:0b:45:e9:1a:58: 6e:f0:6b:1c:b3:ed:86:7f:e9:6f:21:25:ed:67:c7: 4d:91:f7:a9:11:07:84:f1:85:3a:33:5f:a6:a2:72: 0e:9e:c2:22:29:6f:60:5a:8c:4c:8b:49:dc:b6:e6: e6:e1:76:e5:8b:66:44:de:90:5b:63:db:3b:ce:98: 90:ca:2a:41:cd:0f:12:48:5c:c9:d7:87:3f:42:89: e1:be:1a:fb:98:cd:34:a7:e9:e7:11:b1:66:8c:53: 70:ba:bc:50:b0:20:9c:17:fd:52:ec:3e:03:b9:2b: a8:b8:4b:41:18:82:df:e5:c8:bb:2b:a3:9d:b1:a3: b8:89:0a:02:43:6b:ca:23:d0:93:2a:2e:ac:db:bb: a0:2b:61:ef:03:0d:6c:bc:fb:86:6c:c8:9d:56:4d: 03:54:2b:12:00:66:aa:bb:52:2b:13:9c:7e:d2:07: 23:fc:e2:2b:14:46:c2:80:05:58:b3:be:98:95:2b: fc:fc:2c:42:08:a3:e5:99:19:10:2d:96:c5:e7:3f: 55:cd:1b:3e:53:48:10:2e:98:44:86:26:19:f3:86: 16:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:13:8B:F9:A9:EB:7D:20:24:14:AF:3B:F6:80:B7:59:21:7E:6E:55 X509v3 Authority Key Identifier: keyid:0C:6F:DD:BB:C0:EC:F9:C3:4B:E9:CF:EC:F9:AF:07:1D:8B:B6:E6:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c3:6c:99:da:de:1f:63:4d:14:3a:05:b2:eb:2c:e8:60:90: 32:06:37:87:8e:fa:9e:11:b9:d9:08:a0:8f:e6:e0:fa:93:42: cd:84:b2:a2:48:64:c5:ee:14:99:42:f7:b7:b9:72:43:5d:fd: 77:c0:87:10:e3:5f:35:b0:d7:4d:f4:70:9b:5a:49:63:e2:06: 21:14:76:68:b5:57:27:84:05:e6:f7:09:5f:e7:4a:5d:57:42: 55:58:06:00:e3:83:75:21:9e:a3:70:df:cf:c0:9a:2b:a6:95: 44:aa:4a:95:c3:e1:93:a1:f0:32:df:eb:4f:5e:00:6b:b9:a1: b8:42:b4:27:a4:13:3a:eb:11:ba:55:37:ba:8d:d9:8b:79:f4: de:35:38:34:af:1e:4c:a6:db:03:89:b4:9b:d6:32:42:2e:82: bd:44:55:1c:02:29:f7:6c:8d:c7:a5:38:54:87:45:be:e3:9d: d3:60:86:fa:92:cc:e3:b1:12:ec:52:28:18:73:a6:8d:a1:4e: d7:72:f6:9a:b2:04:d8:fc:e3:6d:30:28:0f:ab:28:ee:72:ca: da:ee:bd:c2:ff:3b:cf:9f:50:7e:0e:e9:3c:22:a9:bb:9e:31: 24:83:1e:5c:06:87:c9:84:d6:05:12:0a:36:13:44:37:ce:ea: fd:d5:2a:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURW7zjMF8NVw7KbeozSNrdlOFcI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM2RkREQkJDMEVDRjlDMzRCRTlDRkVDRjlBRjA3MUQ4 QkI2RTZFMjAeFw0yNjA3MTQxNDA2MjhaFw0yNjA3MTUxNDI3MjhaMDMxMTAvBgNV BAMTKDNCMTM4QkY5QTlFQjdEMjAyNDE0QUYzQkY2ODBCNzU5MjE3RTZFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3gt1z11tyxxokVRg2T5MM4fqM EKgomO9niCYVUnxD9q/upOuqd50LRekaWG7waxyz7YZ/6W8hJe1nx02R96kRB4Tx hTozX6aicg6ewiIpb2BajEyLSdy25ubhduWLZkTekFtj2zvOmJDKKkHNDxJIXMnX hz9CieG+GvuYzTSn6ecRsWaMU3C6vFCwIJwX/VLsPgO5K6i4S0EYgt/lyLsro52x o7iJCgJDa8oj0JMqLqzbu6ArYe8DDWy8+4ZsyJ1WTQNUKxIAZqq7UisTnH7SByP8 4isURsKABVizvpiVK/z8LEIIo+WZGRAtlsXnP1XNGz5TSBAumESGJhnzhhbBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOxOL+anrfSAkFK879oC3WSF+blUwHwYDVR0j BBgwFoAUDG/du8Ds+cNL6c/s+a8HHYu25uIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDM2NDIyNTc1ODY5MTM0Ny8wLzBDNkZEREJCQzBFQ0Y5QzM0QkU5Q0ZFQ0Y5QUYw NzFEOEJCNkU2RTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEM2RkREQkJDMEVDRjlDMzRCRTlDRkVDRjlBRjA3MUQ4QkI2RTZFMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQzNjQyMjU3NTg2OTEzNDcvMC8wQzZGRERCQkMwRUNG OUMzNEJFOUNGRUNGOUFGMDcxRDhCQjZFNkUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsNsmdreH2NN FDoFsuss6GCQMgY3h476nhG52Qigj+bg+pNCzYSyokhkxe4UmUL3t7lyQ139d8CH EONfNbDXTfRwm1pJY+IGIRR2aLVXJ4QF5vcJX+dKXVdCVVgGAOODdSGeo3Dfz8Ca K6aVRKpKlcPhk6HwMt/rT14Aa7mhuEK0J6QTOusRulU3uo3Zi3n03jU4NK8eTKbb A4m0m9YyQi6CvURVHAIp92yNx6U4VIdFvuOd02CG+pLM47ES7FIoGHOmjaFO13L2 mrIE2PzjbTAoD6so7nLK2u69wv87z59Qfg7pPCKpu54xJIMeXAaHyYTWBRIKNhNE N87q/dUqEg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:02:00 2026 by rpki-client