$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft File: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft (raw, json) Hash identifier: guHKp7IzyXy3aNMf/l9I9/qnJMdQb1zcb5QMixvOpKM= Subject key identifier: D4:FC:8F:BE:68:AB:87:DD:DF:1B:69:15:1A:74:05:01:F5:C3:88:8C Authority key identifier: 0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E Certificate issuer: /CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E Certificate serial: 53DB93185709D27A51BEB022D63E009D8CFA7D35 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft Manifest number: D1 Signing time: Mon 12 Oct 2026 17:47:13 +0000 Manifest this update: Mon 12 Oct 2026 17:42:13 +0000 Manifest next update: Fri 16 Oct 2026 04:34:13 +0000 Files and hashes: 1: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl (hash: jOplrxn+vZ8+XMBFjW58TDUy2/u5VK27SiA9/2kSmm8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 04:34:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:db:93:18:57:09:d2:7a:51:be:b0:22:d6:3e:00:9d:8c:fa:7d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E Validity Not Before: Oct 12 17:42:13 2026 GMT Not After : Oct 16 04:34:13 2026 GMT Subject: CN=D4FC8FBE68AB87DDDF1B69151A740501F5C3888C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:ea:d1:0f:7e:6b:e8:77:a4:d6:73:78:f9: b6:2f:a8:7c:02:2c:9f:97:eb:35:37:5b:97:1e:ec: 6b:3a:dd:c3:5f:00:e2:0c:e6:44:74:56:a4:47:7b: 8c:07:73:fa:8e:d7:07:e1:4d:86:0c:36:4a:39:65: a4:34:38:64:03:e4:54:38:bf:6d:cb:6f:39:1d:6c: 22:5d:e2:76:b3:34:19:c5:11:15:9b:d1:99:62:3b: 88:08:93:48:cb:88:41:63:69:a1:b9:fe:c2:93:fa: 34:74:dc:6b:d9:10:30:1d:33:79:c9:4d:30:68:6b: 63:bd:01:95:ab:5d:e1:34:47:c3:75:e9:2d:45:cc: db:42:34:c9:98:84:d4:38:41:12:79:ac:b5:74:5b: e6:9f:be:ba:83:ff:23:41:26:56:14:f2:4e:18:ce: 56:42:ac:48:49:61:7c:1a:d7:51:c7:98:c5:c5:0c: 80:f1:c7:46:d6:d9:a5:99:1d:76:a0:dc:68:92:ad: 54:6a:b2:3e:c8:7e:83:dc:ed:5d:ed:95:f8:8f:19: 06:a8:c3:a7:d6:d6:c8:17:48:df:91:96:4d:0e:cc: 78:3e:63:3a:68:50:79:f5:81:7f:09:13:dc:d6:34: 3e:a9:e7:cd:a7:d0:6e:c4:24:b1:72:85:bf:aa:77: ff:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FC:8F:BE:68:AB:87:DD:DF:1B:69:15:1A:74:05:01:F5:C3:88:8C X509v3 Authority Key Identifier: keyid:0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:03:da:ca:58:cf:4f:9a:18:4d:0c:be:ec:89:b0:e9:01:f5: 42:54:77:65:b7:90:8b:84:be:a4:5f:60:77:88:bc:5f:fb:59: 54:c8:b7:4f:39:69:eb:9d:3b:16:7b:40:f9:cc:0d:12:80:90: 5c:61:11:99:bc:a2:9e:ad:05:78:fe:4d:81:d8:05:58:b4:7d: 2e:79:45:b4:f9:b5:20:d3:8a:c6:2a:40:c4:36:b4:93:ac:7d: 3b:9f:fc:36:f6:32:87:d3:97:68:5d:97:b0:bf:99:81:61:4e: dd:0b:8c:d5:6a:01:6e:79:55:2a:29:46:94:79:c5:e2:7e:a7: 07:ac:f0:4e:de:1d:e1:4b:d0:66:c4:39:27:7d:33:c5:0d:7e: 89:ee:d6:11:3f:b0:c0:55:e4:41:02:34:df:1c:60:9a:fb:75: 5e:d4:24:6e:2a:62:07:88:4f:8f:77:b3:11:c6:ed:49:0a:82: 50:87:4c:e0:a8:53:be:40:41:c7:e4:ac:67:b2:6d:21:68:cb: df:41:35:f0:ab:ea:54:57:95:16:c8:04:25:a7:e5:ad:07:84: 2d:42:e3:d8:ac:39:a6:ad:dd:d9:be:79:d2:8d:60:74:9a:b8: 99:4e:41:0e:b8:d8:84:a8:28:3c:d6:3d:67:7e:f5:8c:50:28: 77:ce:27:36 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU9uTGFcJ0npRvrAi1j4AnYz6fTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwQTA3QTlFOEI4Q0RBQkY0MkU5Q0M0NTMxNDNGNUM1 NkU5RkY2RTAeFw0yNjEwMTIxNzQyMTNaFw0yNjEwMTYwNDM0MTNaMDMxMTAvBgNV BAMTKEQ0RkM4RkJFNjhBQjg3RERERjFCNjkxNTFBNzQwNTAxRjVDMzg4OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwOrRD35r6Hek1nN4+bYvqHwC LJ+X6zU3W5ce7Gs63cNfAOIM5kR0VqRHe4wHc/qO1wfhTYYMNko5ZaQ0OGQD5FQ4 v23LbzkdbCJd4nazNBnFERWb0ZliO4gIk0jLiEFjaaG5/sKT+jR03GvZEDAdM3nJ TTBoa2O9AZWrXeE0R8N16S1FzNtCNMmYhNQ4QRJ5rLV0W+afvrqD/yNBJlYU8k4Y zlZCrEhJYXwa11HHmMXFDIDxx0bW2aWZHXag3GiSrVRqsj7IfoPc7V3tlfiPGQao w6fW1sgXSN+Rlk0OzHg+YzpoUHn1gX8JE9zWND6p582n0G7EJLFyhb+qd/8/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1PyPvmirh93fG2kVGnQFAfXDiIwwHwYDVR0j BBgwFoAUDAoHqei4zav0LpzEUxQ/XFbp/24wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ2ODMxMDY5NjcyMjQzNS8xLzBDMEEwN0E5RThCOENEQUJGNDJFOUNDNDUzMTQz RjVDNTZFOUZGNkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwQTA3QTlFOEI4Q0RBQkY0MkU5Q0M0NTMxNDNGNUM1NkU5RkY2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0NjgzMTA2OTY3MjI0MzUvMS8wQzBBMDdBOUU4QjhD REFCRjQyRTlDQzQ1MzE0M0Y1QzU2RTlGRjZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2gPayljPT5oY TQy+7Imw6QH1QlR3ZbeQi4S+pF9gd4i8X/tZVMi3Tzlp6507FntA+cwNEoCQXGER mbyinq0FeP5NgdgFWLR9LnlFtPm1INOKxipAxDa0k6x9O5/8NvYyh9OXaF2XsL+Z gWFO3QuM1WoBbnlVKilGlHnF4n6nB6zwTt4d4UvQZsQ5J30zxQ1+ie7WET+wwFXk QQI03xxgmvt1XtQkbipiB4hPj3ezEcbtSQqCUIdM4KhTvkBBx+SsZ7JtIWjL30E1 8KvqVFeVFsgEJaflrQeELULj2Kw5pq3d2b550o1gdJq4mU5BDrjYhKgoPNY9Z371 jFAod84nNg== -----END CERTIFICATE-----Generated at Wed Oct 14 20:18:52 2026 by rpki-client