$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft File: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft (raw, json) Hash identifier: hhkdU30xBJHUMc/rdKBfoKX+CDgON/uMDRAGCXvfR84= Subject key identifier: 28:F9:AF:A2:46:8E:A2:96:4C:97:82:F7:C7:00:F7:3B:DF:F2:3C:C7 Authority key identifier: 0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E Certificate issuer: /CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E Certificate serial: 10A4EF743694143F92FBB315897F18DA9C82593D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft Manifest number: 8E Signing time: Fri 24 Jul 2026 09:10:51 +0000 Manifest this update: Fri 24 Jul 2026 09:05:51 +0000 Manifest next update: Sat 25 Jul 2026 11:02:51 +0000 Files and hashes: 1: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl (hash: 1aocUO48dBDHkoR8qNFOIOspZC+ZMQ5coDM84qPz7XY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a4:ef:74:36:94:14:3f:92:fb:b3:15:89:7f:18:da:9c:82:59:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E Validity Not Before: Jul 24 09:05:51 2026 GMT Not After : Jul 25 11:02:51 2026 GMT Subject: CN=28F9AFA2468EA2964C9782F7C700F73BDFF23CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:21:7c:6f:fa:46:23:7d:c7:eb:f1:21:11:0c: 8c:3d:26:ac:d2:61:d9:61:a9:ca:ea:3c:f9:db:b5: 94:d5:fa:b8:cf:72:64:4a:b5:65:23:6d:74:46:cb: 6c:4a:a0:43:6c:6d:80:f6:01:47:3f:5a:ef:14:b0: 65:cb:ea:ad:3b:e4:c6:cb:65:14:5a:1a:fc:fb:21: b0:7e:79:b1:16:03:74:a4:cc:0c:07:a3:a8:22:25: dd:d1:8d:e8:f7:1a:2b:cb:d3:07:67:29:d8:7f:03: 2f:88:04:6b:02:62:d5:57:8e:44:2a:ef:fa:02:ef: 14:95:aa:1c:a1:df:47:a6:52:22:d4:6b:ca:ed:91: f0:14:00:2b:69:56:31:32:03:22:18:48:dc:e0:61: 4f:62:99:86:e8:cc:82:9b:c8:a1:af:3b:66:ba:27: 6e:88:b5:82:bf:87:86:df:79:32:d2:73:6c:0a:c9: b8:ba:bd:36:c2:5c:a3:f5:59:fc:3d:75:98:2a:f5: 23:d0:39:44:e4:d2:18:5f:4b:4f:2f:0d:6a:35:18: a0:7f:05:da:54:cd:e3:d3:ee:92:2a:b8:e5:9e:2b: f3:a3:51:dc:22:83:85:dc:af:25:44:97:f4:65:ca: 25:9e:37:e8:3e:71:d6:cd:c5:aa:f9:4c:b8:c5:5b: 92:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F9:AF:A2:46:8E:A2:96:4C:97:82:F7:C7:00:F7:3B:DF:F2:3C:C7 X509v3 Authority Key Identifier: keyid:0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:53:34:e4:08:1a:69:01:b9:78:48:97:01:d0:65:7b:fa:38: 20:5e:13:17:cd:c9:b9:67:af:0a:f3:9b:12:25:53:d8:5d:8a: b5:d6:86:89:05:7d:6b:0c:8f:c3:a6:c4:49:3b:ad:bd:be:40: 55:b2:e6:41:3f:e7:c7:8e:40:9a:ca:ae:4a:74:d0:97:49:b8: 82:ed:15:50:dd:eb:4e:d8:55:51:52:1d:ee:19:66:dd:66:04: 75:4c:15:96:07:ff:75:24:2c:e3:bb:03:53:64:bc:71:72:c5: 9e:11:5b:62:5a:0d:e4:f4:8c:74:b1:d7:84:7c:93:72:3b:bd: 6e:92:73:38:6a:96:95:1d:49:f5:34:eb:6a:1a:d4:e5:57:92: af:fa:8f:96:3d:a6:3d:6d:ee:2f:46:58:ac:b1:9e:36:ad:98: 93:08:1a:23:5c:37:e5:a1:c4:27:3d:89:5f:9a:e5:a1:25:25: 4c:da:56:9f:80:2e:5e:16:62:92:22:81:b3:65:c1:80:59:b0: 6f:35:ad:5c:0a:42:13:02:c2:27:4f:62:2b:ab:a0:aa:fe:b7: a0:21:68:0e:a7:bb:2a:4b:7f:59:22:3e:4e:80:7d:88:4b:35: cd:b6:9e:b9:24:33:be:f4:50:9b:00:b1:0c:91:25:49:3e:9d: e8:06:9d:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEKTvdDaUFD+S+7MViX8Y2pyCWT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwQTA3QTlFOEI4Q0RBQkY0MkU5Q0M0NTMxNDNGNUM1 NkU5RkY2RTAeFw0yNjA3MjQwOTA1NTFaFw0yNjA3MjUxMTAyNTFaMDMxMTAvBgNV BAMTKDI4RjlBRkEyNDY4RUEyOTY0Qzk3ODJGN0M3MDBGNzNCREZGMjNDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIXxv+kYjfcfr8SERDIw9JqzS YdlhqcrqPPnbtZTV+rjPcmRKtWUjbXRGy2xKoENsbYD2AUc/Wu8UsGXL6q075MbL ZRRaGvz7IbB+ebEWA3SkzAwHo6giJd3Rjej3GivL0wdnKdh/Ay+IBGsCYtVXjkQq 7/oC7xSVqhyh30emUiLUa8rtkfAUACtpVjEyAyIYSNzgYU9imYbozIKbyKGvO2a6 J26ItYK/h4bfeTLSc2wKybi6vTbCXKP1Wfw9dZgq9SPQOUTk0hhfS08vDWo1GKB/ BdpUzePT7pIquOWeK/OjUdwig4XcryVEl/RlyiWeN+g+cdbNxar5TLjFW5K3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKPmvokaOopZMl4L3xwD3O9/yPMcwHwYDVR0j BBgwFoAUDAoHqei4zav0LpzEUxQ/XFbp/24wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ2ODMxMDY5NjcyMjQzNS8xLzBDMEEwN0E5RThCOENEQUJGNDJFOUNDNDUzMTQz RjVDNTZFOUZGNkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwQTA3QTlFOEI4Q0RBQkY0MkU5Q0M0NTMxNDNGNUM1NkU5RkY2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0NjgzMTA2OTY3MjI0MzUvMS8wQzBBMDdBOUU4QjhD REFCRjQyRTlDQzQ1MzE0M0Y1QzU2RTlGRjZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlM05AgaaQG5 eEiXAdBle/o4IF4TF83JuWevCvObEiVT2F2KtdaGiQV9awyPw6bESTutvb5AVbLm QT/nx45AmsquSnTQl0m4gu0VUN3rTthVUVId7hlm3WYEdUwVlgf/dSQs47sDU2S8 cXLFnhFbYloN5PSMdLHXhHyTcju9bpJzOGqWlR1J9TTrahrU5VeSr/qPlj2mPW3u L0ZYrLGeNq2YkwgaI1w35aHEJz2JX5rloSUlTNpWn4AuXhZikiKBs2XBgFmwbzWt XApCEwLCJ09iK6ugqv63oCFoDqe7Kkt/WSI+ToB9iEs1zbaeuSQzvvRQmwCxDJEl ST6d6AadNw== -----END CERTIFICATE-----Generated at Fri Jul 24 21:31:20 2026 by rpki-client