$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft File: 0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft (raw, json) Hash identifier: Fr3XMDEHZ04CuaiZonuzL8Tv3XexI60WWrJzK+Xl0c4= Subject key identifier: 1A:28:33:97:83:10:1B:07:AA:72:4C:48:26:71:3A:CA:2D:30:EC:06 Authority key identifier: 0C:6F:DD:BB:C0:EC:F9:C3:4B:E9:CF:EC:F9:AF:07:1D:8B:B6:E6:E2 Certificate issuer: /CN=0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2 Certificate serial: 711BD6CDE95E26F951EAEB74830A5D9C9125BF52 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft Manifest number: 45 Signing time: Thu 23 Jul 2026 13:53:48 +0000 Manifest this update: Thu 23 Jul 2026 13:48:48 +0000 Manifest next update: Fri 24 Jul 2026 16:06:48 +0000 Files and hashes: 1: 0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl (hash: yNTOwwX5jaLUiepH9bM/BMjRZ21TXxsIP23IVUSYXOA=) 2: 3130332e38312e3132302e302f32322d3232203d3e203633373232.roa (hash: i0xS9mmPro5YpqsYMEwbwKsuNl3W83AWZ9CPEUwv3YI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:1b:d6:cd:e9:5e:26:f9:51:ea:eb:74:83:0a:5d:9c:91:25:bf:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2 Validity Not Before: Jul 23 13:48:48 2026 GMT Not After : Jul 24 16:06:48 2026 GMT Subject: CN=1A28339783101B07AA724C4826713ACA2D30EC06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0a:c8:f5:e2:d7:15:81:f0:25:24:bd:35:a4: 7d:e7:5b:b7:12:de:e9:ad:00:6b:6f:25:87:4b:b4: 35:5e:b2:02:59:0f:21:6a:3e:e2:1d:e4:1e:c2:f3: 83:50:a5:5f:2f:2f:59:84:2f:13:5a:0d:49:a2:41: 77:1c:d7:47:1b:78:e0:45:26:9f:95:e3:29:ac:c8: 2c:a3:ec:84:1e:c2:5d:d1:96:84:fa:61:ae:2c:e9: 00:ec:f3:05:96:14:52:33:75:53:4a:0c:78:72:2a: af:ba:fc:83:df:ae:a9:bc:ac:fe:1d:fa:63:20:81: 48:5e:1c:82:8f:64:f0:80:69:9e:20:4c:cf:4d:cc: 53:2d:37:0d:ab:d0:a9:cc:0c:4a:c7:21:cf:ea:0f: e1:e9:1e:6c:64:f2:86:12:be:4f:5e:21:48:86:91: 30:28:3f:aa:57:91:5f:be:a4:b9:9b:ba:c5:4c:0f: 5a:1d:3a:ea:11:2a:5f:84:64:ba:e4:fe:be:93:52: 13:1d:14:fe:36:9c:bd:a1:0a:8e:24:fc:a9:ec:a1: 16:76:96:e5:1b:dd:a3:df:06:0e:06:fb:77:8f:6c: a4:88:29:d8:81:69:70:29:76:6d:3c:de:ef:53:fe: 50:99:b1:25:da:7e:09:81:d5:57:7b:36:da:5f:8a: 73:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:28:33:97:83:10:1B:07:AA:72:4C:48:26:71:3A:CA:2D:30:EC:06 X509v3 Authority Key Identifier: keyid:0C:6F:DD:BB:C0:EC:F9:C3:4B:E9:CF:EC:F9:AF:07:1D:8B:B6:E6:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:2a:4f:fa:a6:d8:45:62:d4:6a:d7:d8:3e:21:d0:3c:a4:b8: 45:bc:ae:dc:db:14:00:77:24:77:3e:f9:13:ea:4f:8d:d6:cb: c1:18:6e:a8:d4:6d:d5:57:5b:9a:bd:90:c5:af:52:42:0c:b6: 04:65:ee:ab:78:db:c6:18:83:14:d0:64:d9:2c:f9:a3:23:b0: f6:78:49:a4:5b:7e:a7:da:0e:0f:39:e8:7e:a6:c6:0f:36:3a: 45:b1:ce:5f:5c:1c:ea:88:13:2f:4e:f6:b6:c1:08:fb:3b:25: a0:bc:c5:49:7b:0f:ea:8c:8f:3f:6a:1a:48:51:a8:92:9f:22: b4:b4:1d:3b:ee:30:e1:3c:ee:e2:3c:fd:7b:1b:72:a3:a6:41: 27:15:c6:13:b8:02:14:ca:ea:4e:67:20:69:ea:7f:ad:d4:fb: 9f:1a:fb:ac:a7:6c:96:6d:c4:2b:4d:ce:51:1c:fd:9f:94:f0: 87:d7:f6:a4:3c:e4:7f:c7:16:7a:a5:a5:25:02:d6:1a:8d:d3: 5c:ab:15:71:3b:79:18:78:0f:7b:82:5c:2c:f9:c7:31:b5:f1: e1:52:e1:89:0c:a0:f3:68:4d:01:3e:0c:6f:1a:57:ac:26:b4: 6f:19:60:f0:1b:7b:96:88:43:c1:5d:4a:00:4f:4d:06:0c:1c: 4a:7f:1d:3f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcRvWzeleJvlR6ut0gwpdnJElv1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM2RkREQkJDMEVDRjlDMzRCRTlDRkVDRjlBRjA3MUQ4 QkI2RTZFMjAeFw0yNjA3MjMxMzQ4NDhaFw0yNjA3MjQxNjA2NDhaMDMxMTAvBgNV BAMTKDFBMjgzMzk3ODMxMDFCMDdBQTcyNEM0ODI2NzEzQUNBMkQzMEVDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCsj14tcVgfAlJL01pH3nW7cS 3umtAGtvJYdLtDVesgJZDyFqPuId5B7C84NQpV8vL1mELxNaDUmiQXcc10cbeOBF Jp+V4ymsyCyj7IQewl3RloT6Ya4s6QDs8wWWFFIzdVNKDHhyKq+6/IPfrqm8rP4d +mMggUheHIKPZPCAaZ4gTM9NzFMtNw2r0KnMDErHIc/qD+HpHmxk8oYSvk9eIUiG kTAoP6pXkV++pLmbusVMD1odOuoRKl+EZLrk/r6TUhMdFP42nL2hCo4k/KnsoRZ2 luUb3aPfBg4G+3ePbKSIKdiBaXApdm083u9T/lCZsSXafgmB1Vd7NtpfinPvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGigzl4MQGweqckxIJnE6yi0w7AYwHwYDVR0j BBgwFoAUDG/du8Ds+cNL6c/s+a8HHYu25uIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDM2NDIyNTc1ODY5MTM0Ny8wLzBDNkZEREJCQzBFQ0Y5QzM0QkU5Q0ZFQ0Y5QUYw NzFEOEJCNkU2RTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEM2RkREQkJDMEVDRjlDMzRCRTlDRkVDRjlBRjA3MUQ4QkI2RTZFMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQzNjQyMjU3NTg2OTEzNDcvMC8wQzZGRERCQkMwRUNG OUMzNEJFOUNGRUNGOUFGMDcxRDhCQjZFNkUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnypP+qbYRWLU atfYPiHQPKS4Rbyu3NsUAHckdz75E+pPjdbLwRhuqNRt1Vdbmr2Qxa9SQgy2BGXu q3jbxhiDFNBk2Sz5oyOw9nhJpFt+p9oODznofqbGDzY6RbHOX1wc6ogTL072tsEI +zsloLzFSXsP6oyPP2oaSFGokp8itLQdO+4w4Tzu4jz9extyo6ZBJxXGE7gCFMrq Tmcgaep/rdT7nxr7rKdslm3EK03OURz9n5Twh9f2pDzkf8cWeqWlJQLWGo3TXKsV cTt5GHgPe4JcLPnHMbXx4VLhiQyg82hNAT4MbxpXrCa0bxlg8Bt7lohDwV1KAE9N BgwcSn8dPw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:27:39 2026 by rpki-client