$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft File: 0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft (raw, json) Hash identifier: MDMU8M4MAuC9faGXpKOF0KUWSoF8QdjW/Skm2fqWXwc= Subject key identifier: 75:DD:BA:8C:03:D4:D2:3F:D1:8E:F4:4B:C7:7A:E7:9D:02:35:18:4E Authority key identifier: 0C:6F:DD:BB:C0:EC:F9:C3:4B:E9:CF:EC:F9:AF:07:1D:8B:B6:E6:E2 Certificate issuer: /CN=0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2 Certificate serial: 3755B09D7BF3CE71FB86B693D779374967E07226 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft Manifest number: 88 Signing time: Sat 10 Oct 2026 11:09:36 +0000 Manifest this update: Sat 10 Oct 2026 11:04:36 +0000 Manifest next update: Tue 13 Oct 2026 20:59:36 +0000 Files and hashes: 1: 0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl (hash: O07a7NjD4J/7Vf5OSgZg6i1ohQ8lPorlCYYm/4HraPs=) 2: 3130332e38312e3132302e302f32322d3232203d3e203633373232.roa (hash: i0xS9mmPro5YpqsYMEwbwKsuNl3W83AWZ9CPEUwv3YI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 20:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:55:b0:9d:7b:f3:ce:71:fb:86:b6:93:d7:79:37:49:67:e0:72:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2 Validity Not Before: Oct 10 11:04:36 2026 GMT Not After : Oct 13 20:59:36 2026 GMT Subject: CN=75DDBA8C03D4D23FD18EF44BC77AE79D0235184E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ef:a0:0b:5c:da:1f:d3:d4:db:e1:de:8e:3a: 5a:43:52:63:ee:ba:57:7a:96:dd:0b:bb:a8:e5:22: 93:49:18:50:3c:02:9f:5d:37:91:c4:d9:ef:df:66: 40:2d:12:3f:20:ae:df:65:5d:bc:eb:f3:9b:ce:ee: a7:2e:e9:d7:4d:40:3f:99:f2:a6:6f:b5:e3:00:3c: a4:52:a2:4d:8b:68:b3:7e:50:40:b6:59:00:d0:94: f0:74:c9:c3:62:6e:9f:4e:b8:79:8d:22:6b:7e:24: 06:95:02:9c:50:8e:7c:af:95:29:1c:bb:69:50:b9: 36:1a:36:b2:32:25:ff:f8:70:05:f4:37:be:50:77: b6:1d:61:f1:11:7f:25:88:93:41:0a:ec:fa:ba:ca: df:d7:95:f8:1c:dc:1b:85:77:90:22:0d:24:5c:66: 35:ee:03:ba:20:6c:31:95:28:ef:f0:30:5c:04:a1: c8:15:2d:dc:05:80:6b:98:db:64:5f:6a:da:de:0c: b0:f6:65:c1:31:27:a6:22:f9:49:15:0d:46:7e:b0: 8b:6b:14:61:b1:b7:16:b7:32:ed:3c:d9:26:c7:00: b2:1b:18:16:b7:4d:50:4c:85:92:e5:f5:1a:fb:ee: 30:50:f1:0c:aa:3d:41:43:97:9c:a1:04:91:31:a2: 07:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DD:BA:8C:03:D4:D2:3F:D1:8E:F4:4B:C7:7A:E7:9D:02:35:18:4E X509v3 Authority Key Identifier: keyid:0C:6F:DD:BB:C0:EC:F9:C3:4B:E9:CF:EC:F9:AF:07:1D:8B:B6:E6:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c4:50:e9:10:30:3f:04:cc:c3:cc:b4:26:06:18:9f:75:40: b2:18:9b:06:83:6b:b1:22:ce:6d:d1:31:76:84:60:eb:b4:83: bc:c1:8f:f8:fd:51:6a:9e:f5:9d:a0:20:d3:e2:a2:7b:a3:5e: bc:23:c7:a1:66:53:77:17:2a:c0:0a:5e:d5:6a:a6:72:d1:b9: 8e:c9:ed:4b:52:08:64:18:c4:32:5c:87:80:dd:c3:41:94:4e: 0e:3e:50:15:e8:a9:8b:db:e8:a9:36:f5:9c:94:7b:c7:3a:d9: 2f:f4:bb:16:98:fd:02:8a:f4:00:02:db:8b:b7:a9:18:fa:73: 65:f8:c0:0e:4d:7c:34:c1:6f:41:f4:6a:9f:b4:c5:3c:25:89: 74:80:0c:fc:b6:c1:d7:df:ad:07:32:00:c6:b1:e1:ad:86:e1: 83:36:d0:ea:28:18:df:34:29:cb:22:28:a9:0c:23:a0:41:a3: b7:f0:a0:d7:ee:b5:be:6d:ba:6b:6e:29:90:21:ef:f2:be:2c: 9d:57:74:96:b8:05:d3:e1:3b:44:3d:04:3a:ed:d0:99:75:2f: 01:56:ec:d9:28:34:ad:1b:f1:4a:72:93:e7:47:91:80:f6:e2: 96:e2:ef:5b:93:f1:f7:a2:0d:d7:e2:4a:9e:4f:65:86:06:aa: fd:ad:7e:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN1WwnXvzznH7hraT13k3SWfgciYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM2RkREQkJDMEVDRjlDMzRCRTlDRkVDRjlBRjA3MUQ4 QkI2RTZFMjAeFw0yNjEwMTAxMTA0MzZaFw0yNjEwMTMyMDU5MzZaMDMxMTAvBgNV BAMTKDc1RERCQThDMDNENEQyM0ZEMThFRjQ0QkM3N0FFNzlEMDIzNTE4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl76ALXNof09Tb4d6OOlpDUmPu uld6lt0Lu6jlIpNJGFA8Ap9dN5HE2e/fZkAtEj8grt9lXbzr85vO7qcu6ddNQD+Z 8qZvteMAPKRSok2LaLN+UEC2WQDQlPB0ycNibp9OuHmNImt+JAaVApxQjnyvlSkc u2lQuTYaNrIyJf/4cAX0N75Qd7YdYfERfyWIk0EK7Pq6yt/Xlfgc3BuFd5AiDSRc ZjXuA7ogbDGVKO/wMFwEocgVLdwFgGuY22RfatreDLD2ZcExJ6Yi+UkVDUZ+sItr FGGxtxa3Mu082SbHALIbGBa3TVBMhZLl9Rr77jBQ8QyqPUFDl5yhBJExogcpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdd26jAPU0j/RjvRLx3rnnQI1GE4wHwYDVR0j BBgwFoAUDG/du8Ds+cNL6c/s+a8HHYu25uIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDM2NDIyNTc1ODY5MTM0Ny8wLzBDNkZEREJCQzBFQ0Y5QzM0QkU5Q0ZFQ0Y5QUYw NzFEOEJCNkU2RTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEM2RkREQkJDMEVDRjlDMzRCRTlDRkVDRjlBRjA3MUQ4QkI2RTZFMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQzNjQyMjU3NTg2OTEzNDcvMC8wQzZGRERCQkMwRUNG OUMzNEJFOUNGRUNGOUFGMDcxRDhCQjZFNkUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMRQ6RAwPwTM w8y0JgYYn3VAshibBoNrsSLObdExdoRg67SDvMGP+P1Rap71naAg0+Kie6NevCPH oWZTdxcqwApe1WqmctG5jsntS1IIZBjEMlyHgN3DQZRODj5QFeipi9voqTb1nJR7 xzrZL/S7Fpj9Aor0AALbi7epGPpzZfjADk18NMFvQfRqn7TFPCWJdIAM/LbB19+t BzIAxrHhrYbhgzbQ6igY3zQpyyIoqQwjoEGjt/Cg1+61vm26a24pkCHv8r4snVd0 lrgF0+E7RD0EOu3QmXUvAVbs2Sg0rRvxSnKT50eRgPbiluLvW5Px96IN1+JKnk9l hgaq/a1+lg== -----END CERTIFICATE-----Generated at Mon Oct 12 02:42:22 2026 by rpki-client