$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft File: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft (raw, json) Hash identifier: MBNVLYCyi+5I/A6bN+HFl1O4sGowuUp65QH3PTLkLZY= Subject key identifier: 14:AC:98:6F:09:6E:58:AF:49:12:19:DB:63:BD:23:BC:C2:6F:FD:01 Authority key identifier: 0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E Certificate issuer: /CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E Certificate serial: 61EDD5711380389E2A514B987D00FA7566C6FC30 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft Manifest number: D3 Signing time: Sat 17 Oct 2026 12:03:50 +0000 Manifest this update: Sat 17 Oct 2026 11:58:50 +0000 Manifest next update: Tue 20 Oct 2026 23:40:50 +0000 Files and hashes: 1: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl (hash: hptc6ZjrmR8D39pnnjoPBhKEehHsCJ8pP5FnQ19zW9Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 23:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ed:d5:71:13:80:38:9e:2a:51:4b:98:7d:00:fa:75:66:c6:fc:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E Validity Not Before: Oct 17 11:58:50 2026 GMT Not After : Oct 20 23:40:50 2026 GMT Subject: CN=14AC986F096E58AF491219DB63BD23BCC26FFD01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:b8:0a:d6:c5:08:fd:5e:ed:74:00:c1:3a: c6:08:09:fb:da:d9:47:ba:1b:ff:de:f5:88:bd:fd: a2:01:2a:17:49:d0:7a:dd:42:a8:ea:a5:45:da:3f: 0a:90:13:51:06:38:5f:92:2f:e2:ce:c0:18:21:b4: 1b:79:d8:38:84:1c:4b:a1:92:1e:fa:85:e8:1a:00: 2d:d6:3b:10:73:d9:1c:31:ab:d0:09:96:e0:d9:64: ad:61:99:fc:82:be:67:c1:b1:cf:38:a0:19:60:18: 03:f4:e2:5d:de:d2:32:73:15:04:cb:6c:9c:25:bc: 54:41:a8:c7:5b:27:25:93:11:df:33:24:d4:b2:fc: 88:dc:92:8b:80:6a:a3:ff:32:d4:11:d0:ed:0a:81: 0b:07:f9:53:db:9a:29:40:70:d3:c6:58:ae:0d:aa: d7:a1:51:f1:aa:6f:5a:7f:13:4b:92:1c:52:b9:b4: 88:3a:40:4c:67:dc:45:27:20:3b:c5:d7:aa:31:ae: d2:75:09:a6:b2:e1:2a:eb:1f:e7:3c:af:6f:bc:35: 6c:48:e0:c5:3f:77:e9:5e:47:d3:8c:b2:c3:41:64: 7d:85:d1:39:55:ae:85:ba:16:33:8a:20:29:68:04: ff:c3:b8:f0:c6:0e:b4:52:bf:29:e6:7b:55:70:54: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AC:98:6F:09:6E:58:AF:49:12:19:DB:63:BD:23:BC:C2:6F:FD:01 X509v3 Authority Key Identifier: keyid:0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:0f:b3:98:5e:35:50:b7:3f:22:15:a2:b0:6d:d5:38:ae:6c: f2:a9:0b:6c:09:a6:ed:41:a9:b9:a7:cf:77:96:65:a9:1a:9c: e9:a5:98:d5:74:5b:a1:58:90:50:c0:a3:37:60:9a:67:4d:40: fd:77:08:8c:e0:f6:90:25:01:5e:fb:b1:75:b6:e6:01:70:ac: ae:cb:2d:2a:2b:9b:d4:6e:90:1d:ce:74:ef:dc:3e:8f:dd:7a: b2:9c:4c:4d:f9:a9:dd:dd:40:59:4d:b5:63:b6:7a:db:2b:1a: fd:ed:44:ff:17:3a:06:40:1a:34:7a:4e:76:2d:30:4e:1a:86: 4d:6d:35:16:f6:a8:bf:f9:c7:48:7f:e4:be:74:17:79:45:9d: 73:6c:90:f2:f1:31:3e:7b:42:70:71:4d:62:e4:9b:df:60:51: bc:04:2d:b4:75:95:ca:48:73:db:92:99:4e:70:3c:5c:4f:73: 33:a9:0d:4b:17:db:a1:61:e6:90:90:3c:9a:c2:c9:89:f5:1b: 7b:89:09:2f:78:69:81:d3:d2:6b:1f:ef:f6:0a:bb:f6:28:75: f5:a5:06:0c:b6:47:a6:9a:af:fc:da:8f:58:8d:5d:f3:ce:92: 9a:f0:37:e7:7c:ad:1e:5b:b0:f9:7d:2e:1c:a6:21:46:db:df: ba:b1:94:71 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYe3VcROAOJ4qUUuYfQD6dWbG/DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwQTA3QTlFOEI4Q0RBQkY0MkU5Q0M0NTMxNDNGNUM1 NkU5RkY2RTAeFw0yNjEwMTcxMTU4NTBaFw0yNjEwMjAyMzQwNTBaMDMxMTAvBgNV BAMTKDE0QUM5ODZGMDk2RTU4QUY0OTEyMTlEQjYzQkQyM0JDQzI2RkZEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ3bgK1sUI/V7tdADBOsYICfva 2Ue6G//e9Yi9/aIBKhdJ0HrdQqjqpUXaPwqQE1EGOF+SL+LOwBghtBt52DiEHEuh kh76hegaAC3WOxBz2Rwxq9AJluDZZK1hmfyCvmfBsc84oBlgGAP04l3e0jJzFQTL bJwlvFRBqMdbJyWTEd8zJNSy/IjckouAaqP/MtQR0O0KgQsH+VPbmilAcNPGWK4N qtehUfGqb1p/E0uSHFK5tIg6QExn3EUnIDvF16oxrtJ1Caay4SrrH+c8r2+8NWxI 4MU/d+leR9OMssNBZH2F0TlVroW6FjOKICloBP/DuPDGDrRSvynme1VwVHrTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFKyYbwluWK9JEhnbY70jvMJv/QEwHwYDVR0j BBgwFoAUDAoHqei4zav0LpzEUxQ/XFbp/24wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ2ODMxMDY5NjcyMjQzNS8xLzBDMEEwN0E5RThCOENEQUJGNDJFOUNDNDUzMTQz RjVDNTZFOUZGNkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwQTA3QTlFOEI4Q0RBQkY0MkU5Q0M0NTMxNDNGNUM1NkU5RkY2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0NjgzMTA2OTY3MjI0MzUvMS8wQzBBMDdBOUU4QjhD REFCRjQyRTlDQzQ1MzE0M0Y1QzU2RTlGRjZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvw+zmF41ULc/ IhWisG3VOK5s8qkLbAmm7UGpuafPd5ZlqRqc6aWY1XRboViQUMCjN2CaZ01A/XcI jOD2kCUBXvuxdbbmAXCsrsstKiub1G6QHc5079w+j916spxMTfmp3d1AWU21Y7Z6 2ysa/e1E/xc6BkAaNHpOdi0wThqGTW01Fvaov/nHSH/kvnQXeUWdc2yQ8vExPntC cHFNYuSb32BRvAQttHWVykhz25KZTnA8XE9zM6kNSxfboWHmkJA8msLJifUbe4kJ L3hpgdPSax/v9gq79ih19aUGDLZHppqv/NqPWI1d886SmvA353ytHluw+X0uHKYh RtvfurGUcQ== -----END CERTIFICATE-----Generated at Mon Oct 19 19:09:25 2026 by rpki-client