$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft File: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft (raw, json) Hash identifier: byM3WpbCN6hNTw+mplc8sGWzPdIw+j443lLpPHpm8tE= Subject key identifier: 53:DB:4D:93:63:3F:F5:1A:AC:18:81:83:1E:48:24:35:61:32:2C:F0 Authority key identifier: 0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E Certificate issuer: /CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E Certificate serial: 3DFE65E366B19101EB2BFFC421B90DC8A3D68F8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft Manifest number: 95 Signing time: Wed 29 Jul 2026 14:24:34 +0000 Manifest this update: Wed 29 Jul 2026 14:19:34 +0000 Manifest next update: Thu 30 Jul 2026 18:18:34 +0000 Files and hashes: 1: 0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl (hash: ubaGt5dS7cRBfBL9nAa5qP8L+O6ebN7NrVvSBG43JYw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 18:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fe:65:e3:66:b1:91:01:eb:2b:ff:c4:21:b9:0d:c8:a3:d6:8f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E Validity Not Before: Jul 29 14:19:34 2026 GMT Not After : Jul 30 18:18:34 2026 GMT Subject: CN=53DB4D93633FF51AAC1881831E48243561322CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:c1:de:0d:22:e4:8d:68:24:5d:91:e8:0f: ea:e6:46:9a:22:ce:f5:97:af:63:ef:d4:61:3b:51: a4:25:0f:0c:51:b7:0c:fb:32:f2:d2:d9:38:f3:03: 72:73:b5:23:13:be:6c:6f:40:c1:7e:84:a6:81:b0: 66:47:47:0e:eb:34:50:87:03:9f:7b:31:7b:36:e6: 5d:4b:6c:7b:23:fe:b6:4c:d3:87:6d:67:da:27:4c: d0:d3:41:2b:eb:2c:df:8e:f2:ab:46:45:c2:fc:ff: 90:3d:aa:c1:c0:d6:cc:50:95:05:21:e5:e9:cd:22: df:ed:bd:18:3a:50:d9:1a:f5:1e:92:7e:9e:84:a3: f3:f3:70:37:21:60:ad:9b:de:39:76:bc:26:8d:12: 85:31:39:ba:ee:5d:10:48:f8:f8:09:f6:04:ae:a5: f6:89:af:eb:55:0c:b8:58:e6:9d:04:86:77:3e:89: a5:c0:6f:97:80:93:55:61:37:54:6e:b1:6d:66:da: 17:2b:7b:f6:e7:de:46:6d:d5:cd:5b:a0:cd:11:a4: 22:64:8a:bd:61:70:c4:22:b5:9a:ef:3c:dd:43:46: 71:19:12:14:1f:c1:ff:73:e4:4d:ac:1e:2b:68:c2: 13:f9:d8:51:62:c7:ed:ea:dc:cb:20:55:96:81:ae: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DB:4D:93:63:3F:F5:1A:AC:18:81:83:1E:48:24:35:61:32:2C:F0 X509v3 Authority Key Identifier: keyid:0C:0A:07:A9:E8:B8:CD:AB:F4:2E:9C:C4:53:14:3F:5C:56:E9:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/1/0C0A07A9E8B8CDABF42E9CC453143F5C56E9FF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:72:11:94:37:16:99:2f:6e:fe:ae:ac:8c:e3:1e:f1:dc:27: 5b:8c:7e:83:a1:b7:d8:4a:e4:9f:2a:89:2d:63:fc:dc:53:d0: b1:63:c5:42:95:38:25:27:6b:9d:c7:6a:f5:30:d1:01:66:43: be:f6:e2:06:41:0e:72:c6:47:45:25:f5:9c:d0:5f:72:7e:a1: 27:c0:8b:fc:a6:a5:42:9a:02:ec:d6:56:3f:a6:b4:a7:94:19: 66:d4:1d:6a:18:6b:60:38:2c:7b:b2:b3:31:d1:69:b0:3d:ee: 57:1e:43:ef:5f:5c:23:dd:f6:f9:4c:70:98:72:70:47:1c:73: 33:d7:8c:63:2f:15:32:04:03:8f:ed:89:04:2f:f3:0c:51:d1: a6:c3:a5:08:25:41:d9:37:6d:97:e7:45:79:16:57:78:c6:a7: 1f:fb:dd:73:d6:da:51:a1:bb:dd:32:82:0b:99:f1:cc:6a:9c: 6d:c8:2c:84:36:6b:d9:98:31:f8:da:67:28:c7:fc:27:6f:8e: c6:69:06:5d:9a:6e:2b:87:0b:e3:73:af:54:ed:52:f2:b6:a0: 8a:c6:f8:6e:ff:f0:c8:50:d5:77:b9:67:7f:9a:df:04:f0:1d: 3a:12:92:66:eb:a4:61:ba:70:22:0f:4a:34:d3:b1:9d:d5:86: 0d:4d:53:80 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPf5l42axkQHrK//EIbkNyKPWj44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwQTA3QTlFOEI4Q0RBQkY0MkU5Q0M0NTMxNDNGNUM1 NkU5RkY2RTAeFw0yNjA3MjkxNDE5MzRaFw0yNjA3MzAxODE4MzRaMDMxMTAvBgNV BAMTKDUzREI0RDkzNjMzRkY1MUFBQzE4ODE4MzFFNDgyNDM1NjEzMjJDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCndMHeDSLkjWgkXZHoD+rmRpoi zvWXr2Pv1GE7UaQlDwxRtwz7MvLS2TjzA3JztSMTvmxvQMF+hKaBsGZHRw7rNFCH A597MXs25l1LbHsj/rZM04dtZ9onTNDTQSvrLN+O8qtGRcL8/5A9qsHA1sxQlQUh 5enNIt/tvRg6UNka9R6Sfp6Eo/PzcDchYK2b3jl2vCaNEoUxObruXRBI+PgJ9gSu pfaJr+tVDLhY5p0Ehnc+iaXAb5eAk1VhN1RusW1m2hcre/bn3kZt1c1boM0RpCJk ir1hcMQitZrvPN1DRnEZEhQfwf9z5E2sHitowhP52FFix+3q3MsgVZaBrhGFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUU9tNk2M/9RqsGIGDHkgkNWEyLPAwHwYDVR0j BBgwFoAUDAoHqei4zav0LpzEUxQ/XFbp/24wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ2ODMxMDY5NjcyMjQzNS8xLzBDMEEwN0E5RThCOENEQUJGNDJFOUNDNDUzMTQz RjVDNTZFOUZGNkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwQTA3QTlFOEI4Q0RBQkY0MkU5Q0M0NTMxNDNGNUM1NkU5RkY2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0NjgzMTA2OTY3MjI0MzUvMS8wQzBBMDdBOUU4QjhD REFCRjQyRTlDQzQ1MzE0M0Y1QzU2RTlGRjZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHIRlDcWmS9u /q6sjOMe8dwnW4x+g6G32ErknyqJLWP83FPQsWPFQpU4JSdrncdq9TDRAWZDvvbi BkEOcsZHRSX1nNBfcn6hJ8CL/KalQpoC7NZWP6a0p5QZZtQdahhrYDgse7KzMdFp sD3uVx5D719cI932+UxwmHJwRxxzM9eMYy8VMgQDj+2JBC/zDFHRpsOlCCVB2Tdt l+dFeRZXeManH/vdc9baUaG73TKCC5nxzGqcbcgshDZr2Zgx+NpnKMf8J2+OxmkG XZpuK4cL43OvVO1S8ragisb4bv/wyFDVd7lnf5rfBPAdOhKSZuukYbpwIg9KNNOx ndWGDU1TgA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:56 2026 by rpki-client