$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft File: 0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft (raw, json) Hash identifier: Of75BjUCovxRTblvqnOZ65J5DcNOXkAXpMG3CP4bJEU= Subject key identifier: CA:B2:1D:33:2E:1E:C2:19:DF:CC:12:CA:AD:D6:75:23:69:B0:F2:06 Authority key identifier: 0C:6F:DD:BB:C0:EC:F9:C3:4B:E9:CF:EC:F9:AF:07:1D:8B:B6:E6:E2 Certificate issuer: /CN=0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2 Certificate serial: 7AB71424BD59A5AA76DF6EC7DD3ACAD70EDAE642 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft Manifest number: 8A Signing time: Wed 14 Oct 2026 22:40:45 +0000 Manifest this update: Wed 14 Oct 2026 22:35:45 +0000 Manifest next update: Sun 18 Oct 2026 09:36:45 +0000 Files and hashes: 1: 3130332e38312e3132302e302f32322d3232203d3e203633373232.roa (hash: i0xS9mmPro5YpqsYMEwbwKsuNl3W83AWZ9CPEUwv3YI=) 2: 0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl (hash: vmIyzA9Wl3gHBqYeQT1Dl12PUSKA9kjxHBmilTq3RWs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 09:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b7:14:24:bd:59:a5:aa:76:df:6e:c7:dd:3a:ca:d7:0e:da:e6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2 Validity Not Before: Oct 14 22:35:45 2026 GMT Not After : Oct 18 09:36:45 2026 GMT Subject: CN=CAB21D332E1EC219DFCC12CAADD6752369B0F206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:58:71:c4:f7:c9:86:9c:50:34:73:7c:b6: 35:b8:ef:da:ce:71:47:1d:5a:42:26:3d:88:66:e6: 9a:89:30:f9:c8:ba:f1:23:1f:b1:39:cc:ce:57:59: 36:04:d9:f8:3b:07:e8:fc:5a:eb:81:f5:c4:2a:6a: a5:df:10:e0:f6:79:22:fe:6d:96:51:c1:44:54:bb: 54:9b:a0:13:64:7f:f2:48:18:8b:57:38:fd:69:b3: fa:ec:89:98:9b:77:43:48:ab:06:a9:1b:c9:5e:aa: 74:b2:5a:5f:4f:e1:a5:9e:e8:0d:b8:aa:60:69:65: 9f:36:47:05:ee:42:51:c0:16:4a:fa:e7:05:9f:c0: 33:0d:2a:67:6a:2c:0d:21:b8:3d:6d:63:3b:1e:58: f0:72:88:7e:6f:f7:25:a0:a9:a6:ab:1a:07:d6:17: 2b:37:2a:0a:5d:ab:aa:57:c6:94:0a:f9:52:21:4f: ba:42:a8:fc:54:f2:17:4d:f7:30:a7:04:cf:7a:cc: 8f:f1:1b:50:7d:34:d8:4f:37:97:a7:90:0a:71:a0: 2d:e3:de:70:68:fe:7e:3e:22:00:53:27:b3:cc:08: cd:f5:72:f3:07:3c:0e:69:d9:d7:96:1e:ac:ad:03: d4:80:40:6b:85:bc:28:cd:bc:7d:ae:ec:dc:c6:3a: 53:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B2:1D:33:2E:1E:C2:19:DF:CC:12:CA:AD:D6:75:23:69:B0:F2:06 X509v3 Authority Key Identifier: keyid:0C:6F:DD:BB:C0:EC:F9:C3:4B:E9:CF:EC:F9:AF:07:1D:8B:B6:E6:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114364225758691347/0/0C6FDDBBC0ECF9C34BE9CFECF9AF071D8BB6E6E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fc:ba:04:89:73:af:d3:28:11:f3:0d:05:43:a9:34:f4:99: 95:a3:ac:48:86:90:11:ff:fa:05:e3:59:f5:98:8d:64:7d:db: eb:eb:46:43:24:c4:f4:ca:09:40:b9:f9:d0:a8:e8:aa:d7:e6: 55:70:42:0a:56:43:df:2f:f7:53:6f:40:df:0a:68:8a:83:8f: 51:78:f8:58:85:4e:0a:d3:ec:92:4e:00:cf:0c:e3:d7:e0:e3: 2c:4d:27:85:a2:41:c0:ba:cb:76:7a:33:5c:4b:53:7e:01:13: 0d:db:59:92:b5:30:4d:d5:91:a0:63:0d:f3:bc:05:da:7b:79: 25:dc:1b:e7:cf:4a:dc:c0:fd:46:73:73:52:0b:bc:79:31:0e: a5:23:fa:06:00:ca:3a:de:14:d5:65:a2:52:f8:6d:c3:c0:b7: 2c:83:82:6c:5e:4a:f0:17:ec:36:f7:4a:c6:c0:e4:b8:0b:db: eb:f1:19:15:2c:df:cf:5b:9c:68:9a:96:b7:7b:cd:64:42:a3: d2:cd:15:a2:cd:8b:bf:5e:37:47:cb:67:7e:8d:fd:44:30:e6: 2c:8e:c1:53:72:84:58:6d:d9:cf:eb:00:57:bd:4f:9a:f3:c2: 21:81:30:c7:b1:ba:a3:f9:b6:49:b5:fc:b5:86:0a:ed:cc:53: d9:9c:b9:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUercUJL1Zpap2327H3TrK1w7a5kIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEM2RkREQkJDMEVDRjlDMzRCRTlDRkVDRjlBRjA3MUQ4 QkI2RTZFMjAeFw0yNjEwMTQyMjM1NDVaFw0yNjEwMTgwOTM2NDVaMDMxMTAvBgNV BAMTKENBQjIxRDMzMkUxRUMyMTlERkNDMTJDQUFERDY3NTIzNjlCMEYyMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NFhxxPfJhpxQNHN8tjW479rO cUcdWkImPYhm5pqJMPnIuvEjH7E5zM5XWTYE2fg7B+j8WuuB9cQqaqXfEOD2eSL+ bZZRwURUu1SboBNkf/JIGItXOP1ps/rsiZibd0NIqwapG8leqnSyWl9P4aWe6A24 qmBpZZ82RwXuQlHAFkr65wWfwDMNKmdqLA0huD1tYzseWPByiH5v9yWgqaarGgfW Fys3Kgpdq6pXxpQK+VIhT7pCqPxU8hdN9zCnBM96zI/xG1B9NNhPN5enkApxoC3j 3nBo/n4+IgBTJ7PMCM31cvMHPA5p2deWHqytA9SAQGuFvCjNvH2u7NzGOlM9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyrIdMy4ewhnfzBLKrdZ1I2mw8gYwHwYDVR0j BBgwFoAUDG/du8Ds+cNL6c/s+a8HHYu25uIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDM2NDIyNTc1ODY5MTM0Ny8wLzBDNkZEREJCQzBFQ0Y5QzM0QkU5Q0ZFQ0Y5QUYw NzFEOEJCNkU2RTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEM2RkREQkJDMEVDRjlDMzRCRTlDRkVDRjlBRjA3MUQ4QkI2RTZFMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQzNjQyMjU3NTg2OTEzNDcvMC8wQzZGRERCQkMwRUNG OUMzNEJFOUNGRUNGOUFGMDcxRDhCQjZFNkUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/y6BIlzr9Mo EfMNBUOpNPSZlaOsSIaQEf/6BeNZ9ZiNZH3b6+tGQyTE9MoJQLn50KjoqtfmVXBC ClZD3y/3U29A3wpoioOPUXj4WIVOCtPskk4Azwzj1+DjLE0nhaJBwLrLdnozXEtT fgETDdtZkrUwTdWRoGMN87wF2nt5Jdwb589K3MD9RnNzUgu8eTEOpSP6BgDKOt4U 1WWiUvhtw8C3LIOCbF5K8BfsNvdKxsDkuAvb6/EZFSzfz1ucaJqWt3vNZEKj0s0V os2Lv143R8tnfo39RDDmLI7BU3KEWG3Zz+sAV71PmvPCIYEwx7G6o/m2SbX8tYYK 7cxT2Zy58Q== -----END CERTIFICATE-----Generated at Thu Oct 15 10:37:15 2026 by rpki-client