
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft
File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json)
Hash identifier: fUf5JCq+wLOMzrcGNEjptdIzMj/NKAf7/hO+fHP6Xlw=
Subject key identifier: E1:15:5D:5C:E2:5E:7A:FF:2A:D8:60:56:17:ED:47:54:2F:2C:A0:96
Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6
Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6
Certificate serial: 7961CABFF7D817F5C652AE397DAFAEDC3595DE47
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft
Manifest number: 77
Signing time: Fri 17 Apr 2026 05:54:40 +0000
Manifest this update: Fri 17 Apr 2026 05:49:40 +0000
Manifest next update: Sat 18 Apr 2026 06:23:40 +0000
Files and hashes: 1: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=)
2: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=)
3: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: rC0xqOnmMFQ8LXyee6NG2ss2o0R5jtg81HjKP7fTx8E=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 06:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:61:ca:bf:f7:d8:17:f5:c6:52:ae:39:7d:af:ae:dc:35:95:de:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6
Validity
Not Before: Apr 17 05:49:40 2026 GMT
Not After : Apr 18 06:23:40 2026 GMT
Subject: CN=E1155D5CE25E7AFF2AD8605617ED47542F2CA096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:b4:59:87:30:3a:10:31:26:38:94:fe:ed:
48:2f:84:52:d1:2e:b9:9c:9c:d0:f3:c2:40:92:b1:
3a:87:c5:19:d3:98:eb:2b:49:13:e5:38:b8:7f:f8:
20:f7:2f:60:33:04:cf:47:79:e1:f7:72:81:97:36:
22:cc:7d:dd:33:6a:05:22:ec:9b:6d:5d:d6:15:5e:
47:54:7f:b3:e0:74:e4:6e:8e:70:be:c4:83:cf:35:
8d:2f:75:b8:47:38:51:5c:88:f1:04:e5:3a:b5:80:
3d:fa:fb:21:ed:e7:ca:f9:c5:7c:f8:b7:a8:de:71:
a2:1f:7c:3d:64:12:3c:ac:94:07:8f:68:09:b3:4b:
97:df:3d:1f:08:7f:7c:4e:7e:c0:47:39:a8:e5:45:
a8:ab:24:60:8e:e9:29:cb:7d:cd:bf:0a:3d:b1:e7:
c5:fc:6f:f0:58:55:5b:c8:91:3f:9b:f1:21:42:3b:
28:aa:04:d6:9c:3b:03:8a:7a:7d:1b:29:22:c4:11:
16:22:ef:ef:4e:80:74:8f:47:23:2e:a3:48:a3:d0:
81:12:af:de:78:2c:b4:82:56:b2:7b:59:da:d9:aa:
47:13:0e:b7:3a:45:82:cd:35:79:34:da:b4:90:45:
91:55:bd:e7:74:2e:e4:ec:9a:40:e3:b1:45:e3:e7:
45:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:15:5D:5C:E2:5E:7A:FF:2A:D8:60:56:17:ED:47:54:2F:2C:A0:96
X509v3 Authority Key Identifier:
keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:16:cb:da:ae:79:59:c5:5f:97:fd:6f:fb:0b:27:0c:82:f4:
ea:bb:2a:2d:72:87:a8:33:36:2a:52:e7:c2:e1:68:d8:cf:bb:
80:32:63:35:ee:c4:4d:9c:82:3c:20:8f:b5:c0:90:a6:4c:e5:
d4:52:06:c1:26:86:72:76:10:99:1b:ac:02:44:96:9d:67:36:
15:ab:b7:25:26:9e:00:c6:e8:91:ab:ea:ce:84:e4:95:d5:31:
65:da:4f:05:7a:c5:24:73:d0:8a:45:02:45:9e:db:78:18:0e:
1e:90:03:ee:17:d8:e4:a4:6d:5f:bb:e5:c8:14:b4:bb:dd:4f:
49:3c:18:7b:4a:c5:d8:36:e6:67:b7:8a:f6:ea:7e:6d:89:37:
96:d6:d1:df:d0:eb:e1:8e:8b:6d:4f:de:b7:d2:f2:e8:46:fa:
7f:be:05:9b:32:ed:36:a1:fb:a7:98:4c:21:ea:60:df:41:30:
c6:85:15:f1:a9:12:96:3d:c1:e0:61:0f:b8:47:42:62:5e:cc:
10:2a:97:83:83:1f:fc:53:ab:ed:7a:d8:63:27:59:0d:95:6d:
07:84:00:b7:f1:e0:3f:37:1d:ba:01:97:69:0d:83:85:29:a9:
92:7a:24:86:3d:bd:68:99:72:c5:f7:f6:95:70:c8:03:ad:b1:
ea:1d:3d:32
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUeWHKv/fYF/XGUq45fa+u3DWV3kcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3
Nzc2NkRGNjAeFw0yNjA0MTcwNTQ5NDBaFw0yNjA0MTgwNjIzNDBaMDMxMTAvBgNV
BAMTKEUxMTU1RDVDRTI1RTdBRkYyQUQ4NjA1NjE3RUQ0NzU0MkYyQ0EwOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWLRZhzA6EDEmOJT+7UgvhFLR
LrmcnNDzwkCSsTqHxRnTmOsrSRPlOLh/+CD3L2AzBM9HeeH3coGXNiLMfd0zagUi
7JttXdYVXkdUf7PgdORujnC+xIPPNY0vdbhHOFFciPEE5Tq1gD36+yHt58r5xXz4
t6jecaIffD1kEjyslAePaAmzS5ffPR8If3xOfsBHOajlRairJGCO6SnLfc2/Cj2x
58X8b/BYVVvIkT+b8SFCOyiqBNacOwOKen0bKSLEERYi7+9OgHSPRyMuo0ij0IES
r954LLSCVrJ7WdrZqkcTDrc6RYLNNXk02rSQRZFVved0LuTsmkDjsUXj50U7AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU4RVdXOJeev8q2GBWF+1HVC8soJYwHwYDVR0j
BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC
MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1
RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBbL2q55WcVf
l/1v+wsnDIL06rsqLXKHqDM2KlLnwuFo2M+7gDJjNe7ETZyCPCCPtcCQpkzl1FIG
wSaGcnYQmRusAkSWnWc2Fau3JSaeAMbokavqzoTkldUxZdpPBXrFJHPQikUCRZ7b
eBgOHpAD7hfY5KRtX7vlyBS0u91PSTwYe0rF2DbmZ7eK9up+bYk3ltbR39Dr4Y6L
bU/et9Ly6Eb6f74FmzLtNqH7p5hMIepg30EwxoUV8akSlj3B4GEPuEdCYl7MECqX
g4Mf/FOr7XrYYydZDZVtB4QAt/HgPzcdugGXaQ2DhSmpknokhj29aJlyxff2lXDI
A62x6h09Mg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:56:49 2026 by rpki-client