$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: 5En7zBMAYSAdpouV5t3NZ/Jhclb6oQjO1QqdyKIi5FE= Subject key identifier: 1B:25:8E:9B:95:E3:60:B1:A3:FB:60:56:AD:36:FB:11:47:23:DF:32 Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 24F4B40D2258456801C45F40ACF063AD828AADC9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 08:58:17 +0000 Manifest this update: Mon 02 Mar 2026 08:53:17 +0000 Manifest next update: Tue 03 Mar 2026 12:35:17 +0000 Files and hashes: 1: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: 7Wl+SJLza6joaZUESx8CfFE6lMMVd9A7QQkgjHVk/Jg=) 2: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) 3: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f4:b4:0d:22:58:45:68:01:c4:5f:40:ac:f0:63:ad:82:8a:ad:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: Mar 2 08:53:17 2026 GMT Not After : Mar 3 12:35:17 2026 GMT Subject: CN=1B258E9B95E360B1A3FB6056AD36FB114723DF32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:ab:e7:b4:4c:b6:e7:e1:1c:f2:03:9b:ea: f6:12:b4:84:41:34:5d:6a:3b:73:43:e8:6e:87:4e: c4:26:31:eb:22:fa:56:88:a9:47:3e:9b:34:2f:bd: 42:8a:81:1d:15:27:85:b4:af:dd:dc:9f:8e:17:4d: 53:e4:66:4b:99:d0:55:10:28:cd:4d:47:66:76:dd: 42:46:39:c8:55:0d:36:5d:45:b7:e7:a7:ac:7f:13: 41:f6:25:a7:51:d6:7d:cf:b6:c7:32:a9:d1:d9:78: 2c:13:32:f7:32:e0:c1:89:ed:cb:53:98:cf:51:23: f0:a4:dc:21:e0:25:3e:36:95:cc:9c:c5:85:6c:7c: dd:c6:2c:ce:3f:83:0a:ea:79:99:2e:0c:e4:27:40: 40:71:61:ef:c8:86:01:f7:33:e9:a0:b2:2f:92:11: 7d:d4:35:c3:45:49:43:44:63:a8:96:84:a1:ff:bf: 95:9a:24:d6:a5:d2:9d:98:d7:fd:89:3f:6b:c6:a0: 44:b5:01:26:59:91:1c:89:7e:2b:c1:e1:e4:21:52: e1:08:06:3a:44:1c:88:08:fa:ba:5c:9e:bd:83:32: 08:a0:28:68:24:2d:4a:10:8b:b8:da:b7:8d:ed:b4: 83:e3:36:92:18:ab:42:76:c8:d1:ec:df:3e:60:e1: 6f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:25:8E:9B:95:E3:60:B1:A3:FB:60:56:AD:36:FB:11:47:23:DF:32 X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:54:08:5a:bb:a3:91:df:e5:03:2c:b8:27:f1:86:30:b8:c2: fe:2c:b4:9d:b3:52:e8:ef:f8:12:91:d8:6c:66:4d:3b:bd:1a: 46:98:b5:2e:79:2e:df:b3:5c:af:25:fc:cc:e8:6f:50:a7:78: 17:57:4a:41:2b:a6:a1:f6:37:9e:5d:6d:c5:25:18:4f:49:71: 0a:a5:93:58:5e:36:ab:de:08:ed:79:45:e3:76:19:bc:60:81: af:ea:92:ba:da:f0:6e:4c:b1:9d:88:4a:c6:9b:8c:7d:fa:9c: b1:46:85:41:51:af:22:bf:8b:0b:7a:8c:ea:d7:a6:5c:d7:c7: a1:db:07:7b:25:c2:e3:1e:35:ba:38:41:4b:55:d1:c5:f9:d1: ff:e8:18:4d:d2:05:96:39:5f:68:48:b1:09:59:69:62:03:e9: 65:92:77:07:63:a7:7a:0b:76:05:26:ba:1e:a4:fc:7a:ad:1d: be:8b:93:97:9a:aa:1b:4a:b4:4d:ec:a7:fa:c0:71:92:21:74: 4b:97:da:13:36:a7:e9:df:c5:66:94:19:46:9e:c5:d6:f9:de: af:b0:af:66:28:58:39:5a:a4:52:d8:52:57:04:47:9d:1b:1e: 5f:85:31:b5:ad:79:36:71:d5:99:67:c7:6d:3d:b6:e0:63:b0: 4e:97:b6:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJPS0DSJYRWgBxF9ArPBjrYKKrckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjAzMDIwODUzMTdaFw0yNjAzMDMxMjM1MTdaMDMxMTAvBgNV BAMTKDFCMjU4RTlCOTVFMzYwQjFBM0ZCNjA1NkFEMzZGQjExNDcyM0RGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpGqvntEy25+Ec8gOb6vYStIRB NF1qO3ND6G6HTsQmMesi+laIqUc+mzQvvUKKgR0VJ4W0r93cn44XTVPkZkuZ0FUQ KM1NR2Z23UJGOchVDTZdRbfnp6x/E0H2JadR1n3PtscyqdHZeCwTMvcy4MGJ7ctT mM9RI/Ck3CHgJT42lcycxYVsfN3GLM4/gwrqeZkuDOQnQEBxYe/IhgH3M+mgsi+S EX3UNcNFSUNEY6iWhKH/v5WaJNal0p2Y1/2JP2vGoES1ASZZkRyJfivB4eQhUuEI BjpEHIgI+rpcnr2DMgigKGgkLUoQi7jat43ttIPjNpIYq0J2yNHs3z5g4W/XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGyWOm5XjYLGj+2BWrTb7EUcj3zIwHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFQIWrujkd/l Ayy4J/GGMLjC/iy0nbNS6O/4EpHYbGZNO70aRpi1Lnku37NcryX8zOhvUKd4F1dK QSumofY3nl1txSUYT0lxCqWTWF42q94I7XlF43YZvGCBr+qSutrwbkyxnYhKxpuM ffqcsUaFQVGvIr+LC3qM6temXNfHodsHeyXC4x41ujhBS1XRxfnR/+gYTdIFljlf aEixCVlpYgPpZZJ3B2Onegt2BSa6HqT8eq0dvouTl5qqG0q0Teyn+sBxkiF0S5fa Ezan6d/FZpQZRp7F1vner7CvZihYOVqkUthSVwRHnRseX4Uxta15NnHVmWfHbT22 4GOwTpe2zA== -----END CERTIFICATE-----Generated at Mon Mar 2 13:13:32 2026 by rpki-client