$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: HG2n5cOxhNHt3GYdI9J4HX8hXPv9k0h65pi34oUYdSI= Subject key identifier: D8:3C:B0:D0:FB:5A:4C:C0:3A:BC:0C:57:B6:4D:28:34:67:C2:B6:21 Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 6F980CA396E2A7CA64D8138FDE674A3B4EC88594 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 13:24:27 +0000 Manifest this update: Wed 29 Jul 2026 13:19:27 +0000 Manifest next update: Thu 30 Jul 2026 15:07:27 +0000 Files and hashes: 1: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) 2: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) 3: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: NgfmVxO41gzyEmF3yKyapNwuKck/HqJYF/ZRQTuyiLE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 15:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:98:0c:a3:96:e2:a7:ca:64:d8:13:8f:de:67:4a:3b:4e:c8:85:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: Jul 29 13:19:27 2026 GMT Not After : Jul 30 15:07:27 2026 GMT Subject: CN=D83CB0D0FB5A4CC03ABC0C57B64D283467C2B621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ff:2d:d6:7a:d8:f2:7e:3a:5d:77:6a:f6:e0: 9b:0a:8f:f6:b0:0f:58:d9:7d:0e:44:f4:e0:d7:21: 6d:d9:ac:4a:a7:b1:18:de:da:48:e0:88:df:d6:24: 2f:36:8a:5c:7d:c2:59:f5:06:f5:d0:e7:1a:ec:3e: b4:ac:6d:d3:0c:cb:08:8c:d9:af:58:24:d2:72:38: 13:bd:2d:d1:b6:a0:fd:89:5f:18:d9:80:91:6f:c6: 0b:b9:0d:3b:01:e3:4a:ab:9e:2d:85:c8:cb:24:60: c1:4f:c9:2c:36:ef:da:2a:5c:6f:a9:33:a4:18:81: d8:89:bd:3b:81:16:e7:f7:cc:e8:12:2b:5f:b0:a0: 4d:bd:89:10:b0:c5:98:20:d4:ac:0a:db:f2:97:3a: a7:a3:11:4a:7e:5e:ad:4a:a7:e1:44:cf:c0:45:cd: 27:d1:d5:35:9c:ac:90:12:14:dc:6e:84:7f:c7:41: 97:06:b8:e7:31:03:7c:01:ad:da:cd:6d:91:7e:7f: 94:9c:78:e6:86:21:d0:42:df:b6:9a:7e:cf:08:50: 3c:f4:fe:8c:32:9c:30:c9:8f:01:58:0f:fd:5c:6b: 55:b5:82:dc:5b:2a:29:e7:4d:8d:5c:e7:c1:2f:a6: ed:4c:3a:79:d2:f6:6c:ec:7c:24:d5:da:e0:e9:be: df:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3C:B0:D0:FB:5A:4C:C0:3A:BC:0C:57:B6:4D:28:34:67:C2:B6:21 X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:87:38:bb:51:96:c5:1e:5a:79:ef:df:9f:50:94:43:17:e8: de:70:a9:1b:9a:4e:ae:b1:ac:d9:0d:f9:e8:58:3f:cf:20:2d: 72:10:8d:d6:d9:ad:2e:bd:0b:2a:50:ed:8f:c3:d0:f5:5c:bb: 24:8c:ae:e9:3f:27:1a:8e:22:72:2b:e0:b5:56:b1:02:f2:fb: 76:2a:4e:91:df:9f:1c:ba:0c:7f:6e:97:81:33:40:a7:ea:16: 8d:cd:cd:fd:a0:1a:d9:e8:4d:cd:55:79:95:1e:21:41:b9:c7: 88:03:b1:69:63:31:94:15:50:eb:b9:c2:e9:95:ab:7b:43:de: f5:85:9f:e4:d4:27:e4:67:3f:fa:e4:a8:72:27:5e:c0:c7:8a: 3f:ff:f2:f6:41:f7:86:fc:48:8c:bc:c1:c9:da:18:7a:a1:7f: b6:7f:2d:a0:0d:9f:90:81:7d:5e:90:a2:03:0c:59:ba:c6:80: 2e:6e:9a:2a:94:a3:47:ba:74:d2:93:76:47:04:86:b8:08:5f: ca:a0:21:0f:59:d8:ec:89:ed:68:1d:5f:1f:21:24:72:16:36: 65:d2:b3:3f:70:25:b4:d3:31:23:ee:a6:e9:67:05:ce:37:c4: 7f:eb:da:ac:ea:ce:c2:f0:7a:4b:8a:18:04:e7:dd:56:25:96: dc:b4:72:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb5gMo5bip8pk2BOP3mdKO07IhZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjA3MjkxMzE5MjdaFw0yNjA3MzAxNTA3MjdaMDMxMTAvBgNV BAMTKEQ4M0NCMEQwRkI1QTRDQzAzQUJDMEM1N0I2NEQyODM0NjdDMkI2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ/y3Wetjyfjpdd2r24JsKj/aw D1jZfQ5E9ODXIW3ZrEqnsRje2kjgiN/WJC82ilx9wln1BvXQ5xrsPrSsbdMMywiM 2a9YJNJyOBO9LdG2oP2JXxjZgJFvxgu5DTsB40qrni2FyMskYMFPySw279oqXG+p M6QYgdiJvTuBFuf3zOgSK1+woE29iRCwxZgg1KwK2/KXOqejEUp+Xq1Kp+FEz8BF zSfR1TWcrJASFNxuhH/HQZcGuOcxA3wBrdrNbZF+f5SceOaGIdBC37aafs8IUDz0 /owynDDJjwFYD/1ca1W1gtxbKinnTY1c58Evpu1MOnnS9mzsfCTV2uDpvt/NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2Dyw0PtaTMA6vAxXtk0oNGfCtiEwHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIc4u1GWxR5a ee/fn1CUQxfo3nCpG5pOrrGs2Q356Fg/zyAtchCN1tmtLr0LKlDtj8PQ9Vy7JIyu 6T8nGo4icivgtVaxAvL7dipOkd+fHLoMf26XgTNAp+oWjc3N/aAa2ehNzVV5lR4h QbnHiAOxaWMxlBVQ67nC6ZWre0Pe9YWf5NQn5Gc/+uSocidewMeKP//y9kH3hvxI jLzBydoYeqF/tn8toA2fkIF9XpCiAwxZusaALm6aKpSjR7p00pN2RwSGuAhfyqAh D1nY7IntaB1fHyEkchY2ZdKzP3AltNMxI+6m6WcFzjfEf+varOrOwvB6S4oYBOfd ViWW3LRyLw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:02:01 2026 by rpki-client