$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: vsLKoLgFYo6W0Y/uerMzjGREVK//dN4x/hr5h6396Z8= Subject key identifier: 40:23:89:27:18:AA:25:25:14:0E:81:83:02:D7:01:9D:C2:AB:88:AF Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 395E436349A713D7FF4B48D3CE27D0389700DBDE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: C3 Signing time: Sat 13 Jun 2026 13:06:49 +0000 Manifest this update: Sat 13 Jun 2026 13:01:49 +0000 Manifest next update: Sun 14 Jun 2026 13:45:49 +0000 Files and hashes: 1: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) 2: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) 3: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: a/rwenW79vTJe17UqNWECGyxKGFl2cuLM+oGzqezi3M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 13:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5e:43:63:49:a7:13:d7:ff:4b:48:d3:ce:27:d0:38:97:00:db:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: Jun 13 13:01:49 2026 GMT Not After : Jun 14 13:45:49 2026 GMT Subject: CN=4023892718AA2525140E818302D7019DC2AB88AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:ec:b3:19:57:b5:3b:92:ed:5e:5c:45:87: d1:3f:13:2f:ff:9b:d3:05:60:9e:69:46:ee:1f:88: 4f:38:46:35:f3:f6:74:74:07:ee:e2:48:0c:2a:90: b7:ed:32:49:ad:8d:9f:a3:41:c6:2b:6f:0b:14:a0: e7:93:d8:70:1e:cc:c3:e3:58:04:80:a6:5c:53:b9: 48:37:40:ed:89:e8:c8:4c:d5:3e:f6:bc:50:ef:b5: c2:db:10:da:44:95:c7:41:9c:b8:f5:d7:09:85:4a: 16:b8:d0:a9:5e:fd:2c:37:5f:b6:dd:a2:f2:5c:5f: de:7e:72:eb:24:3d:0e:ea:b0:74:d0:ad:16:3b:b1: 77:f5:39:1f:0a:96:a2:18:b0:d0:f6:50:2b:56:10: f3:37:3c:3a:52:10:37:2c:ee:73:b5:da:f4:57:84: 99:f5:ae:c7:38:35:88:c5:0f:d2:90:ee:e9:20:ba: 1e:b5:cd:65:95:de:e8:b9:ec:cf:41:5f:86:3d:1b: f1:67:fd:04:64:83:bf:4b:8a:83:a8:46:dd:5d:fd: d4:75:33:a6:35:ef:05:32:ad:ca:3d:e7:c2:ac:32: cc:1e:b4:8b:97:f6:f7:d4:52:e4:ea:d6:dd:5a:91: a3:6f:f7:90:f5:39:30:d6:b5:7c:5d:b2:98:de:10: 79:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:23:89:27:18:AA:25:25:14:0E:81:83:02:D7:01:9D:C2:AB:88:AF X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d8:72:6e:f0:df:bb:ab:d4:fb:81:44:64:92:5c:28:9a:e6: 53:f4:9b:1a:34:73:93:fc:2a:6f:5a:6b:f3:b7:59:87:c6:7b: fb:eb:95:60:05:10:f2:5d:47:34:e0:aa:1e:46:51:c7:e9:60: 1f:b7:27:33:7a:d3:13:17:d8:03:1e:06:3a:37:49:b9:3e:52: c8:c8:e9:80:e4:47:12:9f:bd:81:ea:e6:71:75:1f:41:4f:98: 34:b4:73:d9:fe:e0:9a:9f:3e:51:d2:14:9b:c1:a8:d7:2f:06: 19:55:cd:19:a3:46:7c:fd:eb:7b:2b:62:a2:88:0c:48:e0:11: 07:a4:f3:5f:37:42:4e:8b:b2:ca:9b:02:67:4d:45:62:67:8b: c0:22:88:c0:b7:ba:3b:ce:4d:94:c2:5a:32:fd:21:a5:55:db: 2b:2c:15:17:21:76:c3:c0:bf:a1:dd:ef:61:13:a3:31:d2:3a: 4a:be:95:29:d3:b1:ef:a4:36:5e:8e:e1:88:24:b4:cc:a4:15: 14:45:10:81:cb:c5:ff:8f:d1:d5:57:b0:a9:4b:71:6e:0c:f5: f4:00:e5:47:36:be:38:7a:91:18:65:03:1f:3c:27:cd:a5:e0: 19:f0:e1:f7:ba:2e:0c:d1:0f:9d:2f:aa:59:18:47:bf:b8:c5: 7a:42:82:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOV5DY0mnE9f/S0jTzifQOJcA294wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjA2MTMxMzAxNDlaFw0yNjA2MTQxMzQ1NDlaMDMxMTAvBgNV BAMTKDQwMjM4OTI3MThBQTI1MjUxNDBFODE4MzAyRDcwMTlEQzJBQjg4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwOyzGVe1O5LtXlxFh9E/Ey// m9MFYJ5pRu4fiE84RjXz9nR0B+7iSAwqkLftMkmtjZ+jQcYrbwsUoOeT2HAezMPj WASAplxTuUg3QO2J6MhM1T72vFDvtcLbENpElcdBnLj11wmFSha40Kle/Sw3X7bd ovJcX95+cuskPQ7qsHTQrRY7sXf1OR8KlqIYsND2UCtWEPM3PDpSEDcs7nO12vRX hJn1rsc4NYjFD9KQ7ukguh61zWWV3ui57M9BX4Y9G/Fn/QRkg79LioOoRt1d/dR1 M6Y17wUyrco958KsMswetIuX9vfUUuTq1t1akaNv95D1OTDWtXxdspjeEHkzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQCOJJxiqJSUUDoGDAtcBncKriK8wHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNhybvDfu6vU +4FEZJJcKJrmU/SbGjRzk/wqb1pr87dZh8Z7++uVYAUQ8l1HNOCqHkZRx+lgH7cn M3rTExfYAx4GOjdJuT5SyMjpgORHEp+9germcXUfQU+YNLRz2f7gmp8+UdIUm8Go 1y8GGVXNGaNGfP3reytioogMSOARB6TzXzdCTouyypsCZ01FYmeLwCKIwLe6O85N lMJaMv0hpVXbKywVFyF2w8C/od3vYROjMdI6Sr6VKdOx76Q2Xo7hiCS0zKQVFEUQ gcvF/4/R1VewqUtxbgz19ADlRza+OHqRGGUDHzwnzaXgGfDh97ouDNEPnS+qWRhH v7jFekKChA== -----END CERTIFICATE-----Generated at Sun Jun 14 07:09:14 2026 by rpki-client