$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: +0WkKsdsScxIjGk2NbtMjLu9ARbljHJcrRXsoQCo/yk= Subject key identifier: 5D:AA:DD:DD:63:FD:63:2B:FE:49:2D:03:04:62:C0:56:70:AD:09:2E Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 2F195ADAC1B01A69E81100D30B9075C35467B096 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: 99 Signing time: Tue 12 May 2026 18:55:41 +0000 Manifest this update: Tue 12 May 2026 18:50:41 +0000 Manifest next update: Wed 13 May 2026 22:10:41 +0000 Files and hashes: 1: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) 2: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) 3: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: YkKqWROyd+2nwvghMq3ddB0r7NwxLu6dIo/eeGR51Lc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:10:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:19:5a:da:c1:b0:1a:69:e8:11:00:d3:0b:90:75:c3:54:67:b0:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: May 12 18:50:41 2026 GMT Not After : May 13 22:10:41 2026 GMT Subject: CN=5DAADDDD63FD632BFE492D030462C05670AD092E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:8f:3b:47:f8:f9:f0:21:0f:d6:12:75:f6: 87:0e:08:04:6c:06:60:a9:ee:da:04:15:0c:3a:52: ff:ea:f9:49:01:b8:ed:a1:be:5d:84:20:45:86:d6: 98:21:18:38:8a:fd:95:29:c5:17:02:ea:dd:bc:a0: cf:3b:69:2a:9d:f9:88:44:8d:f2:ad:95:ac:2a:66: a4:c2:10:13:e3:d8:0b:7f:ae:c1:c6:16:3a:41:b6: f4:4d:0b:06:41:2a:28:02:12:2a:81:d2:96:40:42: 97:96:59:58:ba:8a:5f:3a:fd:67:87:c7:d2:13:00: 0c:d8:10:d6:7b:b7:ed:00:3f:0e:d2:47:50:7a:d0: 77:52:df:77:7b:7f:80:dd:52:90:c2:77:c0:82:d4: fd:78:ea:9b:50:0a:d8:7e:cf:6e:75:49:8b:14:46: 77:05:e3:7e:b9:88:55:62:91:d3:1f:c1:80:51:3c: a3:ad:08:40:07:e0:3f:21:0c:10:ba:5a:1b:f1:21: de:08:db:b3:3b:66:41:23:88:93:ef:39:a0:06:61: 71:8d:0f:79:a2:dd:2c:4d:dd:8e:c7:1c:d1:3e:92: 41:d0:71:d5:19:38:f7:43:4f:d0:86:70:c0:c8:71: e1:61:a3:31:bb:00:fe:c4:82:84:f2:81:45:15:d2: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AA:DD:DD:63:FD:63:2B:FE:49:2D:03:04:62:C0:56:70:AD:09:2E X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:22:a6:f7:ec:db:b4:c5:be:55:81:9d:57:5f:97:99:e5:c3: d3:ae:c9:fe:15:09:1c:db:9c:9d:8e:12:d7:87:7f:81:98:57: 8d:75:77:c4:97:ee:57:c8:97:1c:24:2c:c6:62:ff:90:4b:65: 7e:96:68:ce:19:c1:1c:9f:3d:b5:04:0d:1e:55:36:91:a6:97: 0b:88:f1:3d:8c:54:9c:9e:fa:b1:0a:7c:a6:84:84:3b:db:bc: 9f:d3:3b:54:b1:9e:a9:b0:9c:a7:31:49:2f:63:64:a7:c5:e5: 7e:03:ef:62:25:f3:1f:16:05:7a:58:7b:b5:3f:8d:c1:51:ef: 53:f3:09:65:f2:04:b0:cc:39:96:1b:45:f8:df:0d:f2:a7:6d: 63:a0:3a:0a:02:2f:5c:ad:45:3f:9f:30:a7:7d:9d:05:a2:3d: 8d:06:fd:ae:79:eb:ff:6d:b2:fe:bb:c4:6b:c6:6a:a5:5f:19: cb:27:5f:71:95:b1:d4:d9:3b:04:06:4b:ba:43:44:f6:4e:23: f6:ac:75:e9:af:35:ff:87:56:21:ed:f9:99:26:61:be:ac:dd: f8:20:0a:87:eb:b9:f2:c5:59:bd:cb:dc:6a:74:25:38:8b:a7: ac:a4:41:03:ec:a4:ad:c0:34:f4:b5:e8:6a:6d:b4:62:c6:09: 62:0f:2b:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULxla2sGwGmnoEQDTC5B1w1RnsJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjA1MTIxODUwNDFaFw0yNjA1MTMyMjEwNDFaMDMxMTAvBgNV BAMTKDVEQUFERERENjNGRDYzMkJGRTQ5MkQwMzA0NjJDMDU2NzBBRDA5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Yo87R/j58CEP1hJ19ocOCARs BmCp7toEFQw6Uv/q+UkBuO2hvl2EIEWG1pghGDiK/ZUpxRcC6t28oM87aSqd+YhE jfKtlawqZqTCEBPj2At/rsHGFjpBtvRNCwZBKigCEiqB0pZAQpeWWVi6il86/WeH x9ITAAzYENZ7t+0APw7SR1B60HdS33d7f4DdUpDCd8CC1P146ptQCth+z251SYsU RncF4365iFVikdMfwYBRPKOtCEAH4D8hDBC6WhvxId4I27M7ZkEjiJPvOaAGYXGN D3mi3SxN3Y7HHNE+kkHQcdUZOPdDT9CGcMDIceFhozG7AP7EgoTygUUV0lCDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXard3WP9Yyv+SS0DBGLAVnCtCS4wHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiKm9+zbtMW+ VYGdV1+XmeXD067J/hUJHNucnY4S14d/gZhXjXV3xJfuV8iXHCQsxmL/kEtlfpZo zhnBHJ89tQQNHlU2kaaXC4jxPYxUnJ76sQp8poSEO9u8n9M7VLGeqbCcpzFJL2Nk p8XlfgPvYiXzHxYFelh7tT+NwVHvU/MJZfIEsMw5lhtF+N8N8qdtY6A6CgIvXK1F P58wp32dBaI9jQb9rnnr/22y/rvEa8ZqpV8ZyydfcZWx1Nk7BAZLukNE9k4j9qx1 6a81/4dWIe35mSZhvqzd+CAKh+u58sVZvcvcanQlOIunrKRBA+ykrcA09LXoam20 YsYJYg8rTA== -----END CERTIFICATE-----Generated at Wed May 13 13:12:14 2026 by rpki-client