$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: UHNaVi6+kPP2lu0jiXZLmUjnqOnwGBQex25zdZcGQtI= Subject key identifier: 1D:B4:3A:C3:53:58:6A:15:7B:67:9D:B5:AB:58:69:AE:A2:B8:A4:F6 Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 635054DCCE8969FDDC6A71D01C37A65FF3440486 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: F8 Signing time: Thu 23 Jul 2026 13:18:46 +0000 Manifest this update: Thu 23 Jul 2026 13:13:46 +0000 Manifest next update: Fri 24 Jul 2026 16:23:46 +0000 Files and hashes: 1: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) 2: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) 3: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: xAiFYOFQQ6G2Xu3wcik9kkQfJcPV36T9bzcjih2/pvs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:50:54:dc:ce:89:69:fd:dc:6a:71:d0:1c:37:a6:5f:f3:44:04:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: Jul 23 13:13:46 2026 GMT Not After : Jul 24 16:23:46 2026 GMT Subject: CN=1DB43AC353586A157B679DB5AB5869AEA2B8A4F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:13:de:0e:2a:b5:7a:d3:bd:a6:2d:b8:ba:f3: ab:1a:8a:91:57:8e:74:bc:31:df:60:0e:d1:6b:78: 24:89:65:57:ed:31:2e:63:5d:2e:82:61:e1:53:2f: 08:9c:d4:fe:08:f5:b9:8b:12:61:d0:b5:97:7c:07: fd:29:9e:3d:e8:e7:45:07:91:15:3e:27:b0:35:04: df:78:43:ba:9a:e0:0b:62:7e:00:6a:0a:38:f2:d9: 89:07:9b:94:d4:94:97:72:40:4a:ad:8c:a9:36:fb: 68:8c:4b:d0:a8:91:97:26:e0:f8:4c:76:82:cd:e8: 1e:e6:12:1c:0a:d2:29:27:64:df:63:89:a8:84:a5: 9f:8d:71:62:ba:61:80:50:f2:9f:c4:e9:62:9a:10: ef:66:ee:31:4a:12:81:cb:18:c6:98:64:10:61:4d: 91:03:66:f3:04:64:2f:ef:15:2d:be:c5:ba:57:2c: f8:22:5b:81:65:b8:ac:a8:3d:02:8a:d2:96:ed:92: 2f:39:82:e8:0f:e1:72:fe:9e:d2:22:14:9b:01:eb: 02:c0:7f:92:1c:27:58:0c:db:bc:44:b0:96:57:2a: f7:4c:c0:13:c2:8c:e8:4b:dc:28:c9:85:d3:d1:09: e2:1a:69:fc:19:3b:72:f6:cc:b0:d4:24:7c:af:b5: f9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B4:3A:C3:53:58:6A:15:7B:67:9D:B5:AB:58:69:AE:A2:B8:A4:F6 X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0f:10:7b:1b:62:fe:aa:fe:6d:10:5b:fe:78:fd:6d:37:e6: 8c:80:a2:20:b1:95:7c:b8:50:69:aa:70:f5:6e:63:df:8f:5f: ef:05:8e:28:92:5e:3e:13:82:d4:d6:28:84:77:be:29:7f:79: c0:18:e6:28:1c:cf:0c:79:5d:af:e0:94:ce:c7:68:0f:c2:4c: f6:78:dd:fa:e6:82:dc:4a:66:8a:1b:c4:ae:43:9d:67:03:32: 75:48:e0:23:e2:10:2c:83:e2:3d:b8:84:71:96:59:38:14:0a: 5f:cb:b8:1f:7e:4e:35:3c:3c:c2:7f:65:08:84:b1:c2:81:6c: 47:25:d9:7a:6a:57:fc:14:78:19:81:e6:f3:06:6b:95:03:d4: 42:a5:d2:14:0c:1d:93:12:64:1f:49:8b:0d:29:51:b0:e1:cb: 1a:63:a7:7c:a9:d9:32:6b:ee:05:6e:8b:1a:7e:ac:3a:73:38: bf:f3:89:88:ea:31:93:56:e1:35:7c:5c:11:5a:f0:84:82:7e: ea:56:1c:0b:9d:d3:f3:a5:1a:f8:c4:ee:76:bb:c5:3f:05:a2: 66:de:1c:56:b7:b5:43:62:bf:45:fc:4c:16:39:bd:b1:8c:f7: 97:27:66:e1:3a:68:b5:54:84:5b:21:60:1e:a5:29:a3:c7:0a: 76:3f:37:b7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY1BU3M6Jaf3canHQHDemX/NEBIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjA3MjMxMzEzNDZaFw0yNjA3MjQxNjIzNDZaMDMxMTAvBgNV BAMTKDFEQjQzQUMzNTM1ODZBMTU3QjY3OURCNUFCNTg2OUFFQTJCOEE0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRE94OKrV6072mLbi686saipFX jnS8Md9gDtFreCSJZVftMS5jXS6CYeFTLwic1P4I9bmLEmHQtZd8B/0pnj3o50UH kRU+J7A1BN94Q7qa4AtifgBqCjjy2YkHm5TUlJdyQEqtjKk2+2iMS9CokZcm4PhM doLN6B7mEhwK0iknZN9jiaiEpZ+NcWK6YYBQ8p/E6WKaEO9m7jFKEoHLGMaYZBBh TZEDZvMEZC/vFS2+xbpXLPgiW4FluKyoPQKK0pbtki85gugP4XL+ntIiFJsB6wLA f5IcJ1gM27xEsJZXKvdMwBPCjOhL3CjJhdPRCeIaafwZO3L2zLDUJHyvtfn9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHbQ6w1NYahV7Z521q1hprqK4pPYwHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlA8Qexti/qr+ bRBb/nj9bTfmjICiILGVfLhQaapw9W5j349f7wWOKJJePhOC1NYohHe+KX95wBjm KBzPDHldr+CUzsdoD8JM9njd+uaC3EpmihvErkOdZwMydUjgI+IQLIPiPbiEcZZZ OBQKX8u4H35ONTw8wn9lCISxwoFsRyXZempX/BR4GYHm8wZrlQPUQqXSFAwdkxJk H0mLDSlRsOHLGmOnfKnZMmvuBW6LGn6sOnM4v/OJiOoxk1bhNXxcEVrwhIJ+6lYc C53T86Ua+MTudrvFPwWiZt4cVre1Q2K/RfxMFjm9sYz3lydm4TpotVSEWyFgHqUp o8cKdj83tw== -----END CERTIFICATE-----Generated at Fri Jul 24 03:14:13 2026 by rpki-client