$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: Fgm2496d8Wr4ZzlqCro63nIkcrotORQZMAF1weBGw8Y= Subject key identifier: EE:B9:79:9C:E5:CC:06:A0:B1:22:A8:B8:14:CB:50:D0:2E:27:A9:0B Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 326177890D3CD1EB23004BD33C825576F6337007 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: 5B Signing time: Thu 26 Mar 2026 23:53:28 +0000 Manifest this update: Thu 26 Mar 2026 23:48:28 +0000 Manifest next update: Sat 28 Mar 2026 03:15:28 +0000 Files and hashes: 1: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) 2: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: EapTW8eS/GOl0lzFZU/xEqWQnBSf1ueAA4mwflJ4apw=) 3: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:61:77:89:0d:3c:d1:eb:23:00:4b:d3:3c:82:55:76:f6:33:70:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: Mar 26 23:48:28 2026 GMT Not After : Mar 28 03:15:28 2026 GMT Subject: CN=EEB9799CE5CC06A0B122A8B814CB50D02E27A90B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c2:24:04:f7:b2:ca:f1:2c:63:f0:1c:d0:5e: d6:4a:60:37:ec:b6:56:93:64:e5:4c:89:33:71:1e: 7d:c9:e3:a0:ca:0d:16:a2:05:39:67:ab:52:49:a2: f4:ac:7b:ea:0f:7a:ad:64:4f:fc:2d:4b:2c:a3:06: 38:60:1c:15:0e:74:28:0c:17:00:16:b0:d3:4e:52: 91:7b:61:94:0a:29:95:11:0e:45:47:9e:eb:86:2b: 34:1c:0d:67:16:cf:dd:95:d3:03:4f:7f:11:8c:21: b8:ed:ec:cc:fb:0c:d1:e7:0a:df:49:fd:8f:c2:74: ad:8e:85:a9:f8:7e:b7:b6:e0:37:0a:c1:0c:da:b4: dc:0c:3e:30:f1:c9:23:b8:63:a7:66:d4:ae:87:00: 7d:d6:11:1e:53:26:d1:91:39:2d:0d:de:5c:2d:e4: fa:42:a8:7d:91:72:c8:47:96:fe:f1:91:a8:27:3a: 54:bf:14:0b:6e:79:bd:7c:86:9e:51:97:d0:c3:6a: c2:50:fe:85:f2:0c:53:69:0d:66:de:00:a5:df:03: c1:1d:ce:3f:ad:2b:9a:3a:19:cc:21:00:0d:00:7a: 69:f1:1b:ef:bb:69:64:bc:dc:6b:ea:29:87:aa:99: 23:dc:74:76:20:7e:02:36:2b:70:30:53:be:fd:c1: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B9:79:9C:E5:CC:06:A0:B1:22:A8:B8:14:CB:50:D0:2E:27:A9:0B X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2d:5c:20:43:a6:36:42:d9:c5:8f:34:de:19:2d:0f:48:e6: fe:12:f2:ea:92:ec:e8:ba:e0:ee:bd:fb:65:c0:d3:63:43:81: db:59:38:e7:5d:4e:71:5b:bc:07:d2:96:8c:e9:58:54:98:89: ee:c7:09:4e:a3:4e:ee:17:86:33:1e:c8:8a:04:73:82:0f:31: 3f:39:59:55:5c:0a:96:81:1a:d2:d0:9f:40:1c:a0:46:ff:03: f1:13:fa:b0:4e:08:75:9c:f8:37:64:68:d7:d6:13:cb:d0:9e: 94:d5:84:70:78:2e:50:b4:d8:1f:a4:58:57:d6:26:8a:8e:54: af:67:61:fe:d5:96:a0:e5:9d:f4:60:4c:fd:ff:33:3b:09:6b: fe:cb:db:52:95:c6:5b:cf:58:6b:79:99:0a:60:b8:4c:b6:49: 0a:26:fd:8a:01:bc:51:6e:7f:5b:9f:88:5c:17:34:4e:f0:f5: 40:e5:92:89:3a:90:6f:b5:45:7c:a2:e7:73:23:e9:46:bf:39: 70:bd:8e:d1:52:cb:85:8d:8f:7e:29:f9:19:51:5a:d3:99:04: 36:a7:77:5b:15:8e:b3:16:f0:7e:db:cb:52:84:6c:6b:d8:a1: 39:76:c9:7c:e8:eb:d8:b6:71:cc:37:62:d7:a9:45:3c:52:3a: 04:f8:50:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMmF3iQ080esjAEvTPIJVdvYzcAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjAzMjYyMzQ4MjhaFw0yNjAzMjgwMzE1MjhaMDMxMTAvBgNV BAMTKEVFQjk3OTlDRTVDQzA2QTBCMTIyQThCODE0Q0I1MEQwMkUyN0E5MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiwiQE97LK8Sxj8BzQXtZKYDfs tlaTZOVMiTNxHn3J46DKDRaiBTlnq1JJovSse+oPeq1kT/wtSyyjBjhgHBUOdCgM FwAWsNNOUpF7YZQKKZURDkVHnuuGKzQcDWcWz92V0wNPfxGMIbjt7Mz7DNHnCt9J /Y/CdK2Ohan4fre24DcKwQzatNwMPjDxySO4Y6dm1K6HAH3WER5TJtGROS0N3lwt 5PpCqH2RcshHlv7xkagnOlS/FAtueb18hp5Rl9DDasJQ/oXyDFNpDWbeAKXfA8Ed zj+tK5o6GcwhAA0AemnxG++7aWS83GvqKYeqmSPcdHYgfgI2K3AwU779wUdvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7rl5nOXMBqCxIqi4FMtQ0C4nqQswHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbS1cIEOmNkLZ xY803hktD0jm/hLy6pLs6Lrg7r37ZcDTY0OB21k4511OcVu8B9KWjOlYVJiJ7scJ TqNO7heGMx7IigRzgg8xPzlZVVwKloEa0tCfQBygRv8D8RP6sE4IdZz4N2Ro19YT y9CelNWEcHguULTYH6RYV9Ymio5Ur2dh/tWWoOWd9GBM/f8zOwlr/svbUpXGW89Y a3mZCmC4TLZJCib9igG8UW5/W5+IXBc0TvD1QOWSiTqQb7VFfKLncyPpRr85cL2O 0VLLhY2Pfin5GVFa05kENqd3WxWOsxbwftvLUoRsa9ihOXbJfOjr2LZxzDdi16lF PFI6BPhQjw== -----END CERTIFICATE-----Generated at Fri Mar 27 06:21:29 2026 by rpki-client