$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: t0sUpM/I/ET6Q3QThEcieRFy1FyduDU1Egswpilpw4U= Subject key identifier: 85:C4:8B:AB:C5:76:AD:9B:16:7A:61:7E:5D:48:5A:B1:60:0A:39:34 Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 4B2A76B55273B570D8772C874C3FCF486F1056C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: 0135 Signing time: Fri 25 Sep 2026 15:37:39 +0000 Manifest this update: Fri 25 Sep 2026 15:32:39 +0000 Manifest next update: Mon 28 Sep 2026 19:40:39 +0000 Files and hashes: 1: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: /xnRKJeHPIwTJdA1mSozb2lAK2hD2sYHrM141GddZdo=) 2: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) 3: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 19:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2a:76:b5:52:73:b5:70:d8:77:2c:87:4c:3f:cf:48:6f:10:56:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: Sep 25 15:32:39 2026 GMT Not After : Sep 28 19:40:39 2026 GMT Subject: CN=85C48BABC576AD9B167A617E5D485AB1600A3934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:11:66:cf:0e:46:73:8c:62:21:8d:53:5d: bb:ca:0b:96:8d:1f:12:a6:0a:5b:4d:8c:4b:0c:9f: b4:26:25:2d:b4:50:53:ae:0e:c5:b3:0a:33:03:dc: 7d:2c:bd:46:bc:c1:3d:95:a1:77:89:a8:c3:bc:1e: 25:04:99:26:7b:1a:cb:a9:e4:53:fc:65:8d:57:77: d7:51:d1:5b:3c:7a:20:6b:25:e6:cf:82:df:7f:49: 36:55:c0:9e:a9:82:20:05:07:45:50:de:6d:37:1e: 1f:19:4b:1b:cd:34:d9:0e:32:69:71:e4:75:9d:8d: 11:74:d5:68:9f:df:0f:5e:1a:f2:03:d0:93:9e:9b: e5:19:e2:69:4c:96:ce:32:f8:47:3a:aa:37:94:94: 38:e8:f0:3e:22:53:20:18:ee:4f:bc:60:c1:f8:31: a4:31:6e:7c:03:d7:28:ce:40:fb:be:b0:ec:c7:2f: 1d:88:cd:4b:f8:18:8a:12:77:db:8d:ef:b4:84:71: 21:58:79:55:50:9a:90:c6:53:dd:29:e8:d4:11:93: 5b:40:c9:ab:57:33:d3:d3:43:39:f2:7f:16:52:c0: 6f:2f:78:21:9e:6a:d3:81:40:4e:60:a2:69:8b:e3: 4e:a5:74:4f:fb:34:0a:6c:a0:74:68:f6:1f:76:6c: 2b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C4:8B:AB:C5:76:AD:9B:16:7A:61:7E:5D:48:5A:B1:60:0A:39:34 X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:09:5e:74:ad:23:8e:84:87:7d:88:cc:2e:e3:ea:09:f7:c5: 8e:6c:74:2a:39:83:52:f5:f0:3d:0c:b9:37:ae:f7:35:3e:42: dc:6f:ca:28:88:4f:6b:3a:c5:e1:c6:11:12:43:bc:25:bc:cc: 13:fb:23:db:ca:b2:68:a0:6d:a7:f4:2d:21:12:70:28:d4:ab: c1:c0:84:a3:52:49:28:55:82:bb:d6:ac:e0:e5:96:6c:06:74: 18:be:20:97:a9:a9:18:6c:3c:91:ee:47:05:93:0a:78:16:c9: a5:a8:ed:ab:93:cb:70:bc:f7:e9:3d:28:6f:29:f1:45:2f:f2: b0:8b:4b:4f:e3:49:b7:df:76:ce:0f:c8:f1:44:4e:a1:30:27: 72:ff:a0:ec:24:b2:a1:84:7b:89:56:1a:48:b2:16:41:38:77: d7:25:8f:4e:7e:49:1e:ef:4c:00:a7:13:ab:0d:62:76:01:55: 4a:1b:0c:92:d1:5c:fd:d9:b5:d6:9e:31:b7:7d:e6:9a:b4:6c: cc:c1:fb:1e:2c:6f:42:61:ca:bd:a4:be:39:77:cb:9e:df:0c: 5c:a5:33:87:dd:87:e6:5f:fa:a3:bd:ac:10:90:07:63:9e:9b: 24:26:92:b6:15:66:90:c8:0a:8e:26:89:da:88:0e:bb:e8:99: 84:3d:79:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSyp2tVJztXDYdyyHTD/PSG8QVsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjA5MjUxNTMyMzlaFw0yNjA5MjgxOTQwMzlaMDMxMTAvBgNV BAMTKDg1QzQ4QkFCQzU3NkFEOUIxNjdBNjE3RTVENDg1QUIxNjAwQTM5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5jhFmzw5Gc4xiIY1TXbvKC5aN HxKmCltNjEsMn7QmJS20UFOuDsWzCjMD3H0svUa8wT2VoXeJqMO8HiUEmSZ7Gsup 5FP8ZY1Xd9dR0Vs8eiBrJebPgt9/STZVwJ6pgiAFB0VQ3m03Hh8ZSxvNNNkOMmlx 5HWdjRF01Wif3w9eGvID0JOem+UZ4mlMls4y+Ec6qjeUlDjo8D4iUyAY7k+8YMH4 MaQxbnwD1yjOQPu+sOzHLx2IzUv4GIoSd9uN77SEcSFYeVVQmpDGU90p6NQRk1tA yatXM9PTQznyfxZSwG8veCGeatOBQE5gommL406ldE/7NApsoHRo9h92bCv5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhcSLq8V2rZsWemF+XUhasWAKOTQwHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgledK0jjoSH fYjMLuPqCffFjmx0KjmDUvXwPQy5N673NT5C3G/KKIhPazrF4cYREkO8JbzME/sj 28qyaKBtp/QtIRJwKNSrwcCEo1JJKFWCu9as4OWWbAZ0GL4gl6mpGGw8ke5HBZMK eBbJpajtq5PLcLz36T0obynxRS/ysItLT+NJt992zg/I8UROoTAncv+g7CSyoYR7 iVYaSLIWQTh31yWPTn5JHu9MAKcTqw1idgFVShsMktFc/dm11p4xt33mmrRszMH7 HixvQmHKvaS+OXfLnt8MXKUzh92H5l/6o72sEJAHY56bJCaSthVmkMgKjiaJ2ogO u+iZhD15KA== -----END CERTIFICATE-----Generated at Sun Sep 27 15:11:40 2026 by rpki-client