$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: 0Sx9ELr0lSrjmhM/SuJ351sXonmN50C0mRa21YchQt4= Subject key identifier: B4:3B:E4:FC:8C:44:B5:92:76:DD:67:D2:C6:B6:08:C5:3D:E9:EA:1D Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 2A622016A37C8C4E72CC09052A5BACFE83F7AA93 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: 84 Signing time: Mon 27 Apr 2026 01:58:40 +0000 Manifest this update: Mon 27 Apr 2026 01:53:40 +0000 Manifest next update: Tue 28 Apr 2026 02:55:40 +0000 Files and hashes: 1: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: 4wYsIktpET9x0QD72UCeiS0GoZ5BBu65o9wwPwE4cD8=) 2: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) 3: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 02:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:62:20:16:a3:7c:8c:4e:72:cc:09:05:2a:5b:ac:fe:83:f7:aa:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: Apr 27 01:53:40 2026 GMT Not After : Apr 28 02:55:40 2026 GMT Subject: CN=B43BE4FC8C44B59276DD67D2C6B608C53DE9EA1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8d:28:2a:e2:92:be:b4:47:b1:5c:a5:6e:f5: c0:18:38:65:bd:2a:6f:b9:01:a1:57:d8:0f:fd:60: 5d:96:92:60:76:10:a9:12:8f:5b:96:d5:6f:4a:73: c8:9c:71:02:03:97:db:95:7f:0c:d9:91:4f:57:82: a9:4b:02:b4:07:82:6d:5a:41:80:22:ad:63:c2:91: 4f:08:04:23:65:ef:98:dd:f4:73:d7:69:61:e5:a2: 68:c6:6b:f2:14:6d:a8:ec:be:1c:55:c1:ac:90:5f: 3f:58:8f:a0:87:e3:2b:d4:94:c0:3b:af:2a:60:32: ca:a7:77:41:77:41:35:14:4b:08:b5:2b:e2:a7:e0: 8c:f0:98:8f:2f:90:0f:6e:7a:8a:94:fa:3f:03:66: 37:92:dd:15:65:6d:d7:41:fc:28:35:b9:94:38:c1: 9f:7f:cd:d0:4e:4f:65:5e:31:66:74:26:15:80:63: d8:6b:47:93:7e:47:3f:6b:18:e5:5b:41:f1:8f:14: 46:ad:78:94:b8:cf:bb:8d:2f:2a:1b:27:7b:b9:23: b6:a2:e5:5f:58:13:05:6c:c9:35:3f:60:af:fe:bb: d4:12:3c:ad:fe:83:80:7e:39:42:60:a6:7f:7e:04: df:1b:f8:12:20:dd:5e:1e:b8:e6:fa:ed:4d:97:fa: e6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3B:E4:FC:8C:44:B5:92:76:DD:67:D2:C6:B6:08:C5:3D:E9:EA:1D X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b4:44:2e:55:35:6f:da:88:7d:d5:a6:4d:be:9c:37:fa:92: 94:ca:41:18:d5:8d:b4:28:df:b5:85:3f:02:b2:32:22:63:06: 0c:2f:51:88:17:6c:53:61:19:bc:9f:0f:ca:b4:8f:07:ef:ee: 95:ca:b7:2c:cb:19:12:ca:e6:e3:4c:cb:5c:28:7f:a6:32:82: d8:62:83:ea:13:2e:cd:5c:79:94:c0:d0:48:0b:12:ee:88:77: bc:0e:8c:b2:13:01:4f:a3:80:24:e9:55:29:0d:a8:e6:b3:73: 80:a4:64:34:fe:85:58:d7:b5:f6:17:40:c5:c5:fd:4d:05:07: 43:34:48:6d:46:7d:8d:6a:6b:02:c0:79:16:5f:19:bc:8f:c8: fa:63:83:03:f8:c1:7b:c6:2e:74:ce:77:62:42:64:dd:7a:a3: 63:b4:3d:c6:43:48:4e:b2:12:ed:f9:53:cf:ed:b0:2f:1c:cd: b1:ce:4f:b8:e7:a0:bf:85:db:9b:22:97:6f:ed:d8:e2:af:25: 12:04:41:b5:be:1c:8d:3b:14:a1:ba:72:1b:d0:b3:6a:cd:39: aa:ef:00:3a:23:ca:af:d3:a8:45:ec:f0:0a:a0:91:5b:82:e6: 57:04:da:ea:d1:e9:af:7a:c5:da:89:1e:c0:89:a6:70:9d:06: 1d:1f:f8:9f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKmIgFqN8jE5yzAkFKlus/oP3qpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjA0MjcwMTUzNDBaFw0yNjA0MjgwMjU1NDBaMDMxMTAvBgNV BAMTKEI0M0JFNEZDOEM0NEI1OTI3NkRENjdEMkM2QjYwOEM1M0RFOUVBMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYjSgq4pK+tEexXKVu9cAYOGW9 Km+5AaFX2A/9YF2WkmB2EKkSj1uW1W9Kc8iccQIDl9uVfwzZkU9XgqlLArQHgm1a QYAirWPCkU8IBCNl75jd9HPXaWHlomjGa/IUbajsvhxVwayQXz9Yj6CH4yvUlMA7 rypgMsqnd0F3QTUUSwi1K+Kn4IzwmI8vkA9ueoqU+j8DZjeS3RVlbddB/Cg1uZQ4 wZ9/zdBOT2VeMWZ0JhWAY9hrR5N+Rz9rGOVbQfGPFEateJS4z7uNLyobJ3u5I7ai 5V9YEwVsyTU/YK/+u9QSPK3+g4B+OUJgpn9+BN8b+BIg3V4euOb67U2X+ub1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtDvk/IxEtZJ23WfSxrYIxT3p6h0wHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbRELlU1b9qI fdWmTb6cN/qSlMpBGNWNtCjftYU/ArIyImMGDC9RiBdsU2EZvJ8PyrSPB+/ulcq3 LMsZEsrm40zLXCh/pjKC2GKD6hMuzVx5lMDQSAsS7oh3vA6MshMBT6OAJOlVKQ2o 5rNzgKRkNP6FWNe19hdAxcX9TQUHQzRIbUZ9jWprAsB5Fl8ZvI/I+mODA/jBe8Yu dM53YkJk3XqjY7Q9xkNITrIS7flTz+2wLxzNsc5PuOegv4XbmyKXb+3Y4q8lEgRB tb4cjTsUobpyG9Czas05qu8AOiPKr9OoRezwCqCRW4LmVwTa6tHpr3rF2okewImm cJ0GHR/4nw== -----END CERTIFICATE-----Generated at Mon Apr 27 09:55:32 2026 by rpki-client