$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: baElgmHGxfN+9ytyGFOOYipzANrjmU0Qsybp9c0JGdM= Subject key identifier: A9:DD:F0:98:37:18:05:DD:1E:DA:FC:16:39:82:C8:7F:6C:6B:B9:EA Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 43BBD5374BCF32AD026E6B7D392D92AFA365123D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: C0 Signing time: Thu 11 Jun 2026 08:43:32 +0000 Manifest this update: Thu 11 Jun 2026 08:38:32 +0000 Manifest next update: Fri 12 Jun 2026 11:07:32 +0000 Files and hashes: 1: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) 2: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) 3: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: QFjtUpSkdVVRZcB0iN3a0iIh7vsYg0I0Eua15eM5ocQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 11:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:bb:d5:37:4b:cf:32:ad:02:6e:6b:7d:39:2d:92:af:a3:65:12:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: Jun 11 08:38:32 2026 GMT Not After : Jun 12 11:07:32 2026 GMT Subject: CN=A9DDF098371805DD1EDAFC163982C87F6C6BB9EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:4f:70:35:e8:bc:51:2a:c7:ae:34:8c:64: 3c:4f:87:3f:2c:ca:5d:e9:c0:fd:a2:56:24:d3:da: 1d:30:87:75:83:d1:12:6a:21:71:84:68:1a:cf:3e: f4:48:d7:5f:c6:14:2c:ab:e3:f0:bf:5f:e1:ba:79: 87:c4:71:50:6c:0e:1c:23:e2:e6:20:6b:60:77:5d: bf:fb:c1:42:f0:d9:8e:62:8f:49:de:e1:d2:35:45: 84:a7:25:0e:f9:ab:f9:65:2e:36:27:ba:90:e5:2b: 35:01:af:8e:7b:7e:49:b2:53:63:8a:4e:02:d2:fa: b7:d7:a8:0e:d0:ee:ab:d9:59:f8:59:17:18:e0:fb: 01:a4:f1:87:53:74:b1:6d:4e:ee:a8:d9:0e:64:2a: 1d:1e:02:3b:0b:88:b3:ef:10:f4:01:82:11:1a:7b: 6f:41:8b:8e:05:56:53:13:ae:d6:5d:11:42:69:ee: ff:a5:67:0f:c0:ff:ac:4f:10:75:d8:e9:31:b2:1e: 9f:a8:2b:4e:3e:1d:17:39:fd:9b:ab:f4:3e:f1:6e: 0d:2f:1f:36:17:0e:73:ab:69:cc:31:71:cb:c6:07: 7f:b3:98:11:e7:61:4d:f5:dd:aa:d3:c1:e2:10:6f: 84:0f:f2:3d:20:65:01:0b:79:78:e1:b3:2e:75:f3: 98:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DD:F0:98:37:18:05:DD:1E:DA:FC:16:39:82:C8:7F:6C:6B:B9:EA X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b1:2f:a8:6f:ea:44:b0:e8:7d:fc:f1:af:87:59:9a:56:34: 01:6e:50:a1:cf:23:a6:93:45:91:16:d7:d1:2e:ea:95:b5:92: 52:2d:dd:e1:8c:16:70:1a:90:de:56:42:9f:e0:e3:98:2e:68: c7:ce:b8:91:b6:b3:0e:57:9f:b8:52:b9:62:0e:a6:ff:a0:45: 7f:2b:bc:83:d6:69:f4:9b:68:93:0a:96:d4:9c:fb:cd:ca:81: 17:14:80:10:a3:d6:af:b9:d1:7b:7f:77:9e:2c:9e:d6:52:74: 56:8b:82:90:9c:a3:31:6e:46:af:ef:72:d0:1e:f9:30:3e:d8: cd:76:d2:df:2d:79:fb:ce:39:2d:cd:87:7a:d4:ea:13:e4:ef: 6b:49:cf:87:58:d6:2f:29:bc:f7:91:15:4c:9b:70:cb:c2:16: b9:09:02:11:8a:7e:72:18:c6:26:36:1b:ff:33:07:c7:67:94: e2:f6:21:04:7f:ed:70:e0:6b:80:89:e1:ee:a2:81:3a:ec:f1: 76:dc:2b:27:90:d7:28:57:e7:68:1e:d3:74:cf:8c:4e:f0:13: 1d:b0:ee:4d:4e:61:21:f0:50:64:05:0f:65:69:de:23:5f:73: 97:0f:bd:2a:00:58:46:46:2f:38:18:59:f5:25:f2:f7:97:b7: b4:d8:99:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ7vVN0vPMq0Cbmt9OS2Sr6NlEj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjA2MTEwODM4MzJaFw0yNjA2MTIxMTA3MzJaMDMxMTAvBgNV BAMTKEE5RERGMDk4MzcxODA1REQxRURBRkMxNjM5ODJDODdGNkM2QkI5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Mk9wNei8USrHrjSMZDxPhz8s yl3pwP2iViTT2h0wh3WD0RJqIXGEaBrPPvRI11/GFCyr4/C/X+G6eYfEcVBsDhwj 4uYga2B3Xb/7wULw2Y5ij0ne4dI1RYSnJQ75q/llLjYnupDlKzUBr457fkmyU2OK TgLS+rfXqA7Q7qvZWfhZFxjg+wGk8YdTdLFtTu6o2Q5kKh0eAjsLiLPvEPQBghEa e29Bi44FVlMTrtZdEUJp7v+lZw/A/6xPEHXY6TGyHp+oK04+HRc5/Zur9D7xbg0v HzYXDnOracwxccvGB3+zmBHnYU313arTweIQb4QP8j0gZQELeXjhsy5185iRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqd3wmDcYBd0e2vwWOYLIf2xrueowHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAorEvqG/qRLDo ffzxr4dZmlY0AW5Qoc8jppNFkRbX0S7qlbWSUi3d4YwWcBqQ3lZCn+DjmC5ox864 kbazDlefuFK5Yg6m/6BFfyu8g9Zp9JtokwqW1Jz7zcqBFxSAEKPWr7nRe393niye 1lJ0VouCkJyjMW5Gr+9y0B75MD7YzXbS3y15+845Lc2HetTqE+Tva0nPh1jWLym8 95EVTJtwy8IWuQkCEYp+chjGJjYb/zMHx2eU4vYhBH/tcOBrgInh7qKBOuzxdtwr J5DXKFfnaB7TdM+MTvATHbDuTU5hIfBQZAUPZWneI19zlw+9KgBYRkYvOBhZ9SXy 95e3tNiZVQ== -----END CERTIFICATE-----Generated at Thu Jun 11 23:55:54 2026 by rpki-client