$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: 4EXo+DEBqj0z84Xu3I1Hz91IAyX2EgQXLPFwEZYDnOs= Subject key identifier: 53:FC:88:1A:F3:41:DF:F3:8C:33:22:85:E0:5A:B0:4A:93:F8:54:75 Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 58AE58A5113781B79E54A8F46027CA9C9B3B71F7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: 48 Signing time: Thu 12 Mar 2026 20:33:39 +0000 Manifest this update: Thu 12 Mar 2026 20:28:39 +0000 Manifest next update: Sat 14 Mar 2026 00:25:39 +0000 Files and hashes: 1: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) 2: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: boSJJi4TJfnarFtPkQjEAgfy92RUynbYhCQ+pc/v3o0=) 3: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ae:58:a5:11:37:81:b7:9e:54:a8:f4:60:27:ca:9c:9b:3b:71:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: Mar 12 20:28:39 2026 GMT Not After : Mar 14 00:25:39 2026 GMT Subject: CN=53FC881AF341DFF38C332285E05AB04A93F85475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:12:8a:43:46:b7:b2:8e:a8:36:a6:d6:4e: 39:44:89:6d:b1:cb:31:7f:55:f7:60:61:93:1f:72: a0:76:2f:dc:7d:2b:4d:32:8a:1f:de:b2:ed:5f:75: dc:1f:99:fe:2a:bb:38:e0:fa:bf:ae:ec:72:5a:36: 3e:51:75:88:95:d5:e8:52:67:30:53:56:33:c7:16: c9:2a:c0:2c:e2:c0:ef:c3:cf:f1:c2:8c:c4:7a:8a: 14:ef:aa:24:8e:20:de:d7:56:de:51:c2:69:4f:7e: 45:ed:b0:e8:c1:23:98:cd:37:b8:01:8f:bd:78:a3: 23:f5:ad:db:a4:97:2c:9e:46:ae:de:64:59:0c:c0: b8:cd:cd:81:77:46:5d:5c:da:b4:ec:ee:7e:58:86: 80:14:1b:af:da:09:da:f5:70:57:f3:26:b0:ac:11: 1d:a2:b4:1d:06:24:fd:ae:56:0b:dc:77:fd:a5:69: 88:cc:14:53:52:94:ff:61:d7:ab:58:6f:9a:9d:94: 8d:31:80:6b:f0:8c:46:42:4e:55:34:42:eb:8d:f5: 9f:86:0d:7d:ff:21:b2:8b:e9:21:94:61:89:32:3f: 36:c6:cf:a1:b1:15:ef:b0:6d:9b:f6:b6:63:31:95: d8:28:48:5c:32:14:3e:0d:f9:79:1e:b1:9f:c9:24: 4c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FC:88:1A:F3:41:DF:F3:8C:33:22:85:E0:5A:B0:4A:93:F8:54:75 X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:5f:49:07:7a:d6:08:41:9f:3d:c7:d6:e7:ce:de:30:f2:99: 34:1b:68:5b:47:ea:87:57:b1:9e:5c:d7:f5:97:e1:06:26:db: 9f:c5:45:70:62:70:03:ba:49:f2:b2:98:87:f8:15:bb:f1:16: 62:9b:22:11:d6:97:95:d4:2f:cd:0d:31:db:d9:58:7c:f4:97: 98:94:8d:56:07:e3:40:13:c4:ef:59:c8:e8:ab:7f:e6:ff:1c: 11:25:66:31:08:de:7a:fa:6a:51:bd:2b:3c:40:08:12:86:d0: 8d:7b:02:ba:d8:e3:d7:81:6c:b0:f8:a1:0f:a3:61:e4:b0:ba: c8:da:a1:a5:a2:e6:50:f2:47:bc:ed:2c:9d:21:43:ca:78:36: 71:28:33:2f:3e:95:bd:e2:50:8f:db:f7:a6:b3:54:67:39:ff: f9:5c:2f:14:76:16:18:b8:70:51:fc:f8:26:33:80:c7:73:91: 84:ab:20:da:3e:7e:10:8b:1e:87:0c:79:20:fc:38:4c:2c:9c: 03:3d:9f:bf:9e:67:aa:ca:f2:d0:c9:c8:74:bb:e4:84:09:c3: e0:98:d3:33:97:6b:f0:db:d3:20:fc:5c:66:c5:ca:96:e6:b1: 62:45:49:36:d0:43:65:1d:a2:45:f5:21:00:7c:0e:91:0a:9f: e0:3e:0f:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWK5YpRE3gbeeVKj0YCfKnJs7cfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjAzMTIyMDI4MzlaFw0yNjAzMTQwMDI1MzlaMDMxMTAvBgNV BAMTKDUzRkM4ODFBRjM0MURGRjM4QzMzMjI4NUUwNUFCMDRBOTNGODU0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDhKKQ0a3so6oNqbWTjlEiW2x yzF/VfdgYZMfcqB2L9x9K00yih/esu1fddwfmf4quzjg+r+u7HJaNj5RdYiV1ehS ZzBTVjPHFskqwCziwO/Dz/HCjMR6ihTvqiSOIN7XVt5RwmlPfkXtsOjBI5jNN7gB j714oyP1rduklyyeRq7eZFkMwLjNzYF3Rl1c2rTs7n5YhoAUG6/aCdr1cFfzJrCs ER2itB0GJP2uVgvcd/2laYjMFFNSlP9h16tYb5qdlI0xgGvwjEZCTlU0QuuN9Z+G DX3/IbKL6SGUYYkyPzbGz6GxFe+wbZv2tmMxldgoSFwyFD4N+XkesZ/JJEzTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUU/yIGvNB3/OMMyKF4FqwSpP4VHUwHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIV9JB3rWCEGf PcfW587eMPKZNBtoW0fqh1exnlzX9ZfhBibbn8VFcGJwA7pJ8rKYh/gVu/EWYpsi EdaXldQvzQ0x29lYfPSXmJSNVgfjQBPE71nI6Kt/5v8cESVmMQjeevpqUb0rPEAI EobQjXsCutjj14FssPihD6Nh5LC6yNqhpaLmUPJHvO0snSFDyng2cSgzLz6VveJQ j9v3prNUZzn/+VwvFHYWGLhwUfz4JjOAx3ORhKsg2j5+EIsehwx5IPw4TCycAz2f v55nqsry0MnIdLvkhAnD4JjTM5dr8NvTIPxcZsXKluaxYkVJNtBDZR2iRfUhAHwO kQqf4D4PMg== -----END CERTIFICATE-----Generated at Thu Mar 12 22:45:39 2026 by rpki-client