$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: ChlVDB5TrtgfNBx2b8Xo4WC0RIaXywNkNzrnxTk8CBk= Subject key identifier: 6C:47:AA:6E:FF:8D:5B:B7:F5:F3:9D:E9:D4:20:42:B5:0D:9E:D9:F6 Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 0AB217130C310555F4BEB91B3A180D3688CAF4E4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: 0143 Signing time: Mon 26 Oct 2026 12:53:44 +0000 Manifest this update: Mon 26 Oct 2026 12:48:44 +0000 Manifest next update: Thu 29 Oct 2026 22:01:44 +0000 Files and hashes: 1: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: tGyizPNrCVIZ20CmTmzFOwjdC2NbyaH9uQKY77nr7BM=) 2: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) 3: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 22:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b2:17:13:0c:31:05:55:f4:be:b9:1b:3a:18:0d:36:88:ca:f4:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: Oct 26 12:48:44 2026 GMT Not After : Oct 29 22:01:44 2026 GMT Subject: CN=6C47AA6EFF8D5BB7F5F39DE9D42042B50D9ED9F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:2e:d9:17:27:7e:e0:5c:87:73:6e:04:92: fe:71:39:da:23:49:73:83:4a:d5:db:d5:3c:2d:7c: df:31:a3:4f:ae:fc:0a:ba:de:5a:52:33:50:3d:f2: c0:d7:1a:1b:cd:30:34:59:ba:f8:a1:2f:95:69:4e: 9b:86:3b:21:5d:4f:e7:fa:73:79:14:81:a1:de:c9: 33:95:87:33:09:7a:91:35:1d:01:9e:ec:f6:84:ea: a9:74:ec:08:66:f1:ba:02:41:96:68:2c:2b:5a:db: 75:63:dd:c5:13:30:d7:55:26:6a:c5:b8:5a:99:af: ce:5b:c0:58:a1:3c:b2:00:21:cd:e2:40:b9:3a:06: e6:ff:87:cc:4e:d3:29:ff:c7:cb:03:f2:eb:8f:0b: ca:08:df:5b:d0:6f:82:3d:2e:ea:4f:b8:a0:0e:59: 12:9d:6a:2b:dc:6c:46:69:ba:91:7f:b6:13:9a:2b: 19:e5:95:f6:6e:35:fc:76:15:99:c6:76:ad:e2:1d: 3a:73:5f:39:fd:00:aa:5a:b3:88:54:d3:92:05:0a: b9:8c:51:2f:6a:a9:c6:d4:8d:6e:bf:1f:73:d4:8c: 83:36:47:e1:b1:85:8c:59:81:37:6e:83:46:3d:c0: a9:20:3c:48:ad:5c:31:65:31:22:27:de:ff:25:b9: 3a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:47:AA:6E:FF:8D:5B:B7:F5:F3:9D:E9:D4:20:42:B5:0D:9E:D9:F6 X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:96:60:12:3e:51:4a:cf:2a:82:3c:bc:68:a4:fc:e8:23:71: ff:9f:d9:8c:34:cd:f5:10:e6:07:1e:8e:bf:33:c6:54:7d:93: 50:e6:6b:96:fc:75:c3:68:5f:4a:40:85:ff:36:1f:c0:8f:57: 68:04:b3:af:00:d2:f8:39:db:32:50:60:38:9a:27:63:c1:e0: f1:16:87:fe:c3:0c:a3:0b:60:8c:45:c4:9a:ed:64:23:a2:c1: 83:14:7e:50:23:54:44:4b:c6:9a:4d:6f:f1:5b:88:9a:c8:49: f6:1a:d7:8a:f0:02:66:55:fb:13:4c:ae:03:4c:c8:b3:92:01: 55:48:93:a4:37:d8:3e:3f:de:21:03:5c:34:e9:12:ed:51:39: 12:60:e5:34:e1:9f:29:df:1e:04:9f:a7:09:b6:57:b7:1e:0b: 9a:ee:3c:92:9b:c0:32:f2:69:87:c5:65:96:83:e8:8c:b2:78: 89:cb:df:ce:73:06:ab:94:ff:4a:56:05:2c:15:ae:5f:e4:43: 2c:2c:c4:71:23:85:9a:f1:04:71:91:c7:6b:c6:8a:70:be:e0: 1b:72:cf:6a:57:43:39:30:5c:60:21:3d:99:51:00:4c:20:93: 83:f8:ad:10:72:8c:db:f7:dd:92:2b:0f:2c:97:41:3f:6f:df: 40:e3:68:e8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCrIXEwwxBVX0vrkbOhgNNojK9OQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjEwMjYxMjQ4NDRaFw0yNjEwMjkyMjAxNDRaMDMxMTAvBgNV BAMTKDZDNDdBQTZFRkY4RDVCQjdGNUYzOURFOUQ0MjA0MkI1MEQ5RUQ5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9y7ZFyd+4FyHc24Ekv5xOdoj SXODStXb1TwtfN8xo0+u/Aq63lpSM1A98sDXGhvNMDRZuvihL5VpTpuGOyFdT+f6 c3kUgaHeyTOVhzMJepE1HQGe7PaE6ql07Ahm8boCQZZoLCta23Vj3cUTMNdVJmrF uFqZr85bwFihPLIAIc3iQLk6Bub/h8xO0yn/x8sD8uuPC8oI31vQb4I9LupPuKAO WRKdaivcbEZpupF/thOaKxnllfZuNfx2FZnGdq3iHTpzXzn9AKpas4hU05IFCrmM US9qqcbUjW6/H3PUjIM2R+GxhYxZgTdug0Y9wKkgPEitXDFlMSIn3v8luTp5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbEeqbv+NW7f1853p1CBCtQ2e2fYwHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJZgEj5RSs8q gjy8aKT86CNx/5/ZjDTN9RDmBx6OvzPGVH2TUOZrlvx1w2hfSkCF/zYfwI9XaASz rwDS+DnbMlBgOJonY8Hg8RaH/sMMowtgjEXEmu1kI6LBgxR+UCNUREvGmk1v8VuI mshJ9hrXivACZlX7E0yuA0zIs5IBVUiTpDfYPj/eIQNcNOkS7VE5EmDlNOGfKd8e BJ+nCbZXtx4Lmu48kpvAMvJph8VlloPojLJ4icvfznMGq5T/SlYFLBWuX+RDLCzE cSOFmvEEcZHHa8aKcL7gG3LPaldDOTBcYCE9mVEATCCTg/itEHKM2/fdkisPLJdB P2/fQONo6A== -----END CERTIFICATE-----Generated at Tue Oct 27 18:07:23 2026 by rpki-client