$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: 9B7Lg12p8GuSHEqEO0gMcr8fMRhNZvQvf5c/zuIscD8= Subject key identifier: 8A:43:D4:02:48:1B:6D:0A:6D:45:64:1E:48:73:42:06:E9:0F:91:03 Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 39E05871DD2618F1745C117B9C31D14A92C1E60E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: 012E Signing time: Thu 10 Sep 2026 02:20:38 +0000 Manifest this update: Thu 10 Sep 2026 02:15:38 +0000 Manifest next update: Sun 13 Sep 2026 09:45:38 +0000 Files and hashes: 1: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) 2: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) 3: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: C1LFHaCDwWzTDZsxyqplWA5fng7aIwDbRvvQiwjz8s4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e0:58:71:dd:26:18:f1:74:5c:11:7b:9c:31:d1:4a:92:c1:e6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: Sep 10 02:15:38 2026 GMT Not After : Sep 13 09:45:38 2026 GMT Subject: CN=8A43D402481B6D0A6D45641E48734206E90F9103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:c4:51:df:37:4d:58:df:64:40:b6:fa:bc: ea:dc:db:35:02:99:37:c8:16:fa:67:62:04:80:76: be:49:75:0b:44:91:60:8a:93:75:91:2d:be:f9:f9: c3:d5:8c:24:c9:62:da:af:4b:31:52:5c:57:34:16: d7:3b:fe:2a:4b:ce:cf:26:9d:9b:5e:86:77:9d:f6: f1:a2:18:34:40:38:90:10:68:9e:0b:31:47:c3:67: 81:01:03:dd:89:14:32:22:5c:a2:f5:c3:d0:36:5f: fa:ec:17:9c:0d:49:8a:f4:ec:ac:75:81:cb:c3:04: 25:92:8b:b8:a6:9f:94:36:2e:4c:d3:e3:04:be:1f: ea:8b:52:fe:bd:d4:52:af:f2:7b:cc:81:f6:63:f3: 41:7b:77:44:75:53:aa:d2:2f:88:ad:8a:bd:11:b1: ae:35:12:fe:dd:e6:64:03:3a:a3:ab:f2:f7:b5:de: 44:d1:4c:47:80:62:33:f7:a6:ba:fc:c7:c9:fd:78: 74:30:c9:c8:fc:f8:16:2e:31:aa:83:12:17:93:2b: 54:10:d4:6c:d2:c7:86:1f:a2:9e:42:8c:28:0a:69: 0e:43:30:cc:cf:06:53:b1:dd:62:c9:77:a9:8d:63: 29:cb:0c:3b:5a:41:a5:30:70:cb:f8:05:d7:86:d6: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:43:D4:02:48:1B:6D:0A:6D:45:64:1E:48:73:42:06:E9:0F:91:03 X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5d:68:ea:89:bf:5b:3f:02:39:e1:d4:f1:26:5f:ae:37:62: cd:01:b6:22:45:93:4b:0b:6b:57:af:a1:e7:4e:79:35:b0:2b: 28:66:92:23:68:2e:27:1c:0e:4d:a3:2f:e5:e8:52:00:6e:50: 5e:39:68:63:6b:2d:a8:9f:46:ca:b2:8d:b1:69:f3:3c:c0:aa: f9:f1:ad:ab:47:19:3e:1a:38:11:a8:4e:b0:6e:de:fd:1a:3d: c1:ed:5c:4f:e9:09:f9:18:a1:1a:63:e8:29:c0:70:12:b2:4b: 07:42:b2:74:e2:cb:26:53:9b:26:37:d7:b4:10:62:05:fa:e1: ad:51:88:6d:3f:6a:c7:b1:4c:24:fa:f7:ff:3f:7b:cb:ab:83: c6:de:4e:d0:04:99:18:8b:16:88:61:9e:f0:6b:cf:db:aa:79: 92:59:60:9d:9b:43:6f:e7:9b:4f:5b:57:98:98:59:e9:ed:94: ad:ab:3d:17:9f:ad:7e:ab:9a:0f:d3:0f:58:21:05:5f:83:79: da:a3:18:16:2a:be:cf:c3:53:b6:81:f2:0a:a6:c3:3e:7a:a3: 85:b0:1e:0d:66:ba:83:ae:ed:af:8f:04:26:fe:ac:28:30:f4: cc:bd:98:ea:0d:78:b6:00:8e:25:0c:38:65:e1:ee:33:27:28: 2c:ee:21:61 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOeBYcd0mGPF0XBF7nDHRSpLB5g4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjA5MTAwMjE1MzhaFw0yNjA5MTMwOTQ1MzhaMDMxMTAvBgNV BAMTKDhBNDNENDAyNDgxQjZEMEE2RDQ1NjQxRTQ4NzM0MjA2RTkwRjkxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHMRR3zdNWN9kQLb6vOrc2zUC mTfIFvpnYgSAdr5JdQtEkWCKk3WRLb75+cPVjCTJYtqvSzFSXFc0Ftc7/ipLzs8m nZtehned9vGiGDRAOJAQaJ4LMUfDZ4EBA92JFDIiXKL1w9A2X/rsF5wNSYr07Kx1 gcvDBCWSi7imn5Q2LkzT4wS+H+qLUv691FKv8nvMgfZj80F7d0R1U6rSL4itir0R sa41Ev7d5mQDOqOr8ve13kTRTEeAYjP3prr8x8n9eHQwycj8+BYuMaqDEheTK1QQ 1GzSx4Yfop5CjCgKaQ5DMMzPBlOx3WLJd6mNYynLDDtaQaUwcMv4BdeG1sg1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUikPUAkgbbQptRWQeSHNCBukPkQMwHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATF1o6om/Wz8C OeHU8SZfrjdizQG2IkWTSwtrV6+h5055NbArKGaSI2guJxwOTaMv5ehSAG5QXjlo Y2stqJ9GyrKNsWnzPMCq+fGtq0cZPho4EahOsG7e/Ro9we1cT+kJ+RihGmPoKcBw ErJLB0KydOLLJlObJjfXtBBiBfrhrVGIbT9qx7FMJPr3/z97y6uDxt5O0ASZGIsW iGGe8GvP26p5kllgnZtDb+ebT1tXmJhZ6e2Uras9F5+tfquaD9MPWCEFX4N52qMY Fiq+z8NTtoHyCqbDPnqjhbAeDWa6g67tr48EJv6sKDD0zL2Y6g14tgCOJQw4ZeHu MycoLO4hYQ== -----END CERTIFICATE-----Generated at Thu Sep 10 10:46:00 2026 by rpki-client