$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft File: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft (raw, json) Hash identifier: nRl3dp1kOzNsUshrIEpKNMBR12/dmbXWuD+pxfwMV5Q= Subject key identifier: EB:16:B5:21:1A:92:F2:E0:BA:36:19:0D:B5:3B:19:EC:2F:F3:22:93 Authority key identifier: 0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 Certificate issuer: /CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Certificate serial: 5678514F482E9E76AFC187E74C0642BA38A72F83 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft Manifest number: FC Signing time: Sun 26 Jul 2026 13:26:40 +0000 Manifest this update: Sun 26 Jul 2026 13:21:40 +0000 Manifest next update: Mon 27 Jul 2026 16:04:40 +0000 Files and hashes: 1: 3130332e3136392e35302e302f32332d3234203d3e2034383132.roa (hash: 9t3vYeth87P762ewPsqxFR2nFCiSxgR1HBYfa9iNACU=) 2: 0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl (hash: xrUg9a43r43jU2HeXfOgRsUvTXlLxd/qTnAMpM655yU=) 3: 3130332e3136392e35302e302f32332d3234203d3e20313436383435.roa (hash: 8aP/Y2hyoYUdsmEEC1O4+zg8b/UnPO4tvd+zNoOLHhk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 16:04:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:78:51:4f:48:2e:9e:76:af:c1:87:e7:4c:06:42:ba:38:a7:2f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6 Validity Not Before: Jul 26 13:21:40 2026 GMT Not After : Jul 27 16:04:40 2026 GMT Subject: CN=EB16B5211A92F2E0BA36190DB53B19EC2FF32293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:ec:9f:1a:d9:79:f0:b4:e6:cc:8a:39:13: 6f:b5:b0:aa:cc:00:96:38:99:04:6d:b1:d4:ab:1e: 18:68:4c:87:98:11:71:c7:95:3b:16:8a:01:08:bb: 88:2a:95:5f:84:85:62:7b:7b:7d:94:07:cc:9f:27: be:9b:e0:d6:54:6d:84:c0:00:48:ea:30:ba:cd:be: 2c:0b:e9:d7:25:96:db:55:8a:fa:ac:84:bc:de:bf: db:65:b7:b3:80:13:28:43:e4:e8:74:d2:e9:58:5a: 74:00:6e:73:7f:ad:d3:9e:4a:67:54:0e:80:d5:0e: 5b:64:24:f0:66:6b:72:b3:24:44:90:b8:7f:09:ac: cb:05:92:a3:fe:92:43:5a:85:66:cb:42:e1:f7:5b: dd:2f:23:a7:2d:6a:ea:43:da:98:eb:1b:ef:cb:d6: be:af:5b:f2:c5:15:5f:fe:b1:90:d9:2e:9f:1c:4a: 62:5c:90:99:97:5b:c0:77:b9:65:64:23:22:84:0c: 7a:cd:96:f4:44:79:ee:e7:28:6e:d3:37:df:45:4a: 17:24:43:78:77:a0:47:1b:5a:b0:f5:88:0e:cc:c2: 18:3e:ce:0e:da:56:e5:1c:3a:4b:0f:af:73:df:71: 51:40:5e:e5:02:00:80:bf:b1:76:c6:5a:04:6d:fd: bf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:16:B5:21:1A:92:F2:E0:BA:36:19:0D:B5:3B:19:EC:2F:F3:22:93 X509v3 Authority Key Identifier: keyid:0F:20:5B:4A:9D:DA:5E:C9:C9:50:46:36:D1:FA:B0:DA:77:76:6D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217258499/0/0F205B4A9DDA5EC9C9504636D1FAB0DA77766DF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ee:78:41:9c:dc:3c:0d:47:d8:76:0f:9d:cf:c5:b6:82:2b: 43:2a:8d:95:c6:46:c8:84:2d:13:05:e6:7e:d3:0c:fb:b8:a0: d8:ff:4e:af:fa:38:bb:0b:90:8b:66:59:1f:6f:7d:f5:29:33: 17:3b:cc:bb:ab:4d:6f:6c:de:9e:68:2a:21:86:10:6d:75:ee: bb:ad:f0:d7:5c:4b:5f:04:7c:2b:ed:5f:16:84:8b:25:f1:a2: 8a:d5:70:29:af:db:89:7e:44:9c:56:63:db:84:d9:25:e8:d5: d5:1a:f2:af:48:b0:6a:32:9b:a2:c7:ee:dc:5c:21:6c:5a:8a: 25:d4:dd:5e:22:f3:33:40:f1:26:9b:ab:a8:53:87:ae:97:5c: 71:0a:46:83:2d:20:b6:2e:e1:c7:39:ab:85:ac:95:2e:02:52: 7a:d9:15:b7:9b:f3:2a:a0:60:6f:6e:30:2b:06:14:4c:52:90: cc:99:1d:01:8d:83:e8:59:85:43:78:7d:aa:3c:9c:8a:ec:c7: a4:31:27:ab:5e:f7:41:ba:43:6f:3d:d7:05:70:a8:9a:43:fc: e0:33:5c:b2:e6:5c:95:ef:c0:b4:5a:82:16:e6:91:45:ed:07: f6:10:09:0c:46:a9:f3:20:36:d0:a1:9e:ae:d2:d7:ad:26:6c: 71:4f:b6:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVnhRT0gunnavwYfnTAZCujinL4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3 Nzc2NkRGNjAeFw0yNjA3MjYxMzIxNDBaFw0yNjA3MjcxNjA0NDBaMDMxMTAvBgNV BAMTKEVCMTZCNTIxMUE5MkYyRTBCQTM2MTkwREI1M0IxOUVDMkZGMzIyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFOyfGtl58LTmzIo5E2+1sKrM AJY4mQRtsdSrHhhoTIeYEXHHlTsWigEIu4gqlV+EhWJ7e32UB8yfJ76b4NZUbYTA AEjqMLrNviwL6dcllttVivqshLzev9tlt7OAEyhD5Oh00ulYWnQAbnN/rdOeSmdU DoDVDltkJPBma3KzJESQuH8JrMsFkqP+kkNahWbLQuH3W90vI6ctaupD2pjrG+/L 1r6vW/LFFV/+sZDZLp8cSmJckJmXW8B3uWVkIyKEDHrNlvREee7nKG7TN99FShck Q3h3oEcbWrD1iA7Mwhg+zg7aVuUcOksPr3PfcVFAXuUCAIC/sXbGWgRt/b+rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6xa1IRqS8uC6NhkNtTsZ7C/zIpMwHwYDVR0j BBgwFoAUDyBbSp3aXsnJUEY20fqw2nd2bfYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzI1ODQ5OS8wLzBGMjA1QjRBOUREQTVFQzlDOTUwNDYzNkQxRkFC MERBNzc3NjZERjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEYyMDVCNEE5RERBNUVDOUM5NTA0NjM2RDFGQUIwREE3Nzc2NkRGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcyNTg0OTkvMC8wRjIwNUI0QTlEREE1 RUM5Qzk1MDQ2MzZEMUZBQjBEQTc3NzY2REY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnu54QZzcPA1H 2HYPnc/FtoIrQyqNlcZGyIQtEwXmftMM+7ig2P9Or/o4uwuQi2ZZH2999SkzFzvM u6tNb2zenmgqIYYQbXXuu63w11xLXwR8K+1fFoSLJfGiitVwKa/biX5EnFZj24TZ JejV1Rryr0iwajKbosfu3FwhbFqKJdTdXiLzM0DxJpurqFOHrpdccQpGgy0gti7h xzmrhayVLgJSetkVt5vzKqBgb24wKwYUTFKQzJkdAY2D6FmFQ3h9qjyciuzHpDEn q173QbpDbz3XBXComkP84DNcsuZcle/AtFqCFuaRRe0H9hAJDEap8yA20KGertLX rSZscU+2iQ== -----END CERTIFICATE-----Generated at Mon Jul 27 08:00:23 2026 by rpki-client