$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft (raw, json) Hash identifier: p9UgqE5vqqUKn4QLfP6c9sRmyeibARJtEDR3skYi9NY= Subject key identifier: 18:81:26:F1:43:01:17:3F:0C:A4:01:14:26:EB:10:CE:9B:49:38:1E Authority key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Certificate issuer: /CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Certificate serial: 3639D317FBA9CC98F1D87A36EDAE74908F73477E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 14:44:37 +0000 Manifest this update: Wed 29 Jul 2026 14:39:36 +0000 Manifest next update: Thu 30 Jul 2026 17:03:36 +0000 Files and hashes: 1: 323430363a613763303a3a2f34382d3438203d3e20313339313139.roa (hash: 3JhjmkUJhlqjw51RRcFeU35MUmZ6UUIW8yqMgWZPqSc=) 2: 3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa (hash: f4BPlSPgEwkb+NUwkDOtZFV/i1fU6GKBssz1dRCBcXw=) 3: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl (hash: CGNKj4Of7f26R4XjJVDsy10UgVTqPIvLhdstYQv/OvA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 17:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:39:d3:17:fb:a9:cc:98:f1:d8:7a:36:ed:ae:74:90:8f:73:47:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Validity Not Before: Jul 29 14:39:36 2026 GMT Not After : Jul 30 17:03:36 2026 GMT Subject: CN=188126F14301173F0CA4011426EB10CE9B49381E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dc:91:3f:30:ae:0d:42:88:f7:83:a8:eb:94: cd:71:f8:00:11:f7:1e:db:fa:d6:45:09:b8:a1:43: c9:3d:a9:d9:53:d5:08:28:66:5d:84:b5:5a:a9:b8: 19:19:f8:10:ed:0d:b4:a6:51:e2:c1:c4:96:e7:88: 1e:b2:32:e0:fd:b1:8e:ad:95:2b:db:6c:69:7b:24: 4c:5f:b4:7d:74:c1:f6:4d:54:fe:5f:c6:f8:a7:fa: a5:a9:d5:b2:76:59:1d:8c:3f:75:39:32:31:8e:32: a5:40:09:04:b7:5a:2c:b3:bd:11:5c:59:c5:61:b9: 67:a7:51:be:7a:7e:5f:f8:5f:f4:fe:09:dd:4e:db: fb:df:b6:db:80:39:03:61:97:42:e9:4e:d6:48:26: 64:3d:54:3e:dc:b4:88:d6:e7:89:b0:5e:1c:13:57: ce:80:fb:d1:23:d3:fd:59:17:4e:f9:81:8e:31:df: 68:3b:fd:51:30:ae:58:a0:82:0d:c3:55:ab:4d:36: b5:8b:9b:6b:ac:eb:34:80:6b:06:57:c7:a3:ab:c5: 0b:28:b3:d2:4d:71:76:38:65:70:69:c4:36:92:90: 1a:4e:0e:0f:f8:0c:1c:b3:84:4c:d9:6d:d6:23:38: 99:0b:38:81:62:7f:94:83:26:f5:f6:44:c1:b5:da: 32:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:81:26:F1:43:01:17:3F:0C:A4:01:14:26:EB:10:CE:9B:49:38:1E X509v3 Authority Key Identifier: keyid:0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:0c:ae:77:9d:94:74:96:d5:05:99:cb:e6:54:6d:d3:c1:fc: 6a:09:b8:aa:07:ed:7b:1b:ca:b4:b9:92:38:53:e6:c5:39:8b: d8:f3:1f:98:88:ee:34:b4:1d:38:6d:bc:fb:95:20:ae:00:51: 6a:f3:44:b3:fe:a1:76:24:62:8b:7f:05:ff:ec:32:6e:fc:30: b1:95:7f:8d:b4:f5:b8:6a:ba:47:4c:55:9f:ed:73:32:8d:42: 80:97:ee:a6:78:61:2d:1d:8c:53:f9:27:0d:b2:0b:dd:64:01: d9:1e:4e:77:b1:f4:33:bf:0c:57:8a:27:b0:ba:1d:d5:29:b1: 72:b8:b2:8f:16:ee:e8:18:50:38:35:95:00:22:6c:21:23:45: bc:e5:40:9b:7c:42:43:3b:74:b8:fe:09:a4:ca:20:d1:e0:64: a8:aa:d4:c3:96:91:3a:07:a6:fe:eb:c9:fb:8f:9e:55:62:d6: ab:1b:fd:26:a9:a0:dd:63:5b:4c:ac:eb:f3:a6:59:09:ff:93: a0:2c:ec:da:66:aa:50:ff:25:79:60:a3:d2:ba:ca:0f:82:dc: df:4d:18:f9:d5:9b:fe:60:b2:46:ce:36:80:59:54:67:b4:db: 30:15:30:4a:ed:89:4b:bf:01:4b:04:64:40:8f:8d:30:3f:9d: e7:14:3a:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNjnTF/upzJjx2Ho27a50kI9zR34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5 NjBFQjdDNzAeFw0yNjA3MjkxNDM5MzZaFw0yNjA3MzAxNzAzMzZaMDMxMTAvBgNV BAMTKDE4ODEyNkYxNDMwMTE3M0YwQ0E0MDExNDI2RUIxMENFOUI0OTM4MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt3JE/MK4NQoj3g6jrlM1x+AAR 9x7b+tZFCbihQ8k9qdlT1QgoZl2EtVqpuBkZ+BDtDbSmUeLBxJbniB6yMuD9sY6t lSvbbGl7JExftH10wfZNVP5fxvin+qWp1bJ2WR2MP3U5MjGOMqVACQS3WiyzvRFc WcVhuWenUb56fl/4X/T+Cd1O2/vfttuAOQNhl0LpTtZIJmQ9VD7ctIjW54mwXhwT V86A+9Ej0/1ZF075gY4x32g7/VEwrliggg3DVatNNrWLm2us6zSAawZXx6OrxQso s9JNcXY4ZXBpxDaSkBpODg/4DByzhEzZbdYjOJkLOIFif5SDJvX2RMG12jKPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGIEm8UMBFz8MpAEUJusQzptJOB4wHwYDVR0j BBgwFoAUDq/rfnNG6PJ4/+LQqo1OEpYOt8cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTM1NDc1My8wLzBFQUZFQjdFNzM0NkU4RjI3OEZGRTJEMEFBOEQ0 RTEyOTYwRUI3QzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUzNTQ3NTMvMC8wRUFGRUI3RTczNDZF OEYyNzhGRkUyRDBBQThENEUxMjk2MEVCN0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQyud52UdJbV BZnL5lRt08H8agm4qgftexvKtLmSOFPmxTmL2PMfmIjuNLQdOG28+5UgrgBRavNE s/6hdiRii38F/+wybvwwsZV/jbT1uGq6R0xVn+1zMo1CgJfupnhhLR2MU/knDbIL 3WQB2R5Od7H0M78MV4onsLod1Smxcriyjxbu6BhQODWVACJsISNFvOVAm3xCQzt0 uP4JpMog0eBkqKrUw5aROgem/uvJ+4+eVWLWqxv9Jqmg3WNbTKzr86ZZCf+ToCzs 2maqUP8leWCj0rrKD4Lc300Y+dWb/mCyRs42gFlUZ7TbMBUwSu2JS78BSwRkQI+N MD+d5xQ6Kw== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:25 2026 by rpki-client