$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft (raw, json) Hash identifier: h4sOVufz3FvugnYi5glfliv72+TjXhvaz7ejaqsqPEY= Subject key identifier: 21:9C:EA:34:8D:9F:6A:21:E0:D5:F0:07:C2:F7:39:96:E9:EB:9C:AA Authority key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Certificate issuer: /CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Certificate serial: 03237D69C541204021002ACCCF10E8179F67B7DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 14:23:17 +0000 Manifest this update: Mon 02 Mar 2026 14:18:17 +0000 Manifest next update: Tue 03 Mar 2026 15:49:17 +0000 Files and hashes: 1: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl (hash: f5olsgwbncPeuMoUo2kjZWr/Qhle8zJGBPd2r87ic/o=) 2: 3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa (hash: f4BPlSPgEwkb+NUwkDOtZFV/i1fU6GKBssz1dRCBcXw=) 3: 323430363a613763303a3a2f34382d3438203d3e20313339313139.roa (hash: 3JhjmkUJhlqjw51RRcFeU35MUmZ6UUIW8yqMgWZPqSc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:23:7d:69:c5:41:20:40:21:00:2a:cc:cf:10:e8:17:9f:67:b7:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Validity Not Before: Mar 2 14:18:17 2026 GMT Not After : Mar 3 15:49:17 2026 GMT Subject: CN=219CEA348D9F6A21E0D5F007C2F73996E9EB9CAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c0:32:7c:6c:4d:f4:2e:ca:9d:9b:69:bc:08: 07:fc:1e:45:02:73:4f:e0:0f:b2:23:bb:15:39:5c: b1:71:b3:28:9b:6c:1e:60:2e:9e:e1:04:1a:b1:d7: 5e:3f:97:a9:b2:48:29:ec:bf:36:c2:58:5e:a5:98: 9d:0c:5d:f9:53:b0:31:01:11:72:3b:af:9c:8a:9f: e6:99:72:1c:0e:c0:56:75:f5:ae:04:02:99:32:3a: 1c:68:aa:00:40:cc:44:e2:92:6c:8b:c2:09:d8:98: e1:47:4c:18:d2:80:30:16:40:15:f9:f6:86:c0:75: 29:dd:3f:e1:59:6c:bf:df:47:cc:34:c0:4b:30:fc: e4:7b:3b:cc:47:d8:ff:28:1b:e6:61:c9:8b:9c:13: ec:1d:0b:60:41:a3:c7:d4:45:89:2e:da:5c:1c:f8: 03:a5:fa:f8:f8:e6:9e:c3:9a:08:8b:e0:34:be:ab: 86:cc:f9:73:41:45:19:68:95:89:17:49:2e:d4:10: f1:37:f7:88:e4:30:97:99:2d:92:34:2f:f6:66:fd: 4f:e7:46:71:0e:e0:21:c6:9a:45:23:f0:0c:5a:80: ac:6e:8e:24:17:f2:8f:4b:5e:db:6d:3b:bc:a9:3e: ba:24:95:73:09:32:16:aa:9f:a1:48:28:73:dd:51: 29:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9C:EA:34:8D:9F:6A:21:E0:D5:F0:07:C2:F7:39:96:E9:EB:9C:AA X509v3 Authority Key Identifier: keyid:0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:84:41:64:36:91:31:01:d9:3f:82:e6:75:10:e9:cf:ba:dc: 6e:dd:0a:68:80:33:fc:0c:58:5c:3e:9a:e5:4b:17:49:c7:bd: da:65:cf:69:ec:85:1e:61:3d:68:89:a8:be:46:e4:b0:d1:a3: 1d:37:ed:48:ee:75:3a:f0:d0:81:7b:db:24:3a:bf:70:06:ec: 81:7f:27:6e:7a:4a:28:b1:f7:4d:1e:5d:d4:23:17:1e:da:da: 82:a8:59:a1:4a:34:fe:f4:4c:f5:77:e0:45:0e:cb:c9:36:f6: e7:f4:f9:22:07:a4:98:56:36:a9:ad:5f:a3:f6:f8:ff:86:54: 35:90:c1:71:ae:95:03:56:68:56:12:6f:45:42:64:20:c5:53: b2:63:81:0d:14:88:e0:5c:01:6e:44:06:92:eb:a9:05:04:af: 3f:ed:f2:d1:48:29:6c:95:bb:77:bc:90:81:47:17:d1:19:da: 45:86:7c:55:37:b3:80:65:fc:bc:aa:2f:e4:4b:b3:33:85:fd: 66:f5:4c:76:d8:19:d0:f6:f3:0d:be:eb:cf:6c:17:52:e5:66: ff:49:66:66:6e:ab:37:06:11:bc:54:a0:8d:50:2b:24:cf:95: fe:c4:bb:b1:a2:de:7c:d5:8b:28:07:87:b9:4f:fa:0f:7b:b8: 47:46:06:1a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAyN9acVBIEAhACrMzxDoF59nt90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5 NjBFQjdDNzAeFw0yNjAzMDIxNDE4MTdaFw0yNjAzMDMxNTQ5MTdaMDMxMTAvBgNV BAMTKDIxOUNFQTM0OEQ5RjZBMjFFMEQ1RjAwN0MyRjczOTk2RTlFQjlDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfwDJ8bE30Lsqdm2m8CAf8HkUC c0/gD7IjuxU5XLFxsyibbB5gLp7hBBqx114/l6mySCnsvzbCWF6lmJ0MXflTsDEB EXI7r5yKn+aZchwOwFZ19a4EApkyOhxoqgBAzETikmyLwgnYmOFHTBjSgDAWQBX5 9obAdSndP+FZbL/fR8w0wEsw/OR7O8xH2P8oG+ZhyYucE+wdC2BBo8fURYku2lwc +AOl+vj45p7DmgiL4DS+q4bM+XNBRRlolYkXSS7UEPE394jkMJeZLZI0L/Zm/U/n RnEO4CHGmkUj8AxagKxujiQX8o9LXtttO7ypProklXMJMhaqn6FIKHPdUSnNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIZzqNI2faiHg1fAHwvc5lunrnKowHwYDVR0j BBgwFoAUDq/rfnNG6PJ4/+LQqo1OEpYOt8cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTM1NDc1My8wLzBFQUZFQjdFNzM0NkU4RjI3OEZGRTJEMEFBOEQ0 RTEyOTYwRUI3QzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUzNTQ3NTMvMC8wRUFGRUI3RTczNDZF OEYyNzhGRkUyRDBBQThENEUxMjk2MEVCN0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4RBZDaRMQHZ P4LmdRDpz7rcbt0KaIAz/AxYXD6a5UsXSce92mXPaeyFHmE9aImovkbksNGjHTft SO51OvDQgXvbJDq/cAbsgX8nbnpKKLH3TR5d1CMXHtragqhZoUo0/vRM9XfgRQ7L yTb25/T5IgekmFY2qa1fo/b4/4ZUNZDBca6VA1ZoVhJvRUJkIMVTsmOBDRSI4FwB bkQGkuupBQSvP+3y0UgpbJW7d7yQgUcX0RnaRYZ8VTezgGX8vKov5EuzM4X9ZvVM dtgZ0PbzDb7rz2wXUuVm/0lmZm6rNwYRvFSgjVArJM+V/sS7saLefNWLKAeHuU/6 D3u4R0YGGg== -----END CERTIFICATE-----Generated at Mon Mar 2 15:46:12 2026 by rpki-client