$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft (raw, json) Hash identifier: iQKCH4gKlANs+AuGkZg5MrBhubipOHbHOuUiHypqVrU= Subject key identifier: 93:F5:AD:14:C4:E0:49:6E:84:11:2F:FF:EB:24:1C:AD:D2:28:B6:E5 Authority key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Certificate issuer: /CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Certificate serial: 7AACAF2A7F52839E75D0C502A1B8855E1DE4938E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft Manifest number: C3 Signing time: Sat 13 Jun 2026 18:27:06 +0000 Manifest this update: Sat 13 Jun 2026 18:22:06 +0000 Manifest next update: Sun 14 Jun 2026 21:09:06 +0000 Files and hashes: 1: 3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa (hash: f4BPlSPgEwkb+NUwkDOtZFV/i1fU6GKBssz1dRCBcXw=) 2: 323430363a613763303a3a2f34382d3438203d3e20313339313139.roa (hash: 3JhjmkUJhlqjw51RRcFeU35MUmZ6UUIW8yqMgWZPqSc=) 3: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl (hash: uwSHdPqvofPTV8lmVYV+TEgLK0ZyyKDmJLMOvuMdXsc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ac:af:2a:7f:52:83:9e:75:d0:c5:02:a1:b8:85:5e:1d:e4:93:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Validity Not Before: Jun 13 18:22:06 2026 GMT Not After : Jun 14 21:09:06 2026 GMT Subject: CN=93F5AD14C4E0496E84112FFFEB241CADD228B6E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:63:de:21:8d:69:20:7b:66:97:b1:1c:ca:03: 24:29:57:ff:e2:3b:91:a2:60:d9:e6:de:35:0b:7f: d6:73:8a:a6:26:e0:fd:f1:fd:11:0a:e9:03:40:7e: e5:54:66:ed:29:e6:b6:36:d8:96:54:0e:11:02:aa: 03:ce:28:26:bf:ff:08:60:ae:96:f2:69:12:51:5c: 8a:c0:97:08:bf:3d:93:fd:ea:49:21:d4:b5:db:a6: fa:27:26:e0:0c:6e:40:8a:1b:26:0e:8d:94:10:f3: 8b:7c:e4:73:c3:67:36:97:ea:f8:a9:89:a6:23:54: 34:de:a0:75:d8:a0:c5:92:fb:3d:7b:99:ad:16:d5: 9e:b5:47:d6:2b:96:64:7b:3c:74:e9:b9:3d:5c:44: 32:46:ca:14:2c:d7:68:ef:dc:c6:2e:55:3e:29:d0: 03:d3:eb:ce:24:1a:e3:82:8b:b1:41:e7:c5:db:26: 41:73:45:41:53:60:19:c3:83:26:28:12:1c:7f:86: fc:7a:33:11:1d:37:55:a1:c3:d1:c2:1a:3d:c3:45: 68:64:5d:7f:c0:5e:76:24:38:53:f3:14:b9:dd:c1: 14:75:46:b6:63:6f:3c:22:4f:2c:57:b4:76:9f:ce: fb:8b:3e:11:d0:75:de:df:8e:90:82:80:06:b5:f8: 82:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:F5:AD:14:C4:E0:49:6E:84:11:2F:FF:EB:24:1C:AD:D2:28:B6:E5 X509v3 Authority Key Identifier: keyid:0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:93:1b:b7:ca:9c:32:99:68:5f:d1:23:1b:de:cb:1d:92:de: b1:29:f2:d0:07:05:af:37:5a:19:2e:7f:73:9d:27:d1:d6:98: c0:bc:2f:7d:b0:6a:dc:cd:21:d2:7e:f3:dd:94:b9:90:2d:6b: 63:bd:0f:13:4d:9d:b5:e0:be:46:b8:95:46:e1:db:13:09:07: b1:fa:80:09:20:cd:dc:da:d5:4b:06:b6:f4:0c:74:89:f0:6a: a2:10:22:43:9f:42:59:ed:a9:2a:12:15:c6:03:cf:78:3a:5a: 41:86:aa:a4:c9:6c:36:98:27:0a:2f:09:f4:55:54:ff:d8:54: 42:5f:d3:02:ae:42:57:f2:fc:5c:49:f9:f2:77:b6:0c:a4:d3: b2:a9:52:10:cf:d6:24:af:4f:54:5f:de:28:34:97:ff:8c:08: 92:69:3a:1b:a6:69:23:6a:14:28:9b:86:9d:ef:8c:dd:2d:82: eb:c0:74:02:f9:c7:24:cf:77:37:3f:fe:9f:33:04:8f:b2:19: cb:fc:78:99:27:e3:ef:ff:d0:48:6f:de:b7:b2:83:a3:52:f7: 69:5d:63:78:58:d1:a6:0b:1a:d2:20:24:f7:2a:f4:eb:c5:46: c8:3c:8c:fa:5b:89:9c:49:18:96:0b:7f:1d:e3:12:1b:31:00: dc:e5:2d:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeqyvKn9Sg5510MUCobiFXh3kk44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5 NjBFQjdDNzAeFw0yNjA2MTMxODIyMDZaFw0yNjA2MTQyMTA5MDZaMDMxMTAvBgNV BAMTKDkzRjVBRDE0QzRFMDQ5NkU4NDExMkZGRkVCMjQxQ0FERDIyOEI2RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Y94hjWkge2aXsRzKAyQpV//i O5GiYNnm3jULf9ZziqYm4P3x/REK6QNAfuVUZu0p5rY22JZUDhECqgPOKCa//whg rpbyaRJRXIrAlwi/PZP96kkh1LXbpvonJuAMbkCKGyYOjZQQ84t85HPDZzaX6vip iaYjVDTeoHXYoMWS+z17ma0W1Z61R9YrlmR7PHTpuT1cRDJGyhQs12jv3MYuVT4p 0APT684kGuOCi7FB58XbJkFzRUFTYBnDgyYoEhx/hvx6MxEdN1Whw9HCGj3DRWhk XX/AXnYkOFPzFLndwRR1RrZjbzwiTyxXtHafzvuLPhHQdd7fjpCCgAa1+IJpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk/WtFMTgSW6EES//6yQcrdIotuUwHwYDVR0j BBgwFoAUDq/rfnNG6PJ4/+LQqo1OEpYOt8cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTM1NDc1My8wLzBFQUZFQjdFNzM0NkU4RjI3OEZGRTJEMEFBOEQ0 RTEyOTYwRUI3QzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUzNTQ3NTMvMC8wRUFGRUI3RTczNDZF OEYyNzhGRkUyRDBBQThENEUxMjk2MEVCN0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZMbt8qcMplo X9EjG97LHZLesSny0AcFrzdaGS5/c50n0daYwLwvfbBq3M0h0n7z3ZS5kC1rY70P E02dteC+RriVRuHbEwkHsfqACSDN3NrVSwa29Ax0ifBqohAiQ59CWe2pKhIVxgPP eDpaQYaqpMlsNpgnCi8J9FVU/9hUQl/TAq5CV/L8XEn58ne2DKTTsqlSEM/WJK9P VF/eKDSX/4wIkmk6G6ZpI2oUKJuGne+M3S2C68B0AvnHJM93Nz/+nzMEj7IZy/x4 mSfj7//QSG/et7KDo1L3aV1jeFjRpgsa0iAk9yr068VGyDyM+luJnEkYlgt/HeMS GzEA3OUtvQ== -----END CERTIFICATE-----Generated at Sun Jun 14 08:37:59 2026 by rpki-client