$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft (raw, json) Hash identifier: iZMQfIULUVLVBJs++JixLj0piscuTpiEsrjzklte2Ug= Subject key identifier: DC:88:1A:D3:66:91:FF:EA:7E:83:BC:BE:48:95:7A:99:9B:9F:CC:B8 Authority key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Certificate issuer: /CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Certificate serial: 63EF51C5D35109F6B58B9EF854076BA10ADA5B76 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 09:04:42 +0000 Manifest this update: Fri 17 Apr 2026 08:59:42 +0000 Manifest next update: Sat 18 Apr 2026 12:55:42 +0000 Files and hashes: 1: 3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa (hash: f4BPlSPgEwkb+NUwkDOtZFV/i1fU6GKBssz1dRCBcXw=) 2: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl (hash: Tx4i5HH+luPjkFUNSMO9cC7gyHI59dDczYqvVPAcm/w=) 3: 323430363a613763303a3a2f34382d3438203d3e20313339313139.roa (hash: 3JhjmkUJhlqjw51RRcFeU35MUmZ6UUIW8yqMgWZPqSc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ef:51:c5:d3:51:09:f6:b5:8b:9e:f8:54:07:6b:a1:0a:da:5b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Validity Not Before: Apr 17 08:59:42 2026 GMT Not After : Apr 18 12:55:42 2026 GMT Subject: CN=DC881AD36691FFEA7E83BCBE48957A999B9FCCB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4e:2d:83:5f:fb:36:4c:61:9a:3a:6f:84:67: 8e:59:a3:b4:15:99:e0:0a:2e:e4:2e:de:96:a8:5d: ca:3d:a2:68:94:4e:4d:10:67:79:23:5a:67:3d:23: 99:a5:f5:ab:2c:88:7b:48:53:f2:99:d8:29:1f:5c: 8e:c9:2c:55:26:14:10:51:44:14:8a:d7:a2:7e:97: f6:12:a3:32:21:26:9f:76:b2:65:b3:d1:2d:44:80: e5:61:27:ac:65:ec:95:94:39:67:c8:11:b1:ae:06: 19:fb:ff:7f:fc:30:46:83:3d:88:68:80:2c:21:3d: 6c:7a:ca:3a:ae:f3:3d:9f:9d:10:fb:e1:f3:3c:50: ee:95:2f:28:9a:dc:f9:eb:a3:dc:3b:e0:8d:ec:75: 2e:8c:cb:41:f6:3b:9e:98:38:29:e8:98:4b:67:16: 32:e0:8d:5f:97:b9:30:fc:9f:9b:0e:89:8a:cd:94: 3c:1c:14:25:0a:38:a1:8d:1f:cc:be:0a:d3:bd:1e: 6d:f0:c4:50:10:51:fa:6b:0c:8d:32:f8:34:a3:63: b3:57:9f:4b:66:fd:ad:3a:9a:9a:1d:ae:d5:e6:1e: f4:a8:42:fa:ed:c8:a2:53:70:76:7e:76:38:25:fc: 4c:a7:86:7d:51:4d:a0:1b:50:0a:f1:cb:5a:c9:5d: 0a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:88:1A:D3:66:91:FF:EA:7E:83:BC:BE:48:95:7A:99:9B:9F:CC:B8 X509v3 Authority Key Identifier: keyid:0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:dd:3f:93:eb:56:59:db:05:4d:96:2e:98:26:48:79:3c:55: 95:33:22:66:f7:41:5b:f3:e1:e1:f4:7c:77:d7:94:1d:6b:cb: 19:49:18:71:d9:cb:5e:8a:97:61:ce:04:bc:39:96:43:fa:a8: 1b:e9:9f:0f:0e:7c:a7:22:01:c7:e7:37:47:91:a2:90:78:ca: 84:24:ed:f5:08:f8:9f:aa:8e:4d:55:c6:c2:4b:19:fc:bc:9f: d7:b9:01:ce:3c:47:af:f2:b9:0d:4e:db:5e:42:0a:f8:9d:c7: ea:bc:e1:89:2e:84:cf:e3:79:c3:f3:ee:c8:c4:9b:6a:60:3f: 32:38:ac:82:b6:e8:a8:1e:6e:c4:cc:2f:d5:7d:50:10:33:57: 9b:11:1c:78:f9:15:22:60:a8:5a:9c:bf:fc:08:5a:cf:32:d5: b0:61:24:a8:8d:9a:71:2c:75:c6:f0:93:36:a7:23:ad:84:ca: 64:83:c0:2f:3b:d6:c2:42:6d:af:d7:fa:87:71:49:27:fa:1c: 70:be:17:94:91:56:19:19:1b:45:fc:ab:a1:70:57:4d:90:d0: 44:ec:4d:a2:1a:cd:ad:d7:2e:c0:8c:81:c1:e4:fd:20:bd:21: 11:ba:2f:81:fc:7d:2c:98:6e:56:39:ac:63:16:58:e6:ab:3d: 83:0b:f9:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY+9RxdNRCfa1i574VAdroQraW3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5 NjBFQjdDNzAeFw0yNjA0MTcwODU5NDJaFw0yNjA0MTgxMjU1NDJaMDMxMTAvBgNV BAMTKERDODgxQUQzNjY5MUZGRUE3RTgzQkNCRTQ4OTU3QTk5OUI5RkNDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqTi2DX/s2TGGaOm+EZ45Zo7QV meAKLuQu3paoXco9omiUTk0QZ3kjWmc9I5ml9assiHtIU/KZ2CkfXI7JLFUmFBBR RBSK16J+l/YSozIhJp92smWz0S1EgOVhJ6xl7JWUOWfIEbGuBhn7/3/8MEaDPYho gCwhPWx6yjqu8z2fnRD74fM8UO6VLyia3Pnro9w74I3sdS6My0H2O56YOCnomEtn FjLgjV+XuTD8n5sOiYrNlDwcFCUKOKGNH8y+CtO9Hm3wxFAQUfprDI0y+DSjY7NX n0tm/a06mpodrtXmHvSoQvrtyKJTcHZ+djgl/Eynhn1RTaAbUArxy1rJXQoBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3Iga02aR/+p+g7y+SJV6mZufzLgwHwYDVR0j BBgwFoAUDq/rfnNG6PJ4/+LQqo1OEpYOt8cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTM1NDc1My8wLzBFQUZFQjdFNzM0NkU4RjI3OEZGRTJEMEFBOEQ0 RTEyOTYwRUI3QzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUzNTQ3NTMvMC8wRUFGRUI3RTczNDZF OEYyNzhGRkUyRDBBQThENEUxMjk2MEVCN0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALN0/k+tWWdsF TZYumCZIeTxVlTMiZvdBW/Ph4fR8d9eUHWvLGUkYcdnLXoqXYc4EvDmWQ/qoG+mf Dw58pyIBx+c3R5GikHjKhCTt9Qj4n6qOTVXGwksZ/Lyf17kBzjxHr/K5DU7bXkIK +J3H6rzhiS6Ez+N5w/PuyMSbamA/MjisgrboqB5uxMwv1X1QEDNXmxEcePkVImCo Wpy//AhazzLVsGEkqI2acSx1xvCTNqcjrYTKZIPALzvWwkJtr9f6h3FJJ/occL4X lJFWGRkbRfyroXBXTZDQROxNohrNrdcuwIyBweT9IL0hEbovgfx9LJhuVjmsYxZY 5qs9gwv5Tg== -----END CERTIFICATE-----Generated at Fri Apr 17 23:40:15 2026 by rpki-client