$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: /yC2oYW02VoucRdNwe/bxKAkgLCofDOCpq/abuJp9U8= Subject key identifier: 57:0F:D5:2E:23:49:30:8A:53:7D:E1:92:7D:AE:2D:EF:BE:4D:F9:8A Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 3A54D41E85F1E7AE6770D326A14C5342E2DA8794 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 13:08:17 +0000 Manifest this update: Mon 02 Mar 2026 13:03:17 +0000 Manifest next update: Tue 03 Mar 2026 13:54:17 +0000 Files and hashes: 1: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) 2: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: IvWXTZwrLKK1OGDKIh7XfEvQWwl7nusm58KlU7tTRvk=) 3: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:54:d4:1e:85:f1:e7:ae:67:70:d3:26:a1:4c:53:42:e2:da:87:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: Mar 2 13:03:17 2026 GMT Not After : Mar 3 13:54:17 2026 GMT Subject: CN=570FD52E2349308A537DE1927DAE2DEFBE4DF98A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a9:99:33:1e:2a:0b:23:16:a6:dd:ac:1f:18: 92:0f:34:42:7d:e6:34:af:f9:5d:58:82:43:fc:d8: e5:a3:c7:ee:a4:fa:82:f9:5c:08:3a:1a:a6:7d:df: 46:95:bb:5b:17:81:7b:86:31:4c:3b:e0:60:15:2e: 8c:da:d0:cf:ad:31:f4:06:5e:ea:9b:6c:9e:ab:c3: 9a:93:b0:ec:42:70:a1:58:79:fd:1f:30:64:10:80: d9:3c:d5:ed:36:e1:3b:59:67:4f:42:0c:d5:b7:e3: 26:b5:f6:96:9d:98:fc:6f:9b:7f:08:91:61:42:3a: 68:42:81:a0:6c:b0:8a:4a:c7:52:de:1d:6e:1c:46: 8f:7d:6d:49:85:03:e0:6d:c7:51:7d:4d:4e:7d:0c: a7:73:73:1d:c7:a0:39:7a:aa:b7:b1:29:8d:63:dc: 0a:1c:b0:6f:9c:23:e9:de:77:f8:0e:c1:22:b9:68: 05:60:27:94:e6:aa:64:09:4c:c7:fc:99:62:54:12: 75:cc:96:9e:04:e5:fb:f0:f0:cc:01:c7:88:0f:1d: 88:6f:ce:ee:0c:b8:79:0d:30:41:e7:4d:07:da:39: 93:4b:56:2e:c3:c5:b5:dd:53:1c:b7:2a:a2:82:18: 4c:3e:79:8e:8c:25:62:4c:48:a6:ae:fa:ee:82:e7: 50:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0F:D5:2E:23:49:30:8A:53:7D:E1:92:7D:AE:2D:EF:BE:4D:F9:8A X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:58:ef:62:b7:48:d1:41:b7:19:61:d7:25:79:96:72:40:a7: d6:62:58:bf:87:5d:fb:24:77:f1:37:cf:e8:71:bb:0d:d7:7e: 38:c2:78:81:c3:7b:33:47:dd:eb:f0:69:93:ad:d9:d5:d2:33: a2:c2:97:8b:df:4a:aa:2b:ec:e2:af:31:10:ce:28:70:4d:b0: 5e:fc:bd:1c:65:52:3c:b1:7f:aa:15:b9:ee:32:70:bf:04:dd: 88:19:35:7d:69:ae:ae:c1:9d:6a:e5:35:4f:db:04:fd:f6:51: 03:3a:8b:0f:69:1e:be:d8:10:0e:df:85:97:80:2d:ff:e6:34: 5b:6f:42:e9:13:3e:15:6b:17:b6:ae:22:fe:4f:46:4d:07:f9: 2f:e7:e6:07:7d:de:d3:71:80:cc:3d:cb:35:98:b4:41:f5:37: 15:95:eb:83:cd:2a:ff:d5:5b:2d:4f:65:63:92:6d:65:51:53: 40:ca:a2:48:d3:21:78:c0:49:15:b4:ae:c5:66:ca:90:91:53: d5:f1:eb:5a:f7:ba:0f:23:c7:5d:1c:74:fd:c6:fd:ef:85:79: 2a:fe:d4:83:25:3b:07:94:4e:76:42:2e:80:ad:3f:92:77:a6: 78:1c:12:1e:85:5f:75:8b:fe:a1:e8:71:45:ee:46:18:23:55: 6a:3f:47:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOlTUHoXx565ncNMmoUxTQuLah5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjAzMDIxMzAzMTdaFw0yNjAzMDMxMzU0MTdaMDMxMTAvBgNV BAMTKDU3MEZENTJFMjM0OTMwOEE1MzdERTE5MjdEQUUyREVGQkU0REY5OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgqZkzHioLIxam3awfGJIPNEJ9 5jSv+V1YgkP82OWjx+6k+oL5XAg6GqZ930aVu1sXgXuGMUw74GAVLoza0M+tMfQG XuqbbJ6rw5qTsOxCcKFYef0fMGQQgNk81e024TtZZ09CDNW34ya19padmPxvm38I kWFCOmhCgaBssIpKx1LeHW4cRo99bUmFA+Btx1F9TU59DKdzcx3HoDl6qrexKY1j 3AocsG+cI+ned/gOwSK5aAVgJ5TmqmQJTMf8mWJUEnXMlp4E5fvw8MwBx4gPHYhv zu4MuHkNMEHnTQfaOZNLVi7DxbXdUxy3KqKCGEw+eY6MJWJMSKau+u6C51DRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVw/VLiNJMIpTfeGSfa4t775N+YowHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEljvYrdI0UG3 GWHXJXmWckCn1mJYv4dd+yR38TfP6HG7Ddd+OMJ4gcN7M0fd6/Bpk63Z1dIzosKX i99Kqivs4q8xEM4ocE2wXvy9HGVSPLF/qhW57jJwvwTdiBk1fWmursGdauU1T9sE /fZRAzqLD2kevtgQDt+Fl4At/+Y0W29C6RM+FWsXtq4i/k9GTQf5L+fmB33e03GA zD3LNZi0QfU3FZXrg80q/9VbLU9lY5JtZVFTQMqiSNMheMBJFbSuxWbKkJFT1fHr Wve6DyPHXRx0/cb974V5Kv7UgyU7B5ROdkIugK0/knemeBwSHoVfdYv+oehxRe5G GCNVaj9H7w== -----END CERTIFICATE-----Generated at Mon Mar 2 18:11:10 2026 by rpki-client