$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: v6UzqS/SjHp+lkCtyNBNiycVN82H9h9i5cVSkf5WZe8= Subject key identifier: 0E:82:BC:D3:4F:0D:CF:92:B2:73:2A:65:C6:84:62:AE:05:36:83:69 Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 0760C05ABF705C06FB14F5B482D5E0EB7E5F2E57 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: FD Signing time: Tue 28 Jul 2026 21:12:47 +0000 Manifest this update: Tue 28 Jul 2026 21:07:47 +0000 Manifest next update: Wed 29 Jul 2026 23:39:47 +0000 Files and hashes: 1: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) 2: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: PEDlGKxos8bIzAZLyYdrTWemchfMsGradkf9YWpobZk=) 3: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:60:c0:5a:bf:70:5c:06:fb:14:f5:b4:82:d5:e0:eb:7e:5f:2e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: Jul 28 21:07:47 2026 GMT Not After : Jul 29 23:39:47 2026 GMT Subject: CN=0E82BCD34F0DCF92B2732A65C68462AE05368369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:05:85:d7:73:80:23:0f:3a:27:1a:90:92:e1: 82:78:3e:68:e2:db:75:fe:aa:cf:86:df:d5:46:da: 95:8a:e8:cf:b3:dc:77:f2:96:6b:46:ec:d8:02:21: 62:f6:30:8c:b3:b6:68:f4:89:a3:71:85:5b:02:27: 82:4a:a8:d1:3e:07:31:b8:11:cd:32:35:b8:1f:d5: 27:73:64:b0:8d:60:6c:ae:7c:75:f3:2c:3d:28:ee: 77:73:10:eb:f3:05:6c:63:c6:57:08:18:f4:af:ce: e5:65:42:d1:cb:01:29:50:10:15:2b:10:d0:5e:ed: 84:e4:c8:db:34:1e:02:6c:68:bd:c3:46:5d:62:eb: 25:f7:04:fa:81:55:74:dc:a6:36:09:3e:51:f3:ca: 9b:63:d3:75:00:7c:f5:35:b7:9e:ea:f4:1f:c8:7e: e5:13:3b:b8:48:09:86:48:95:15:cb:e9:78:c8:1b: 56:dc:e0:aa:0c:ef:11:6c:1e:97:2b:b0:89:5e:ac: b8:96:9c:be:5f:3c:7d:e4:73:b2:0b:46:28:a8:3a: d8:72:2f:6f:0e:17:21:04:9e:69:e0:c3:c9:01:db: b7:d7:f5:dd:80:98:47:aa:8f:c2:03:9b:31:a2:1e: 51:a0:e8:ee:90:6c:56:2a:52:ff:81:da:2b:bb:15: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:82:BC:D3:4F:0D:CF:92:B2:73:2A:65:C6:84:62:AE:05:36:83:69 X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:84:f6:6f:c2:fd:3f:45:94:97:6f:43:fe:a5:37:9a:0b:de: 13:78:0f:73:00:34:b0:c7:b7:28:4a:f8:7f:5f:2e:e5:9d:71: 78:a9:b0:04:16:48:10:0d:1c:15:2d:c1:f2:d4:94:1e:07:a3: 54:ec:43:a8:54:6a:f6:39:ed:46:ea:49:26:d2:c8:c6:29:b5: 56:f7:2b:e9:44:66:69:37:fd:c9:ff:d6:08:7c:a1:ef:7e:04: a3:c2:40:3d:10:37:d2:e7:75:86:8b:19:85:18:75:f0:83:32: 2a:2b:70:c9:f5:d5:6e:15:52:fa:f1:1e:59:a2:c1:a0:07:42: cc:62:cd:3c:e5:d7:f0:63:b2:65:5c:73:c4:09:09:b9:9f:f2: 3b:58:5e:bc:1b:45:0b:21:31:82:5d:1c:4d:fb:ea:4e:ad:d0: 47:00:1b:ce:36:98:98:8d:13:b7:38:18:da:0c:72:46:35:4b: 3e:25:d5:74:4d:a1:24:ae:e9:14:11:67:ba:04:c6:a6:2a:8d: 7c:99:e3:a6:af:1d:08:f7:3a:e7:e3:3a:22:75:90:cd:bc:ea: 07:f4:c6:4e:b2:df:f4:9c:f6:ce:68:ff:fa:66:d4:10:30:fd: 2a:7c:d2:2c:5c:5b:2e:4f:55:5f:dd:9f:12:a1:45:75:bb:62: c5:89:d5:39 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB2DAWr9wXAb7FPW0gtXg635fLlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjA3MjgyMTA3NDdaFw0yNjA3MjkyMzM5NDdaMDMxMTAvBgNV BAMTKDBFODJCQ0QzNEYwRENGOTJCMjczMkE2NUM2ODQ2MkFFMDUzNjgzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBYXXc4AjDzonGpCS4YJ4Pmji 23X+qs+G39VG2pWK6M+z3HfylmtG7NgCIWL2MIyztmj0iaNxhVsCJ4JKqNE+BzG4 Ec0yNbgf1SdzZLCNYGyufHXzLD0o7ndzEOvzBWxjxlcIGPSvzuVlQtHLASlQEBUr ENBe7YTkyNs0HgJsaL3DRl1i6yX3BPqBVXTcpjYJPlHzyptj03UAfPU1t57q9B/I fuUTO7hICYZIlRXL6XjIG1bc4KoM7xFsHpcrsIlerLiWnL5fPH3kc7ILRiioOthy L28OFyEEnmngw8kB27fX9d2AmEeqj8IDmzGiHlGg6O6QbFYqUv+B2iu7FeRTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDoK8008Nz5KycyplxoRirgU2g2kwHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioT2b8L9P0WU l29D/qU3mgveE3gPcwA0sMe3KEr4f18u5Z1xeKmwBBZIEA0cFS3B8tSUHgejVOxD qFRq9jntRupJJtLIxim1Vvcr6URmaTf9yf/WCHyh734Eo8JAPRA30ud1hosZhRh1 8IMyKitwyfXVbhVS+vEeWaLBoAdCzGLNPOXX8GOyZVxzxAkJuZ/yO1hevBtFCyEx gl0cTfvqTq3QRwAbzjaYmI0TtzgY2gxyRjVLPiXVdE2hJK7pFBFnugTGpiqNfJnj pq8dCPc65+M6InWQzbzqB/TGTrLf9Jz2zmj/+mbUEDD9KnzSLFxbLk9VX92fEqFF dbtixYnVOQ== -----END CERTIFICATE-----Generated at Wed Jul 29 15:47:10 2026 by rpki-client