$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: dHS4JA/psHbfngotU3QP7HywwrYT9XSbqyePVpKwkk0= Subject key identifier: 1B:87:B3:54:CD:6E:D9:30:69:6C:CF:87:25:37:38:86:8F:D4:63:5E Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 22F3C81F458B9BC6618C74C0DCE02A3FC25FB2EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 14:34:43 +0000 Manifest this update: Fri 17 Apr 2026 14:29:43 +0000 Manifest next update: Sat 18 Apr 2026 18:04:43 +0000 Files and hashes: 1: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) 2: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) 3: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: AyUyhb6JxbX4wPXBmxodurbUxAxmoKX1Y9TkjcIbwrA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f3:c8:1f:45:8b:9b:c6:61:8c:74:c0:dc:e0:2a:3f:c2:5f:b2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: Apr 17 14:29:43 2026 GMT Not After : Apr 18 18:04:43 2026 GMT Subject: CN=1B87B354CD6ED930696CCF87253738868FD4635E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d0:fd:04:a3:65:c9:2f:c2:9d:c1:99:ee:f1: d9:e9:1f:8a:1c:c0:03:e1:02:1c:1e:15:1b:d6:fb: 4f:bf:b0:7d:46:65:26:08:70:f2:ff:b7:e5:bc:24: 32:b6:fc:a6:33:89:27:ee:fb:5d:db:3c:e4:e8:e1: d7:f7:c2:5c:73:bd:b8:f0:4e:26:b0:5a:52:12:eb: 6b:5b:56:d7:b0:8d:c3:6b:af:f2:7c:fc:61:56:16: 04:c3:d6:dc:13:3e:d8:4b:3b:5b:ae:bd:d3:48:72: 0e:19:23:a0:13:8d:95:2d:b9:a5:10:62:7a:cb:09: b4:75:fc:b0:a1:2d:99:73:ea:f2:57:16:bd:70:0e: f2:26:0a:d5:8a:92:fb:3c:5c:58:f2:91:bc:89:76: 81:78:3b:71:73:93:94:64:bc:77:5c:51:91:22:7a: ed:42:83:ee:00:8b:23:4d:b9:f8:87:27:83:e7:ce: 3c:b4:2e:56:0b:7f:32:79:bb:65:03:c3:b8:ce:6e: f5:57:2b:bb:fd:22:d8:cd:d7:94:52:67:79:c2:de: 24:1a:60:01:21:b7:1b:08:a3:15:cb:a2:66:61:0d: 21:6d:b0:79:5c:38:72:f2:eb:55:13:23:3b:eb:72: 35:1c:10:9f:9f:97:7f:9a:be:13:0a:17:ae:16:cb: b2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:87:B3:54:CD:6E:D9:30:69:6C:CF:87:25:37:38:86:8F:D4:63:5E X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:04:a3:fd:ad:7d:f4:95:ea:d2:73:bf:6a:fd:ed:4c:e1:4f: 97:67:ee:00:b4:e7:88:cc:4c:37:a9:41:1d:94:2a:ba:45:f2: 16:08:4f:e0:6d:dc:aa:62:a3:c2:82:c5:6b:3f:b2:7a:88:ec: 1b:83:21:d1:ef:29:05:a2:fe:90:47:50:b3:04:33:00:01:a2: 64:cb:6e:6a:cc:c7:9f:d8:e0:fe:b7:7b:9e:00:53:1c:f6:33: c8:52:7d:dd:fe:63:a9:5c:b1:83:c0:ef:7e:51:c2:45:e3:00: 50:da:84:ac:9f:1a:7f:bc:ba:20:4f:ba:ef:fd:9a:c5:58:5b: 7c:f2:0d:a4:eb:6a:c4:02:77:2e:f2:5a:17:b4:8c:4b:aa:bf: 1e:50:a1:ff:f9:27:0a:5e:01:52:33:35:9b:4c:78:dd:8f:4c: 76:1b:91:27:3a:a8:b5:01:c6:d0:ca:e6:5a:cd:3d:7d:83:57: 4a:1f:74:08:b7:c9:f9:64:da:84:12:f8:1a:61:c1:67:f0:a0: 4e:b5:2a:27:fb:c2:02:9e:c5:c8:c2:70:f9:1d:74:c8:af:44: 57:1f:10:8b:bf:a8:ee:c7:e7:cb:b6:48:51:5d:8c:02:a5:f4: 24:6b:7a:bc:f8:59:0c:11:27:e8:3b:cb:c9:b0:0b:ab:26:17: b2:aa:4a:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIvPIH0WLm8ZhjHTA3OAqP8JfsuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjA0MTcxNDI5NDNaFw0yNjA0MTgxODA0NDNaMDMxMTAvBgNV BAMTKDFCODdCMzU0Q0Q2RUQ5MzA2OTZDQ0Y4NzI1MzczODg2OEZENDYzNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl0P0Eo2XJL8KdwZnu8dnpH4oc wAPhAhweFRvW+0+/sH1GZSYIcPL/t+W8JDK2/KYziSfu+13bPOTo4df3wlxzvbjw TiawWlIS62tbVtewjcNrr/J8/GFWFgTD1twTPthLO1uuvdNIcg4ZI6ATjZUtuaUQ YnrLCbR1/LChLZlz6vJXFr1wDvImCtWKkvs8XFjykbyJdoF4O3Fzk5RkvHdcUZEi eu1Cg+4AiyNNufiHJ4Pnzjy0LlYLfzJ5u2UDw7jObvVXK7v9ItjN15RSZ3nC3iQa YAEhtxsIoxXLomZhDSFtsHlcOHLy61UTIzvrcjUcEJ+fl3+avhMKF64Wy7IlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUG4ezVM1u2TBpbM+HJTc4ho/UY14wHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowSj/a199JXq 0nO/av3tTOFPl2fuALTniMxMN6lBHZQqukXyFghP4G3cqmKjwoLFaz+yeojsG4Mh 0e8pBaL+kEdQswQzAAGiZMtuaszHn9jg/rd7ngBTHPYzyFJ93f5jqVyxg8DvflHC ReMAUNqErJ8af7y6IE+67/2axVhbfPINpOtqxAJ3LvJaF7SMS6q/HlCh//knCl4B UjM1m0x43Y9MdhuRJzqotQHG0MrmWs09fYNXSh90CLfJ+WTahBL4GmHBZ/CgTrUq J/vCAp7FyMJw+R10yK9EVx8Qi7+o7sfny7ZIUV2MAqX0JGt6vPhZDBEn6DvLybAL qyYXsqpKVw== -----END CERTIFICATE-----Generated at Sat Apr 18 01:30:22 2026 by rpki-client