$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft (raw, json) Hash identifier: v52zyo+JnAlCSC9Z10F20bprzKe3up4iZj/gqj9LrTg= Subject key identifier: 48:3F:D0:34:81:D9:8A:61:B7:C3:0A:67:6B:05:56:D3:C0:AA:EF:93 Authority key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Certificate issuer: /CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Certificate serial: 062E177AD0B9BE73A8DE895E543F813026FFE680 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft Manifest number: 99 Signing time: Wed 13 May 2026 04:35:57 +0000 Manifest this update: Wed 13 May 2026 04:30:57 +0000 Manifest next update: Thu 14 May 2026 05:56:57 +0000 Files and hashes: 1: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl (hash: 8gVuUmtr6WlzM2bpzjrEl9geCU3TvsCT8p7PGhzbFOQ=) 2: 323430363a613763303a3a2f34382d3438203d3e20313339313139.roa (hash: 3JhjmkUJhlqjw51RRcFeU35MUmZ6UUIW8yqMgWZPqSc=) 3: 3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa (hash: f4BPlSPgEwkb+NUwkDOtZFV/i1fU6GKBssz1dRCBcXw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2e:17:7a:d0:b9:be:73:a8:de:89:5e:54:3f:81:30:26:ff:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Validity Not Before: May 13 04:30:57 2026 GMT Not After : May 14 05:56:57 2026 GMT Subject: CN=483FD03481D98A61B7C30A676B0556D3C0AAEF93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:59:17:64:4c:d5:77:82:86:5c:3d:83:1e: a1:f9:5a:fa:81:b8:79:4d:3d:b9:29:0e:da:0b:18: 4e:b3:2f:82:5e:a6:36:c4:be:2f:89:70:2c:0c:8b: 26:9d:96:41:b6:81:03:24:82:9a:4e:de:57:89:e8: d9:46:a6:49:b9:da:87:f0:bb:d0:df:32:7d:d5:31: 79:b1:8d:8e:20:a5:54:5b:d2:76:18:97:66:89:43: a7:51:01:65:e6:9a:e1:4e:c9:0f:1e:30:67:ff:d7: e6:3b:d1:c0:89:2b:4f:f4:c7:50:1f:82:35:c3:ea: ce:14:43:16:14:08:aa:e4:71:d0:a9:9e:b7:d0:da: f0:29:46:5f:59:fc:cd:2b:3c:d7:e6:72:1c:b9:62: f2:67:7c:59:53:21:16:ba:83:5a:20:cb:7a:96:48: f0:ab:8d:99:8d:42:e3:26:cd:d3:8c:49:17:66:ee: 50:58:66:b1:2e:03:73:d9:6f:b7:3a:a3:95:25:0d: bc:1a:65:c0:58:7f:57:f4:f8:ad:16:ff:e3:21:ba: f6:5d:18:b8:e2:92:1c:50:72:83:19:3b:f5:eb:60: 66:87:0f:7d:b0:82:56:74:d8:d1:75:1c:b1:0c:84: cc:e2:20:ad:fd:51:2b:51:0a:57:bf:15:2a:6f:49: 5f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3F:D0:34:81:D9:8A:61:B7:C3:0A:67:6B:05:56:D3:C0:AA:EF:93 X509v3 Authority Key Identifier: keyid:0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:cf:3c:6f:a6:f0:86:d2:69:75:7f:80:b3:1a:20:8e:02:31: 02:cb:49:d4:67:7a:aa:14:6d:45:36:76:ba:86:ef:70:aa:b6: 72:7a:69:05:97:ac:49:35:6d:6d:e2:46:1d:fb:8f:be:8b:84: 46:b4:e0:5b:a2:39:16:d4:34:4c:41:bc:e2:f6:46:b7:74:e1: 30:22:56:01:db:8a:83:0b:e3:fc:6f:fd:1c:9b:2c:65:7e:5e: d7:84:00:69:f3:fb:7b:dd:d5:4a:c2:39:55:b7:44:21:da:bb: 89:c5:04:e8:5c:a6:5a:bc:d4:52:bb:18:f6:ac:9d:8d:16:23: 41:48:be:d6:7e:58:62:01:74:dd:f5:47:45:0d:05:47:4e:70: 49:cd:65:a0:1c:c0:a5:fb:46:d3:8f:67:87:5e:1d:85:a0:59: bf:65:65:bc:34:1b:96:20:de:8c:7c:20:d1:b4:d9:d0:c5:96: 3d:f8:27:d9:d9:65:4b:b6:00:40:52:96:f8:c1:55:bd:b7:18: df:ff:de:9e:ac:80:58:04:df:5b:3e:5b:86:f3:33:30:ee:d6: 1a:e5:2b:81:1e:a8:b6:f9:a3:c4:27:6b:88:84:27:73:e7:31: 36:a2:2d:cc:5b:61:3d:7e:bc:64:c4:3c:e5:ab:18:4a:f0:a5: 07:e6:aa:b2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBi4XetC5vnOo3oleVD+BMCb/5oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5 NjBFQjdDNzAeFw0yNjA1MTMwNDMwNTdaFw0yNjA1MTQwNTU2NTdaMDMxMTAvBgNV BAMTKDQ4M0ZEMDM0ODFEOThBNjFCN0MzMEE2NzZCMDU1NkQzQzBBQUVGOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsJVkXZEzVd4KGXD2DHqH5WvqB uHlNPbkpDtoLGE6zL4JepjbEvi+JcCwMiyadlkG2gQMkgppO3leJ6NlGpkm52ofw u9DfMn3VMXmxjY4gpVRb0nYYl2aJQ6dRAWXmmuFOyQ8eMGf/1+Y70cCJK0/0x1Af gjXD6s4UQxYUCKrkcdCpnrfQ2vApRl9Z/M0rPNfmchy5YvJnfFlTIRa6g1ogy3qW SPCrjZmNQuMmzdOMSRdm7lBYZrEuA3PZb7c6o5UlDbwaZcBYf1f0+K0W/+MhuvZd GLjikhxQcoMZO/XrYGaHD32wglZ02NF1HLEMhMziIK39UStRCle/FSpvSV/PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSD/QNIHZimG3wwpnawVW08Cq75MwHwYDVR0j BBgwFoAUDq/rfnNG6PJ4/+LQqo1OEpYOt8cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTM1NDc1My8wLzBFQUZFQjdFNzM0NkU4RjI3OEZGRTJEMEFBOEQ0 RTEyOTYwRUI3QzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUzNTQ3NTMvMC8wRUFGRUI3RTczNDZF OEYyNzhGRkUyRDBBQThENEUxMjk2MEVCN0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGc88b6bwhtJp dX+AsxogjgIxAstJ1Gd6qhRtRTZ2uobvcKq2cnppBZesSTVtbeJGHfuPvouERrTg W6I5FtQ0TEG84vZGt3ThMCJWAduKgwvj/G/9HJssZX5e14QAafP7e93VSsI5VbdE Idq7icUE6FymWrzUUrsY9qydjRYjQUi+1n5YYgF03fVHRQ0FR05wSc1loBzApftG 049nh14dhaBZv2VlvDQbliDejHwg0bTZ0MWWPfgn2dllS7YAQFKW+MFVvbcY3//e nqyAWATfWz5bhvMzMO7WGuUrgR6otvmjxCdriIQnc+cxNqItzFthPX68ZMQ85asY SvClB+aqsg== -----END CERTIFICATE-----Generated at Wed May 13 20:57:53 2026 by rpki-client