$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft (raw, json) Hash identifier: S9GonDTsxr23NLMNmIAyyUTe5wF4qqA6r4zgNRb94X8= Subject key identifier: 0B:80:AD:60:50:78:A5:60:01:28:97:1A:B7:79:4D:44:EB:20:D5:7B Authority key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Certificate issuer: /CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Certificate serial: 392B910ED8D7644BB6FDECD15919895946827883 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 08:33:28 +0000 Manifest this update: Thu 26 Mar 2026 08:28:28 +0000 Manifest next update: Fri 27 Mar 2026 11:54:28 +0000 Files and hashes: 1: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl (hash: gMDPeCm1Ye/YW23luClPphUX+fnpg2BskyQYRCl4/eA=) 2: 323430363a613763303a3a2f34382d3438203d3e20313339313139.roa (hash: 3JhjmkUJhlqjw51RRcFeU35MUmZ6UUIW8yqMgWZPqSc=) 3: 3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa (hash: f4BPlSPgEwkb+NUwkDOtZFV/i1fU6GKBssz1dRCBcXw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:2b:91:0e:d8:d7:64:4b:b6:fd:ec:d1:59:19:89:59:46:82:78:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Validity Not Before: Mar 26 08:28:28 2026 GMT Not After : Mar 27 11:54:28 2026 GMT Subject: CN=0B80AD605078A5600128971AB7794D44EB20D57B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c5:c9:4a:82:82:9b:9a:de:9b:92:20:43:56: f5:94:a8:07:7e:7f:c9:4f:3e:37:79:e9:29:97:5a: 57:a9:d9:e2:76:0a:35:95:ff:b4:0a:5c:42:f5:ae: 2d:73:b4:ce:eb:17:d0:20:e4:85:2e:7a:4b:c4:d7: 8e:28:26:72:e1:c8:29:d3:0a:82:15:fc:00:94:0e: ce:e0:25:f2:42:a3:54:46:0f:a9:f3:83:78:dd:1b: c0:ca:5f:e4:ef:9a:42:9d:fc:7d:62:da:58:ca:6f: df:d9:36:80:b4:20:48:48:b4:c8:8f:9a:50:36:51: 95:23:1a:fe:c0:13:d8:ef:25:4f:55:b5:97:09:ae: dd:76:72:4e:fb:a8:16:bf:79:dc:63:9c:2d:32:df: 77:5b:8e:0e:2b:ae:22:d6:b1:23:46:bb:c4:73:41: a2:ce:19:c4:45:3c:a0:9b:04:1f:3c:b0:5e:69:0e: bb:43:92:d7:aa:a4:fc:76:c0:a7:20:a0:5e:a3:f2: 35:39:2d:06:03:d7:99:23:7b:94:11:44:f4:71:40: f6:42:c5:ee:fc:33:09:c3:3d:6b:d4:e5:ff:d9:96: b7:fd:aa:61:78:4c:21:cb:9e:b4:10:15:50:9d:34: a7:18:5c:24:85:6c:72:3e:eb:e5:ac:5d:82:a4:69: b0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:80:AD:60:50:78:A5:60:01:28:97:1A:B7:79:4D:44:EB:20:D5:7B X509v3 Authority Key Identifier: keyid:0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:4e:8c:6c:f4:97:e8:b3:09:52:10:ec:70:90:de:93:6d:fd: 8c:ac:e5:4d:58:3d:79:67:0f:3c:1b:93:8a:3b:5f:ab:d1:aa: 8d:f2:9b:c3:e3:9e:16:ad:ba:72:09:c5:02:d1:88:47:41:9f: 5b:17:c2:a6:df:34:30:2b:c1:bb:35:97:9f:5b:2a:52:fe:0b: 56:f1:5a:62:65:f1:d9:cb:ec:f0:55:db:ce:45:31:d8:b4:90: fc:33:bc:9b:2e:8c:38:ea:0b:ac:95:70:1a:7a:08:7f:b0:51: 19:46:01:78:14:d5:b3:03:5d:7d:b1:7c:c8:2e:12:52:92:6f: 6e:47:86:fe:d8:bc:f1:6d:bf:9b:98:fc:4a:bf:3a:45:84:f1: 31:7f:60:a5:03:62:47:9e:b3:b4:a3:d3:74:2a:d7:9a:53:b2: 27:1c:ac:a2:78:9c:e6:26:ec:01:5f:c0:43:18:ff:d5:9d:8d: 60:29:f2:18:61:8f:4f:79:83:85:ee:01:2e:55:aa:d9:f2:fc: dd:d9:a4:a7:bf:3f:f0:8e:a8:47:d0:98:f5:0c:52:4c:13:d2: 8d:54:71:05:50:8c:d8:89:44:45:0c:af:50:40:8d:4c:83:eb: 48:f3:62:30:ea:7e:81:d7:28:a5:11:3d:eb:87:ae:82:4a:c3: 8f:ce:fc:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOSuRDtjXZEu2/ezRWRmJWUaCeIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5 NjBFQjdDNzAeFw0yNjAzMjYwODI4MjhaFw0yNjAzMjcxMTU0MjhaMDMxMTAvBgNV BAMTKDBCODBBRDYwNTA3OEE1NjAwMTI4OTcxQUI3Nzk0RDQ0RUIyMEQ1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJxclKgoKbmt6bkiBDVvWUqAd+ f8lPPjd56SmXWlep2eJ2CjWV/7QKXEL1ri1ztM7rF9Ag5IUuekvE144oJnLhyCnT CoIV/ACUDs7gJfJCo1RGD6nzg3jdG8DKX+TvmkKd/H1i2ljKb9/ZNoC0IEhItMiP mlA2UZUjGv7AE9jvJU9VtZcJrt12ck77qBa/edxjnC0y33dbjg4rriLWsSNGu8Rz QaLOGcRFPKCbBB88sF5pDrtDkteqpPx2wKcgoF6j8jU5LQYD15kje5QRRPRxQPZC xe78MwnDPWvU5f/Zlrf9qmF4TCHLnrQQFVCdNKcYXCSFbHI+6+WsXYKkabABAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC4CtYFB4pWABKJcat3lNROsg1XswHwYDVR0j BBgwFoAUDq/rfnNG6PJ4/+LQqo1OEpYOt8cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTM1NDc1My8wLzBFQUZFQjdFNzM0NkU4RjI3OEZGRTJEMEFBOEQ0 RTEyOTYwRUI3QzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUzNTQ3NTMvMC8wRUFGRUI3RTczNDZF OEYyNzhGRkUyRDBBQThENEUxMjk2MEVCN0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg06MbPSX6LMJ UhDscJDek239jKzlTVg9eWcPPBuTijtfq9GqjfKbw+OeFq26cgnFAtGIR0GfWxfC pt80MCvBuzWXn1sqUv4LVvFaYmXx2cvs8FXbzkUx2LSQ/DO8my6MOOoLrJVwGnoI f7BRGUYBeBTVswNdfbF8yC4SUpJvbkeG/ti88W2/m5j8Sr86RYTxMX9gpQNiR56z tKPTdCrXmlOyJxysonic5ibsAV/AQxj/1Z2NYCnyGGGPT3mDhe4BLlWq2fL83dmk p78/8I6oR9CY9QxSTBPSjVRxBVCM2IlERQyvUECNTIPrSPNiMOp+gdcopRE964eu gkrDj878fA== -----END CERTIFICATE-----Generated at Fri Mar 27 05:01:31 2026 by rpki-client