$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft (raw, json) Hash identifier: fEuYCSImj+XPHbJ5i1cz2i+MrJahV/2X3h8LwwmCifI= Subject key identifier: 5A:AE:DC:A6:E0:B2:F7:38:7E:DE:AE:0D:53:4A:83:61:54:8F:2C:9E Authority key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Certificate issuer: /CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Certificate serial: 75320CCECE2158198A8D7D78252AB4606C6D3684 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 11:21:04 +0000 Manifest this update: Fri 24 Jul 2026 11:16:04 +0000 Manifest next update: Sat 25 Jul 2026 13:45:04 +0000 Files and hashes: 1: 3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa (hash: f4BPlSPgEwkb+NUwkDOtZFV/i1fU6GKBssz1dRCBcXw=) 2: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl (hash: 8phSf97hssEHCkyQ3aj20XKmIEVMWzwFn0aUWsf9T+E=) 3: 323430363a613763303a3a2f34382d3438203d3e20313339313139.roa (hash: 3JhjmkUJhlqjw51RRcFeU35MUmZ6UUIW8yqMgWZPqSc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:32:0c:ce:ce:21:58:19:8a:8d:7d:78:25:2a:b4:60:6c:6d:36:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Validity Not Before: Jul 24 11:16:04 2026 GMT Not After : Jul 25 13:45:04 2026 GMT Subject: CN=5AAEDCA6E0B2F7387EDEAE0D534A8361548F2C9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:38:e5:29:df:c7:38:18:49:c1:cf:0e:a9: e0:d9:3f:76:68:f8:de:24:0b:bb:77:e9:06:c1:31: 70:0c:2f:ce:73:ae:fe:ef:a3:49:f8:65:49:82:c2: d0:45:2c:ea:69:02:0d:67:3e:05:7a:ae:5f:b7:9f: ec:1d:5c:e0:a2:92:53:6f:da:24:db:a8:2f:a3:bf: b6:d5:d5:96:43:30:14:43:d3:2e:d5:8f:3e:4a:08: 69:ef:16:fb:30:5b:3f:8a:fe:04:09:74:f0:a5:ff: 65:63:c5:d3:a0:01:5c:fe:c6:8e:a0:eb:8d:07:58: 0c:d1:0c:09:9c:6e:86:0f:29:c4:1c:03:64:3c:2b: fb:02:77:35:c7:5b:52:df:e6:41:c8:3a:23:1a:d3: 58:36:98:fc:14:c5:95:3e:0f:fc:a7:2a:72:4f:22: ab:b1:d9:5c:cf:d9:a5:4e:ff:46:42:6f:96:d5:19: 22:35:2c:d9:68:4e:6e:01:16:7c:8c:3d:58:3d:f0: ff:5e:99:94:9b:3c:91:ce:ff:05:92:4d:17:c8:60: 94:99:bb:f0:95:97:2d:4d:16:7f:fb:d8:bb:ff:63: 46:92:fa:38:00:6a:6c:1e:da:c3:1f:55:7b:ca:bb: ef:0b:30:d4:67:29:93:e6:8f:f4:60:db:ff:cb:a9: b4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AE:DC:A6:E0:B2:F7:38:7E:DE:AE:0D:53:4A:83:61:54:8F:2C:9E X509v3 Authority Key Identifier: keyid:0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:49:2a:d8:ea:92:48:b8:60:13:f8:f8:0d:57:c7:9f:d5:05: 51:f6:8f:be:17:28:13:48:1e:a2:18:91:21:42:ae:00:37:47: bd:00:74:14:0a:7c:f5:90:f7:8d:d9:08:9c:13:c3:85:31:1d: c0:92:1c:4e:ee:08:d1:10:39:d3:a5:8a:74:63:65:80:1d:c5: 2b:58:09:68:38:d2:d9:f0:72:a2:b0:42:e0:17:cc:98:d5:77: e8:07:82:9a:e6:62:55:24:04:92:9b:34:1d:9c:15:9c:c0:e3: a3:2e:7b:7d:87:9b:2a:ef:06:04:0c:d5:5a:f5:00:86:99:b4: 68:c5:08:1e:28:52:55:52:e4:87:42:4b:13:69:43:39:69:ce: a1:0e:97:fa:8a:1d:bb:13:2f:ca:a1:93:07:03:96:71:68:78: f7:fa:f7:7c:aa:05:49:93:10:bc:c8:03:12:65:16:a4:47:6f: 07:82:6d:71:a6:d2:39:f5:63:6e:d1:f6:95:d7:af:26:61:15: 2e:b5:85:59:e3:d0:e8:c1:da:8d:41:40:85:fb:f1:b5:8d:c9: 76:13:4f:94:0c:e3:20:fe:6a:cf:85:d7:3d:18:8e:20:87:e9: 06:6b:ed:8b:d6:c8:30:f0:12:ff:8c:64:4f:b8:b3:f3:a6:35: 51:22:48:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdTIMzs4hWBmKjX14JSq0YGxtNoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5 NjBFQjdDNzAeFw0yNjA3MjQxMTE2MDRaFw0yNjA3MjUxMzQ1MDRaMDMxMTAvBgNV BAMTKDVBQUVEQ0E2RTBCMkY3Mzg3RURFQUUwRDUzNEE4MzYxNTQ4RjJDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHzjlKd/HOBhJwc8OqeDZP3Zo +N4kC7t36QbBMXAML85zrv7vo0n4ZUmCwtBFLOppAg1nPgV6rl+3n+wdXOCiklNv 2iTbqC+jv7bV1ZZDMBRD0y7Vjz5KCGnvFvswWz+K/gQJdPCl/2VjxdOgAVz+xo6g 640HWAzRDAmcboYPKcQcA2Q8K/sCdzXHW1Lf5kHIOiMa01g2mPwUxZU+D/ynKnJP Iqux2VzP2aVO/0ZCb5bVGSI1LNloTm4BFnyMPVg98P9emZSbPJHO/wWSTRfIYJSZ u/CVly1NFn/72Lv/Y0aS+jgAamwe2sMfVXvKu+8LMNRnKZPmj/Rg2//LqbQvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWq7cpuCy9zh+3q4NU0qDYVSPLJ4wHwYDVR0j BBgwFoAUDq/rfnNG6PJ4/+LQqo1OEpYOt8cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTM1NDc1My8wLzBFQUZFQjdFNzM0NkU4RjI3OEZGRTJEMEFBOEQ0 RTEyOTYwRUI3QzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUzNTQ3NTMvMC8wRUFGRUI3RTczNDZF OEYyNzhGRkUyRDBBQThENEUxMjk2MEVCN0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkkq2OqSSLhg E/j4DVfHn9UFUfaPvhcoE0geohiRIUKuADdHvQB0FAp89ZD3jdkInBPDhTEdwJIc Tu4I0RA506WKdGNlgB3FK1gJaDjS2fByorBC4BfMmNV36AeCmuZiVSQEkps0HZwV nMDjoy57fYebKu8GBAzVWvUAhpm0aMUIHihSVVLkh0JLE2lDOWnOoQ6X+ooduxMv yqGTBwOWcWh49/r3fKoFSZMQvMgDEmUWpEdvB4JtcabSOfVjbtH2ldevJmEVLrWF WePQ6MHajUFAhfvxtY3JdhNPlAzjIP5qz4XXPRiOIIfpBmvti9bIMPAS/4xkT7iz 86Y1USJIVQ== -----END CERTIFICATE-----Generated at Fri Jul 24 15:10:45 2026 by rpki-client