$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: DxPxwDLMaFB6datbJwTxsJ+ugA3ugqEnhM5ebgCidxM= Subject key identifier: C2:E5:56:0F:83:49:EF:2B:07:89:ED:ED:C6:5A:D4:4E:64:A1:40:C6 Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 32497ACCA11632F564103DFA97CE6E850FC2FDA5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: 013A Signing time: Sun 11 Oct 2026 00:30:05 +0000 Manifest this update: Sun 11 Oct 2026 00:25:05 +0000 Manifest next update: Wed 14 Oct 2026 01:49:05 +0000 Files and hashes: 1: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: AC6qOkPPMtz504Iqm4ROSuCUqnK/0sq5DJofKEL5O+I=) 2: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) 3: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:49:7a:cc:a1:16:32:f5:64:10:3d:fa:97:ce:6e:85:0f:c2:fd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: Oct 11 00:25:05 2026 GMT Not After : Oct 14 01:49:05 2026 GMT Subject: CN=C2E5560F8349EF2B0789EDEDC65AD44E64A140C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ec:8e:88:ce:65:37:02:b2:21:c2:90:5a:e5: 42:44:1e:fa:2f:cb:9d:d9:9f:b1:31:74:ce:18:03: 8f:6c:f6:d6:c6:58:a1:d0:49:09:2c:b6:30:39:85: 14:65:f7:f5:16:53:0b:4c:bb:02:8b:ed:47:81:29: 29:5e:e1:df:38:58:c8:ac:50:44:f1:79:80:73:95: cf:ff:07:f0:58:e1:0b:17:64:d8:13:9f:75:9f:84: e5:51:3d:37:58:5f:44:ab:e1:76:5e:e5:0a:ef:1c: e0:56:98:df:ff:fd:19:7c:38:46:9b:91:1b:ec:11: 97:5d:47:b4:ed:f2:3e:a6:b9:b6:6c:3e:de:a4:23: 7d:ee:1f:16:a9:c5:c8:c9:ce:94:84:1d:36:78:33: d6:6e:fd:5d:37:66:1d:38:f4:c9:24:35:ea:6b:51: 2d:4e:14:27:1b:38:b3:d6:e5:e8:7a:be:b2:f2:b6: dd:7b:59:80:ba:dd:09:e0:bd:6f:ae:28:83:12:23: 2f:a0:c0:21:ef:0e:72:01:00:e5:2e:b9:b0:c0:6c: ba:5a:78:d3:93:cd:88:6c:78:67:ff:77:53:f2:39: 4b:ce:10:e3:a9:d5:74:36:80:c4:f6:3c:20:93:a8: 7e:8f:75:7a:2b:ba:4c:f0:5f:f0:dc:62:d4:7f:db: ad:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E5:56:0F:83:49:EF:2B:07:89:ED:ED:C6:5A:D4:4E:64:A1:40:C6 X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f8:0d:99:b0:fb:f5:47:2c:95:8e:1e:ca:77:3c:d6:4f:d1: 17:cc:3d:92:7f:04:fe:24:cf:8f:8d:f7:60:d1:59:1e:22:1a: 47:2d:64:17:12:15:88:ee:47:23:c8:8a:23:b9:b6:c6:e9:d1: fd:ad:59:e4:e3:59:47:17:f8:5f:ad:1d:bf:14:6e:a5:fe:7e: 7e:dd:9c:43:05:65:e5:1d:67:e5:5e:b2:f3:2a:d0:86:52:df: b2:8e:51:53:c2:81:5e:86:bc:2b:dc:7d:38:47:2e:3c:12:92: 28:99:ce:03:a3:48:09:ad:c5:98:4c:d9:d9:5b:b8:ef:bc:14: 45:cb:3b:8c:bb:ac:55:e5:b3:96:38:23:45:5f:48:df:05:b7: 7e:88:a9:f9:4e:ca:be:42:db:44:7f:e9:e8:8c:66:16:d4:ea: 1f:42:f1:30:6d:2e:0b:4b:71:04:d1:24:66:9c:2a:a8:ba:1e: 79:ca:47:a7:2e:2f:37:d2:c3:ea:d4:0c:01:53:35:16:33:10: 42:83:ef:6d:d6:f4:ea:e4:71:63:f8:14:5f:76:61:43:cf:da: bc:e6:aa:55:b0:7b:39:fc:70:61:df:2a:56:cd:80:b3:d7:fa: 8c:04:33:74:e4:db:ea:70:1e:d5:27:93:c6:21:f8:ab:5d:96: 24:e3:6e:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMkl6zKEWMvVkED36l85uhQ/C/aUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjEwMTEwMDI1MDVaFw0yNjEwMTQwMTQ5MDVaMDMxMTAvBgNV BAMTKEMyRTU1NjBGODM0OUVGMkIwNzg5RURFREM2NUFENDRFNjRBMTQwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7I6IzmU3ArIhwpBa5UJEHvov y53Zn7ExdM4YA49s9tbGWKHQSQkstjA5hRRl9/UWUwtMuwKL7UeBKSle4d84WMis UETxeYBzlc//B/BY4QsXZNgTn3WfhOVRPTdYX0Sr4XZe5QrvHOBWmN///Rl8OEab kRvsEZddR7Tt8j6mubZsPt6kI33uHxapxcjJzpSEHTZ4M9Zu/V03Zh049MkkNepr US1OFCcbOLPW5eh6vrLytt17WYC63QngvW+uKIMSIy+gwCHvDnIBAOUuubDAbLpa eNOTzYhseGf/d1PyOUvOEOOp1XQ2gMT2PCCTqH6PdXorukzwX/DcYtR/263FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwuVWD4NJ7ysHie3txlrUTmShQMYwHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfgNmbD79Ucs lY4eync81k/RF8w9kn8E/iTPj433YNFZHiIaRy1kFxIViO5HI8iKI7m2xunR/a1Z 5ONZRxf4X60dvxRupf5+ft2cQwVl5R1n5V6y8yrQhlLfso5RU8KBXoa8K9x9OEcu PBKSKJnOA6NICa3FmEzZ2Vu477wURcs7jLusVeWzljgjRV9I3wW3foip+U7KvkLb RH/p6IxmFtTqH0LxMG0uC0txBNEkZpwqqLoeecpHpy4vN9LD6tQMAVM1FjMQQoPv bdb06uRxY/gUX3ZhQ8/avOaqVbB7OfxwYd8qVs2As9f6jAQzdOTb6nAe1SeTxiH4 q12WJONuMA== -----END CERTIFICATE-----Generated at Sun Oct 11 15:13:05 2026 by rpki-client