$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: wpwolx+j7sHav5wxgPBTxqMlku69s+Hqdrdl2GSTvss= Subject key identifier: B3:B1:C7:58:5A:DD:F1:DA:4E:02:46:1E:1D:8A:29:F3:AD:C5:BC:C6 Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 2ECCFBE608F83C1545B120B755705D98166E6813 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: 98 Signing time: Wed 13 May 2026 02:25:53 +0000 Manifest this update: Wed 13 May 2026 02:20:53 +0000 Manifest next update: Thu 14 May 2026 02:48:53 +0000 Files and hashes: 1: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) 2: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) 3: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: uA8gCIhV7V6EmyX18jdi3gnc94ryeFqJ8w0A5oJedp4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:cc:fb:e6:08:f8:3c:15:45:b1:20:b7:55:70:5d:98:16:6e:68:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: May 13 02:20:53 2026 GMT Not After : May 14 02:48:53 2026 GMT Subject: CN=B3B1C7585ADDF1DA4E02461E1D8A29F3ADC5BCC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ed:50:16:e0:f1:75:09:61:b7:39:9f:b2:80: 2e:6e:4b:57:bd:b4:8e:e1:da:4f:92:17:a8:bf:51: 63:60:c5:b6:13:7c:b0:0f:1e:9e:af:49:b0:53:43: 03:c6:4c:cb:7a:5d:d3:bb:b4:64:d1:62:94:c2:93: 55:47:83:30:64:6e:7b:c9:ae:7a:7a:b0:0b:35:a0: 6c:eb:ab:bf:a1:05:a8:06:1c:b0:89:2f:83:8e:a9: 22:eb:09:ed:80:4c:87:c2:b8:30:11:4a:17:c8:a0: d1:90:c7:0a:37:6a:76:db:bb:28:43:d8:8d:4e:be: f0:33:9a:53:6a:06:e1:e9:02:66:f2:62:30:29:4b: c3:ff:75:58:5c:6d:c9:b3:0c:c4:16:52:98:36:ee: b8:e9:e1:c9:3f:76:ec:09:0a:7a:1f:57:00:46:4e: 78:5e:d3:ed:e9:c7:e8:9b:ea:40:e4:36:86:14:41: 24:26:f5:ca:6e:00:47:f2:ea:8b:40:82:df:ce:87: 5f:0c:c8:c9:bd:d1:dd:28:fd:a9:37:35:d7:a8:61: 37:56:e5:dd:a8:b8:31:7d:97:1b:3d:ea:6c:1d:4e: 36:fe:19:a3:bc:9e:7a:e5:07:57:f3:10:73:b5:a6: cf:62:e4:0c:82:2b:17:1f:4a:88:ff:c1:62:0a:3e: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B1:C7:58:5A:DD:F1:DA:4E:02:46:1E:1D:8A:29:F3:AD:C5:BC:C6 X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:08:13:28:2b:8c:cf:12:1e:f2:fd:ab:3b:94:9b:fd:b2:f3: 2f:83:ea:65:84:bb:4f:16:2d:de:d3:a2:57:ba:51:09:fc:72: b8:e8:d9:66:a2:61:cc:4d:1a:b0:9a:38:13:33:bf:ab:87:1f: 61:21:ed:7e:89:ef:24:ba:7a:60:9a:95:ad:28:ca:0c:47:26: 5f:1a:f0:3c:31:28:2f:17:10:f8:38:1e:b8:13:aa:6c:78:c6: fd:97:95:65:cc:41:54:6f:73:ae:52:21:91:3f:6f:64:0a:21: 50:5f:55:c8:b1:23:41:1c:45:8f:71:b5:95:11:ad:34:64:d5: 47:07:9c:1c:c5:b9:16:0a:fe:5a:34:52:19:dd:d6:74:9e:8c: 21:a0:c4:ad:86:57:20:50:26:75:26:0a:f7:af:6d:cb:c7:de: 24:64:c2:27:ac:bb:80:23:16:0c:a8:ea:32:84:fc:0f:ed:37: 1e:36:9a:ed:3c:8d:b9:ba:97:13:04:f4:4d:28:7a:79:b5:7b: 32:c0:c2:62:03:35:a1:25:d0:dd:9b:88:c1:78:ef:df:aa:02: 4b:0b:0f:b4:5f:75:36:b8:64:ce:a3:fc:3c:5d:6d:10:5c:cf: ac:4d:a0:4d:81:46:c3:14:2c:79:0b:94:92:b1:86:65:44:18: de:f5:1d:cf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULsz75gj4PBVFsSC3VXBdmBZuaBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjA1MTMwMjIwNTNaFw0yNjA1MTQwMjQ4NTNaMDMxMTAvBgNV BAMTKEIzQjFDNzU4NUFEREYxREE0RTAyNDYxRTFEOEEyOUYzQURDNUJDQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7VAW4PF1CWG3OZ+ygC5uS1e9 tI7h2k+SF6i/UWNgxbYTfLAPHp6vSbBTQwPGTMt6XdO7tGTRYpTCk1VHgzBkbnvJ rnp6sAs1oGzrq7+hBagGHLCJL4OOqSLrCe2ATIfCuDARShfIoNGQxwo3anbbuyhD 2I1OvvAzmlNqBuHpAmbyYjApS8P/dVhcbcmzDMQWUpg27rjp4ck/duwJCnofVwBG Tnhe0+3px+ib6kDkNoYUQSQm9cpuAEfy6otAgt/Oh18MyMm90d0o/ak3NdeoYTdW 5d2ouDF9lxs96mwdTjb+GaO8nnrlB1fzEHO1ps9i5AyCKxcfSoj/wWIKPpq1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUs7HHWFrd8dpOAkYeHYop863FvMYwHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQgTKCuMzxIe 8v2rO5Sb/bLzL4PqZYS7TxYt3tOiV7pRCfxyuOjZZqJhzE0asJo4EzO/q4cfYSHt fonvJLp6YJqVrSjKDEcmXxrwPDEoLxcQ+DgeuBOqbHjG/ZeVZcxBVG9zrlIhkT9v ZAohUF9VyLEjQRxFj3G1lRGtNGTVRwecHMW5Fgr+WjRSGd3WdJ6MIaDErYZXIFAm dSYK969ty8feJGTCJ6y7gCMWDKjqMoT8D+03Hjaa7TyNubqXEwT0TSh6ebV7MsDC YgM1oSXQ3ZuIwXjv36oCSwsPtF91NrhkzqP8PF1tEFzPrE2gTYFGwxQseQuUkrGG ZUQY3vUdzw== -----END CERTIFICATE-----Generated at Wed May 13 16:53:54 2026 by rpki-client