$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: /mvwJbXl0H4pNPJOxpy5KJAi+0ctbxOCd0gcrwl+GPE= Subject key identifier: 0D:87:7F:26:60:1B:36:15:B3:80:68:0D:CC:E2:FA:DC:9F:79:89:C0 Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 45045F8440DB445E09888912167A1689FA1843A6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 16:08:28 +0000 Manifest this update: Thu 26 Mar 2026 16:03:28 +0000 Manifest next update: Fri 27 Mar 2026 19:39:28 +0000 Files and hashes: 1: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: pAdoD2AJKXXl3ejIebCNwU5WWp0n3255J3PjZJ1w7Dk=) 2: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) 3: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:04:5f:84:40:db:44:5e:09:88:89:12:16:7a:16:89:fa:18:43:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: Mar 26 16:03:28 2026 GMT Not After : Mar 27 19:39:28 2026 GMT Subject: CN=0D877F26601B3615B380680DCCE2FADC9F7989C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:51:44:4b:ad:50:71:70:fe:3b:f9:6d:70:52: cb:33:22:1f:ff:d1:0f:e0:8f:c3:08:12:9d:ab:dc: 32:70:63:a5:06:d5:43:4b:8b:4a:c2:1b:b8:ff:1b: 71:1a:62:cc:11:f4:91:2c:12:d8:a1:fe:c4:cc:76: 40:cc:a8:40:e7:50:5d:94:1f:76:3d:48:0d:3d:a4: 39:2b:b4:b4:66:5d:87:75:2c:cd:8c:62:ca:d4:1b: 1c:d8:04:21:18:85:f4:9a:b6:12:3c:11:af:90:d3: e6:48:54:15:c3:e3:45:87:e2:30:66:94:93:4f:f1: 1a:4b:62:8c:12:96:2a:f9:89:e1:c2:bf:b8:f9:93: fc:f1:f8:f8:99:89:6a:87:5e:02:d6:60:11:b2:e0: 3f:7b:3d:15:45:74:94:e7:ab:34:3f:37:8b:97:c4: 79:2d:12:14:38:91:6b:33:4c:94:79:31:ba:af:53: 5c:7e:20:00:47:a2:8d:ea:93:62:af:68:bb:10:91: 7c:b2:4b:6e:e6:0a:43:7f:da:a3:43:01:35:ac:be: 01:86:d8:00:99:9a:9f:8b:de:d5:14:fa:ba:6e:fd: 24:03:91:79:0b:e3:1b:63:0a:2d:f5:c6:86:4f:88: 63:38:fd:c7:4a:b7:60:72:f9:b3:8a:59:e1:f9:da: e1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:87:7F:26:60:1B:36:15:B3:80:68:0D:CC:E2:FA:DC:9F:79:89:C0 X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:7a:76:9a:6d:85:ed:48:78:4a:75:5e:da:e0:e9:2f:82:f1: b0:dc:2a:aa:70:52:30:8d:0c:ec:78:4c:15:38:7a:e2:37:37: 14:51:0c:2c:f1:a3:a2:f4:00:a2:8b:ea:10:03:1d:43:de:61: 71:a8:f1:8a:c5:05:cb:66:50:fb:7c:f2:b6:40:03:fc:3e:29: 19:b5:5b:31:21:4f:e2:a0:d5:30:b3:a1:87:2e:26:66:a9:e9: 51:72:89:2c:68:25:c0:b8:26:0d:77:c0:44:56:81:7e:8c:dd: 97:9b:2e:66:82:1a:ae:97:a1:9c:e6:86:01:32:21:00:88:2e: 04:d3:af:2d:e2:e4:8d:c9:e6:50:ea:6c:a3:56:4b:40:c2:7d: e0:e0:b0:b5:5d:de:0b:7b:52:0a:88:de:2b:dc:4c:c1:b3:10: 13:72:f8:f2:3e:e6:ab:6e:5d:8b:7c:55:ff:86:34:cc:44:be: 3d:5f:e8:c5:76:0d:cf:29:e9:8a:ed:9c:c1:c1:75:39:01:a7: 0a:dc:39:a8:ab:28:e6:4d:11:0c:d2:5e:0d:a2:2e:fc:b1:43: cf:8b:8c:03:86:2b:07:5e:83:48:94:4b:7e:b1:7e:ad:4e:5c: 0a:64:d9:7d:7f:95:dc:2b:af:e0:30:89:08:45:b9:05:ae:6b: c0:a5:3f:aa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURQRfhEDbRF4JiIkSFnoWifoYQ6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjAzMjYxNjAzMjhaFw0yNjAzMjcxOTM5MjhaMDMxMTAvBgNV BAMTKDBEODc3RjI2NjAxQjM2MTVCMzgwNjgwRENDRTJGQURDOUY3OTg5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUURLrVBxcP47+W1wUsszIh// 0Q/gj8MIEp2r3DJwY6UG1UNLi0rCG7j/G3EaYswR9JEsEtih/sTMdkDMqEDnUF2U H3Y9SA09pDkrtLRmXYd1LM2MYsrUGxzYBCEYhfSathI8Ea+Q0+ZIVBXD40WH4jBm lJNP8RpLYowSlir5ieHCv7j5k/zx+PiZiWqHXgLWYBGy4D97PRVFdJTnqzQ/N4uX xHktEhQ4kWszTJR5MbqvU1x+IABHoo3qk2KvaLsQkXyyS27mCkN/2qNDATWsvgGG 2ACZmp+L3tUU+rpu/SQDkXkL4xtjCi31xoZPiGM4/cdKt2By+bOKWeH52uHvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDYd/JmAbNhWzgGgNzOL63J95icAwHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHp2mm2F7Uh4 SnVe2uDpL4LxsNwqqnBSMI0M7HhMFTh64jc3FFEMLPGjovQAoovqEAMdQ95hcajx isUFy2ZQ+3zytkAD/D4pGbVbMSFP4qDVMLOhhy4mZqnpUXKJLGglwLgmDXfARFaB fozdl5suZoIarpehnOaGATIhAIguBNOvLeLkjcnmUOpso1ZLQMJ94OCwtV3eC3tS CojeK9xMwbMQE3L48j7mq25di3xV/4Y0zES+PV/oxXYNzynpiu2cwcF1OQGnCtw5 qKso5k0RDNJeDaIu/LFDz4uMA4YrB16DSJRLfrF+rU5cCmTZfX+V3Cuv4DCJCEW5 Ba5rwKU/qg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:37:15 2026 by rpki-client