$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft (raw, json) Hash identifier: R81YrZrPL5o3BYzgoI4FSdx74Yh07qN6ExdfWpq5p84= Subject key identifier: 64:D2:00:68:12:BF:A1:A7:0E:45:5C:13:58:96:68:6C:A6:36:3E:5A Authority key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Certificate issuer: /CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Certificate serial: 729BC003FDFFAF7556076D13CA1403E3F811579D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft Manifest number: AE Signing time: Fri 29 May 2026 05:12:39 +0000 Manifest this update: Fri 29 May 2026 05:07:39 +0000 Manifest next update: Sat 30 May 2026 08:16:39 +0000 Files and hashes: 1: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl (hash: CBdn6BeTVitwmHQYMX10w9qAL0z1QRKAUHprB+suDcg=) 2: 323430363a613763303a3a2f34382d3438203d3e20313339313139.roa (hash: 3JhjmkUJhlqjw51RRcFeU35MUmZ6UUIW8yqMgWZPqSc=) 3: 3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa (hash: f4BPlSPgEwkb+NUwkDOtZFV/i1fU6GKBssz1dRCBcXw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:9b:c0:03:fd:ff:af:75:56:07:6d:13:ca:14:03:e3:f8:11:57:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Validity Not Before: May 29 05:07:39 2026 GMT Not After : May 30 08:16:39 2026 GMT Subject: CN=64D2006812BFA1A70E455C135896686CA6363E5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:08:d0:94:46:04:25:07:64:4e:f6:b9:d6:5f: 86:6d:af:4b:da:4c:2f:93:1d:65:a0:be:c5:ee:26: 20:b9:8c:3c:4a:9a:f7:a0:b7:42:dd:e6:88:1c:39: 79:eb:5e:b2:09:33:37:2a:de:99:c7:d6:d3:1c:2f: db:1f:90:3d:24:e5:c6:10:b0:1e:fb:24:b7:7c:fb: 59:f1:40:99:68:21:77:70:d8:d3:5d:22:53:62:5d: 9d:cc:cb:8d:b4:92:07:b6:f3:45:98:c3:5f:25:8a: 5c:05:a7:96:35:3d:ed:d6:70:f3:17:e6:ae:7b:d9: c0:87:eb:0f:39:24:6e:74:88:5d:f8:1b:5e:62:6b: 80:1a:95:e8:2d:45:a5:88:81:4d:6e:0a:3b:68:d9: ff:ae:57:a9:02:05:db:66:42:ab:1e:5c:36:5d:fa: 6a:33:0e:a8:5f:b1:fd:ba:7e:d5:75:40:23:ef:a0: 74:42:2b:f8:2c:3e:30:71:13:59:c0:a2:29:af:cb: 21:85:39:e2:b0:4b:ed:3e:ee:43:7e:e6:ce:9c:a0: 51:10:5e:8a:b3:c5:16:47:e3:b3:09:eb:8a:4e:31: 1b:d5:7e:35:e6:9f:bf:09:ea:fb:fc:6b:cd:1c:37: c1:34:29:95:75:49:a5:12:9f:f5:8f:f3:5e:f7:f2: f9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D2:00:68:12:BF:A1:A7:0E:45:5C:13:58:96:68:6C:A6:36:3E:5A X509v3 Authority Key Identifier: keyid:0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ce:44:2b:2c:fd:45:06:4a:6b:31:a4:3b:a6:fb:3c:40:e7: d2:59:03:81:92:ed:3d:52:2e:02:eb:8d:0a:53:d7:1e:5c:23: d9:63:d4:f0:d4:a8:3a:d0:ca:27:f2:c7:93:83:1a:99:0b:3b: 19:a6:11:cd:6a:0b:f5:87:25:82:fc:fa:c3:04:79:b0:a0:46: f6:10:61:84:c2:e3:2b:31:d5:05:2b:b9:c8:52:f9:5a:fc:a0: 8f:44:f2:01:3d:70:a7:97:7e:52:69:68:e5:58:a8:0a:cf:ef: 32:2b:b5:91:64:9e:a1:16:0b:37:6f:49:37:de:cf:ce:70:ed: fc:ed:e6:42:88:28:b9:bd:69:7a:61:f1:8b:cf:7c:9a:c7:8c: 66:bc:e3:96:dd:d5:21:fe:80:fb:c3:b9:ef:0e:9b:f4:b3:b2: 30:97:c9:65:35:34:fa:8a:5e:30:cc:b1:2f:1a:8d:a4:5f:63: b2:62:a6:d2:90:de:cf:1d:f3:d5:10:49:a3:e9:ee:e7:46:04: 92:7d:92:f4:34:ce:3f:bd:f2:96:8e:6a:67:cf:ac:12:e7:6a: be:66:e8:5f:ab:ed:90:9f:d9:70:e6:62:ca:78:a0:df:0f:9b: f2:54:7b:50:90:a7:5b:6e:e2:9c:53:a4:22:6f:4b:27:8b:58: 90:47:3c:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcpvAA/3/r3VWB20TyhQD4/gRV50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5 NjBFQjdDNzAeFw0yNjA1MjkwNTA3MzlaFw0yNjA1MzAwODE2MzlaMDMxMTAvBgNV BAMTKDY0RDIwMDY4MTJCRkExQTcwRTQ1NUMxMzU4OTY2ODZDQTYzNjNFNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjCNCURgQlB2RO9rnWX4Ztr0va TC+THWWgvsXuJiC5jDxKmvegt0Ld5ogcOXnrXrIJMzcq3pnH1tMcL9sfkD0k5cYQ sB77JLd8+1nxQJloIXdw2NNdIlNiXZ3My420kge280WYw18lilwFp5Y1Pe3WcPMX 5q572cCH6w85JG50iF34G15ia4AalegtRaWIgU1uCjto2f+uV6kCBdtmQqseXDZd +mozDqhfsf26ftV1QCPvoHRCK/gsPjBxE1nAoimvyyGFOeKwS+0+7kN+5s6coFEQ XoqzxRZH47MJ64pOMRvVfjXmn78J6vv8a80cN8E0KZV1SaUSn/WP81738vmXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZNIAaBK/oacORVwTWJZobKY2PlowHwYDVR0j BBgwFoAUDq/rfnNG6PJ4/+LQqo1OEpYOt8cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTM1NDc1My8wLzBFQUZFQjdFNzM0NkU4RjI3OEZGRTJEMEFBOEQ0 RTEyOTYwRUI3QzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUzNTQ3NTMvMC8wRUFGRUI3RTczNDZF OEYyNzhGRkUyRDBBQThENEUxMjk2MEVCN0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAps5EKyz9RQZK azGkO6b7PEDn0lkDgZLtPVIuAuuNClPXHlwj2WPU8NSoOtDKJ/LHk4MamQs7GaYR zWoL9Yclgvz6wwR5sKBG9hBhhMLjKzHVBSu5yFL5Wvygj0TyAT1wp5d+Umlo5Vio Cs/vMiu1kWSeoRYLN29JN97PznDt/O3mQogoub1pemHxi898mseMZrzjlt3VIf6A +8O57w6b9LOyMJfJZTU0+opeMMyxLxqNpF9jsmKm0pDezx3z1RBJo+nu50YEkn2S 9DTOP73ylo5qZ8+sEudqvmboX6vtkJ/ZcOZiynig3w+b8lR7UJCnW27inFOkIm9L J4tYkEc8UA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:33 2026 by rpki-client