$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft (raw, json) Hash identifier: 8U//JzpZVl9GBgSI7Qo9jV6U5On5fO7lKzSepr+nRDY= Subject key identifier: E3:5C:CD:F8:01:86:68:4C:37:71:65:32:C8:9F:DD:0C:66:51:3F:EA Authority key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Certificate issuer: /CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Certificate serial: 29F6C8FBA73D4ED9880FC9EDEDB159D16BAA0EC0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 00:49:17 +0000 Manifest this update: Mon 13 Apr 2026 00:44:17 +0000 Manifest next update: Tue 14 Apr 2026 01:22:17 +0000 Files and hashes: 1: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl (hash: NAFCqdjkeNR8sbjLUR0Q06dG/ZoQl/PhdGLJH9VgVGc=) 2: 323430363a613763303a3a2f34382d3438203d3e20313339313139.roa (hash: 3JhjmkUJhlqjw51RRcFeU35MUmZ6UUIW8yqMgWZPqSc=) 3: 3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa (hash: f4BPlSPgEwkb+NUwkDOtZFV/i1fU6GKBssz1dRCBcXw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 01:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f6:c8:fb:a7:3d:4e:d9:88:0f:c9:ed:ed:b1:59:d1:6b:aa:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Validity Not Before: Apr 13 00:44:17 2026 GMT Not After : Apr 14 01:22:17 2026 GMT Subject: CN=E35CCDF80186684C37716532C89FDD0C66513FEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b8:c5:c6:ec:4c:5b:5c:87:8f:1f:53:55:47: 6d:83:6e:e4:59:6c:5f:6f:fa:55:5a:af:a2:6f:29: f4:ed:ff:bd:3b:18:63:a1:30:a3:bf:c5:e3:7f:48: 7f:6f:ee:28:91:4c:6c:aa:79:b3:0c:2f:16:ce:97: 59:de:b0:87:d4:f8:d2:d6:a7:f6:f5:b1:85:bb:f1: a3:32:a5:d3:1d:84:7f:9a:fb:68:63:4c:ae:e3:7c: 15:5b:3f:0d:e2:78:cc:77:1b:53:a4:34:38:48:30: 26:4c:62:48:c3:4e:d6:1b:8e:e0:40:54:39:63:1b: 1f:1e:44:58:98:ee:da:e9:3c:3f:27:6f:60:f4:a7: 89:06:71:ca:5e:5d:92:97:e6:37:b9:4a:b3:9a:dd: 52:2d:e7:42:8e:0d:e8:e0:77:c8:65:06:c5:ae:ef: 27:8a:a2:4e:ff:dc:9f:53:a8:ce:70:41:f0:79:3b: 47:b1:94:ea:98:1e:9c:9e:df:ae:df:f5:5c:37:81: 28:72:a5:dc:62:4f:53:f4:33:be:cf:32:e6:5a:b1: 9e:a3:8c:8e:51:a6:37:35:f7:51:69:20:e3:d0:35: 79:3a:55:c3:78:93:b4:ab:bc:c7:4e:52:e3:f3:63: 2c:c2:04:99:5f:8a:3b:14:c3:dd:0c:88:96:af:1d: ae:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5C:CD:F8:01:86:68:4C:37:71:65:32:C8:9F:DD:0C:66:51:3F:EA X509v3 Authority Key Identifier: keyid:0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:41:27:4e:19:19:f1:f4:cd:9b:0b:ab:9c:cf:c7:89:d1:b0: 8e:ee:ac:8d:27:62:b5:a6:e9:9d:2e:97:45:85:5e:70:a9:f0: b8:c7:89:80:71:69:48:26:ad:63:51:ca:a0:35:e2:8a:02:49: 91:6e:47:4c:07:37:a3:81:97:2d:f8:9f:09:fc:78:20:e7:a6: e7:f7:bc:b0:24:e4:21:d9:1a:3b:3a:26:d6:a2:5b:2e:23:b5: c5:16:d6:da:0c:3f:74:9d:48:03:63:56:e8:12:3e:ec:aa:fe: ba:ae:f4:d2:bf:aa:31:47:7f:c3:3c:bc:bd:96:de:b6:08:ef: f4:bf:22:67:54:96:ac:0a:e0:6e:e3:73:51:87:64:9a:7e:24: b4:75:13:7b:9b:a0:c3:16:61:e4:30:d0:5d:d0:01:8a:9d:b3: f7:4d:46:53:77:e6:19:ac:8d:bd:73:d8:05:7f:d9:5c:10:1f: f5:6a:5a:30:d6:af:48:8f:3a:d9:9e:65:f7:37:23:10:1d:dd: 08:28:ae:4a:cf:24:7a:3d:8d:3c:ff:8f:fc:d7:63:e8:e2:ec: f0:1d:f8:5b:91:03:b6:54:c9:8d:2d:f4:6f:c7:46:f8:dc:6b: 75:82:0a:1c:e6:35:e5:b6:13:5d:d7:28:96:d9:3d:b4:7b:51: 1e:54:9a:46 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKfbI+6c9TtmID8nt7bFZ0WuqDsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5 NjBFQjdDNzAeFw0yNjA0MTMwMDQ0MTdaFw0yNjA0MTQwMTIyMTdaMDMxMTAvBgNV BAMTKEUzNUNDREY4MDE4NjY4NEMzNzcxNjUzMkM4OUZERDBDNjY1MTNGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcuMXG7ExbXIePH1NVR22DbuRZ bF9v+lVar6JvKfTt/707GGOhMKO/xeN/SH9v7iiRTGyqebMMLxbOl1nesIfU+NLW p/b1sYW78aMypdMdhH+a+2hjTK7jfBVbPw3ieMx3G1OkNDhIMCZMYkjDTtYbjuBA VDljGx8eRFiY7trpPD8nb2D0p4kGccpeXZKX5je5SrOa3VIt50KODejgd8hlBsWu 7yeKok7/3J9TqM5wQfB5O0exlOqYHpye367f9Vw3gShypdxiT1P0M77PMuZasZ6j jI5Rpjc191FpIOPQNXk6VcN4k7SrvMdOUuPzYyzCBJlfijsUw90MiJavHa4DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU41zN+AGGaEw3cWUyyJ/dDGZRP+owHwYDVR0j BBgwFoAUDq/rfnNG6PJ4/+LQqo1OEpYOt8cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTM1NDc1My8wLzBFQUZFQjdFNzM0NkU4RjI3OEZGRTJEMEFBOEQ0 RTEyOTYwRUI3QzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUzNTQ3NTMvMC8wRUFGRUI3RTczNDZF OEYyNzhGRkUyRDBBQThENEUxMjk2MEVCN0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEEnThkZ8fTN mwurnM/HidGwju6sjSditabpnS6XRYVecKnwuMeJgHFpSCatY1HKoDXiigJJkW5H TAc3o4GXLfifCfx4IOem5/e8sCTkIdkaOzom1qJbLiO1xRbW2gw/dJ1IA2NW6BI+ 7Kr+uq700r+qMUd/wzy8vZbetgjv9L8iZ1SWrArgbuNzUYdkmn4ktHUTe5ugwxZh 5DDQXdABip2z901GU3fmGayNvXPYBX/ZXBAf9WpaMNavSI862Z5l9zcjEB3dCCiu Ss8kej2NPP+P/Ndj6OLs8B34W5EDtlTJjS30b8dG+NxrdYIKHOY15bYTXdcoltk9 tHtRHlSaRg== -----END CERTIFICATE-----Generated at Mon Apr 13 12:29:08 2026 by rpki-client