$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft (raw, json) Hash identifier: vpcz/61pT+yMB+EfDlVoY3t1MAqC+neTHHs0BQENaCc= Subject key identifier: D6:A1:26:9F:42:0A:78:A3:3C:DE:88:B6:7D:61:37:D4:73:D6:90:6D Authority key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Certificate issuer: /CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Certificate serial: 483913D6E8393398731189A5A05FB31F091D1E2A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft Manifest number: 2F Signing time: Mon 23 Feb 2026 00:42:30 +0000 Manifest this update: Mon 23 Feb 2026 00:37:30 +0000 Manifest next update: Tue 24 Feb 2026 02:44:30 +0000 Files and hashes: 1: 323430363a613763303a3a2f34382d3438203d3e20313339313139.roa (hash: 3JhjmkUJhlqjw51RRcFeU35MUmZ6UUIW8yqMgWZPqSc=) 2: 3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa (hash: f4BPlSPgEwkb+NUwkDOtZFV/i1fU6GKBssz1dRCBcXw=) 3: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl (hash: HR0BdTjBc84De5nDX8XQi1rKEZxK5YkCaCap3y7qYNM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:39:13:d6:e8:39:33:98:73:11:89:a5:a0:5f:b3:1f:09:1d:1e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Validity Not Before: Feb 23 00:37:30 2026 GMT Not After : Feb 24 02:44:30 2026 GMT Subject: CN=D6A1269F420A78A33CDE88B67D6137D473D6906D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:93:ce:e7:03:91:ea:e3:12:b5:c6:92:ac: 60:f7:af:c6:f1:1e:11:e4:c1:a8:59:a2:87:a6:d9: 10:f0:78:2b:67:7f:3d:2c:31:42:a1:bd:0f:3f:db: 0f:d7:0d:64:ce:97:6f:cf:33:85:79:7b:fb:52:5f: 29:bb:6d:70:74:c1:c9:88:7a:6b:5d:42:94:5a:b2: 38:ee:c1:95:d6:e0:5b:df:f5:c7:48:25:12:8c:b7: ea:6a:24:89:49:6d:aa:f7:a2:29:50:3b:7c:60:12: c3:0e:6a:ff:27:10:4f:0c:07:11:66:e3:a8:8b:0c: 75:00:12:c5:61:6f:5e:7c:88:5e:23:0c:e9:23:06: 1e:dd:9c:d9:07:d3:84:d2:80:f7:8f:5c:e0:fc:91: d8:4b:a2:71:f0:d1:66:17:e6:c5:88:0d:88:c8:ed: 13:f5:7e:bd:a6:06:ec:5f:83:0e:8f:5d:c5:95:38: 8e:03:b6:00:11:98:46:c1:3a:c9:96:97:59:2e:23: 52:c6:12:31:e0:c9:c2:14:15:b4:b9:40:0b:da:37: ef:99:2b:70:0a:5d:e2:df:6c:a5:9f:73:88:63:71: 2d:9c:b3:10:0e:f1:c9:f6:5d:8b:5d:38:09:a0:8f: 78:77:22:b7:d1:bd:db:25:c8:3d:58:1c:9b:ca:73: 85:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A1:26:9F:42:0A:78:A3:3C:DE:88:B6:7D:61:37:D4:73:D6:90:6D X509v3 Authority Key Identifier: keyid:0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4a:41:2a:9c:6b:cd:42:84:97:35:3e:17:fe:fd:0b:01:82: 84:d2:c6:c5:c7:70:3f:37:84:0e:66:e3:e3:03:df:b7:d6:66: 0b:97:70:64:6c:72:5e:cb:7a:8c:67:63:1d:77:17:76:c5:6b: 3e:dc:e3:2a:6f:09:92:40:1f:bb:ce:2a:43:08:2a:c9:2f:d2: 1b:14:4b:43:dc:5c:45:66:cc:d8:81:30:ab:63:a1:41:68:41: 9f:bb:3b:fe:b0:c6:39:74:69:95:cc:54:58:a4:1f:1e:71:3e: a4:ce:ae:f1:6b:cf:90:28:36:40:7e:7a:63:74:8c:9e:69:72: ca:70:10:ae:f6:dc:39:87:3e:07:c0:6d:d9:d4:79:ee:06:05: 33:38:3e:dd:2d:1c:86:65:43:91:92:22:56:9d:65:c7:ff:dd: cb:d1:b1:85:77:be:e3:41:51:07:33:95:cd:a1:14:94:6f:d9: 5d:aa:6c:02:f7:2a:0d:7c:d1:60:e7:69:27:3b:2b:1f:89:2a: e6:a8:c7:93:08:22:df:93:ed:bc:43:7b:e1:9a:8a:0d:ba:6d: 5a:3d:9a:4c:06:85:ce:78:97:c2:86:41:d2:29:5d:8a:b0:30: 39:f3:c5:e1:eb:5f:6e:d8:66:6b:62:09:8c:7d:af:ba:d4:8b: de:bc:a4:f2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSDkT1ug5M5hzEYmloF+zHwkdHiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5 NjBFQjdDNzAeFw0yNjAyMjMwMDM3MzBaFw0yNjAyMjQwMjQ0MzBaMDMxMTAvBgNV BAMTKEQ2QTEyNjlGNDIwQTc4QTMzQ0RFODhCNjdENjEzN0Q0NzNENjkwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyt5PO5wOR6uMStcaSrGD3r8bx HhHkwahZooem2RDweCtnfz0sMUKhvQ8/2w/XDWTOl2/PM4V5e/tSXym7bXB0wcmI emtdQpRasjjuwZXW4Fvf9cdIJRKMt+pqJIlJbar3oilQO3xgEsMOav8nEE8MBxFm 46iLDHUAEsVhb158iF4jDOkjBh7dnNkH04TSgPePXOD8kdhLonHw0WYX5sWIDYjI 7RP1fr2mBuxfgw6PXcWVOI4DtgARmEbBOsmWl1kuI1LGEjHgycIUFbS5QAvaN++Z K3AKXeLfbKWfc4hjcS2csxAO8cn2XYtdOAmgj3h3IrfRvdslyD1YHJvKc4XdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1qEmn0IKeKM83oi2fWE31HPWkG0wHwYDVR0j BBgwFoAUDq/rfnNG6PJ4/+LQqo1OEpYOt8cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTM1NDc1My8wLzBFQUZFQjdFNzM0NkU4RjI3OEZGRTJEMEFBOEQ0 RTEyOTYwRUI3QzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUzNTQ3NTMvMC8wRUFGRUI3RTczNDZF OEYyNzhGRkUyRDBBQThENEUxMjk2MEVCN0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUpBKpxrzUKE lzU+F/79CwGChNLGxcdwPzeEDmbj4wPft9ZmC5dwZGxyXst6jGdjHXcXdsVrPtzj Km8JkkAfu84qQwgqyS/SGxRLQ9xcRWbM2IEwq2OhQWhBn7s7/rDGOXRplcxUWKQf HnE+pM6u8WvPkCg2QH56Y3SMnmlyynAQrvbcOYc+B8Bt2dR57gYFMzg+3S0chmVD kZIiVp1lx//dy9GxhXe+40FRBzOVzaEUlG/ZXapsAvcqDXzRYOdpJzsrH4kq5qjH kwgi35PtvEN74ZqKDbptWj2aTAaFzniXwoZB0ildirAwOfPF4etfbthma2IJjH2v utSL3ryk8g== -----END CERTIFICATE-----Generated at Mon Feb 23 02:08:14 2026 by rpki-client