$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft (raw, json) Hash identifier: m+54izD3z2nPsf2YiJ+B2CJ9gDI6jnok3+uiqNkpN6E= Subject key identifier: 7C:F3:5C:F9:32:EA:97:A3:88:19:47:C6:87:94:E9:F9:80:55:21:5D Authority key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Certificate issuer: /CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Certificate serial: 52A795BDB20FD7DAA0137403D5DD7A04A61F044B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:48:14 +0000 Manifest this update: Fri 28 Aug 2026 06:43:14 +0000 Manifest next update: Mon 31 Aug 2026 11:21:14 +0000 Files and hashes: 1: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl (hash: V4SvRuKvcX+Fu6GYZbPK2AZG2m46r59fBliKALN2/SE=) 2: 323430363a613763303a3a2f34382d3438203d3e20313339313139.roa (hash: 3JhjmkUJhlqjw51RRcFeU35MUmZ6UUIW8yqMgWZPqSc=) 3: 3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa (hash: f4BPlSPgEwkb+NUwkDOtZFV/i1fU6GKBssz1dRCBcXw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a7:95:bd:b2:0f:d7:da:a0:13:74:03:d5:dd:7a:04:a6:1f:04:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Validity Not Before: Aug 28 06:43:14 2026 GMT Not After : Aug 31 11:21:14 2026 GMT Subject: CN=7CF35CF932EA97A3881947C68794E9F98055215D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c1:39:df:a3:b3:32:04:58:85:3f:97:e5:df: 89:f2:45:2c:2b:42:d0:b9:d5:b5:c1:7c:b8:16:e0: 7b:38:22:a2:6b:da:8c:28:7b:a7:43:15:15:86:7c: a8:d5:a7:82:53:4e:84:8d:0c:66:fe:b4:36:c5:7d: 51:ed:d1:1d:90:0b:87:26:b2:67:c0:ae:83:63:56: a3:0d:2e:96:e4:58:95:18:b9:50:53:16:90:a5:ab: 09:86:2d:cf:3b:49:8d:24:23:63:2e:64:29:99:5c: 66:b4:7f:dd:18:f7:48:9a:2d:77:1b:ae:6d:91:6a: c0:15:ea:1e:01:14:01:ef:2f:2b:c9:53:94:76:1c: 59:e6:c0:43:7b:e5:2f:0f:25:61:28:30:60:dc:d8: 41:ea:57:d6:10:a3:3d:62:a9:d7:c6:75:d5:5e:f8: 99:09:1a:fd:15:05:97:75:08:fd:9d:62:bd:b1:c6: 4d:49:a6:19:1d:38:a1:8e:f8:45:82:a9:27:cc:7e: 3a:71:98:0e:52:d5:a4:79:bd:b5:e7:f1:84:85:50: 84:d9:c1:1d:1f:b7:08:52:6e:a0:9c:68:c8:74:d1: 37:ac:a4:65:af:8a:ff:1a:23:22:0a:fa:2a:aa:0a: 09:a2:2b:3b:d2:b4:88:6a:ed:12:14:ec:17:0e:04: 61:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F3:5C:F9:32:EA:97:A3:88:19:47:C6:87:94:E9:F9:80:55:21:5D X509v3 Authority Key Identifier: keyid:0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:ae:f9:6b:f2:3b:ed:af:22:f0:ec:75:6d:d3:05:62:5a:18: 2e:69:13:68:63:41:2a:3a:89:96:1d:b8:21:61:a2:af:ab:12: d6:ae:a9:70:c4:02:a9:d0:5e:03:c1:01:d0:03:5f:ff:e6:a0: 0f:95:d4:60:b0:58:0e:a7:c2:0f:49:14:5b:55:4f:7e:1e:8e: 49:6a:f1:86:8f:ec:75:a0:71:a4:5f:5d:0e:85:35:71:23:09: ea:e5:c7:10:e5:1c:84:4b:d5:5e:fa:d9:4b:68:4d:55:0d:9e: 79:b8:b1:85:0b:8c:aa:19:e8:e2:c4:33:7a:60:8d:d4:0a:fb: f7:c1:1c:4d:7e:33:30:dd:58:b2:f5:1c:90:0e:e1:fc:bd:03: 01:48:c9:47:92:0b:f6:49:bd:fd:ed:e7:f0:69:05:05:74:b6: 71:df:dc:a6:5a:7d:1e:8f:20:41:53:b1:cf:c1:a2:10:e7:9d: e0:85:5d:63:25:39:7c:f4:df:68:e3:a1:e4:20:50:0f:22:8e: 10:15:58:dc:31:19:e8:46:c0:95:21:be:4b:f9:32:38:19:09: 5a:88:b7:db:30:68:aa:96:cb:99:8a:b2:8e:1f:98:dc:70:ec: 05:41:5a:2f:a2:00:30:c6:b9:b7:81:78:e2:4e:87:ad:a5:04: f3:43:9d:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUqeVvbIP19qgE3QD1d16BKYfBEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5 NjBFQjdDNzAeFw0yNjA4MjgwNjQzMTRaFw0yNjA4MzExMTIxMTRaMDMxMTAvBgNV BAMTKDdDRjM1Q0Y5MzJFQTk3QTM4ODE5NDdDNjg3OTRFOUY5ODA1NTIxNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmwTnfo7MyBFiFP5fl34nyRSwr QtC51bXBfLgW4Hs4IqJr2owoe6dDFRWGfKjVp4JTToSNDGb+tDbFfVHt0R2QC4cm smfAroNjVqMNLpbkWJUYuVBTFpClqwmGLc87SY0kI2MuZCmZXGa0f90Y90iaLXcb rm2RasAV6h4BFAHvLyvJU5R2HFnmwEN75S8PJWEoMGDc2EHqV9YQoz1iqdfGddVe +JkJGv0VBZd1CP2dYr2xxk1JphkdOKGO+EWCqSfMfjpxmA5S1aR5vbXn8YSFUITZ wR0ftwhSbqCcaMh00TespGWviv8aIyIK+iqqCgmiKzvStIhq7RIU7BcOBGHxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfPNc+TLql6OIGUfGh5Tp+YBVIV0wHwYDVR0j BBgwFoAUDq/rfnNG6PJ4/+LQqo1OEpYOt8cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTM1NDc1My8wLzBFQUZFQjdFNzM0NkU4RjI3OEZGRTJEMEFBOEQ0 RTEyOTYwRUI3QzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUzNTQ3NTMvMC8wRUFGRUI3RTczNDZF OEYyNzhGRkUyRDBBQThENEUxMjk2MEVCN0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1675a/I77a8i 8Ox1bdMFYloYLmkTaGNBKjqJlh24IWGir6sS1q6pcMQCqdBeA8EB0ANf/+agD5XU YLBYDqfCD0kUW1VPfh6OSWrxho/sdaBxpF9dDoU1cSMJ6uXHEOUchEvVXvrZS2hN VQ2eebixhQuMqhno4sQzemCN1Ar798EcTX4zMN1YsvUckA7h/L0DAUjJR5IL9km9 /e3n8GkFBXS2cd/cplp9Ho8gQVOxz8GiEOed4IVdYyU5fPTfaOOh5CBQDyKOEBVY 3DEZ6EbAlSG+S/kyOBkJWoi32zBoqpbLmYqyjh+Y3HDsBUFaL6IAMMa5t4F44k6H raUE80Odkg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:55:05 2026 by rpki-client