$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft File: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft (raw, json) Hash identifier: Rki8QZ5ZEwXQTU75nMqQ9ZZL3fosbQO/QAipQCfZvgU= Subject key identifier: EA:95:FE:BA:F7:B5:B2:F8:C0:A6:7C:95:7B:C6:D9:3E:66:91:92:CA Authority key identifier: 0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 Certificate issuer: /CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Certificate serial: 2AD4B0C445E19EC9EDCCF46A2A741326CB9D6CBF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft Manifest number: EC Signing time: Tue 14 Jul 2026 17:06:45 +0000 Manifest this update: Tue 14 Jul 2026 17:01:45 +0000 Manifest next update: Wed 15 Jul 2026 19:27:45 +0000 Files and hashes: 1: 3130332e3135372e3233342e302f32342d3234203d3e20313339313139.roa (hash: f4BPlSPgEwkb+NUwkDOtZFV/i1fU6GKBssz1dRCBcXw=) 2: 0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl (hash: 7oBmZKRvYmYnUTpE8gYIQqtKD0SUTYt8o51Dr0nlyuc=) 3: 323430363a613763303a3a2f34382d3438203d3e20313339313139.roa (hash: 3JhjmkUJhlqjw51RRcFeU35MUmZ6UUIW8yqMgWZPqSc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d4:b0:c4:45:e1:9e:c9:ed:cc:f4:6a:2a:74:13:26:cb:9d:6c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7 Validity Not Before: Jul 14 17:01:45 2026 GMT Not After : Jul 15 19:27:45 2026 GMT Subject: CN=EA95FEBAF7B5B2F8C0A67C957BC6D93E669192CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a8:45:ff:46:7a:bd:3f:9f:a4:2c:fa:95:66: d4:31:79:53:49:f9:50:ed:33:b7:9a:69:0f:4a:f6: 89:2b:dc:21:0a:cd:d4:5c:c4:0c:45:c5:cf:69:b6: 7c:69:e8:c1:ae:28:8b:e5:96:68:15:74:8f:b7:ca: 22:25:8e:34:14:8c:e1:92:03:25:10:b1:32:9a:78: 49:1d:0e:28:a5:1a:e0:67:15:b1:db:95:47:69:78: a8:da:58:db:bb:cc:ef:74:34:8e:ad:bd:9f:df:39: 38:7b:a6:2b:bb:f2:cf:80:29:0b:82:5e:b6:56:44: f6:7c:d8:e3:89:a0:4d:d0:6f:67:43:f5:d2:f6:13: 44:64:a5:6a:fd:eb:ea:9d:e3:1b:6a:3c:46:55:98: b1:cb:11:5b:48:56:04:b2:c5:26:5e:ee:47:f3:b2: 87:8a:ae:fc:1f:9a:59:53:0a:f7:dc:59:f4:96:10: 2f:c6:36:74:c2:5e:49:7d:f0:53:ef:74:d1:6a:e8: 7c:f8:00:5d:b9:21:16:7c:c0:14:c9:92:11:99:c0: 89:60:a1:6f:ad:76:3e:07:e4:98:52:38:b9:a4:b8: a0:bf:e1:ef:3a:21:a0:9f:6f:ba:34:f8:12:09:3e: b0:41:f6:b8:25:21:9b:84:01:12:18:02:e3:e5:20: ee:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:95:FE:BA:F7:B5:B2:F8:C0:A6:7C:95:7B:C6:D9:3E:66:91:92:CA X509v3 Authority Key Identifier: keyid:0E:AF:EB:7E:73:46:E8:F2:78:FF:E2:D0:AA:8D:4E:12:96:0E:B7:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265354753/0/0EAFEB7E7346E8F278FFE2D0AA8D4E12960EB7C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:34:36:60:e6:54:74:11:4a:74:05:79:95:3b:5c:3b:f4:91: 13:1a:d8:2e:1b:88:6d:66:6f:79:dd:0c:44:cd:17:ad:13:2c: ef:18:e0:92:00:b0:f8:77:59:6c:0d:96:90:5c:c1:61:9c:b5: 42:83:82:49:5a:cf:7a:e8:50:d3:c2:46:81:ec:46:53:8f:18: d4:c0:fe:fd:6d:48:7f:39:d8:60:ab:24:c7:b1:61:ec:bc:51: ea:ed:7f:5c:aa:5c:f4:44:43:53:8d:44:54:76:00:04:ab:4d: 1d:2c:9b:b1:c5:a9:f6:c2:50:17:99:10:9c:c7:a7:11:ac:08: de:79:6f:44:0d:2f:ba:45:66:e7:1b:7b:76:dd:9d:50:e1:51: ad:f2:4b:42:02:b3:51:61:b9:a4:78:2e:98:3e:d9:ac:f4:d7: ab:52:56:7c:b6:fd:a3:bf:3d:f2:82:56:8e:e9:91:0e:20:e6: 21:aa:82:77:46:d2:8d:b6:54:07:91:25:85:3c:1b:c6:63:33: af:d4:c1:b0:e9:f8:63:39:d9:65:66:79:b8:b8:a1:06:36:b2: e1:10:b6:8c:b3:a6:6e:2b:e0:1c:1e:45:14:d1:a9:8c:e5:24: 43:59:2e:c2:e7:42:9f:cf:d1:fd:b8:59:ed:7e:d1:4f:b7:91: a4:a7:91:27 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKtSwxEXhnsntzPRqKnQTJsudbL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5 NjBFQjdDNzAeFw0yNjA3MTQxNzAxNDVaFw0yNjA3MTUxOTI3NDVaMDMxMTAvBgNV BAMTKEVBOTVGRUJBRjdCNUIyRjhDMEE2N0M5NTdCQzZEOTNFNjY5MTkyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOqEX/Rnq9P5+kLPqVZtQxeVNJ +VDtM7eaaQ9K9okr3CEKzdRcxAxFxc9ptnxp6MGuKIvllmgVdI+3yiIljjQUjOGS AyUQsTKaeEkdDiilGuBnFbHblUdpeKjaWNu7zO90NI6tvZ/fOTh7piu78s+AKQuC XrZWRPZ82OOJoE3Qb2dD9dL2E0RkpWr96+qd4xtqPEZVmLHLEVtIVgSyxSZe7kfz soeKrvwfmllTCvfcWfSWEC/GNnTCXkl98FPvdNFq6Hz4AF25IRZ8wBTJkhGZwIlg oW+tdj4H5JhSOLmkuKC/4e86IaCfb7o0+BIJPrBB9rglIZuEARIYAuPlIO77AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6pX+uve1svjApnyVe8bZPmaRksowHwYDVR0j BBgwFoAUDq/rfnNG6PJ4/+LQqo1OEpYOt8cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTM1NDc1My8wLzBFQUZFQjdFNzM0NkU4RjI3OEZGRTJEMEFBOEQ0 RTEyOTYwRUI3QzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEVBRkVCN0U3MzQ2RThGMjc4RkZFMkQwQUE4RDRFMTI5NjBFQjdDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUzNTQ3NTMvMC8wRUFGRUI3RTczNDZF OEYyNzhGRkUyRDBBQThENEUxMjk2MEVCN0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATQ2YOZUdBFK dAV5lTtcO/SRExrYLhuIbWZved0MRM0XrRMs7xjgkgCw+HdZbA2WkFzBYZy1QoOC SVrPeuhQ08JGgexGU48Y1MD+/W1IfznYYKskx7Fh7LxR6u1/XKpc9ERDU41EVHYA BKtNHSybscWp9sJQF5kQnMenEawI3nlvRA0vukVm5xt7dt2dUOFRrfJLQgKzUWG5 pHgumD7ZrPTXq1JWfLb9o7898oJWjumRDiDmIaqCd0bSjbZUB5ElhTwbxmMzr9TB sOn4YznZZWZ5uLihBjay4RC2jLOmbivgHB5FFNGpjOUkQ1kuwudCn8/R/bhZ7X7R T7eRpKeRJw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:05 2026 by rpki-client