$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: hQuwUEDsiWklVEzE+Vrl7ktX0k3EsRXybyVj9ZsNrrg= Subject key identifier: 6C:BF:03:17:98:F5:BA:58:B8:97:DE:94:7D:81:65:DC:4D:26:56:11 Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 0192DE59AD318BB61DEBB5A54704E01752AC0693 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: FB Signing time: Mon 27 Jul 2026 08:08:41 +0000 Manifest this update: Mon 27 Jul 2026 08:03:41 +0000 Manifest next update: Tue 28 Jul 2026 10:57:41 +0000 Files and hashes: 1: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) 2: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) 3: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: wNOVsdyfr1jSbieIrAa5OfOG9dsZQHR96bLse+aTkEY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:92:de:59:ad:31:8b:b6:1d:eb:b5:a5:47:04:e0:17:52:ac:06:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: Jul 27 08:03:41 2026 GMT Not After : Jul 28 10:57:41 2026 GMT Subject: CN=6CBF031798F5BA58B897DE947D8165DC4D265611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:b2:53:83:09:c8:d7:53:ef:60:d7:cc:5b: 70:e8:56:94:db:f1:92:7a:cc:e1:93:ef:67:04:2e: 25:87:00:be:9e:21:16:a9:14:da:6b:b9:32:26:74: ac:7f:ba:ea:be:a9:89:f7:c7:7a:86:cc:77:bd:12: dd:e7:c3:b6:fe:2d:b0:15:54:72:b7:28:b1:46:d0: 41:f8:d3:91:ae:27:4b:1c:fb:2f:71:5c:c2:96:2a: 80:0d:e5:ad:a1:7b:41:64:5a:7e:78:46:e7:3d:3f: 0b:47:93:6d:dd:9a:d4:45:1f:46:38:3b:8c:77:22: 86:36:ed:d4:a8:c9:b3:de:04:98:5d:d4:df:fa:2a: 3f:f8:9d:db:d7:ee:70:1d:85:2c:2b:d8:4b:77:18: 79:95:18:bd:fe:1d:ed:36:f8:55:a2:4a:7b:23:3c: 4d:af:6f:e5:61:73:31:df:9b:86:80:14:81:e5:fc: 73:58:dc:0f:18:19:98:19:15:83:f6:b0:8f:fa:7b: 2c:9e:54:f6:d8:3a:5e:6f:9d:b6:e4:f5:b8:dd:1f: 9d:8c:05:2c:66:25:10:21:ff:2a:67:c1:04:af:0d: 4d:15:f8:7e:5a:d4:3b:35:5e:1b:27:20:2d:ff:73: 36:4f:a9:4b:fb:89:74:dc:ec:79:f8:6e:3c:44:7b: 24:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:BF:03:17:98:F5:BA:58:B8:97:DE:94:7D:81:65:DC:4D:26:56:11 X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:16:bc:55:33:b6:69:48:3a:a9:45:4e:b2:8a:5f:f6:13:46: 17:a5:77:8f:52:cb:bc:3e:d0:11:45:5c:c1:4f:cc:ba:28:cc: 2b:de:7b:e6:d6:76:ee:6d:9a:3d:c4:9e:27:8f:73:82:ab:9e: 8e:0e:c6:6b:10:29:92:ae:f4:65:5c:68:a8:d5:18:e1:7b:0f: 15:9d:2a:cf:ef:9b:82:0f:1c:54:9f:3f:7a:3b:fe:64:68:2e: 4c:ba:5d:98:fa:5f:0f:7b:9d:4b:6a:f6:e9:35:9f:d8:f2:10: 4b:b5:22:7a:8b:79:6b:31:71:dd:ca:9f:d0:e1:40:eb:cc:b1: 1b:f0:ac:f2:42:47:43:ee:50:22:40:cc:a8:f2:8e:2c:88:97: 78:36:c4:f7:f4:61:5c:a2:65:04:55:b3:8f:7e:0b:e7:ed:ad: cf:32:2b:38:59:5d:4e:53:23:08:27:63:4a:01:0b:0a:8a:6f: 06:9b:6e:5b:3c:1a:24:a9:ec:bb:b9:c0:29:8b:fb:b6:eb:1d: 49:59:83:a0:87:f0:e8:1d:22:ce:26:64:d6:ba:d9:e5:bc:f7: b1:6f:a7:c7:22:89:da:5e:e7:f4:d2:68:da:11:5f:ea:4e:e6: b0:87:94:4c:0a:96:73:4d:49:7a:a1:16:4d:30:c7:c8:48:d4: 41:8a:25:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAZLeWa0xi7Yd67WlRwTgF1KsBpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjA3MjcwODAzNDFaFw0yNjA3MjgxMDU3NDFaMDMxMTAvBgNV BAMTKDZDQkYwMzE3OThGNUJBNThCODk3REU5NDdEODE2NURDNEQyNjU2MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FLJTgwnI11PvYNfMW3DoVpTb 8ZJ6zOGT72cELiWHAL6eIRapFNpruTImdKx/uuq+qYn3x3qGzHe9Et3nw7b+LbAV VHK3KLFG0EH405GuJ0sc+y9xXMKWKoAN5a2he0FkWn54Ruc9PwtHk23dmtRFH0Y4 O4x3IoY27dSoybPeBJhd1N/6Kj/4ndvX7nAdhSwr2Et3GHmVGL3+He02+FWiSnsj PE2vb+VhczHfm4aAFIHl/HNY3A8YGZgZFYP2sI/6eyyeVPbYOl5vnbbk9bjdH52M BSxmJRAh/ypnwQSvDU0V+H5a1Ds1XhsnIC3/czZPqUv7iXTc7Hn4bjxEeyQbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbL8DF5j1uli4l96UfYFl3E0mVhEwHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRa8VTO2aUg6 qUVOsopf9hNGF6V3j1LLvD7QEUVcwU/MuijMK9575tZ27m2aPcSeJ49zgquejg7G axApkq70ZVxoqNUY4XsPFZ0qz++bgg8cVJ8/ejv+ZGguTLpdmPpfD3udS2r26TWf 2PIQS7Uieot5azFx3cqf0OFA68yxG/Cs8kJHQ+5QIkDMqPKOLIiXeDbE9/RhXKJl BFWzj34L5+2tzzIrOFldTlMjCCdjSgELCopvBptuWzwaJKnsu7nAKYv7tusdSVmD oIfw6B0iziZk1rrZ5bz3sW+nxyKJ2l7n9NJo2hFf6k7msIeUTAqWc01JeqEWTTDH yEjUQYoldw== -----END CERTIFICATE-----Generated at Mon Jul 27 16:04:25 2026 by rpki-client