$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: FBAMbHY82LiuG9Cr5cuHqFzSiVBLmUSzuuhx7itaD9Y= Subject key identifier: 46:45:07:B6:50:00:D4:49:B6:99:37:26:37:E5:A6:F7:F7:E1:6C:45 Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 7EF082A2B2456DE48A2B4522875B3D231AB6C995 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: C0 Signing time: Fri 12 Jun 2026 05:44:52 +0000 Manifest this update: Fri 12 Jun 2026 05:39:52 +0000 Manifest next update: Sat 13 Jun 2026 09:40:52 +0000 Files and hashes: 1: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) 2: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: iCV2wSqtJBh1aSCXfCy5cOlkQlN2AR6J2d8lzlt7c4s=) 3: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f0:82:a2:b2:45:6d:e4:8a:2b:45:22:87:5b:3d:23:1a:b6:c9:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: Jun 12 05:39:52 2026 GMT Not After : Jun 13 09:40:52 2026 GMT Subject: CN=464507B65000D449B699372637E5A6F7F7E16C45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:f7:35:a5:50:e5:ea:87:4e:04:a9:46:34: ca:fb:38:f3:7e:2a:1f:8f:ca:1d:24:a1:dd:52:30: e4:f7:27:cc:cf:a9:0c:1f:e6:18:1f:32:91:bf:a4: 38:f4:01:7d:9c:fb:9a:eb:fc:65:84:b5:ad:ea:26: 6d:5b:7c:3a:53:c1:a2:dc:24:2a:5c:d9:8c:72:e4: 3f:79:bc:c3:a5:57:4a:87:ad:8f:0d:66:4e:fa:0e: 7f:02:4c:cb:1d:96:ef:c3:66:f0:02:15:88:dc:4c: f4:2c:e1:83:19:b0:f8:72:f4:16:1f:9f:d6:1b:1f: 21:91:62:af:4a:3b:19:cf:b2:ea:f4:99:3e:dd:95: dc:75:27:98:6c:33:97:4c:46:a4:f9:51:99:37:86: 4d:9c:78:d4:50:cb:71:36:39:89:3f:99:a0:b6:01: be:b9:16:7b:5a:93:e9:e0:10:07:ec:79:01:b0:3b: ce:04:04:c1:24:c5:76:af:6c:12:fc:8e:a1:9e:88: 2b:af:3e:13:98:b8:e6:d0:8c:d7:f8:6f:e9:d3:b1: ea:f0:63:39:61:d2:e0:96:51:54:3b:43:f9:d9:44: d9:17:69:26:ea:f7:0d:42:b0:97:bf:2a:a9:89:4f: cf:19:18:12:9b:85:14:76:6f:85:93:20:70:c6:f4: b1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:45:07:B6:50:00:D4:49:B6:99:37:26:37:E5:A6:F7:F7:E1:6C:45 X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:9b:5b:4b:30:bf:38:ee:cd:d6:d0:c1:58:3e:98:c2:b9:f4: b6:97:e5:e4:54:39:27:f6:17:6f:5c:68:f9:21:b7:af:a9:4f: 1c:fb:7a:b3:6c:f5:21:f9:ff:11:5e:74:dc:8d:92:21:32:2e: f5:a2:5c:95:58:bc:f1:d6:10:08:f8:18:23:84:c5:a0:15:1d: 88:dc:2a:d1:62:59:3d:66:f1:15:61:5c:e8:66:a0:65:e9:91: 60:3e:30:76:d5:67:a0:b5:7b:3c:1d:81:e5:23:1e:76:10:a9: f2:cd:25:28:e8:2d:de:2e:32:8a:26:59:73:91:18:6b:24:57: bb:36:46:fc:8a:15:bf:6a:85:e4:74:39:55:7e:ec:7a:50:a5: b8:51:7f:3f:d4:cf:dc:3c:1d:6b:9f:5b:f6:49:6b:9c:83:c8: 8c:a6:65:e9:89:b3:0e:f5:21:e6:ad:39:37:0d:eb:e6:d0:db: b2:e8:3b:45:18:0e:c8:03:7d:fa:39:72:e0:47:05:57:3f:ee: fc:3a:e5:ba:53:1e:5c:13:b0:f0:51:50:8b:f2:a7:00:72:e9: d2:c6:cb:61:11:14:85:3d:c3:3b:21:ac:74:44:68:3d:b3:28: ac:a9:35:9f:de:84:ca:bf:c5:29:57:a0:a0:44:67:d3:a7:71: 39:64:f3:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfvCCorJFbeSKK0Uih1s9Ixq2yZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjA2MTIwNTM5NTJaFw0yNjA2MTMwOTQwNTJaMDMxMTAvBgNV BAMTKDQ2NDUwN0I2NTAwMEQ0NDlCNjk5MzcyNjM3RTVBNkY3RjdFMTZDNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxEfc1pVDl6odOBKlGNMr7OPN+ Kh+Pyh0kod1SMOT3J8zPqQwf5hgfMpG/pDj0AX2c+5rr/GWEta3qJm1bfDpTwaLc JCpc2Yxy5D95vMOlV0qHrY8NZk76Dn8CTMsdlu/DZvACFYjcTPQs4YMZsPhy9BYf n9YbHyGRYq9KOxnPsur0mT7dldx1J5hsM5dMRqT5UZk3hk2ceNRQy3E2OYk/maC2 Ab65Fntak+ngEAfseQGwO84EBMEkxXavbBL8jqGeiCuvPhOYuObQjNf4b+nTserw Yzlh0uCWUVQ7Q/nZRNkXaSbq9w1CsJe/KqmJT88ZGBKbhRR2b4WTIHDG9LHzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURkUHtlAA1Em2mTcmN+Wm9/fhbEUwHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0JtbSzC/OO7N 1tDBWD6Ywrn0tpfl5FQ5J/YXb1xo+SG3r6lPHPt6s2z1Ifn/EV503I2SITIu9aJc lVi88dYQCPgYI4TFoBUdiNwq0WJZPWbxFWFc6GagZemRYD4wdtVnoLV7PB2B5SMe dhCp8s0lKOgt3i4yiiZZc5EYayRXuzZG/IoVv2qF5HQ5VX7selCluFF/P9TP3Dwd a59b9klrnIPIjKZl6YmzDvUh5q05Nw3r5tDbsug7RRgOyAN9+jly4EcFVz/u/Drl ulMeXBOw8FFQi/KnAHLp0sbLYREUhT3DOyGsdERoPbMorKk1n96Eyr/FKVegoERn 06dxOWTzUg== -----END CERTIFICATE-----Generated at Fri Jun 12 07:53:39 2026 by rpki-client