$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: 4/Xh95sDO4XBUILnjJjK4LLezswj/ABUvEsWbUezV/I= Subject key identifier: DE:E9:76:E1:F2:91:A6:70:E5:2F:4E:3B:76:23:72:52:63:25:C5:2C Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 7E03378A04600B08CFB5CA1007318AC57A7FFABD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: 012C Signing time: Thu 10 Sep 2026 10:41:20 +0000 Manifest this update: Thu 10 Sep 2026 10:36:20 +0000 Manifest next update: Sun 13 Sep 2026 13:18:20 +0000 Files and hashes: 1: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) 2: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) 3: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: WFiQUXJkPdiy83KLCMyHumNEvLXeM/aoyrnSvKUFOR4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:03:37:8a:04:60:0b:08:cf:b5:ca:10:07:31:8a:c5:7a:7f:fa:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: Sep 10 10:36:20 2026 GMT Not After : Sep 13 13:18:20 2026 GMT Subject: CN=DEE976E1F291A670E52F4E3B762372526325C52C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:de:21:af:23:d3:a3:51:91:0f:12:f1:5d:66: 61:46:9a:2c:b5:95:5f:d7:b3:08:3a:3f:2b:4f:f6: c2:d9:76:f4:1d:3f:f5:2b:39:d5:07:cb:4c:5d:3c: 3f:d3:e4:55:6d:f3:ed:41:de:e9:1c:5b:af:47:15: d1:77:ff:e9:b0:0d:3d:bc:e8:70:ad:ae:e0:b2:64: 35:97:9b:33:07:bd:7a:79:4d:74:05:98:16:2b:4d: 31:ca:aa:65:7a:dd:19:10:c2:a3:8c:5a:cc:3f:b6: f2:a7:0c:70:2a:7e:2d:b3:e1:99:1a:26:62:f5:14: 4a:00:9f:8e:4d:d6:f1:bb:c7:e7:b9:fb:94:12:78: 3e:48:94:28:64:74:c9:1a:48:89:d4:14:e5:58:42: ef:7d:52:dc:66:16:15:bf:f9:78:0a:7a:3c:62:ef: d7:73:36:d6:2b:fa:97:b2:3a:1b:5c:61:aa:75:8d: 80:16:5f:56:19:ae:90:fb:f4:11:24:aa:c4:e5:39: 7f:74:a3:25:41:98:8e:eb:5f:a4:34:cc:26:b2:7f: a9:92:2e:cc:3b:46:1a:30:b3:b5:6b:3f:33:50:25: ef:0b:9f:eb:c2:b5:43:3c:44:4a:76:79:75:bd:2b: 20:39:06:4b:09:1a:39:26:a6:98:39:c5:cf:1e:60: 3d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E9:76:E1:F2:91:A6:70:E5:2F:4E:3B:76:23:72:52:63:25:C5:2C X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:91:fa:d5:08:a2:e4:75:cf:5f:0e:34:72:c9:19:65:48:50: 05:e7:eb:1f:53:3f:52:7f:71:cb:a1:f6:65:64:44:57:40:e9: 1e:2e:4a:8b:3e:56:04:8a:e8:eb:a3:6c:d0:e2:a6:3c:b5:c0: e6:9a:eb:05:d7:1c:90:b2:1e:51:13:28:9e:b7:b2:3a:71:c5: 17:7f:1f:b5:a6:04:b7:4b:bc:25:28:3c:a0:13:8f:84:cf:40: 1f:e2:a6:12:06:3b:c4:4a:26:f0:a2:9c:15:12:f5:95:3d:f2: 3d:da:0b:7a:7c:55:5b:3a:23:87:37:4a:12:e1:16:25:c8:e5: cc:04:e6:3e:88:08:7a:34:27:4f:44:ce:ba:77:49:86:d4:e9: 82:c6:79:72:3c:d9:9c:e4:c0:60:f8:a3:7e:85:9d:89:f1:87: a0:91:f7:b6:d5:29:ff:19:af:da:52:25:bf:b5:7a:7f:2a:62: b7:a2:27:56:53:0a:09:94:01:00:b6:69:57:49:1f:96:df:b2: 5b:68:82:bd:13:38:1c:d5:99:81:5c:c1:1b:f4:19:b3:f7:ca: ed:80:19:74:05:c8:b6:d2:2f:12:ce:65:15:b2:f8:bb:c3:36: f1:3f:8e:c5:c6:b3:e1:2a:7f:15:af:89:56:99:94:84:94:cb: 33:8e:f8:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfgM3igRgCwjPtcoQBzGKxXp/+r0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjA5MTAxMDM2MjBaFw0yNjA5MTMxMzE4MjBaMDMxMTAvBgNV BAMTKERFRTk3NkUxRjI5MUE2NzBFNTJGNEUzQjc2MjM3MjUyNjMyNUM1MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv3iGvI9OjUZEPEvFdZmFGmiy1 lV/Xswg6PytP9sLZdvQdP/UrOdUHy0xdPD/T5FVt8+1B3ukcW69HFdF3/+mwDT28 6HCtruCyZDWXmzMHvXp5TXQFmBYrTTHKqmV63RkQwqOMWsw/tvKnDHAqfi2z4Zka JmL1FEoAn45N1vG7x+e5+5QSeD5IlChkdMkaSInUFOVYQu99UtxmFhW/+XgKejxi 79dzNtYr+peyOhtcYap1jYAWX1YZrpD79BEkqsTlOX90oyVBmI7rX6Q0zCayf6mS Lsw7Rhows7VrPzNQJe8Ln+vCtUM8REp2eXW9KyA5BksJGjkmppg5xc8eYD1PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3ul24fKRpnDlL047diNyUmMlxSwwHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZH61Qii5HXP Xw40cskZZUhQBefrH1M/Un9xy6H2ZWREV0DpHi5Kiz5WBIro66Ns0OKmPLXA5prr BdcckLIeURMonreyOnHFF38ftaYEt0u8JSg8oBOPhM9AH+KmEgY7xEom8KKcFRL1 lT3yPdoLenxVWzojhzdKEuEWJcjlzATmPogIejQnT0TOundJhtTpgsZ5cjzZnOTA YPijfoWdifGHoJH3ttUp/xmv2lIlv7V6fypit6InVlMKCZQBALZpV0kflt+yW2iC vRM4HNWZgVzBG/QZs/fK7YAZdAXIttIvEs5lFbL4u8M28T+Oxcaz4Sp/Fa+JVpmU hJTLM474VA== -----END CERTIFICATE-----Generated at Thu Sep 10 18:41:37 2026 by rpki-client