$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: qseq2jQt+4UOIb6WEThmpsFzVIWOthn42WAz+A/9UJc= Subject key identifier: 2E:FE:1A:90:17:CA:B1:40:ED:C2:2C:0A:C3:AE:24:9F:16:45:E3:00 Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 26EC17E69C7322BB92C70A16C88E21CE63C0C8B3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: 46 Signing time: Thu 12 Mar 2026 03:53:39 +0000 Manifest this update: Thu 12 Mar 2026 03:48:39 +0000 Manifest next update: Fri 13 Mar 2026 06:19:39 +0000 Files and hashes: 1: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) 2: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: JVsREUhUYJ/0DXwqRD7VjFsvhgC6bGUkGvrAYLUS2qs=) 3: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 06:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ec:17:e6:9c:73:22:bb:92:c7:0a:16:c8:8e:21:ce:63:c0:c8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: Mar 12 03:48:39 2026 GMT Not After : Mar 13 06:19:39 2026 GMT Subject: CN=2EFE1A9017CAB140EDC22C0AC3AE249F1645E300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:b7:a0:4e:1e:98:59:e5:b1:3c:d2:ed:e3: 40:49:53:56:26:9c:b5:fe:54:be:22:bf:f4:a3:4f: 1a:b1:2f:06:b3:cd:e8:58:5b:28:26:a3:e1:34:53: 7f:78:84:1b:cf:24:48:22:cc:37:17:48:25:54:8a: 8c:94:5e:a6:3a:b3:d2:ef:94:a9:3b:cf:99:a8:77: 27:c5:72:b9:c6:04:71:ff:02:8a:17:65:83:87:a1: f2:0e:1b:b3:c0:1f:08:80:e0:1d:54:5f:2d:fb:1a: ca:e1:46:19:49:04:3f:c4:2f:71:67:e4:71:9a:38: 38:25:cb:f7:d3:92:a4:01:70:c1:25:3f:54:d4:33: 73:07:6a:b2:d5:02:12:9f:87:a4:42:4c:e6:b5:73: 20:20:04:63:f3:da:71:58:c4:1d:c9:ba:69:70:1e: de:5c:d1:c9:6f:b8:05:d8:55:e1:dd:d7:27:74:98: 52:ee:02:c8:72:00:79:d8:aa:c2:08:7c:d1:c5:11: c8:7e:f3:17:23:ba:a5:c9:b5:de:9a:5d:85:a2:83: 1f:6b:55:97:66:8c:6f:d0:2f:61:76:21:7b:f6:29: 86:e6:2e:c2:64:c4:bf:9e:74:b8:d0:aa:c3:1c:68: 45:b6:8c:dc:54:a9:3f:af:ea:db:4c:3b:cc:6c:55: 79:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FE:1A:90:17:CA:B1:40:ED:C2:2C:0A:C3:AE:24:9F:16:45:E3:00 X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ba:08:14:e6:a4:83:78:8c:9c:81:ae:65:2a:5c:19:0d:a9: 82:fd:56:c4:28:ce:3f:e7:83:05:65:b4:de:ee:14:4e:2c:23: d8:61:38:31:9c:17:39:98:b5:b2:c5:59:d2:55:cf:1d:63:d2: da:86:32:0b:f4:2a:29:3f:1b:58:4d:5d:af:ea:4f:75:c1:09: ac:27:81:8d:bd:04:30:d1:f3:a6:47:96:b0:5a:d7:ca:c8:a5: 5c:86:2a:fa:ab:80:c3:66:16:0d:33:6b:eb:3b:58:9f:c4:16: 02:2c:a3:d2:e9:a8:bb:86:5b:f8:20:08:b8:7c:b3:cd:e8:c4: 2d:e6:25:38:65:42:78:56:59:6b:10:5a:a1:7d:e7:ff:61:c1: 8a:6a:4a:76:d7:c7:47:90:e3:6c:c4:56:08:04:91:48:7e:3a: e7:23:07:b7:55:13:57:80:9f:5b:96:21:62:82:1b:da:6e:73: 21:29:10:bc:f2:1b:82:d7:6b:2a:63:9c:bc:02:66:24:0c:4c: 17:7a:b5:b5:d8:52:d6:0a:e4:b7:fe:5e:6a:be:0c:21:93:c3: cf:9c:2d:fe:25:bf:c7:49:6f:f1:f4:6b:c4:58:22:c0:fb:c5: 7d:52:f6:96:06:ed:0b:75:4a:2b:cd:7d:68:3e:67:c4:2e:4c: 7c:85:0e:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJuwX5pxzIruSxwoWyI4hzmPAyLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjAzMTIwMzQ4MzlaFw0yNjAzMTMwNjE5MzlaMDMxMTAvBgNV BAMTKDJFRkUxQTkwMTdDQUIxNDBFREMyMkMwQUMzQUUyNDlGMTY0NUUzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwLegTh6YWeWxPNLt40BJU1Ym nLX+VL4iv/SjTxqxLwazzehYWygmo+E0U394hBvPJEgizDcXSCVUioyUXqY6s9Lv lKk7z5modyfFcrnGBHH/AooXZYOHofIOG7PAHwiA4B1UXy37GsrhRhlJBD/EL3Fn 5HGaODgly/fTkqQBcMElP1TUM3MHarLVAhKfh6RCTOa1cyAgBGPz2nFYxB3Jumlw Ht5c0clvuAXYVeHd1yd0mFLuAshyAHnYqsIIfNHFEch+8xcjuqXJtd6aXYWigx9r VZdmjG/QL2F2IXv2KYbmLsJkxL+edLjQqsMcaEW2jNxUqT+v6ttMO8xsVXk9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULv4akBfKsUDtwiwKw64knxZF4wAwHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMboIFOakg3iM nIGuZSpcGQ2pgv1WxCjOP+eDBWW03u4UTiwj2GE4MZwXOZi1ssVZ0lXPHWPS2oYy C/QqKT8bWE1dr+pPdcEJrCeBjb0EMNHzpkeWsFrXysilXIYq+quAw2YWDTNr6ztY n8QWAiyj0umou4Zb+CAIuHyzzejELeYlOGVCeFZZaxBaoX3n/2HBimpKdtfHR5Dj bMRWCASRSH465yMHt1UTV4CfW5YhYoIb2m5zISkQvPIbgtdrKmOcvAJmJAxMF3q1 tdhS1grkt/5ear4MIZPDz5wt/iW/x0lv8fRrxFgiwPvFfVL2lgbtC3VKK819aD5n xC5MfIUOww== -----END CERTIFICATE-----Generated at Thu Mar 12 18:18:59 2026 by rpki-client