$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: kGkgRwGgBb+8vXYHbdo44G2z5P4Ve3c8d8FmNZE2JaE= Subject key identifier: 3F:55:B2:2C:A1:9C:F9:E0:A5:1A:B8:14:24:D2:F4:A6:DF:61:90:25 Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 33D1C9E303F4188A04BE8853BB63FE94C462B4D1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: 83 Signing time: Mon 27 Apr 2026 06:18:41 +0000 Manifest this update: Mon 27 Apr 2026 06:13:41 +0000 Manifest next update: Tue 28 Apr 2026 09:21:41 +0000 Files and hashes: 1: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: 2tOOvAr/ylOp1HAM/UXA1cOLgeatlML2/kh9oyFqjTI=) 2: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) 3: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:d1:c9:e3:03:f4:18:8a:04:be:88:53:bb:63:fe:94:c4:62:b4:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: Apr 27 06:13:41 2026 GMT Not After : Apr 28 09:21:41 2026 GMT Subject: CN=3F55B22CA19CF9E0A51AB81424D2F4A6DF619025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:c0:bf:62:33:29:b6:51:bd:92:78:54:69: 7c:59:c9:b9:57:a5:d3:dd:d4:19:54:0a:e7:4e:0c: 9c:cd:26:ff:8d:6f:2c:36:0d:3c:5c:57:e1:fd:20: 77:e1:cf:dd:d0:02:40:ca:35:63:cc:aa:4b:6c:31: 28:96:b3:5b:ad:e7:00:fc:81:98:62:e3:60:ad:d6: 60:8c:12:71:8d:37:d0:59:08:0e:39:15:b7:a2:18: b4:c4:17:3a:e4:2b:aa:cf:af:60:b8:8e:5b:fe:0a: 9e:1f:df:2e:71:b4:74:44:99:c1:1b:69:e0:85:b1: 48:8d:4a:2d:56:8f:83:1b:6a:76:fa:3c:55:05:3a: e1:d4:ef:c7:70:04:20:32:7e:71:84:a4:9b:1d:78: 3c:d2:15:ac:22:02:01:2d:df:ae:5d:ea:e1:c9:84: 43:08:34:5d:6f:16:dc:86:f3:ef:14:bc:78:79:0e: 78:37:9b:61:d3:81:bd:aa:b8:21:9b:57:3f:69:e4: 35:d5:db:9e:ce:fe:6b:9b:85:16:95:97:07:7c:17: 39:07:75:2a:3b:b3:07:97:1c:df:fe:06:eb:b8:2d: 60:e8:52:63:20:fd:b6:2b:54:bb:d6:48:87:3f:00: 04:f3:b4:f5:90:1a:ee:e6:9a:c4:eb:3d:f7:7d:0f: 97:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:55:B2:2C:A1:9C:F9:E0:A5:1A:B8:14:24:D2:F4:A6:DF:61:90:25 X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ff:41:22:48:69:e2:09:67:cd:95:72:5e:7d:7d:68:cf:6e: 4a:70:9d:a2:5c:7f:67:3e:d0:b3:46:3f:5f:cc:8e:18:8d:1f: 98:3d:de:91:a5:8e:32:5f:f7:eb:25:f3:1b:de:59:98:84:10: 78:b5:da:b2:cc:b8:bd:2d:86:63:14:48:4d:df:79:f9:28:22: e5:99:0c:4b:4a:d1:bc:7d:ce:e5:d2:1b:a8:34:b3:8d:a5:ef: 44:3b:90:3d:78:09:58:98:d7:f9:ff:cf:b6:97:7b:95:a0:7e: a7:83:f5:2a:80:65:51:4e:dd:1c:7c:2b:dc:ef:67:db:23:90: c3:50:3c:b5:87:26:c3:27:8f:0c:22:cf:d7:bc:55:10:2c:f5: e7:d8:81:85:b6:84:de:33:d8:43:28:61:5b:e1:bf:cb:ef:f9: 16:dc:b6:71:fb:dc:0d:5e:42:39:d7:2d:47:78:6b:09:47:41: 03:6c:ff:06:24:fd:71:ab:2f:97:dc:ab:67:53:15:4c:be:49: 93:4e:9a:f9:c7:d6:74:51:63:df:c8:39:7b:d7:5f:5d:16:44: d7:43:79:e4:45:af:35:12:63:87:aa:3f:93:61:7a:77:fa:c7: 94:f3:ef:e2:7c:ef:ae:b3:9d:ed:8b:c3:76:c5:7b:e1:59:08: 09:cb:15:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM9HJ4wP0GIoEvohTu2P+lMRitNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjA0MjcwNjEzNDFaFw0yNjA0MjgwOTIxNDFaMDMxMTAvBgNV BAMTKDNGNTVCMjJDQTE5Q0Y5RTBBNTFBQjgxNDI0RDJGNEE2REY2MTkwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Q8C/YjMptlG9knhUaXxZyblX pdPd1BlUCudODJzNJv+Nbyw2DTxcV+H9IHfhz93QAkDKNWPMqktsMSiWs1ut5wD8 gZhi42Ct1mCMEnGNN9BZCA45FbeiGLTEFzrkK6rPr2C4jlv+Cp4f3y5xtHREmcEb aeCFsUiNSi1Wj4Mbanb6PFUFOuHU78dwBCAyfnGEpJsdeDzSFawiAgEt365d6uHJ hEMINF1vFtyG8+8UvHh5Dng3m2HTgb2quCGbVz9p5DXV257O/mubhRaVlwd8FzkH dSo7sweXHN/+Buu4LWDoUmMg/bYrVLvWSIc/AATztPWQGu7mmsTrPfd9D5d3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUP1WyLKGc+eClGrgUJNL0pt9hkCUwHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQf9BIkhp4gln zZVyXn19aM9uSnCdolx/Zz7Qs0Y/X8yOGI0fmD3ekaWOMl/36yXzG95ZmIQQeLXa ssy4vS2GYxRITd95+Sgi5ZkMS0rRvH3O5dIbqDSzjaXvRDuQPXgJWJjX+f/Ptpd7 laB+p4P1KoBlUU7dHHwr3O9n2yOQw1A8tYcmwyePDCLP17xVECz159iBhbaE3jPY QyhhW+G/y+/5Fty2cfvcDV5COdctR3hrCUdBA2z/BiT9casvl9yrZ1MVTL5Jk06a +cfWdFFj38g5e9dfXRZE10N55EWvNRJjh6o/k2F6d/rHlPPv4nzvrrOd7YvDdsV7 4VkICcsVUA== -----END CERTIFICATE-----Generated at Mon Apr 27 22:10:01 2026 by rpki-client