$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft File: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft (raw, json) Hash identifier: gUaFXMgHuzfK62V9pekgEjxBgsqCclxEk2ybsCfqIZk= Subject key identifier: 6D:58:94:D0:98:30:C9:FF:E9:AF:02:15:92:FE:0B:D4:7D:22:21:55 Authority key identifier: A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A Certificate issuer: /CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Certificate serial: 30A060AA223E6A61E3D1B71DFFC2F68873B3FCAD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft Manifest number: 0142 Signing time: Wed 28 Oct 2026 23:11:41 +0000 Manifest this update: Wed 28 Oct 2026 23:06:41 +0000 Manifest next update: Sun 01 Nov 2026 06:28:41 +0000 Files and hashes: 1: 3130332e3136332e3138302e302f32342d3332203d3e2034383337.roa (hash: bRBgrIxy03apW4ATH0zcQow+bPbvKc0iArc6fP4/62A=) 2: A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl (hash: LQAtDC9oiTWNu3AG0vodFET0jAgGq3xIcdCfFWIdaAE=) 3: 3130332e3136332e3138302e302f32342d3332203d3e203538353633.roa (hash: 5zoPcQ+g108YnoD4p1VytLIjMP0W3oqbnObzoqDmfsA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 06:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a0:60:aa:22:3e:6a:61:e3:d1:b7:1d:ff:c2:f6:88:73:b3:fc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A Validity Not Before: Oct 28 23:06:41 2026 GMT Not After : Nov 1 06:28:41 2026 GMT Subject: CN=6D5894D09830C9FFE9AF021592FE0BD47D222155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:fb:c3:89:7a:9c:b1:86:e3:b6:2b:29:9b: d8:45:37:f1:7f:01:14:a4:ea:d0:fe:6d:b3:31:cc: 2c:d2:e5:da:36:fd:39:54:e3:d0:c3:c0:e9:48:ef: 09:1a:74:fa:e9:11:35:c9:5a:a0:0f:fd:ce:c9:a9: 7d:f4:b9:21:60:9c:f8:99:b5:04:86:b6:94:63:02: ab:f4:13:d2:ab:d8:bb:09:8a:7f:92:72:e1:16:6c: c5:cd:c6:b8:ad:0f:d2:c0:29:4d:87:94:54:95:39: cc:57:d0:92:10:9d:a7:76:d8:43:49:b0:91:22:49: f5:a7:70:ce:df:ad:0a:f4:f1:37:28:34:72:fc:b5: 3f:f1:ad:65:26:25:dd:a4:c5:fd:0f:53:20:69:2e: 6e:20:eb:1b:15:0d:bc:15:ad:16:7d:f2:7b:66:59: 27:16:73:60:65:79:7b:4d:ae:88:b6:ac:6b:e3:e2: 26:0c:85:d3:9a:ec:6a:1b:44:75:8f:9c:2c:40:88: 96:72:fc:53:70:fb:75:4d:73:17:34:b1:82:cb:5b: ff:bc:e8:32:a1:27:39:5c:de:94:03:c1:dd:4c:b6: 4a:5b:9c:65:da:88:15:b6:3f:74:e9:f0:e3:a6:73: da:a4:55:89:2c:cb:98:3b:ab:ce:20:98:ac:8a:b1: df:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:58:94:D0:98:30:C9:FF:E9:AF:02:15:92:FE:0B:D4:7D:22:21:55 X509v3 Authority Key Identifier: keyid:A0:EB:00:24:B2:3F:8C:46:BC:59:22:FA:8E:55:9E:CD:CF:DA:82:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217061891/0/A0EB0024B23F8C46BC5922FA8E559ECDCFDA821A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:7d:b2:c1:f0:90:6d:ad:04:4f:c0:2b:bf:2b:38:00:9b:61: d2:5a:c2:a6:9e:02:5c:7c:2c:ca:4e:0f:e3:9c:52:23:f2:16: eb:5a:74:23:b1:c6:29:32:e6:79:1d:b2:c5:ab:5d:cf:a8:15: bb:1b:0b:d7:b5:69:30:d4:68:43:88:c8:c5:28:36:9a:3b:e9: e4:6b:0c:d0:fe:2a:c1:22:e0:94:f7:80:5e:31:b9:33:4d:f9: 34:08:7e:25:b3:26:e5:b7:4b:f2:e9:5d:b8:98:de:4f:db:fd: a9:44:07:9f:65:a1:ea:42:e5:71:32:e9:48:ee:e5:b1:0a:e3: 17:d3:c7:f9:a3:81:0a:2f:e1:cb:0c:9a:5a:67:7b:69:21:0a: 0f:d1:07:ae:56:bb:ae:57:1d:f6:4f:1e:10:41:d4:2d:ac:6b: a5:6a:1b:9b:64:b9:c1:b2:c2:e8:cc:f3:a7:8a:d2:60:2d:ee: ec:e8:3b:30:c9:41:8f:20:34:30:62:2b:85:88:6f:6c:09:9d: 18:33:86:7f:83:33:06:28:6c:34:70:85:b0:e8:6d:e3:95:a6: 84:66:18:2c:ea:cb:97:a1:2a:03:e2:0f:7f:98:98:ff:9d:7d: 31:44:67:94:63:72:ef:01:5e:ea:01:65:27:cc:18:fc:09:e0: 1c:d3:1d:8b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMKBgqiI+amHj0bcd/8L2iHOz/K0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RD RkRBODIxQTAeFw0yNjEwMjgyMzA2NDFaFw0yNjExMDEwNjI4NDFaMDMxMTAvBgNV BAMTKDZENTg5NEQwOTgzMEM5RkZFOUFGMDIxNTkyRkUwQkQ0N0QyMjIxNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8P/vDiXqcsYbjtispm9hFN/F/ ARSk6tD+bbMxzCzS5do2/TlU49DDwOlI7wkadPrpETXJWqAP/c7JqX30uSFgnPiZ tQSGtpRjAqv0E9Kr2LsJin+ScuEWbMXNxritD9LAKU2HlFSVOcxX0JIQnad22ENJ sJEiSfWncM7frQr08TcoNHL8tT/xrWUmJd2kxf0PUyBpLm4g6xsVDbwVrRZ98ntm WScWc2BleXtNroi2rGvj4iYMhdOa7GobRHWPnCxAiJZy/FNw+3VNcxc0sYLLW/+8 6DKhJzlc3pQDwd1MtkpbnGXaiBW2P3Tp8OOmc9qkVYksy5g7q84gmKyKsd/7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbViU0Jgwyf/prwIVkv4L1H0iIVUwHwYDVR0j BBgwFoAUoOsAJLI/jEa8WSL6jlWezc/aghowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzA2MTg5MS8wL0EwRUIwMDI0QjIzRjhDNDZCQzU5MjJGQThFNTU5 RUNEQ0ZEQTgyMUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBFQjAwMjRCMjNGOEM0NkJDNTkyMkZBOEU1NTlFQ0RDRkRBODIxQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcwNjE4OTEvMC9BMEVCMDAyNEIyM0Y4 QzQ2QkM1OTIyRkE4RTU1OUVDRENGREE4MjFBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoH2ywfCQba0E T8Arvys4AJth0lrCpp4CXHwsyk4P45xSI/IW61p0I7HGKTLmeR2yxatdz6gVuxsL 17VpMNRoQ4jIxSg2mjvp5GsM0P4qwSLglPeAXjG5M035NAh+JbMm5bdL8ulduJje T9v9qUQHn2Wh6kLlcTLpSO7lsQrjF9PH+aOBCi/hywyaWmd7aSEKD9EHrla7rlcd 9k8eEEHULaxrpWobm2S5wbLC6Mzzp4rSYC3u7Og7MMlBjyA0MGIrhYhvbAmdGDOG f4MzBihsNHCFsOht45WmhGYYLOrLl6EqA+IPf5iY/519MURnlGNy7wFe6gFlJ8wY /AngHNMdiw== -----END CERTIFICATE-----Generated at Fri Oct 30 18:09:43 2026 by rpki-client