$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft File: EA1B92DE3A39218C88302E877CD7677E74606B38.mft (raw, json) Hash identifier: DF5Z08PYt4zJUwe6PGNn5mlNSLNPB5bkizUAPRygRSU= Subject key identifier: B4:13:2B:32:A1:E4:8B:E6:1C:2F:B9:AA:B9:4F:8B:05:3C:83:BD:00 Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38 Certificate issuer: /CN=EA1B92DE3A39218C88302E877CD7677E74606B38 Certificate serial: 253A3880E0A9C9F87D61E13F3C1365CF0F36E76A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft Manifest number: 2A Signing time: Sun 05 Apr 2026 08:28:56 +0000 Manifest this update: Sun 05 Apr 2026 08:23:56 +0000 Manifest next update: Mon 06 Apr 2026 09:33:56 +0000 Files and hashes: 1: EA1B92DE3A39218C88302E877CD7677E74606B38.crl (hash: SpX5xlC8EOb1d1bBXYLUkounJ/o3wtr6AnhjNo+6spE=) 2: 34352e3132342e34342e302f32322d3234203d3e20313333393438.roa (hash: W2W+xhdN9PF6a7mxKiNnIobZLPOTheU9GKZlZMyeevI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 09:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:3a:38:80:e0:a9:c9:f8:7d:61:e1:3f:3c:13:65:cf:0f:36:e7:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38 Validity Not Before: Apr 5 08:23:56 2026 GMT Not After : Apr 6 09:33:56 2026 GMT Subject: CN=B4132B32A1E48BE61C2FB9AAB94F8B053C83BD00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:fd:f1:41:34:9b:b7:53:da:dd:13:9c:29: fa:2f:c4:fe:ad:a4:58:b6:94:5e:07:39:31:57:12: 0c:d9:bd:89:fb:1a:f9:b9:24:35:61:fc:ba:a5:91: 62:5e:fd:7d:61:7b:00:39:24:a0:40:b6:20:9c:0c: ea:0a:25:a2:0d:78:66:19:aa:24:31:ec:53:a9:f4: 39:75:3b:ce:6e:14:b1:5f:4d:01:2f:cf:30:01:0e: 88:c3:a4:76:f5:9f:75:d4:f9:08:04:06:1f:3c:da: a3:53:f0:04:8e:ae:12:98:1e:7e:cc:1c:67:34:3f: 30:eb:1b:53:ea:53:52:e1:48:e1:0d:ec:e2:4d:1c: 42:ad:f6:21:18:f4:9b:60:9e:90:49:c5:c6:ff:97: a4:3a:d0:a5:68:e8:06:d7:94:24:11:7f:a8:2c:d8: a4:6c:27:b2:f1:7a:45:90:1d:62:84:a9:ea:94:0a: 22:cb:0f:a7:e1:7e:f9:0c:d0:b6:6c:d3:45:5d:4c: 4b:4c:d5:ac:a7:41:df:90:43:21:95:eb:c4:07:69: 54:0a:95:d7:1d:6d:9d:28:5d:78:2a:99:a5:64:4a: aa:52:c8:0c:29:2c:3d:98:b2:90:e5:c5:2e:5a:ef: d3:05:bc:6c:e1:a8:e6:0a:e3:23:dd:c7:78:e9:9f: 88:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:13:2B:32:A1:E4:8B:E6:1C:2F:B9:AA:B9:4F:8B:05:3C:83:BD:00 X509v3 Authority Key Identifier: keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:7a:d8:4a:dc:69:97:a9:a6:53:12:e7:c1:a6:19:7b:16:98: 5f:ec:7e:ca:fd:25:44:45:93:8e:4b:39:e5:0d:ea:7b:4e:3a: 48:78:be:18:dd:88:ab:a8:29:d4:71:7c:b2:b2:d4:7c:c8:bc: a1:fd:ab:5b:1b:5b:04:ca:03:da:0c:57:e9:ca:6b:12:1d:07: f6:29:44:80:80:f0:c8:6e:6c:a4:56:c0:fd:1d:b1:ab:0e:02: b6:95:7d:87:78:46:e9:05:42:9c:b4:2e:46:a0:f0:22:7c:fc: 5d:c1:bf:30:60:f2:5c:12:8d:38:fd:97:e7:63:b3:a4:8f:35: a7:2f:f8:4a:79:c0:46:aa:9e:2a:91:ff:7e:0f:e1:8d:a7:45: 27:f9:d7:d0:2c:7e:29:0a:7d:51:18:aa:d5:10:c7:94:3d:20: dd:00:01:14:b0:04:15:0d:99:7f:07:48:28:e5:cb:83:44:ad: fb:4e:68:a0:36:54:aa:dd:39:a8:a1:10:34:94:bf:ab:3d:75: e3:4a:7c:91:96:99:ca:50:b6:6a:0f:f1:07:b0:ba:bc:a5:65: b6:93:9a:f5:43:23:ce:29:49:a7:06:97:09:ec:e0:40:e8:c1: 5d:b2:17:c3:b8:c9:7a:05:fb:b2:70:85:c6:e7:0e:23:46:99: d3:01:b3:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJTo4gOCpyfh9YeE/PBNlzw8252owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExQjkyREUzQTM5MjE4Qzg4MzAyRTg3N0NENzY3N0U3 NDYwNkIzODAeFw0yNjA0MDUwODIzNTZaFw0yNjA0MDYwOTMzNTZaMDMxMTAvBgNV BAMTKEI0MTMyQjMyQTFFNDhCRTYxQzJGQjlBQUI5NEY4QjA1M0M4M0JEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ff3xQTSbt1Pa3ROcKfovxP6t pFi2lF4HOTFXEgzZvYn7Gvm5JDVh/LqlkWJe/X1hewA5JKBAtiCcDOoKJaINeGYZ qiQx7FOp9Dl1O85uFLFfTQEvzzABDojDpHb1n3XU+QgEBh882qNT8ASOrhKYHn7M HGc0PzDrG1PqU1LhSOEN7OJNHEKt9iEY9JtgnpBJxcb/l6Q60KVo6AbXlCQRf6gs 2KRsJ7LxekWQHWKEqeqUCiLLD6fhfvkM0LZs00VdTEtM1aynQd+QQyGV68QHaVQK ldcdbZ0oXXgqmaVkSqpSyAwpLD2YspDlxS5a79MFvGzhqOYK4yPdx3jpn4gNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtBMrMqHki+YcL7mquU+LBTyDvQAwHwYDVR0j BBgwFoAU6huS3jo5IYyIMC6HfNdnfnRgazgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MjExNjYwOTIwOTc5NDU2MS8wL0VBMUI5MkRFM0EzOTIxOEM4ODMwMkU4NzdDRDc2 NzdFNzQ2MDZCMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUExQjkyREUzQTM5MjE4Qzg4MzAyRTg3N0NENzY3N0U3NDYwNkIzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODIxMTY2MDkyMDk3OTQ1NjEvMC9FQTFCOTJERTNBMzky MThDODgzMDJFODc3Q0Q3Njc3RTc0NjA2QjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHrYStxpl6mm UxLnwaYZexaYX+x+yv0lREWTjks55Q3qe046SHi+GN2Iq6gp1HF8srLUfMi8of2r WxtbBMoD2gxX6cprEh0H9ilEgIDwyG5spFbA/R2xqw4CtpV9h3hG6QVCnLQuRqDw Inz8XcG/MGDyXBKNOP2X52OzpI81py/4SnnARqqeKpH/fg/hjadFJ/nX0Cx+KQp9 URiq1RDHlD0g3QABFLAEFQ2ZfwdIKOXLg0St+05ooDZUqt05qKEQNJS/qz1140p8 kZaZylC2ag/xB7C6vKVltpOa9UMjzilJpwaXCezgQOjBXbIXw7jJegX7snCFxucO I0aZ0wGz9A== -----END CERTIFICATE-----Generated at Mon Apr 6 02:16:57 2026 by rpki-client