$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft File: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft (raw, json) Hash identifier: SIm2dPI9nF+gMHWjIYHTAm1y0F6Q3ZaZelt3WOJZJjQ= Subject key identifier: 80:BE:E0:A0:51:3E:42:69:77:E6:92:90:3A:C6:CC:19:D9:D5:5D:7F Authority key identifier: E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 Certificate issuer: /CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Certificate serial: 7E12256E6DA3C454B19D9DC1BDB9E1F28FC88DDA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft Manifest number: 2E Signing time: Fri 22 May 2026 19:17:28 +0000 Manifest this update: Fri 22 May 2026 19:12:28 +0000 Manifest next update: Sat 23 May 2026 22:55:28 +0000 Files and hashes: 1: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl (hash: sTW2MdbuQcjzUH/JrhNzBjkfdmPHEK7QeDoHbhR6TLU=) 2: 3130332e39352e36382e302f32322d3232203d3e203234313338.roa (hash: Gs4UB+TPYIvje+ANsbEoWpB+Qg7CtAqNzOXWq42RpGc=) 3: 3130332e3131392e32382e302f32322d3232203d3e2030.roa (hash: OhggVO6V+L8Uq4dwZzxkFnjLxTIYUZIlj0+gjoYhKf0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 22:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:12:25:6e:6d:a3:c4:54:b1:9d:9d:c1:bd:b9:e1:f2:8f:c8:8d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Validity Not Before: May 22 19:12:28 2026 GMT Not After : May 23 22:55:28 2026 GMT Subject: CN=80BEE0A0513E426977E692903AC6CC19D9D55D7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:05:ba:06:fa:55:a2:96:95:43:ea:30:45: 70:57:c2:62:ae:33:4e:cc:da:a7:8e:6c:b1:33:21: e8:35:2c:ce:67:1d:42:bb:6f:f8:39:14:dc:f4:37: 18:4e:49:4f:ef:cb:e3:01:d9:48:46:7d:ba:39:6e: 0b:0c:94:53:48:31:de:0f:8f:3d:df:1e:7f:71:e4: 04:66:53:20:33:8b:9a:f8:14:52:04:4f:1c:2f:25: 80:cf:73:2b:ff:96:2e:6b:82:89:c4:b6:b2:f8:6a: b0:1f:2c:a7:5e:ef:0a:23:6b:d2:45:b9:09:25:3d: a4:58:82:4b:1c:dc:86:af:71:87:67:55:e5:50:33: c0:b3:5d:eb:8d:19:5e:35:15:c9:21:b0:84:8b:7f: 88:f8:16:f2:f5:d2:cf:20:e0:58:76:4c:a8:c0:70: 47:db:f2:c7:41:55:02:c8:f0:8c:1f:1d:bd:1e:4c: b1:90:6a:bb:b7:11:ba:a8:55:08:5a:83:a5:f8:aa: 51:5f:bb:00:ac:91:c0:5b:85:c1:56:91:46:3f:12: 02:f6:0b:05:e8:2e:43:e8:89:1a:7f:52:b8:24:70: 01:c1:1e:65:fc:b4:85:04:e9:62:c3:a4:f1:5f:6a: 25:8f:cc:2d:24:ae:8b:2d:ea:02:f3:a1:fa:96:b0: 28:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BE:E0:A0:51:3E:42:69:77:E6:92:90:3A:C6:CC:19:D9:D5:5D:7F X509v3 Authority Key Identifier: keyid:E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:0c:58:ba:89:e4:9d:73:df:5e:cc:41:cd:95:4b:be:44:ea: 0f:ee:4b:5b:34:2b:74:1c:7f:34:65:eb:8b:00:7a:34:fb:7d: cd:89:be:41:24:70:98:7e:bc:1a:d2:be:5b:26:3b:bd:a0:c4: 71:2e:f0:07:ab:4e:8c:90:8c:74:cc:a1:00:bb:a7:d3:49:10: 56:eb:b6:6d:36:a3:0d:db:fe:91:d6:7b:d2:79:ad:e0:98:15: 9c:af:00:23:12:38:28:f4:4f:3c:cb:f1:01:86:b9:f1:33:84: e1:78:d7:a6:c2:71:b4:1e:bd:8b:59:68:d6:a5:9c:77:45:8c: 46:00:dc:c1:5f:66:04:07:a2:cd:6e:60:01:86:d3:e1:a4:f2: b9:65:16:b6:e8:56:06:49:9c:71:e4:0a:f1:17:3d:01:c9:bd: f5:fd:97:07:8c:b0:d6:c2:2d:70:f7:70:d4:f3:a6:aa:b8:d5: 06:df:49:e5:c4:0a:81:6b:cc:c9:40:09:61:4e:5d:0d:c6:c4: 49:e1:0f:a0:93:2c:54:76:7e:4c:c7:6f:d9:86:3e:86:a7:8b: b4:4c:a0:4c:17:c7:fe:d0:a3:6d:dc:d2:c6:aa:89:05:e5:c9: b6:a1:8a:21:9e:4a:17:84:64:80:f3:9f:00:c8:b0:cf:0f:bc: 1c:10:c2:45 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfhIlbm2jxFSxnZ3Bvbnh8o/IjdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5 NEIwQjdFNzAeFw0yNjA1MjIxOTEyMjhaFw0yNjA1MjMyMjU1MjhaMDMxMTAvBgNV BAMTKDgwQkVFMEEwNTEzRTQyNjk3N0U2OTI5MDNBQzZDQzE5RDlENTVEN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6EwW6BvpVopaVQ+owRXBXwmKu M07M2qeObLEzIeg1LM5nHUK7b/g5FNz0NxhOSU/vy+MB2UhGfbo5bgsMlFNIMd4P jz3fHn9x5ARmUyAzi5r4FFIETxwvJYDPcyv/li5rgonEtrL4arAfLKde7woja9JF uQklPaRYgksc3IavcYdnVeVQM8CzXeuNGV41FckhsISLf4j4FvL10s8g4Fh2TKjA cEfb8sdBVQLI8IwfHb0eTLGQaru3EbqoVQhag6X4qlFfuwCskcBbhcFWkUY/EgL2 CwXoLkPoiRp/UrgkcAHBHmX8tIUE6WLDpPFfaiWPzC0krost6gLzofqWsCgDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgL7goFE+Qml35pKQOsbMGdnVXX8wHwYDVR0j BBgwFoAU5+qTjIb9ok4kSV8ZUP2Ij5Swt+cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUyNDczNzg4MzA3ODY1OS8wL0U3RUE5MzhDODZGREEyNEUyNDQ5NUYxOTUwRkQ4 ODhGOTRCMEI3RTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5NEIwQjdFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MjQ3Mzc4ODMwNzg2NTkvMC9FN0VBOTM4Qzg2RkRB MjRFMjQ0OTVGMTk1MEZEODg4Rjk0QjBCN0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAxYuonknXPf XsxBzZVLvkTqD+5LWzQrdBx/NGXriwB6NPt9zYm+QSRwmH68GtK+WyY7vaDEcS7w B6tOjJCMdMyhALun00kQVuu2bTajDdv+kdZ70nmt4JgVnK8AIxI4KPRPPMvxAYa5 8TOE4XjXpsJxtB69i1lo1qWcd0WMRgDcwV9mBAeizW5gAYbT4aTyuWUWtuhWBkmc ceQK8Rc9Acm99f2XB4yw1sItcPdw1POmqrjVBt9J5cQKgWvMyUAJYU5dDcbESeEP oJMsVHZ+TMdv2YY+hqeLtEygTBfH/tCjbdzSxqqJBeXJtqGKIZ5KF4RkgPOfAMiw zw+8HBDCRQ== -----END CERTIFICATE-----Generated at Sat May 23 03:44:05 2026 by rpki-client