$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft File: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft (raw, json) Hash identifier: WrNHyG3zMZ3PDGwbYiSwm/MIgJYXDNv01OZlaVRFf0g= Subject key identifier: 18:28:E2:4B:05:01:57:98:D2:EE:08:68:A7:CD:EB:70:C1:E8:04:F5 Authority key identifier: E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 Certificate issuer: /CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Certificate serial: 32A32DED32436E2A3E7402C04232BEAAF5A1E883 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft Manifest number: A7 Signing time: Fri 21 Aug 2026 07:29:04 +0000 Manifest this update: Fri 21 Aug 2026 07:24:04 +0000 Manifest next update: Sat 22 Aug 2026 11:24:04 +0000 Files and hashes: 1: 3130332e3131392e32382e302f32322d3232203d3e2030.roa (hash: OhggVO6V+L8Uq4dwZzxkFnjLxTIYUZIlj0+gjoYhKf0=) 2: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl (hash: AOMFQFVb+Q9CdWvXwPDFuixYvxFWTiJV5lSHONHrq08=) 3: 3130332e39352e36382e302f32322d3232203d3e203234313338.roa (hash: Gs4UB+TPYIvje+ANsbEoWpB+Qg7CtAqNzOXWq42RpGc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 11:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a3:2d:ed:32:43:6e:2a:3e:74:02:c0:42:32:be:aa:f5:a1:e8:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Validity Not Before: Aug 21 07:24:04 2026 GMT Not After : Aug 22 11:24:04 2026 GMT Subject: CN=1828E24B05015798D2EE0868A7CDEB70C1E804F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:95:fd:e7:30:b2:83:cc:9a:9f:e3:b7:91:07: d8:84:f3:15:25:9b:41:f4:fb:c9:6b:1c:77:89:e2: c3:4c:03:10:e3:d9:b8:ce:6e:16:0e:f7:1a:d6:00: 72:21:8d:85:62:a9:73:6d:45:3c:69:11:87:bd:6c: d1:59:5a:c6:3e:c4:ef:85:d1:1b:4b:45:5a:ea:a1: c2:d0:49:07:64:36:e5:be:f6:46:6c:7a:44:cb:dc: be:2d:5d:73:cd:4d:9f:5e:f2:89:a5:ad:e9:e2:60: 1f:7b:04:26:04:35:73:d8:f1:97:ee:f9:b9:64:05: 05:bd:28:98:e0:a7:ef:62:0f:f2:c5:32:d4:be:66: f6:6b:6b:d0:35:0b:e1:9e:e6:94:e9:4f:8c:33:a2: bb:f5:14:9a:3c:7f:9c:22:56:07:a9:7d:16:d2:85: b4:b6:5c:81:01:15:d8:be:4b:6a:f8:ee:0f:e0:14: ff:be:ff:eb:33:3e:e6:08:6a:f5:c6:4e:38:da:35: 6c:0a:5e:f3:7d:13:bd:7d:c5:07:8f:85:26:9a:53: 9b:61:25:41:f8:7a:b4:5c:c1:75:c6:9b:0e:ce:ee: 8b:f3:df:71:aa:07:8f:a1:73:96:45:18:b7:55:ef: e1:52:59:65:2c:e1:29:f8:90:d1:46:89:86:80:03: f5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:28:E2:4B:05:01:57:98:D2:EE:08:68:A7:CD:EB:70:C1:E8:04:F5 X509v3 Authority Key Identifier: keyid:E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3f:5f:b4:66:d6:08:b3:07:cf:38:65:f7:4a:7f:29:24:3e: 06:36:78:b3:29:ed:bd:21:ba:3e:d2:a5:13:a3:c6:b9:23:57: c2:9d:fc:14:bf:dc:fd:e0:dd:94:ff:21:98:60:45:db:35:e6: 0d:92:d4:17:20:d2:ed:24:16:ae:0e:95:ae:2b:cf:9e:dd:19: bb:b3:a1:f4:f4:de:5b:d3:1c:2e:e9:2c:61:5d:63:8c:a8:c5: b9:77:b7:ac:75:af:66:54:3b:70:58:75:4e:b0:6a:4e:2f:ca: 3b:28:6e:b4:12:bf:26:31:5d:1f:28:6c:40:8c:da:45:3c:5b: 2c:42:9b:3d:3d:3b:c2:75:3f:08:8b:9c:e0:dc:37:4c:1a:f1: 1d:ec:d7:e5:22:64:fc:84:b4:43:e1:3e:11:57:63:d0:70:c2: 9f:e7:0b:d9:2c:2c:4e:f1:fb:df:db:a5:06:51:3a:ca:9e:7d: 12:e8:52:00:bf:ae:fa:cb:45:6c:de:62:b4:dd:32:8b:92:11: e2:71:4d:0b:3c:50:1f:bc:7b:ee:95:df:98:ce:0d:f1:7c:6f: 91:fd:08:aa:60:37:93:9a:7e:dc:b2:48:45:c9:b9:5f:d3:10: 34:ff:73:bf:ea:fe:14:6e:d9:17:d3:3d:e4:19:36:e8:6d:d2: c7:1a:e9:39 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMqMt7TJDbio+dALAQjK+qvWh6IMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5 NEIwQjdFNzAeFw0yNjA4MjEwNzI0MDRaFw0yNjA4MjIxMTI0MDRaMDMxMTAvBgNV BAMTKDE4MjhFMjRCMDUwMTU3OThEMkVFMDg2OEE3Q0RFQjcwQzFFODA0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHlf3nMLKDzJqf47eRB9iE8xUl m0H0+8lrHHeJ4sNMAxDj2bjObhYO9xrWAHIhjYViqXNtRTxpEYe9bNFZWsY+xO+F 0RtLRVrqocLQSQdkNuW+9kZsekTL3L4tXXPNTZ9e8omlreniYB97BCYENXPY8Zfu +blkBQW9KJjgp+9iD/LFMtS+ZvZra9A1C+Ge5pTpT4wzorv1FJo8f5wiVgepfRbS hbS2XIEBFdi+S2r47g/gFP++/+szPuYIavXGTjjaNWwKXvN9E719xQePhSaaU5th JUH4erRcwXXGmw7O7ovz33GqB4+hc5ZFGLdV7+FSWWUs4Sn4kNFGiYaAA/X5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGCjiSwUBV5jS7ghop83rcMHoBPUwHwYDVR0j BBgwFoAU5+qTjIb9ok4kSV8ZUP2Ij5Swt+cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUyNDczNzg4MzA3ODY1OS8wL0U3RUE5MzhDODZGREEyNEUyNDQ5NUYxOTUwRkQ4 ODhGOTRCMEI3RTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5NEIwQjdFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MjQ3Mzc4ODMwNzg2NTkvMC9FN0VBOTM4Qzg2RkRB MjRFMjQ0OTVGMTk1MEZEODg4Rjk0QjBCN0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVz9ftGbWCLMH zzhl90p/KSQ+BjZ4syntvSG6PtKlE6PGuSNXwp38FL/c/eDdlP8hmGBF2zXmDZLU FyDS7SQWrg6VrivPnt0Zu7Oh9PTeW9McLuksYV1jjKjFuXe3rHWvZlQ7cFh1TrBq Ti/KOyhutBK/JjFdHyhsQIzaRTxbLEKbPT07wnU/CIuc4Nw3TBrxHezX5SJk/IS0 Q+E+EVdj0HDCn+cL2SwsTvH739ulBlE6yp59EuhSAL+u+stFbN5itN0yi5IR4nFN CzxQH7x77pXfmM4N8Xxvkf0IqmA3k5p+3LJIRcm5X9MQNP9zv+r+FG7ZF9M95Bk2 6G3SxxrpOQ== -----END CERTIFICATE-----Generated at Sat Aug 22 00:53:20 2026 by rpki-client