$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft File: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft (raw, json) Hash identifier: kisori4II1hxjo7urbeCp6JXGDW+85i3HYa7c2y6vM8= Subject key identifier: C8:51:C7:34:4F:76:62:BB:E7:0E:75:78:71:E3:4B:07:46:B0:64:00 Authority key identifier: E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 Certificate issuer: /CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Certificate serial: 2A0C81DA9F3B9A4D7D6AA4A4853EA688CFC987D7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft Manifest number: C2 Signing time: Sun 04 Oct 2026 21:03:15 +0000 Manifest this update: Sun 04 Oct 2026 20:58:15 +0000 Manifest next update: Thu 08 Oct 2026 05:00:15 +0000 Files and hashes: 1: 3130332e39352e36382e302f32322d3232203d3e203234313338.roa (hash: Gs4UB+TPYIvje+ANsbEoWpB+Qg7CtAqNzOXWq42RpGc=) 2: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl (hash: ZPGZ5XfIQTpeHlT4vFYv7Dr67/YakhzItG9zRAQCdkk=) 3: 3130332e3131392e32382e302f32322d3232203d3e2030.roa (hash: OhggVO6V+L8Uq4dwZzxkFnjLxTIYUZIlj0+gjoYhKf0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 05:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0c:81:da:9f:3b:9a:4d:7d:6a:a4:a4:85:3e:a6:88:cf:c9:87:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Validity Not Before: Oct 4 20:58:15 2026 GMT Not After : Oct 8 05:00:15 2026 GMT Subject: CN=C851C7344F7662BBE70E757871E34B0746B06400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6e:5d:2d:02:6d:0e:81:0c:25:4b:f5:a0:37: 19:b4:42:09:ec:fd:88:9d:9b:62:4f:f9:56:80:1d: 9d:53:25:3e:bc:25:ed:14:69:88:c1:81:ff:c0:c5: 7c:52:57:e3:cc:0b:34:cd:fc:dc:ec:e7:9f:05:fd: 48:08:b4:1e:10:99:a1:94:53:10:ca:e9:a5:cd:ab: 17:3b:b0:39:e5:61:36:66:e4:ee:c3:1b:06:58:28: c0:24:e4:ba:27:0f:57:72:cd:1d:29:a2:08:7a:86: ca:f6:d7:90:c8:57:ac:b0:93:ba:65:eb:f1:b0:7d: 9a:11:d4:4a:71:f1:da:d7:4e:ea:c2:4b:39:50:f8: d1:6c:49:c2:10:1d:07:59:b5:4e:c5:dc:f1:43:f0: 48:02:b2:1c:ce:89:ab:a4:c8:51:43:f2:bd:34:0a: f2:77:6c:9e:fe:6b:d1:77:db:21:56:a5:d0:71:00: 6f:6a:58:1f:58:c4:f0:dd:dd:89:ce:2d:bd:ee:2c: 71:ff:fa:27:9a:5d:90:bd:e5:8c:8b:b5:03:9a:11: 7a:33:00:1c:15:30:fe:c9:a5:27:8e:41:86:4a:96: ba:ca:94:65:ff:ef:db:dd:d6:5b:7d:39:76:32:dc: 18:d4:0f:35:e4:3d:72:a4:b9:89:77:76:ce:64:31: 23:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:51:C7:34:4F:76:62:BB:E7:0E:75:78:71:E3:4B:07:46:B0:64:00 X509v3 Authority Key Identifier: keyid:E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:f0:98:d3:be:5d:1b:e1:3f:cf:ff:1b:30:76:32:ce:f7:26: e5:4b:79:0f:80:91:c0:50:95:0b:2f:3c:fd:00:e9:9b:34:18: 4e:36:f6:f2:be:76:fe:77:21:b9:50:94:5d:b7:bf:ff:87:01: 42:80:1b:00:cd:2c:63:61:bd:ca:3a:0d:f8:19:dc:1e:37:f9: d8:95:30:b2:66:c3:68:f0:9e:2d:b8:32:c0:b6:41:06:d9:4c: b3:fa:09:a6:b8:5c:4e:b7:02:b0:54:19:c2:ed:bd:a9:d4:66: a9:4c:e7:40:a8:59:76:9b:11:7a:76:55:d6:52:e0:f6:05:f3: ab:1a:79:e4:55:dd:e6:b9:7f:b2:c4:86:6c:e0:c7:2f:47:2b: 60:1f:8c:3b:30:a3:06:0e:7f:76:66:35:d6:21:d9:46:62:0e: 48:13:14:9f:02:24:3f:95:ba:03:03:34:03:f4:39:ec:f9:3f: 42:86:d4:13:31:a1:c4:11:59:cc:00:7c:8b:ff:69:c1:b0:a1: ed:34:5f:9e:f5:e7:0a:98:ef:48:21:47:55:43:e8:13:f6:87: 01:3a:20:bf:71:a2:00:fb:86:4e:bf:90:34:e1:a7:cf:86:04: fe:a6:14:e9:c4:74:6b:c1:7c:a1:87:2c:20:15:29:be:aa:0e: 75:16:f4:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKgyB2p87mk19aqSkhT6miM/Jh9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5 NEIwQjdFNzAeFw0yNjEwMDQyMDU4MTVaFw0yNjEwMDgwNTAwMTVaMDMxMTAvBgNV BAMTKEM4NTFDNzM0NEY3NjYyQkJFNzBFNzU3ODcxRTM0QjA3NDZCMDY0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWbl0tAm0OgQwlS/WgNxm0Qgns /Yidm2JP+VaAHZ1TJT68Je0UaYjBgf/AxXxSV+PMCzTN/Nzs558F/UgItB4QmaGU UxDK6aXNqxc7sDnlYTZm5O7DGwZYKMAk5LonD1dyzR0pogh6hsr215DIV6ywk7pl 6/GwfZoR1Epx8drXTurCSzlQ+NFsScIQHQdZtU7F3PFD8EgCshzOiaukyFFD8r00 CvJ3bJ7+a9F32yFWpdBxAG9qWB9YxPDd3YnOLb3uLHH/+ieaXZC95YyLtQOaEXoz ABwVMP7JpSeOQYZKlrrKlGX/79vd1lt9OXYy3BjUDzXkPXKkuYl3ds5kMSODAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyFHHNE92YrvnDnV4ceNLB0awZAAwHwYDVR0j BBgwFoAU5+qTjIb9ok4kSV8ZUP2Ij5Swt+cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUyNDczNzg4MzA3ODY1OS8wL0U3RUE5MzhDODZGREEyNEUyNDQ5NUYxOTUwRkQ4 ODhGOTRCMEI3RTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5NEIwQjdFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MjQ3Mzc4ODMwNzg2NTkvMC9FN0VBOTM4Qzg2RkRB MjRFMjQ0OTVGMTk1MEZEODg4Rjk0QjBCN0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxPCY075dG+E/ z/8bMHYyzvcm5Ut5D4CRwFCVCy88/QDpmzQYTjb28r52/nchuVCUXbe//4cBQoAb AM0sY2G9yjoN+BncHjf52JUwsmbDaPCeLbgywLZBBtlMs/oJprhcTrcCsFQZwu29 qdRmqUznQKhZdpsRenZV1lLg9gXzqxp55FXd5rl/ssSGbODHL0crYB+MOzCjBg5/ dmY11iHZRmIOSBMUnwIkP5W6AwM0A/Q57Pk/QobUEzGhxBFZzAB8i/9pwbCh7TRf nvXnCpjvSCFHVUPoE/aHATogv3GiAPuGTr+QNOGnz4YE/qYU6cR0a8F8oYcsIBUp vqoOdRb0cw== -----END CERTIFICATE-----Generated at Wed Oct 7 04:27:19 2026 by rpki-client