$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft File: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft (raw, json) Hash identifier: durxCdFKi0fSH8Y7D4Q0tpkQ56sa13XLPFCMz9GfRso= Subject key identifier: 30:9B:6C:3D:D0:98:D9:03:CB:78:F6:88:D0:E7:3B:08:97:89:9D:A5 Authority key identifier: EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E Certificate issuer: /CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Certificate serial: 249BCB7ADA5838F5147EFDA205E64A22A12BE5E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft Manifest number: 84 Signing time: Sun 25 Oct 2026 13:57:38 +0000 Manifest this update: Sun 25 Oct 2026 13:52:38 +0000 Manifest next update: Thu 29 Oct 2026 01:30:38 +0000 Files and hashes: 1: 3231312e3130312e3139392e302f32342d3234203d3e2039383038.roa (hash: cQY1URll/8UZ/c14EdCWrPX/Wg9vQnf1toLmahOEpL0=) 2: 3231312e3130312e3139322e302f32312d3231203d3e2034383337.roa (hash: lIgnJypHCUc9AnMOj72UTe6iBajW3ZDvSTG8zwvjqmY=) 3: 3231312e3130312e3234302e302f32322d3232203d3e2034383337.roa (hash: WxUpr8cULHOzVrI9C/5gSfR+6HBRy77JfYmpF48itNQ=) 4: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl (hash: /KhXvP+YKy/oLbMpO4sNFzqnWTK29MYz5RQYwi5/spI=) 5: 3130332e3135322e37362e302f32332d3233203d3e2034383337.roa (hash: HdQ/94CPm4/WGSMVttHJ+aI+hHmp8gJufVncdHoHJkg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 01:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9b:cb:7a:da:58:38:f5:14:7e:fd:a2:05:e6:4a:22:a1:2b:e5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Validity Not Before: Oct 25 13:52:38 2026 GMT Not After : Oct 29 01:30:38 2026 GMT Subject: CN=309B6C3DD098D903CB78F688D0E73B0897899DA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:d6:29:1a:95:30:41:41:87:fa:12:27:aa: 8a:d0:63:9d:39:13:da:08:e4:d0:37:bc:ae:3a:1f: a4:a1:0d:20:bf:bf:72:b0:1e:89:40:7c:fb:a0:81: 18:dd:28:f5:27:aa:ea:2f:28:85:88:25:2a:89:8a: 94:f5:c4:06:42:32:89:9c:7a:e7:15:30:67:43:54: 1c:fc:99:89:dd:44:d1:7d:45:d7:12:f4:15:44:4e: 0c:12:65:d3:2b:da:d8:9c:17:42:06:58:d7:7f:5c: d5:39:ee:c6:ed:de:29:3a:22:55:b4:51:81:b6:e6: 28:bb:2a:d1:5b:b3:8e:6d:c1:2c:4c:5e:5c:fa:8e: 47:8f:26:77:46:e5:8f:cb:34:df:c3:b9:1e:65:5a: 47:b3:77:2e:d0:a7:8f:0c:11:c8:0d:30:17:00:d7: 0f:fc:5a:1d:07:3c:c6:bc:df:7f:39:f0:4e:1c:e3: fb:f8:0d:17:8f:fc:a9:dd:13:c5:0b:2a:46:9c:37: 28:f5:28:ca:e6:8d:42:98:28:c3:74:ec:b4:67:46: 4b:9b:63:dd:77:30:ec:c3:49:4d:11:65:08:1b:3a: 55:e2:90:cd:aa:43:2e:5f:c8:93:0e:6d:2c:59:fa: 14:68:53:48:53:e1:b1:ed:53:0b:98:05:a6:3b:b9: dd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9B:6C:3D:D0:98:D9:03:CB:78:F6:88:D0:E7:3B:08:97:89:9D:A5 X509v3 Authority Key Identifier: keyid:EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:f5:f2:fa:d7:a9:b5:2c:88:b7:9a:94:49:5c:14:3b:d2:e0: 20:e5:9c:d2:91:08:fd:cc:41:e9:53:6b:e5:04:fe:ec:0c:64: 9e:fd:36:dc:cc:29:ff:0d:ed:81:93:80:8d:9c:8d:cf:5b:40: 3d:fc:11:59:ea:b0:4a:34:b4:79:d5:af:57:30:7c:28:5a:7c: b3:ad:6d:68:ec:70:1c:e0:b6:5f:18:47:95:7d:7b:ea:94:25: 33:f6:1a:0b:06:a9:05:5e:b0:a6:34:f6:b6:5e:c9:3c:15:f5: 59:1c:f1:6f:31:53:66:05:a8:c8:70:67:e5:5e:09:38:87:a3: 48:1f:24:43:1e:31:f8:4a:09:6a:d4:25:e1:ca:03:93:4e:ab: d1:3e:22:6e:13:bf:c1:10:41:96:51:46:96:a2:b6:4a:0d:56: 38:31:dd:a5:0e:ac:46:e7:fd:03:a8:11:ed:92:87:11:1a:3e: 9c:ce:59:ce:ed:9e:20:44:83:7a:f1:b4:36:3e:8f:52:ae:d9: 2c:e6:e0:b6:db:93:46:43:50:de:0f:e3:de:e3:08:9b:8a:4d: 6a:83:18:6d:b2:5a:6d:05:ff:9f:39:85:e5:3b:90:1b:45:d8: 72:5c:62:7c:c7:ad:e1:ab:d4:63:64:0e:7e:ad:02:2f:7a:65: ee:6e:69:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJJvLetpYOPUUfv2iBeZKIqEr5eEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1 RkFCNDQ4RTAeFw0yNjEwMjUxMzUyMzhaFw0yNjEwMjkwMTMwMzhaMDMxMTAvBgNV BAMTKDMwOUI2QzNERDA5OEQ5MDNDQjc4RjY4OEQwRTczQjA4OTc4OTlEQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Y9YpGpUwQUGH+hInqorQY505 E9oI5NA3vK46H6ShDSC/v3KwHolAfPuggRjdKPUnquovKIWIJSqJipT1xAZCMomc eucVMGdDVBz8mYndRNF9RdcS9BVETgwSZdMr2ticF0IGWNd/XNU57sbt3ik6IlW0 UYG25ii7KtFbs45twSxMXlz6jkePJndG5Y/LNN/DuR5lWkezdy7Qp48MEcgNMBcA 1w/8Wh0HPMa833858E4c4/v4DReP/KndE8ULKkacNyj1KMrmjUKYKMN07LRnRkub Y913MOzDSU0RZQgbOlXikM2qQy5fyJMObSxZ+hRoU0hT4bHtUwuYBaY7ud1JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMJtsPdCY2QPLePaI0Oc7CJeJnaUwHwYDVR0j BBgwFoAU6iQG4JEfBQEesnyx0+2wI1+rRI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzI1ODMzNzYyNTMwOTIxMS8wL0VBMjQwNkUwOTExRjA1MDExRUIyN0NCMUQzRURC MDIzNUZBQjQ0OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1RkFCNDQ4RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcyNTgzMzc2MjUzMDkyMTEvMC9FQTI0MDZFMDkxMUYw NTAxMUVCMjdDQjFEM0VEQjAyMzVGQUI0NDhFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPXy+teptSyI t5qUSVwUO9LgIOWc0pEI/cxB6VNr5QT+7Axknv023Mwp/w3tgZOAjZyNz1tAPfwR WeqwSjS0edWvVzB8KFp8s61taOxwHOC2XxhHlX176pQlM/YaCwapBV6wpjT2tl7J PBX1WRzxbzFTZgWoyHBn5V4JOIejSB8kQx4x+EoJatQl4coDk06r0T4ibhO/wRBB llFGlqK2Sg1WODHdpQ6sRuf9A6gR7ZKHERo+nM5Zzu2eIESDevG0Nj6PUq7ZLObg ttuTRkNQ3g/j3uMIm4pNaoMYbbJabQX/nzmF5TuQG0XYclxifMet4avUY2QOfq0C L3pl7m5plw== -----END CERTIFICATE-----Generated at Mon Oct 26 18:33:05 2026 by rpki-client