$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft File: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft (raw, json) Hash identifier: j34fYr36RuWvkw4u3vWpR7dtDlHmjtSbpW01oCVbzhw= Subject key identifier: 0F:CB:9C:5C:72:57:BA:8C:1F:64:23:5C:DE:2E:5F:92:87:37:79:91 Authority key identifier: EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E Certificate issuer: /CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Certificate serial: 562DED6DB63464C33BD38E63D4E8B9F45D2D87CD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft Manifest number: 3F Signing time: Mon 27 Jul 2026 08:53:45 +0000 Manifest this update: Mon 27 Jul 2026 08:48:45 +0000 Manifest next update: Tue 28 Jul 2026 11:23:45 +0000 Files and hashes: 1: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl (hash: CMfJAdykHeKqwbmnmSZuFGfgHGeDiQfp2t8gTh4yxEU=) 2: 3231312e3130312e3139322e302f32312d3231203d3e2034383337.roa (hash: lIgnJypHCUc9AnMOj72UTe6iBajW3ZDvSTG8zwvjqmY=) 3: 3130332e3135322e37362e302f32332d3233203d3e2034383337.roa (hash: HdQ/94CPm4/WGSMVttHJ+aI+hHmp8gJufVncdHoHJkg=) 4: 3231312e3130312e3234302e302f32322d3232203d3e2034383337.roa (hash: WxUpr8cULHOzVrI9C/5gSfR+6HBRy77JfYmpF48itNQ=) 5: 3231312e3130312e3139392e302f32342d3234203d3e2039383038.roa (hash: cQY1URll/8UZ/c14EdCWrPX/Wg9vQnf1toLmahOEpL0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2d:ed:6d:b6:34:64:c3:3b:d3:8e:63:d4:e8:b9:f4:5d:2d:87:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Validity Not Before: Jul 27 08:48:45 2026 GMT Not After : Jul 28 11:23:45 2026 GMT Subject: CN=0FCB9C5C7257BA8C1F64235CDE2E5F9287377991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:2e:74:cd:61:22:fa:68:16:e1:8a:f4:c7: f7:4a:d6:82:3f:51:c4:13:d7:2e:11:71:da:e4:17: aa:80:ad:0f:52:18:ca:2d:0b:59:1c:c5:08:5f:ea: e9:92:a3:18:fc:3f:c5:cb:14:9f:36:1a:47:a8:62: 65:96:a7:c5:19:32:19:a0:be:37:d0:67:5f:cc:84: 2c:8b:ae:2a:96:f8:b2:4e:9d:da:6e:a3:a5:5f:06: e9:92:cf:37:81:93:e7:f2:25:b3:95:6b:cf:8a:b4: 24:86:40:a9:ec:44:a9:37:b2:73:69:0c:9d:93:49: 9d:f2:fd:e2:87:89:56:f4:ea:79:74:54:45:fb:9e: e4:3c:7a:7c:c3:da:d0:83:4b:ca:df:0b:64:47:62: 74:97:d9:87:5e:bd:9d:60:57:3b:77:cf:6a:ab:2c: f4:dc:03:7a:91:c1:34:be:db:d1:6f:46:25:8c:e3: 4f:df:bd:ab:c7:eb:80:a7:92:52:72:2f:3c:3b:44: 50:1f:a6:d6:39:41:6d:4e:ff:15:08:70:e8:7f:88: 8f:3a:fb:d5:7e:de:3a:e5:9a:ff:09:a6:1d:4e:69: 7b:62:74:d6:61:9a:1c:9e:e2:25:a6:b9:40:07:39: e5:32:de:5d:b7:de:dd:01:1a:99:76:d8:4c:4d:34: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CB:9C:5C:72:57:BA:8C:1F:64:23:5C:DE:2E:5F:92:87:37:79:91 X509v3 Authority Key Identifier: keyid:EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:26:65:9f:a7:eb:e7:31:f7:a6:dd:12:e7:6a:d0:2d:0c:a8: 9e:7d:a6:e1:72:7a:a3:20:62:58:26:6d:46:b9:7d:4c:87:f6: fe:a2:16:c0:8f:d1:11:60:33:66:92:d6:09:62:ab:84:ba:f1: 66:9f:b0:c8:bf:50:74:94:0c:04:8f:a0:c9:f3:29:e6:7a:39: 64:c1:51:9e:bc:2f:08:7f:30:8b:2b:67:34:56:c9:7d:1c:8c: 6a:b7:73:9a:fd:6b:b7:c8:79:c9:c7:1c:36:6c:ba:ee:c2:dd: a2:18:64:69:39:25:9e:83:e7:e7:34:08:b2:e4:6d:ae:8d:de: 2a:13:d6:19:ef:ba:10:fb:cd:e4:33:ab:a6:70:24:fe:29:1e: 67:f2:f4:6f:0b:a3:73:b4:46:29:1d:65:20:26:20:74:80:ff: 36:9b:c5:fe:57:38:6f:0a:d1:a5:67:8b:d8:06:0a:9a:75:51: 33:8f:8f:d4:ed:bf:87:0c:0c:f6:f1:99:41:af:66:bb:5a:7b: 71:86:d4:e9:6e:ed:d0:cc:3f:fb:8a:ae:73:d0:09:de:5b:83: e1:11:b5:7f:a0:fc:81:d6:4b:f4:7e:30:39:f5:ae:9c:fc:d9: 43:83:42:1b:72:23:aa:6b:3c:cf:38:7d:a6:61:1d:23:7a:54: ee:63:5c:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVi3tbbY0ZMM7045j1Oi59F0th80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1 RkFCNDQ4RTAeFw0yNjA3MjcwODQ4NDVaFw0yNjA3MjgxMTIzNDVaMDMxMTAvBgNV BAMTKDBGQ0I5QzVDNzI1N0JBOEMxRjY0MjM1Q0RFMkU1RjkyODczNzc5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjS50zWEi+mgW4Yr0x/dK1oI/ UcQT1y4RcdrkF6qArQ9SGMotC1kcxQhf6umSoxj8P8XLFJ82GkeoYmWWp8UZMhmg vjfQZ1/MhCyLriqW+LJOndpuo6VfBumSzzeBk+fyJbOVa8+KtCSGQKnsRKk3snNp DJ2TSZ3y/eKHiVb06nl0VEX7nuQ8enzD2tCDS8rfC2RHYnSX2YdevZ1gVzt3z2qr LPTcA3qRwTS+29FvRiWM40/fvavH64CnklJyLzw7RFAfptY5QW1O/xUIcOh/iI86 +9V+3jrlmv8Jph1OaXtidNZhmhye4iWmuUAHOeUy3l233t0BGpl22ExNNHvdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUD8ucXHJXuowfZCNc3i5fkoc3eZEwHwYDVR0j BBgwFoAU6iQG4JEfBQEesnyx0+2wI1+rRI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzI1ODMzNzYyNTMwOTIxMS8wL0VBMjQwNkUwOTExRjA1MDExRUIyN0NCMUQzRURC MDIzNUZBQjQ0OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1RkFCNDQ4RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcyNTgzMzc2MjUzMDkyMTEvMC9FQTI0MDZFMDkxMUYw NTAxMUVCMjdDQjFEM0VEQjAyMzVGQUI0NDhFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSZln6fr5zH3 pt0S52rQLQyonn2m4XJ6oyBiWCZtRrl9TIf2/qIWwI/REWAzZpLWCWKrhLrxZp+w yL9QdJQMBI+gyfMp5no5ZMFRnrwvCH8wiytnNFbJfRyMardzmv1rt8h5ycccNmy6 7sLdohhkaTklnoPn5zQIsuRtro3eKhPWGe+6EPvN5DOrpnAk/ikeZ/L0bwujc7RG KR1lICYgdID/NpvF/lc4bwrRpWeL2AYKmnVRM4+P1O2/hwwM9vGZQa9mu1p7cYbU 6W7t0Mw/+4quc9AJ3luD4RG1f6D8gdZL9H4wOfWunPzZQ4NCG3Ijqms8zzh9pmEd I3pU7mNcvg== -----END CERTIFICATE-----Generated at Mon Jul 27 15:45:29 2026 by rpki-client