$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft File: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft (raw, json) Hash identifier: OyFauw+Rx/HUQiEL5Lop3aq9EVCAdw3aR32V+1/r0vk= Subject key identifier: 69:7D:DE:AE:28:45:45:15:BD:17:C5:E0:42:EA:2D:D1:F4:2C:F9:12 Authority key identifier: EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E Certificate issuer: /CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Certificate serial: 469FB1CF06A2A0A437989FD9075EA01A7965A600 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft Manifest number: 70 Signing time: Thu 10 Sep 2026 13:31:41 +0000 Manifest this update: Thu 10 Sep 2026 13:26:41 +0000 Manifest next update: Sun 13 Sep 2026 20:30:41 +0000 Files and hashes: 1: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl (hash: GGAC/8Cw08ssgM3pgwVMkY7Lph5m1e+BZ8fWMwexC7I=) 2: 3231312e3130312e3139322e302f32312d3231203d3e2034383337.roa (hash: lIgnJypHCUc9AnMOj72UTe6iBajW3ZDvSTG8zwvjqmY=) 3: 3231312e3130312e3234302e302f32322d3232203d3e2034383337.roa (hash: WxUpr8cULHOzVrI9C/5gSfR+6HBRy77JfYmpF48itNQ=) 4: 3130332e3135322e37362e302f32332d3233203d3e2034383337.roa (hash: HdQ/94CPm4/WGSMVttHJ+aI+hHmp8gJufVncdHoHJkg=) 5: 3231312e3130312e3139392e302f32342d3234203d3e2039383038.roa (hash: cQY1URll/8UZ/c14EdCWrPX/Wg9vQnf1toLmahOEpL0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:9f:b1:cf:06:a2:a0:a4:37:98:9f:d9:07:5e:a0:1a:79:65:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Validity Not Before: Sep 10 13:26:41 2026 GMT Not After : Sep 13 20:30:41 2026 GMT Subject: CN=697DDEAE28454515BD17C5E042EA2DD1F42CF912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:be:a7:ce:1e:92:fc:cb:00:dd:2d:cd:ec:dc: f8:51:3b:63:dd:5f:f4:e8:66:57:82:37:74:d1:53: 70:9e:90:2d:34:98:ea:4e:d0:5b:3c:22:c9:31:5b: 9c:96:86:12:6d:4d:5d:bb:6c:af:b0:04:02:55:b8: ef:56:c9:b3:99:4c:49:af:40:15:e4:b1:c0:65:d9: 18:83:96:be:f3:96:a2:67:64:09:30:a9:db:ae:b6: 7e:3c:a2:e4:43:7f:0f:5e:8d:29:99:35:b2:bc:fc: d4:94:c2:26:04:23:9c:5e:6c:57:9b:57:94:92:36: 7c:0d:b9:02:b8:9b:23:26:54:27:79:d9:4d:90:c4: 22:59:b5:85:fe:4c:15:bb:f6:91:19:11:37:91:cf: 30:a2:8c:16:a6:9c:d6:9f:c0:5c:d0:f2:43:45:4e: 42:0c:35:d9:a3:24:e1:e6:c4:34:81:fc:9d:31:4b: e7:b9:bf:7a:dd:58:9b:03:af:3f:f2:f6:88:84:d3: d0:e8:4d:ca:80:a5:a7:ca:e6:20:d3:44:29:62:6f: 8b:1c:16:3e:63:94:2a:40:e8:1f:7f:18:4a:8f:9c: 0b:fd:70:1b:a6:9c:43:5c:e6:a1:65:dd:29:42:6e: 29:e4:fb:cb:e7:f0:8d:ce:d6:b8:5c:70:a9:81:22: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7D:DE:AE:28:45:45:15:BD:17:C5:E0:42:EA:2D:D1:F4:2C:F9:12 X509v3 Authority Key Identifier: keyid:EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:03:d3:ab:67:9a:7d:50:69:b4:1d:7a:d9:a4:83:84:29:22: 5a:e4:f7:c5:59:f9:4e:b0:aa:31:87:18:ac:07:6f:30:93:56: 4c:54:1f:5f:34:d6:9f:04:48:16:e2:7f:fb:42:35:cf:8f:5f: 87:2d:75:36:3f:71:a9:46:5f:be:e5:f5:5b:dc:00:12:5f:fb: 50:b8:40:d9:62:da:23:8a:8e:9f:ad:97:06:62:97:cc:c5:de: 40:bb:18:99:48:ca:df:5f:27:8b:f4:ab:d4:26:82:57:d5:ba: 7e:ea:be:f1:75:a8:26:e7:4d:3f:61:70:9d:2e:c2:cb:5f:08: 91:d8:f7:b7:2f:f2:20:8d:4e:f0:3b:91:7a:d7:db:37:02:6e: 0f:64:30:78:39:15:84:84:a8:8b:0c:1b:cc:04:71:ad:ec:52: d9:98:cb:2b:37:07:ba:fa:66:89:8b:b9:8e:80:31:f8:0b:cc: 9c:12:b1:1d:5e:6e:68:2e:09:5c:4d:d8:1d:78:32:93:31:fc: 1d:1f:de:51:5a:91:46:19:4b:96:9b:5e:31:dd:18:ef:7d:32: 83:6d:4f:75:72:e2:8e:4f:35:d3:52:47:cf:c0:f6:19:23:01: a3:9a:0d:fb:66:fb:20:55:d4:16:38:0d:19:a7:a6:c3:17:e7: bf:1e:94:c5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURp+xzwaioKQ3mJ/ZB16gGnllpgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1 RkFCNDQ4RTAeFw0yNjA5MTAxMzI2NDFaFw0yNjA5MTMyMDMwNDFaMDMxMTAvBgNV BAMTKDY5N0RERUFFMjg0NTQ1MTVCRDE3QzVFMDQyRUEyREQxRjQyQ0Y5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgvqfOHpL8ywDdLc3s3PhRO2Pd X/ToZleCN3TRU3CekC00mOpO0Fs8IskxW5yWhhJtTV27bK+wBAJVuO9WybOZTEmv QBXkscBl2RiDlr7zlqJnZAkwqduutn48ouRDfw9ejSmZNbK8/NSUwiYEI5xebFeb V5SSNnwNuQK4myMmVCd52U2QxCJZtYX+TBW79pEZETeRzzCijBamnNafwFzQ8kNF TkIMNdmjJOHmxDSB/J0xS+e5v3rdWJsDrz/y9oiE09DoTcqApafK5iDTRClib4sc Fj5jlCpA6B9/GEqPnAv9cBumnENc5qFl3SlCbink+8vn8I3O1rhccKmBIrSlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaX3erihFRRW9F8XgQuot0fQs+RIwHwYDVR0j BBgwFoAU6iQG4JEfBQEesnyx0+2wI1+rRI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzI1ODMzNzYyNTMwOTIxMS8wL0VBMjQwNkUwOTExRjA1MDExRUIyN0NCMUQzRURC MDIzNUZBQjQ0OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1RkFCNDQ4RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcyNTgzMzc2MjUzMDkyMTEvMC9FQTI0MDZFMDkxMUYw NTAxMUVCMjdDQjFEM0VEQjAyMzVGQUI0NDhFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwPTq2eafVBp tB162aSDhCkiWuT3xVn5TrCqMYcYrAdvMJNWTFQfXzTWnwRIFuJ/+0I1z49fhy11 Nj9xqUZfvuX1W9wAEl/7ULhA2WLaI4qOn62XBmKXzMXeQLsYmUjK318ni/Sr1CaC V9W6fuq+8XWoJudNP2FwnS7Cy18Ikdj3ty/yII1O8DuRetfbNwJuD2QweDkVhISo iwwbzARxrexS2ZjLKzcHuvpmiYu5joAx+AvMnBKxHV5uaC4JXE3YHXgykzH8HR/e UVqRRhlLlpteMd0Y730yg21PdXLijk8101JHz8D2GSMBo5oN+2b7IFXUFjgNGaem wxfnvx6UxQ== -----END CERTIFICATE-----Generated at Thu Sep 10 18:44:38 2026 by rpki-client