$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft File: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft (raw, json) Hash identifier: /YbmLz1mXhP+x8P1erNBj+P/LG6ajZafV21cTdDuEbs= Subject key identifier: 26:85:EC:B4:DB:63:50:A5:D4:F2:76:39:13:AF:2E:B4:11:07:ED:8C Authority key identifier: EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E Certificate issuer: /CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Certificate serial: 65C362D0A657ED5D6A1F43E1A8687B84937D946C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft Manifest number: 03 Signing time: Thu 11 Jun 2026 19:54:20 +0000 Manifest this update: Thu 11 Jun 2026 19:49:20 +0000 Manifest next update: Fri 12 Jun 2026 23:51:20 +0000 Files and hashes: 1: 3231312e3130312e3139322e302f32312d3231203d3e2034383337.roa (hash: lIgnJypHCUc9AnMOj72UTe6iBajW3ZDvSTG8zwvjqmY=) 2: 3231312e3130312e3234302e302f32322d3232203d3e2034383337.roa (hash: WxUpr8cULHOzVrI9C/5gSfR+6HBRy77JfYmpF48itNQ=) 3: 3130332e3135322e37362e302f32332d3233203d3e2034383337.roa (hash: HdQ/94CPm4/WGSMVttHJ+aI+hHmp8gJufVncdHoHJkg=) 4: 3231312e3130312e3139392e302f32342d3234203d3e2039383038.roa (hash: cQY1URll/8UZ/c14EdCWrPX/Wg9vQnf1toLmahOEpL0=) 5: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl (hash: dbKnoYsFi/S6lgub63oWYpQqUiyIDMHsFh0gWhF4Noc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 23:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c3:62:d0:a6:57:ed:5d:6a:1f:43:e1:a8:68:7b:84:93:7d:94:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Validity Not Before: Jun 11 19:49:20 2026 GMT Not After : Jun 12 23:51:20 2026 GMT Subject: CN=2685ECB4DB6350A5D4F2763913AF2EB41107ED8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:dd:b3:1a:e7:e9:53:dd:07:ff:4e:15:58: 74:b3:78:7f:a2:01:df:4d:d6:8b:e1:af:f4:ec:c8: 41:dc:44:eb:da:b4:98:df:4b:35:34:90:43:18:34: f0:ab:49:75:17:50:40:cf:4e:44:81:96:33:3d:fb: 08:7e:84:0a:06:5c:0a:cf:cb:db:ef:75:4a:74:98: 93:61:7c:15:ca:46:1a:05:69:7f:61:02:c5:92:31: 42:fc:6d:cb:c5:04:49:9e:e1:f6:16:64:3c:7c:59: 0b:85:d3:7e:cc:9a:bf:e3:aa:9e:1b:b2:eb:da:41: 04:21:07:f8:d9:71:ae:5d:fb:78:91:22:a7:93:48: 8d:2b:cf:a1:cb:8b:60:f9:7f:f0:4c:d0:62:c5:34: 20:d5:fb:59:90:7d:d7:5d:28:64:ed:97:2b:d9:3d: 06:67:8b:44:bf:77:f6:8e:3f:af:8b:79:a2:27:fd: 54:97:24:93:80:4a:d1:2b:f6:7d:67:8e:7d:5a:d2: 02:a7:a7:53:ce:a8:d3:88:98:35:40:5b:fd:cf:f1: d3:1d:b1:ee:99:79:84:cb:f2:c4:ad:1c:a8:8c:4a: 35:1e:47:82:34:bf:c2:9e:d2:e0:b6:6d:af:b5:0e: 73:34:ba:54:dd:62:4e:98:e8:e7:b5:57:85:2e:c9: 9e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:85:EC:B4:DB:63:50:A5:D4:F2:76:39:13:AF:2E:B4:11:07:ED:8C X509v3 Authority Key Identifier: keyid:EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:9d:4a:3b:a7:22:10:28:9b:67:36:97:36:72:21:de:de:82: 97:7d:c1:a2:77:98:ec:9b:b4:76:ad:89:cb:51:2b:25:04:cc: 60:da:d1:ec:0d:da:9d:4a:d1:fb:25:4f:db:b3:51:e8:a2:c5: dc:ce:de:3f:85:a0:18:1c:7c:01:99:39:ce:21:79:6b:5f:0c: 65:b6:a8:72:d6:6e:ec:f0:86:d4:2d:0d:3e:85:2d:dc:26:2e: f8:54:d2:f5:c2:f3:87:25:90:a3:d8:51:00:ce:b5:e6:55:65: 6f:52:38:8c:9c:77:a8:9b:ba:2b:84:1c:8c:af:27:ec:16:f7: 69:9b:af:92:c8:71:9c:21:49:79:69:99:f5:db:3f:7c:4a:b8: f0:07:66:e7:56:39:79:7b:f6:be:2b:80:e5:6d:01:36:2e:c9: 14:e0:da:f9:86:9e:4a:30:49:97:90:be:ce:54:62:25:e5:59: 94:19:f0:cb:aa:6b:77:26:21:05:82:84:d8:07:c6:ba:60:af: b9:87:d5:c8:db:9c:86:c6:b0:ea:8d:dd:78:14:44:4d:01:c0: 47:6b:a5:68:d4:b5:81:ea:00:50:47:10:cc:06:d9:88:a6:d5: 0c:8b:6d:b0:80:93:92:49:f3:52:56:81:2d:34:ee:de:aa:7e: 65:8b:8d:ec -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZcNi0KZX7V1qH0PhqGh7hJN9lGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1 RkFCNDQ4RTAeFw0yNjA2MTExOTQ5MjBaFw0yNjA2MTIyMzUxMjBaMDMxMTAvBgNV BAMTKDI2ODVFQ0I0REI2MzUwQTVENEYyNzYzOTEzQUYyRUI0MTEwN0VEOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD992zGufpU90H/04VWHSzeH+i Ad9N1ovhr/TsyEHcROvatJjfSzU0kEMYNPCrSXUXUEDPTkSBljM9+wh+hAoGXArP y9vvdUp0mJNhfBXKRhoFaX9hAsWSMUL8bcvFBEme4fYWZDx8WQuF037Mmr/jqp4b suvaQQQhB/jZca5d+3iRIqeTSI0rz6HLi2D5f/BM0GLFNCDV+1mQfdddKGTtlyvZ PQZni0S/d/aOP6+LeaIn/VSXJJOAStEr9n1njn1a0gKnp1POqNOImDVAW/3P8dMd se6ZeYTL8sStHKiMSjUeR4I0v8Ke0uC2ba+1DnM0ulTdYk6Y6Oe1V4UuyZ6LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJoXstNtjUKXU8nY5E68utBEH7YwwHwYDVR0j BBgwFoAU6iQG4JEfBQEesnyx0+2wI1+rRI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzI1ODMzNzYyNTMwOTIxMS8wL0VBMjQwNkUwOTExRjA1MDExRUIyN0NCMUQzRURC MDIzNUZBQjQ0OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1RkFCNDQ4RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcyNTgzMzc2MjUzMDkyMTEvMC9FQTI0MDZFMDkxMUYw NTAxMUVCMjdDQjFEM0VEQjAyMzVGQUI0NDhFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJ1KO6ciECib ZzaXNnIh3t6Cl33BoneY7Ju0dq2Jy1ErJQTMYNrR7A3anUrR+yVP27NR6KLF3M7e P4WgGBx8AZk5ziF5a18MZbaoctZu7PCG1C0NPoUt3CYu+FTS9cLzhyWQo9hRAM61 5lVlb1I4jJx3qJu6K4QcjK8n7Bb3aZuvkshxnCFJeWmZ9ds/fEq48Adm51Y5eXv2 viuA5W0BNi7JFODa+YaeSjBJl5C+zlRiJeVZlBnwy6prdyYhBYKE2AfGumCvuYfV yNuchsaw6o3deBRETQHAR2ulaNS1geoAUEcQzAbZiKbVDIttsICTkknzUlaBLTTu 3qp+ZYuN7A== -----END CERTIFICATE-----Generated at Fri Jun 12 07:48:26 2026 by rpki-client