$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft File: EA1B92DE3A39218C88302E877CD7677E74606B38.mft (raw, json) Hash identifier: 9kZSvJWZMWSVSxRBPL/zQSFLnx2ET2RwGSPmrmtQpYk= Subject key identifier: D7:23:E6:56:03:84:E2:75:0E:F0:EB:BF:7E:EB:FE:9D:5A:D9:F4:12 Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38 Certificate issuer: /CN=EA1B92DE3A39218C88302E877CD7677E74606B38 Certificate serial: 10631FB3615FB251A94127B860516A9D9F0AFD22 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft Manifest number: 3A Signing time: Fri 17 Apr 2026 09:29:42 +0000 Manifest this update: Fri 17 Apr 2026 09:24:42 +0000 Manifest next update: Sat 18 Apr 2026 10:53:42 +0000 Files and hashes: 1: 34352e3132342e34342e302f32322d3234203d3e20313333393438.roa (hash: W2W+xhdN9PF6a7mxKiNnIobZLPOTheU9GKZlZMyeevI=) 2: EA1B92DE3A39218C88302E877CD7677E74606B38.crl (hash: mBgxRE0YHN403ffG3tVqcW6ecq55yGF04MxMJQ1zulI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:63:1f:b3:61:5f:b2:51:a9:41:27:b8:60:51:6a:9d:9f:0a:fd:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38 Validity Not Before: Apr 17 09:24:42 2026 GMT Not After : Apr 18 10:53:42 2026 GMT Subject: CN=D723E6560384E2750EF0EBBF7EEBFE9D5AD9F412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4f:c9:32:51:d1:0a:25:1d:ae:43:91:a2:14: c5:1a:e7:08:ed:9f:f5:1c:a0:82:32:52:8f:7d:d3: ff:21:24:e1:ff:24:a7:3d:d8:d7:6d:d5:c8:d8:e6: aa:5d:54:52:03:bd:8c:c2:93:35:11:a0:da:55:99: d2:99:89:3d:29:2e:c2:99:9f:34:3c:05:35:6d:25: a4:99:6f:03:7f:a2:f7:a3:e4:90:d0:eb:d2:8c:25: dc:30:a5:be:1c:11:57:50:01:f5:e1:80:d3:44:b8: 4e:56:44:62:d1:ff:68:5a:3e:44:e3:e6:94:0f:d7: 44:69:ac:87:71:30:13:80:dc:fb:45:be:0e:df:68: c3:ff:3e:94:bb:07:9b:22:f4:7f:a2:af:d8:9f:0c: 87:56:0f:c5:c4:d8:95:4e:81:1a:56:2e:0b:7a:fa: 86:e0:d3:e7:2c:3f:5f:f9:2c:a1:72:77:aa:f5:5c: d5:0b:88:fd:d6:bc:eb:0c:7e:59:cb:ca:64:ce:f6: 2b:a8:4a:f8:4f:20:38:9b:cf:57:b0:b3:19:83:59: 88:ca:7e:31:ec:e0:93:2d:33:bd:ca:8f:9f:ed:57: 6b:45:6a:34:94:67:77:5d:ca:be:ff:d1:e4:23:74: 64:e9:41:d3:62:4d:89:4a:03:70:1f:1b:98:92:82: d1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:23:E6:56:03:84:E2:75:0E:F0:EB:BF:7E:EB:FE:9D:5A:D9:F4:12 X509v3 Authority Key Identifier: keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6f:89:4e:90:54:78:6d:3d:a7:8d:cb:06:5f:19:54:00:0d: ec:0e:24:e8:d7:a7:65:38:3f:c9:65:e1:31:96:cd:db:93:7f: 00:c4:70:3b:b3:7c:44:43:9e:f0:9c:03:69:82:16:42:0f:98: 31:6a:76:fe:4f:37:72:96:22:1c:2b:de:c7:dc:dd:59:69:c3: 91:a3:3e:5b:3e:07:2f:b3:45:4c:c9:61:84:4d:40:e5:83:3d: e8:bd:72:bc:a2:fe:73:b2:45:19:40:c4:10:a4:46:ce:ae:61: fd:92:43:1b:38:b7:7c:d0:5d:20:6b:72:c2:71:c4:92:0b:9c: e6:0a:74:ae:fb:aa:f7:07:61:8c:d0:22:04:1c:f4:61:db:35: c3:36:0f:e7:28:75:fc:2b:8c:9c:5b:00:cd:ec:7c:0f:e5:64: 5d:45:47:2c:eb:9f:f9:bc:9b:fa:09:2b:2c:6f:7b:8f:d4:2e: c3:8f:d5:77:67:6d:cc:2a:c7:32:06:e9:b3:15:49:ee:10:16: 33:db:6e:01:f4:63:76:7e:08:c5:dc:48:f6:f3:f7:3f:56:a6: 0a:0f:b1:f1:b1:af:98:a5:0a:66:43:e2:fb:da:b1:f7:95:5f: 61:d6:35:6b:33:9d:e6:f5:67:f7:40:57:bf:9d:52:6d:65:19: 72:f9:76:33 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEGMfs2FfslGpQSe4YFFqnZ8K/SIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExQjkyREUzQTM5MjE4Qzg4MzAyRTg3N0NENzY3N0U3 NDYwNkIzODAeFw0yNjA0MTcwOTI0NDJaFw0yNjA0MTgxMDUzNDJaMDMxMTAvBgNV BAMTKEQ3MjNFNjU2MDM4NEUyNzUwRUYwRUJCRjdFRUJGRTlENUFEOUY0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTT8kyUdEKJR2uQ5GiFMUa5wjt n/UcoIIyUo990/8hJOH/JKc92Ndt1cjY5qpdVFIDvYzCkzURoNpVmdKZiT0pLsKZ nzQ8BTVtJaSZbwN/ovej5JDQ69KMJdwwpb4cEVdQAfXhgNNEuE5WRGLR/2haPkTj 5pQP10RprIdxMBOA3PtFvg7faMP/PpS7B5si9H+ir9ifDIdWD8XE2JVOgRpWLgt6 +obg0+csP1/5LKFyd6r1XNULiP3WvOsMflnLymTO9iuoSvhPIDibz1ewsxmDWYjK fjHs4JMtM73Kj5/tV2tFajSUZ3ddyr7/0eQjdGTpQdNiTYlKA3AfG5iSgtENAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1yPmVgOE4nUO8Ou/fuv+nVrZ9BIwHwYDVR0j BBgwFoAU6huS3jo5IYyIMC6HfNdnfnRgazgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MjExNjYwOTIwOTc5NDU2MS8wL0VBMUI5MkRFM0EzOTIxOEM4ODMwMkU4NzdDRDc2 NzdFNzQ2MDZCMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUExQjkyREUzQTM5MjE4Qzg4MzAyRTg3N0NENzY3N0U3NDYwNkIzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODIxMTY2MDkyMDk3OTQ1NjEvMC9FQTFCOTJERTNBMzky MThDODgzMDJFODc3Q0Q3Njc3RTc0NjA2QjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmW+JTpBUeG09 p43LBl8ZVAAN7A4k6NenZTg/yWXhMZbN25N/AMRwO7N8REOe8JwDaYIWQg+YMWp2 /k83cpYiHCvex9zdWWnDkaM+Wz4HL7NFTMlhhE1A5YM96L1yvKL+c7JFGUDEEKRG zq5h/ZJDGzi3fNBdIGtywnHEkguc5gp0rvuq9wdhjNAiBBz0Yds1wzYP5yh1/CuM nFsAzex8D+VkXUVHLOuf+byb+gkrLG97j9Quw4/Vd2dtzCrHMgbpsxVJ7hAWM9tu AfRjdn4IxdxI9vP3P1amCg+x8bGvmKUKZkPi+9qx95VfYdY1azOd5vVn90BXv51S bWUZcvl2Mw== -----END CERTIFICATE-----Generated at Fri Apr 17 21:20:34 2026 by rpki-client