$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft File: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft (raw, json) Hash identifier: PMDrtDDcAV5WMJBh0kMwsrNhe9/y0APIFCLfTiTxy5M= Subject key identifier: 51:0A:2E:29:10:58:53:F7:4F:DD:21:E6:CD:11:DA:64:1B:1B:49:E8 Authority key identifier: E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 Certificate issuer: /CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Certificate serial: 78373574E597CC0809FEC5F4F80C3786C02E6EA3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft Manifest number: 4B Signing time: Sat 13 Jun 2026 10:36:45 +0000 Manifest this update: Sat 13 Jun 2026 10:31:45 +0000 Manifest next update: Sun 14 Jun 2026 11:20:45 +0000 Files and hashes: 1: 3130332e3131392e32382e302f32322d3232203d3e2030.roa (hash: OhggVO6V+L8Uq4dwZzxkFnjLxTIYUZIlj0+gjoYhKf0=) 2: 3130332e39352e36382e302f32322d3232203d3e203234313338.roa (hash: Gs4UB+TPYIvje+ANsbEoWpB+Qg7CtAqNzOXWq42RpGc=) 3: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl (hash: HHNurlpjSvWPXRFKxenANl7PVyZzGb/1VKM81FskYoM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:20:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:37:35:74:e5:97:cc:08:09:fe:c5:f4:f8:0c:37:86:c0:2e:6e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Validity Not Before: Jun 13 10:31:45 2026 GMT Not After : Jun 14 11:20:45 2026 GMT Subject: CN=510A2E29105853F74FDD21E6CD11DA641B1B49E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:64:7e:53:a6:31:4a:1d:a0:b9:55:d6:50:0d: 7b:94:ac:d3:94:32:d3:56:f9:ba:9a:3b:af:64:c8: f4:d3:69:21:c3:87:c1:83:11:c1:92:9e:ec:30:3a: 40:03:31:53:5e:a9:87:38:07:e3:6c:8b:72:6b:ae: 25:f5:8b:c8:55:4b:ca:94:d4:a7:f8:6a:7a:c0:53: 89:41:18:08:c6:9f:a5:06:4a:6f:e7:f0:b5:cd:e7: 98:d9:30:ac:22:33:57:f6:08:9f:d6:c0:57:9c:b3: c6:1d:23:1f:42:8b:df:db:9c:71:e9:ea:99:ed:6d: ed:84:83:ed:2f:c1:ed:d5:7b:32:ae:f8:48:30:92: fe:e7:dd:99:b8:75:75:55:f2:c5:10:9f:de:21:de: a3:20:b0:98:72:57:41:a5:7e:15:8b:0e:f2:30:e3: 4f:ae:54:7c:76:46:c3:9d:9e:73:bf:22:af:0d:38: cf:9f:51:2f:0a:22:f1:bf:e5:0b:21:17:ee:76:9b: 28:4d:ad:2a:4a:42:b3:8f:da:5a:ee:11:0d:4a:b4: 4e:bc:f6:a6:f6:c4:42:af:a3:fd:0c:47:fb:d8:d8: 14:5d:74:d7:1a:95:30:f7:1d:9d:03:43:e0:85:de: 7d:59:ad:f8:d8:84:54:16:ca:4b:bf:44:26:72:85: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0A:2E:29:10:58:53:F7:4F:DD:21:E6:CD:11:DA:64:1B:1B:49:E8 X509v3 Authority Key Identifier: keyid:E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:da:09:1d:ae:46:8f:81:87:4a:78:78:3c:53:6b:80:c3:cb: 70:3c:15:76:82:64:20:14:f4:e1:21:12:b7:84:4e:c9:bc:9b: 62:46:b6:38:8d:a2:55:5f:83:03:f4:ee:09:95:8d:a8:a2:6c: 4e:cd:b5:61:b7:0e:29:af:10:ad:60:20:02:a5:53:e3:d4:9d: 8e:85:f1:f0:32:b0:98:f2:0c:70:b4:28:97:04:d7:8f:7b:0c: 54:67:22:da:48:88:27:01:25:e5:69:97:1d:7f:e6:da:b5:2d: d5:97:fa:5f:56:7c:87:8a:49:5f:56:05:7a:50:31:8a:0b:8d: 3c:07:a6:bd:05:36:8e:3c:e5:7c:19:37:6d:df:27:94:ec:e9: e0:05:66:e6:ec:d8:b9:ad:af:b0:7b:32:f4:3d:f4:7a:ba:27: a8:03:4f:cf:3b:21:a0:9d:c4:e4:c8:08:cb:26:0b:95:f1:ec: bd:ac:d7:3d:b8:fe:55:1b:bf:f7:2f:ec:7b:86:7b:ca:1d:32: d7:57:bc:83:bb:6e:27:3b:71:72:45:d7:4e:b7:98:31:72:a3: 2f:8e:2e:be:a1:f9:2f:2c:dc:fa:f2:01:9b:97:14:79:8a:16: cd:2a:31:55:3a:74:80:7f:68:5c:f2:0c:d7:43:4b:96:95:63: 49:ec:34:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeDc1dOWXzAgJ/sX0+Aw3hsAubqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5 NEIwQjdFNzAeFw0yNjA2MTMxMDMxNDVaFw0yNjA2MTQxMTIwNDVaMDMxMTAvBgNV BAMTKDUxMEEyRTI5MTA1ODUzRjc0RkREMjFFNkNEMTFEQTY0MUIxQjQ5RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZH5TpjFKHaC5VdZQDXuUrNOU MtNW+bqaO69kyPTTaSHDh8GDEcGSnuwwOkADMVNeqYc4B+Nsi3JrriX1i8hVS8qU 1Kf4anrAU4lBGAjGn6UGSm/n8LXN55jZMKwiM1f2CJ/WwFecs8YdIx9Ci9/bnHHp 6pntbe2Eg+0vwe3VezKu+Egwkv7n3Zm4dXVV8sUQn94h3qMgsJhyV0GlfhWLDvIw 40+uVHx2RsOdnnO/Iq8NOM+fUS8KIvG/5QshF+52myhNrSpKQrOP2lruEQ1KtE68 9qb2xEKvo/0MR/vY2BRddNcalTD3HZ0DQ+CF3n1ZrfjYhFQWyku/RCZyhV8xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUQouKRBYU/dP3SHmzRHaZBsbSegwHwYDVR0j BBgwFoAU5+qTjIb9ok4kSV8ZUP2Ij5Swt+cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUyNDczNzg4MzA3ODY1OS8wL0U3RUE5MzhDODZGREEyNEUyNDQ5NUYxOTUwRkQ4 ODhGOTRCMEI3RTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5NEIwQjdFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MjQ3Mzc4ODMwNzg2NTkvMC9FN0VBOTM4Qzg2RkRB MjRFMjQ0OTVGMTk1MEZEODg4Rjk0QjBCN0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0toJHa5Gj4GH Snh4PFNrgMPLcDwVdoJkIBT04SESt4ROybybYka2OI2iVV+DA/TuCZWNqKJsTs21 YbcOKa8QrWAgAqVT49SdjoXx8DKwmPIMcLQolwTXj3sMVGci2kiIJwEl5WmXHX/m 2rUt1Zf6X1Z8h4pJX1YFelAxiguNPAemvQU2jjzlfBk3bd8nlOzp4AVm5uzYua2v sHsy9D30eronqANPzzshoJ3E5MgIyyYLlfHsvazXPbj+VRu/9y/se4Z7yh0y11e8 g7tuJztxckXXTreYMXKjL44uvqH5Lyzc+vIBm5cUeYoWzSoxVTp0gH9oXPIM10NL lpVjSew0WA== -----END CERTIFICATE-----Generated at Sat Jun 13 17:16:48 2026 by rpki-client