$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft File: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft (raw, json) Hash identifier: q2VVFxSZdGsfY3e7CLQ8VbjVLjZfYgndQJ/iXfHZW5A= Subject key identifier: 04:E2:5D:40:5F:89:DE:FA:91:99:7B:7D:CB:50:BB:AC:7A:78:53:76 Authority key identifier: E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 Certificate issuer: /CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Certificate serial: 5F63137C4168979DCB7D17F461C8B390A2E12FDC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft Manifest number: BF Signing time: Mon 28 Sep 2026 03:15:19 +0000 Manifest this update: Mon 28 Sep 2026 03:10:19 +0000 Manifest next update: Thu 01 Oct 2026 11:02:19 +0000 Files and hashes: 1: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl (hash: +mmKeveg/OcU6cvNumiP7CiiRd+LzP2O4EPMo21aMsA=) 2: 3130332e3131392e32382e302f32322d3232203d3e2030.roa (hash: OhggVO6V+L8Uq4dwZzxkFnjLxTIYUZIlj0+gjoYhKf0=) 3: 3130332e39352e36382e302f32322d3232203d3e203234313338.roa (hash: Gs4UB+TPYIvje+ANsbEoWpB+Qg7CtAqNzOXWq42RpGc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 11:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:63:13:7c:41:68:97:9d:cb:7d:17:f4:61:c8:b3:90:a2:e1:2f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Validity Not Before: Sep 28 03:10:19 2026 GMT Not After : Oct 1 11:02:19 2026 GMT Subject: CN=04E25D405F89DEFA91997B7DCB50BBAC7A785376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7c:3f:65:4a:f4:16:c3:0f:43:fd:c3:98:88: a8:f4:b7:08:42:ef:a2:31:bf:77:f1:0b:7a:8d:31: 78:92:7e:47:a6:8f:96:2a:da:10:9b:2a:41:9b:f1: e9:05:10:fc:ae:9f:c3:e9:d3:7c:27:df:16:4d:32: 76:37:20:80:c2:0a:46:54:6d:a7:22:81:9f:61:7a: 55:7f:10:16:9a:69:df:51:d8:a0:29:03:f5:98:19: 58:e5:0e:aa:14:19:b5:79:a2:09:ae:52:b7:97:4b: 2e:07:50:e1:38:3b:79:44:34:75:4e:c4:13:c8:87: 08:92:3f:89:27:e9:31:b4:9f:22:dc:78:b7:69:78: cc:ce:e4:25:0d:8d:e3:86:26:49:54:f9:b6:41:a5: 7f:39:50:59:2a:2f:68:78:bc:09:c4:4d:f7:c8:8d: f8:b7:26:e0:06:73:b2:e6:5c:26:fd:40:60:72:df: c7:03:87:a6:37:78:0b:50:8b:88:76:a9:56:5e:88: 29:56:59:6f:3d:92:4f:4d:21:04:3d:92:4d:4a:ec: fb:4a:60:51:44:2b:b2:29:c5:ec:26:f4:ca:49:9c: 37:4b:2a:41:b9:37:28:1c:3e:c5:e5:58:cb:75:20: 22:d1:ca:71:2c:72:7c:3a:2b:a0:bb:90:31:42:eb: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E2:5D:40:5F:89:DE:FA:91:99:7B:7D:CB:50:BB:AC:7A:78:53:76 X509v3 Authority Key Identifier: keyid:E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:98:bb:de:4d:af:b5:1d:a8:e9:51:9c:fa:2b:60:6d:a3:dd: 44:d0:6b:28:f4:f5:e2:8a:8d:cf:5f:d7:e1:3d:b0:d0:9b:74: f0:65:24:6f:7f:65:24:d7:0e:00:e8:db:fd:3c:e3:b8:92:e1: 3f:07:cf:41:2a:26:a9:ba:c9:7b:e5:44:67:f0:d0:f2:e7:18: 9f:c4:df:d4:d0:61:45:22:3c:99:47:87:ef:32:12:2a:27:95: 19:15:15:33:36:de:70:fd:ee:b7:7a:91:d3:ac:e2:73:27:fb: ed:92:0e:a6:9c:de:3c:db:fa:ad:4b:3e:77:eb:62:13:42:a0: b3:1e:2e:fe:31:53:c0:67:e4:cd:46:a4:ff:f0:11:a9:c1:c6: 67:dd:24:4b:d0:fb:5f:4f:fa:a0:59:6f:a7:7f:5e:d8:43:bd: 80:6b:bb:14:fa:32:d6:fa:c9:4d:e8:89:3b:4b:71:ec:9d:cd: fd:a9:56:02:cc:e5:31:e7:7c:dd:52:44:56:28:3a:63:bc:1a: 7d:26:0b:1b:ed:82:f7:96:ab:7c:e6:42:e0:bd:1b:c5:cc:e9: e0:6c:b6:18:53:61:13:35:f9:78:95:b6:f7:40:f9:70:21:e9: 6d:6e:b9:86:1e:5c:da:7a:13:d2:d0:a8:19:a3:93:e2:19:8b: de:be:52:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX2MTfEFol53LfRf0YcizkKLhL9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5 NEIwQjdFNzAeFw0yNjA5MjgwMzEwMTlaFw0yNjEwMDExMTAyMTlaMDMxMTAvBgNV BAMTKDA0RTI1RDQwNUY4OURFRkE5MTk5N0I3RENCNTBCQkFDN0E3ODUzNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfD9lSvQWww9D/cOYiKj0twhC 76Ixv3fxC3qNMXiSfkemj5Yq2hCbKkGb8ekFEPyun8Pp03wn3xZNMnY3IIDCCkZU bacigZ9helV/EBaaad9R2KApA/WYGVjlDqoUGbV5ogmuUreXSy4HUOE4O3lENHVO xBPIhwiSP4kn6TG0nyLceLdpeMzO5CUNjeOGJklU+bZBpX85UFkqL2h4vAnETffI jfi3JuAGc7LmXCb9QGBy38cDh6Y3eAtQi4h2qVZeiClWWW89kk9NIQQ9kk1K7PtK YFFEK7Ipxewm9MpJnDdLKkG5NygcPsXlWMt1ICLRynEscnw6K6C7kDFC6/0pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBOJdQF+J3vqRmXt9y1C7rHp4U3YwHwYDVR0j BBgwFoAU5+qTjIb9ok4kSV8ZUP2Ij5Swt+cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUyNDczNzg4MzA3ODY1OS8wL0U3RUE5MzhDODZGREEyNEUyNDQ5NUYxOTUwRkQ4 ODhGOTRCMEI3RTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5NEIwQjdFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MjQ3Mzc4ODMwNzg2NTkvMC9FN0VBOTM4Qzg2RkRB MjRFMjQ0OTVGMTk1MEZEODg4Rjk0QjBCN0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpi73k2vtR2o 6VGc+itgbaPdRNBrKPT14oqNz1/X4T2w0Jt08GUkb39lJNcOAOjb/TzjuJLhPwfP QSomqbrJe+VEZ/DQ8ucYn8Tf1NBhRSI8mUeH7zISKieVGRUVMzbecP3ut3qR06zi cyf77ZIOppzePNv6rUs+d+tiE0Kgsx4u/jFTwGfkzUak//ARqcHGZ90kS9D7X0/6 oFlvp39e2EO9gGu7FPoy1vrJTeiJO0tx7J3N/alWAszlMed83VJEVig6Y7wafSYL G+2C95arfOZC4L0bxczp4Gy2GFNhEzX5eJW290D5cCHpbW65hh5c2noT0tCoGaOT 4hmL3r5Sxg== -----END CERTIFICATE-----Generated at Tue Sep 29 01:22:29 2026 by rpki-client