$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft File: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft (raw, json) Hash identifier: 0tJzHaOL6m1473Z5gi8LgLFSsap1tPmp5miButVOS6A= Subject key identifier: 17:57:EB:71:F2:7D:CD:FA:A5:DF:B6:68:88:D7:6F:D3:97:36:0A:56 Authority key identifier: E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 Certificate issuer: /CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Certificate serial: 08CE754C49966B4CA32C92094825497B67221053 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft Manifest number: 87 Signing time: Tue 28 Jul 2026 04:51:04 +0000 Manifest this update: Tue 28 Jul 2026 04:46:04 +0000 Manifest next update: Wed 29 Jul 2026 07:30:04 +0000 Files and hashes: 1: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl (hash: RyXhkLVDelyquy3c39ersLkt47WqONFULYW9njYnqRI=) 2: 3130332e3131392e32382e302f32322d3232203d3e2030.roa (hash: OhggVO6V+L8Uq4dwZzxkFnjLxTIYUZIlj0+gjoYhKf0=) 3: 3130332e39352e36382e302f32322d3232203d3e203234313338.roa (hash: Gs4UB+TPYIvje+ANsbEoWpB+Qg7CtAqNzOXWq42RpGc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ce:75:4c:49:96:6b:4c:a3:2c:92:09:48:25:49:7b:67:22:10:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Validity Not Before: Jul 28 04:46:04 2026 GMT Not After : Jul 29 07:30:04 2026 GMT Subject: CN=1757EB71F27DCDFAA5DFB66888D76FD397360A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8b:78:be:bc:96:ed:43:97:57:01:b8:81:03: 23:f8:cc:e8:56:62:4b:22:ee:bc:0c:67:4c:08:c5: 85:67:61:2d:d0:38:c1:7a:59:1b:9a:bf:c8:78:8a: 2b:1a:35:14:56:97:6d:b4:83:bf:e7:46:30:c8:1d: cd:06:eb:8f:91:8b:fc:c9:07:1f:b7:5b:a6:96:c4: 2c:ca:2e:47:b0:7c:af:84:b0:6d:38:f7:b7:a7:a9: 6c:0e:cd:00:cb:7f:ef:ba:09:35:bd:40:b2:5d:7a: 15:65:9d:55:e1:ca:fa:66:eb:fd:58:c6:ef:bc:ed: df:b3:63:90:a8:f4:ed:d7:86:f9:72:99:0c:1a:06: 97:bd:e8:7d:05:60:7e:10:b1:d9:81:e3:01:69:31: 40:ae:f0:4a:76:89:e6:f6:59:18:21:11:99:c2:98: 96:f2:5a:8f:37:b7:9b:39:89:b6:d3:2a:b1:09:d1: f6:24:c2:02:f2:40:64:17:66:c9:04:fd:f3:89:e9: a2:41:21:a6:9f:43:fe:f4:93:14:f4:b1:81:bb:ec: eb:8a:a0:ed:67:c4:57:64:c9:4b:65:0a:82:7e:72: 08:e4:96:6c:15:1b:e0:66:dd:e2:34:e9:eb:0d:80: 7a:1e:11:0d:ec:77:62:06:63:6e:9a:67:0e:79:54: 70:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:57:EB:71:F2:7D:CD:FA:A5:DF:B6:68:88:D7:6F:D3:97:36:0A:56 X509v3 Authority Key Identifier: keyid:E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:54:7e:f4:78:54:d1:c9:a8:4e:98:09:ad:bb:18:b9:d8:05: 9c:0a:3d:59:40:06:1c:c9:ee:2b:c8:98:b6:c4:bd:3c:aa:a7: ff:6c:e2:1e:5b:30:1f:57:f9:2f:53:7d:0d:ba:2e:c9:4a:33: 9b:c3:71:aa:67:33:eb:13:62:f5:fd:00:33:49:d6:7a:33:12: 9a:7e:a8:4b:5e:3c:0d:72:6c:58:3f:57:d0:09:00:93:1c:03: 76:92:0b:f0:85:ad:7d:20:c2:68:fc:20:a3:3b:75:9d:c3:25: 0b:8d:11:2c:ba:d6:6a:c4:00:8c:9d:33:e1:59:f7:d1:ae:ba: 07:b7:ce:b4:e1:5f:7e:ff:c1:4c:ff:21:f9:75:5a:b8:3d:d7: 67:13:ad:08:27:69:95:f2:d0:6c:05:0b:95:00:5a:7a:80:69: 52:38:f8:bc:4f:0e:6f:83:fe:4f:84:b5:3a:87:c6:51:c1:78: f9:9a:a9:09:a8:68:cf:e9:f7:73:66:66:c7:dc:39:e4:c3:17: a6:df:38:91:59:99:6e:90:8e:49:4b:b8:f0:cc:1a:16:04:f6: d5:0d:ce:39:61:e0:b6:08:8e:ea:6b:19:41:b2:58:3f:8d:88: df:a4:41:a3:c4:38:c0:1a:4c:de:66:aa:38:65:a6:ab:e3:be: 5e:72:0d:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCM51TEmWa0yjLJIJSCVJe2ciEFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5 NEIwQjdFNzAeFw0yNjA3MjgwNDQ2MDRaFw0yNjA3MjkwNzMwMDRaMDMxMTAvBgNV BAMTKDE3NTdFQjcxRjI3RENERkFBNURGQjY2ODg4RDc2RkQzOTczNjBBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRi3i+vJbtQ5dXAbiBAyP4zOhW Yksi7rwMZ0wIxYVnYS3QOMF6WRuav8h4iisaNRRWl220g7/nRjDIHc0G64+Ri/zJ Bx+3W6aWxCzKLkewfK+EsG0497enqWwOzQDLf++6CTW9QLJdehVlnVXhyvpm6/1Y xu+87d+zY5Co9O3XhvlymQwaBpe96H0FYH4QsdmB4wFpMUCu8Ep2ieb2WRghEZnC mJbyWo83t5s5ibbTKrEJ0fYkwgLyQGQXZskE/fOJ6aJBIaafQ/70kxT0sYG77OuK oO1nxFdkyUtlCoJ+cgjklmwVG+Bm3eI06esNgHoeEQ3sd2IGY26aZw55VHBHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUF1frcfJ9zfql37ZoiNdv05c2ClYwHwYDVR0j BBgwFoAU5+qTjIb9ok4kSV8ZUP2Ij5Swt+cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUyNDczNzg4MzA3ODY1OS8wL0U3RUE5MzhDODZGREEyNEUyNDQ5NUYxOTUwRkQ4 ODhGOTRCMEI3RTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5NEIwQjdFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MjQ3Mzc4ODMwNzg2NTkvMC9FN0VBOTM4Qzg2RkRB MjRFMjQ0OTVGMTk1MEZEODg4Rjk0QjBCN0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFR+9HhU0cmo TpgJrbsYudgFnAo9WUAGHMnuK8iYtsS9PKqn/2ziHlswH1f5L1N9DbouyUozm8Nx qmcz6xNi9f0AM0nWejMSmn6oS148DXJsWD9X0AkAkxwDdpIL8IWtfSDCaPwgozt1 ncMlC40RLLrWasQAjJ0z4Vn30a66B7fOtOFffv/BTP8h+XVauD3XZxOtCCdplfLQ bAULlQBaeoBpUjj4vE8Ob4P+T4S1OofGUcF4+ZqpCahoz+n3c2Zmx9w55MMXpt84 kVmZbpCOSUu48MwaFgT21Q3OOWHgtgiO6msZQbJYP42I36RBo8Q4wBpM3maqOGWm q+O+XnIN1Q== -----END CERTIFICATE-----Generated at Tue Jul 28 19:38:44 2026 by rpki-client