$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft File: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft (raw, json) Hash identifier: nsJWmdXS1v8QLtcmeD7Xb3okS+NF1hNHyRqyPAM4S8E= Subject key identifier: 97:D5:77:7C:54:19:24:C0:0D:EF:98:43:94:C6:4F:6F:28:0A:CB:44 Authority key identifier: EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E Certificate issuer: /CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Certificate serial: 1AA514CBC48FE3A1AD7439BA66AC16A915179D93 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft Manifest number: 41 Signing time: Tue 28 Jul 2026 21:42:48 +0000 Manifest this update: Tue 28 Jul 2026 21:37:48 +0000 Manifest next update: Wed 29 Jul 2026 23:16:48 +0000 Files and hashes: 1: 3231312e3130312e3234302e302f32322d3232203d3e2034383337.roa (hash: WxUpr8cULHOzVrI9C/5gSfR+6HBRy77JfYmpF48itNQ=) 2: 3130332e3135322e37362e302f32332d3233203d3e2034383337.roa (hash: HdQ/94CPm4/WGSMVttHJ+aI+hHmp8gJufVncdHoHJkg=) 3: 3231312e3130312e3139392e302f32342d3234203d3e2039383038.roa (hash: cQY1URll/8UZ/c14EdCWrPX/Wg9vQnf1toLmahOEpL0=) 4: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl (hash: QV6Hl+NPej8wr0clhm+n0wA6UT6C9dLUSg+vyV7rRsU=) 5: 3231312e3130312e3139322e302f32312d3231203d3e2034383337.roa (hash: lIgnJypHCUc9AnMOj72UTe6iBajW3ZDvSTG8zwvjqmY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a5:14:cb:c4:8f:e3:a1:ad:74:39:ba:66:ac:16:a9:15:17:9d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Validity Not Before: Jul 28 21:37:48 2026 GMT Not After : Jul 29 23:16:48 2026 GMT Subject: CN=97D5777C541924C00DEF984394C64F6F280ACB44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:c4:dd:0f:3e:1b:43:2d:8a:aa:81:c2:75: c4:fc:5e:05:f9:c0:e1:4a:8a:83:6f:03:a1:b4:20: a9:71:7e:e2:b7:70:8c:c5:9e:fd:47:36:73:04:54: 28:bb:7a:7b:1a:d6:44:49:46:b8:12:ed:8a:9a:b6: 25:89:b1:4b:d6:8a:0c:0a:34:48:7a:be:a0:35:f0: 83:26:a9:ca:5a:36:83:0f:d7:16:e1:d1:2d:61:62: 39:2c:37:16:47:63:eb:db:92:9b:d1:0c:8b:e1:d4: 15:10:76:ce:1f:7a:b5:e8:7d:46:ef:89:d8:0e:28: e8:f3:bf:05:69:5a:11:ed:27:a3:ec:d7:8e:72:db: 09:f1:d1:c2:36:5b:d0:45:48:7c:84:85:6d:7d:a9: 90:ef:1e:5d:8b:82:68:b2:50:81:b6:3e:9f:ee:0b: 44:57:8d:10:e8:62:b1:5b:76:55:e7:05:9c:95:55: e8:55:06:62:8b:44:7f:81:f9:83:e5:fd:26:c6:af: 26:c7:93:f0:5b:a9:02:44:3f:b3:30:3a:ff:8a:da: 54:b8:95:df:e8:79:a1:c3:9d:2d:05:db:68:c3:4f: e1:84:6d:19:5a:03:9f:15:a0:82:55:3b:4a:a1:db: 8b:c3:37:f3:a6:70:96:f2:9e:36:b8:9f:ff:dd:39: 0b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D5:77:7C:54:19:24:C0:0D:EF:98:43:94:C6:4F:6F:28:0A:CB:44 X509v3 Authority Key Identifier: keyid:EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:4e:ee:22:24:cf:2a:00:3d:58:71:06:ce:20:c3:e0:96:bd: fa:a7:82:54:c5:22:d4:b4:0c:a0:06:fb:4c:8b:a1:20:47:c9: fe:9e:eb:30:54:f6:64:c2:a0:cd:d7:ae:b0:e1:16:fa:a7:91: c7:90:c3:94:15:9a:71:2b:f5:cc:55:86:b4:7a:08:3c:93:a1: 69:f1:8e:75:41:2c:7e:17:31:36:24:9a:82:78:c8:77:11:7e: 07:b4:63:73:28:19:e0:17:de:8c:64:d9:55:e9:31:6a:4c:f2: 1f:df:54:db:c0:62:10:62:3d:ad:a2:6a:2f:74:e5:0f:bf:3a: f4:a8:7e:32:2b:8c:6c:99:d4:6e:e9:50:dd:4e:2c:d2:62:be: d7:c7:98:ab:3e:9e:51:7c:ca:d0:09:e2:c3:af:7d:df:20:50: d7:4f:19:92:37:f6:f8:5b:5b:dd:54:e9:c0:fa:67:40:7f:6c: 80:0e:db:3d:9a:9b:10:21:a3:88:b7:a0:9e:64:55:92:9b:9b: 22:52:f1:87:44:11:37:d5:e4:f1:6a:75:08:69:6f:d6:f8:6e: b6:e2:24:71:0b:13:41:5c:d1:bd:ee:de:41:22:2e:d1:c2:fd: 9a:a4:a4:e0:4a:dd:99:08:29:46:2e:52:d5:79:66:a3:56:61: 2c:3a:d7:6a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGqUUy8SP46GtdDm6ZqwWqRUXnZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1 RkFCNDQ4RTAeFw0yNjA3MjgyMTM3NDhaFw0yNjA3MjkyMzE2NDhaMDMxMTAvBgNV BAMTKDk3RDU3NzdDNTQxOTI0QzAwREVGOTg0Mzk0QzY0RjZGMjgwQUNCNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOZcTdDz4bQy2KqoHCdcT8XgX5 wOFKioNvA6G0IKlxfuK3cIzFnv1HNnMEVCi7ensa1kRJRrgS7YqatiWJsUvWigwK NEh6vqA18IMmqcpaNoMP1xbh0S1hYjksNxZHY+vbkpvRDIvh1BUQds4ferXofUbv idgOKOjzvwVpWhHtJ6Ps145y2wnx0cI2W9BFSHyEhW19qZDvHl2LgmiyUIG2Pp/u C0RXjRDoYrFbdlXnBZyVVehVBmKLRH+B+YPl/SbGrybHk/BbqQJEP7MwOv+K2lS4 ld/oeaHDnS0F22jDT+GEbRlaA58VoIJVO0qh24vDN/OmcJbynja4n//dOQuVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl9V3fFQZJMAN75hDlMZPbygKy0QwHwYDVR0j BBgwFoAU6iQG4JEfBQEesnyx0+2wI1+rRI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzI1ODMzNzYyNTMwOTIxMS8wL0VBMjQwNkUwOTExRjA1MDExRUIyN0NCMUQzRURC MDIzNUZBQjQ0OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1RkFCNDQ4RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcyNTgzMzc2MjUzMDkyMTEvMC9FQTI0MDZFMDkxMUYw NTAxMUVCMjdDQjFEM0VEQjAyMzVGQUI0NDhFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxU7uIiTPKgA9 WHEGziDD4Ja9+qeCVMUi1LQMoAb7TIuhIEfJ/p7rMFT2ZMKgzdeusOEW+qeRx5DD lBWacSv1zFWGtHoIPJOhafGOdUEsfhcxNiSagnjIdxF+B7RjcygZ4BfejGTZVekx akzyH99U28BiEGI9raJqL3TlD7869Kh+MiuMbJnUbulQ3U4s0mK+18eYqz6eUXzK 0Aniw6993yBQ108Zkjf2+Ftb3VTpwPpnQH9sgA7bPZqbECGjiLegnmRVkpubIlLx h0QRN9Xk8Wp1CGlv1vhutuIkcQsTQVzRve7eQSIu0cL9mqSk4ErdmQgpRi5S1Xlm o1ZhLDrXag== -----END CERTIFICATE-----Generated at Wed Jul 29 09:33:59 2026 by rpki-client