$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft File: EA1B92DE3A39218C88302E877CD7677E74606B38.mft (raw, json) Hash identifier: 5Ms0u4kNx8nBzh8DIRrsBpdAxXiEcl9zdhDoDfgtDS8= Subject key identifier: 50:29:61:0D:E6:5A:A1:42:B5:3D:64:A4:DB:CA:77:95:75:48:0A:96 Authority key identifier: EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38 Certificate issuer: /CN=EA1B92DE3A39218C88302E877CD7677E74606B38 Certificate serial: 28AB0B47929D319E26DF664DF69D3080D2CF004C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft Manifest number: 1D Signing time: Thu 26 Mar 2026 12:33:28 +0000 Manifest this update: Thu 26 Mar 2026 12:28:28 +0000 Manifest next update: Fri 27 Mar 2026 15:34:28 +0000 Files and hashes: 1: EA1B92DE3A39218C88302E877CD7677E74606B38.crl (hash: UTNt4g7bu9tIngSxVp3jozM3sC3xQ56+xDbQJkEVUm0=) 2: 34352e3132342e34342e302f32322d3234203d3e20313333393438.roa (hash: W2W+xhdN9PF6a7mxKiNnIobZLPOTheU9GKZlZMyeevI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ab:0b:47:92:9d:31:9e:26:df:66:4d:f6:9d:30:80:d2:cf:00:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA1B92DE3A39218C88302E877CD7677E74606B38 Validity Not Before: Mar 26 12:28:28 2026 GMT Not After : Mar 27 15:34:28 2026 GMT Subject: CN=5029610DE65AA142B53D64A4DBCA779575480A96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b6:dd:09:5c:bb:4f:32:5f:fd:b7:de:01:26: 97:cb:c1:44:7f:d6:6a:cc:7a:bf:20:97:21:16:43: 80:38:45:62:2b:1c:25:1b:c1:ad:bc:c6:74:5a:12: 9c:9c:b0:85:68:ee:5c:73:96:6f:2d:76:c1:62:98: 0c:09:75:8f:f2:ef:24:ce:8b:a1:a3:5f:1e:9f:04: f0:cf:11:9f:78:fb:f7:70:db:49:a0:38:71:83:8b: 97:79:7c:42:54:0b:48:51:d7:11:76:10:62:6e:23: 45:40:63:03:3c:e7:a3:8d:e9:20:88:c2:93:8c:ab: e1:78:d5:c6:fc:ef:8a:4c:1d:bd:86:a9:09:21:fc: c9:56:1d:32:43:41:fa:6c:d9:d5:98:a8:26:14:53: 8c:69:5b:5a:9b:a0:7e:c5:64:3a:0b:b8:64:d6:39: 95:9b:74:b4:10:0a:73:92:b1:cd:b5:c0:c4:44:93: b3:2f:fe:2e:a5:c0:eb:c7:6b:5f:95:c4:0e:81:f8: 8e:6c:99:8a:b8:fe:45:74:9d:92:84:7f:e0:1b:6f: a0:77:e7:7f:38:d2:9f:ea:97:42:e8:01:0c:56:76: c2:18:63:88:07:79:53:d7:47:6c:e5:1a:51:79:12: 44:dd:73:fa:f4:29:56:38:3c:34:80:0b:bd:59:d2: 14:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:29:61:0D:E6:5A:A1:42:B5:3D:64:A4:DB:CA:77:95:75:48:0A:96 X509v3 Authority Key Identifier: keyid:EA:1B:92:DE:3A:39:21:8C:88:30:2E:87:7C:D7:67:7E:74:60:6B:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA1B92DE3A39218C88302E877CD7677E74606B38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1082116609209794561/0/EA1B92DE3A39218C88302E877CD7677E74606B38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:cb:7c:18:0f:c0:07:41:54:41:ea:9b:b7:9d:d9:f9:62:8a: d6:1a:c3:a2:c3:06:39:6d:0b:2d:b1:98:3e:c6:12:6a:a7:51: a4:82:08:07:37:6d:7a:d3:f5:47:db:85:58:76:19:ed:2e:8e: 13:76:0d:7a:5f:35:27:55:9c:31:e5:2f:b5:d8:e7:6e:9c:6e: 2b:ec:06:33:f1:44:4a:15:38:e1:87:bb:25:4d:ca:53:12:85: 00:ab:15:b9:3e:c0:6e:80:30:3b:c3:42:e1:b3:15:3d:e1:5d: 90:e2:de:49:ef:d8:8c:15:07:24:f2:77:a3:20:16:f0:4c:8b: 68:19:bf:c9:d2:a9:80:c8:53:e9:33:a7:ca:80:2a:57:65:9f: 42:86:4e:76:cb:cf:da:6d:f7:19:f4:bb:fd:21:5b:9f:25:e3: 65:45:78:ac:25:7e:b3:a8:51:0d:57:35:df:86:1e:07:0e:97: 4a:56:38:47:af:20:74:94:46:8c:f3:33:3a:47:b0:f4:7a:80: cf:59:be:27:89:3d:98:ca:5d:99:9d:a6:35:c5:26:57:98:7f: f5:a0:b5:b4:5b:f4:9b:c1:4e:1e:f1:0c:bf:f4:6e:63:5c:52: e0:60:88:3f:a9:7e:ff:13:af:91:65:a4:84:cc:18:19:73:30: 96:a8:40:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKKsLR5KdMZ4m32ZN9p0wgNLPAEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUExQjkyREUzQTM5MjE4Qzg4MzAyRTg3N0NENzY3N0U3 NDYwNkIzODAeFw0yNjAzMjYxMjI4MjhaFw0yNjAzMjcxNTM0MjhaMDMxMTAvBgNV BAMTKDUwMjk2MTBERTY1QUExNDJCNTNENjRBNERCQ0E3Nzk1NzU0ODBBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUtt0JXLtPMl/9t94BJpfLwUR/ 1mrMer8glyEWQ4A4RWIrHCUbwa28xnRaEpycsIVo7lxzlm8tdsFimAwJdY/y7yTO i6GjXx6fBPDPEZ94+/dw20mgOHGDi5d5fEJUC0hR1xF2EGJuI0VAYwM856ON6SCI wpOMq+F41cb874pMHb2GqQkh/MlWHTJDQfps2dWYqCYUU4xpW1qboH7FZDoLuGTW OZWbdLQQCnOSsc21wMREk7Mv/i6lwOvHa1+VxA6B+I5smYq4/kV0nZKEf+Abb6B3 53840p/ql0LoAQxWdsIYY4gHeVPXR2zlGlF5EkTdc/r0KVY4PDSAC71Z0hQHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUClhDeZaoUK1PWSk28p3lXVICpYwHwYDVR0j BBgwFoAU6huS3jo5IYyIMC6HfNdnfnRgazgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MjExNjYwOTIwOTc5NDU2MS8wL0VBMUI5MkRFM0EzOTIxOEM4ODMwMkU4NzdDRDc2 NzdFNzQ2MDZCMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUExQjkyREUzQTM5MjE4Qzg4MzAyRTg3N0NENzY3N0U3NDYwNkIzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODIxMTY2MDkyMDk3OTQ1NjEvMC9FQTFCOTJERTNBMzky MThDODgzMDJFODc3Q0Q3Njc3RTc0NjA2QjM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8t8GA/AB0FU Qeqbt53Z+WKK1hrDosMGOW0LLbGYPsYSaqdRpIIIBzdtetP1R9uFWHYZ7S6OE3YN el81J1WcMeUvtdjnbpxuK+wGM/FEShU44Ye7JU3KUxKFAKsVuT7AboAwO8NC4bMV PeFdkOLeSe/YjBUHJPJ3oyAW8EyLaBm/ydKpgMhT6TOnyoAqV2WfQoZOdsvP2m33 GfS7/SFbnyXjZUV4rCV+s6hRDVc134YeBw6XSlY4R68gdJRGjPMzOkew9HqAz1m+ J4k9mMpdmZ2mNcUmV5h/9aC1tFv0m8FOHvEMv/RuY1xS4GCIP6l+/xOvkWWkhMwY GXMwlqhAyQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:32:49 2026 by rpki-client