$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft File: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft (raw, json) Hash identifier: 1f0d1tkLUs+tH6POMoZlp4mWMwp7mZberbKYn2C+Ukc= Subject key identifier: 94:70:A2:CD:50:8F:FD:BD:BC:8A:82:81:A9:41:55:F8:BD:40:86:EB Authority key identifier: E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 Certificate issuer: /CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Certificate serial: 37FD17E72106C36EC2021468DA6166E29766F350 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft Manifest number: BE Signing time: Fri 25 Sep 2026 23:32:58 +0000 Manifest this update: Fri 25 Sep 2026 23:27:58 +0000 Manifest next update: Tue 29 Sep 2026 03:12:58 +0000 Files and hashes: 1: 3130332e39352e36382e302f32322d3232203d3e203234313338.roa (hash: Gs4UB+TPYIvje+ANsbEoWpB+Qg7CtAqNzOXWq42RpGc=) 2: 3130332e3131392e32382e302f32322d3232203d3e2030.roa (hash: OhggVO6V+L8Uq4dwZzxkFnjLxTIYUZIlj0+gjoYhKf0=) 3: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl (hash: RNd52Qqy4MPg6A5hIHPO9xiEoYuRth2Yy3DK0N29hxI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 03:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:fd:17:e7:21:06:c3:6e:c2:02:14:68:da:61:66:e2:97:66:f3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7 Validity Not Before: Sep 25 23:27:58 2026 GMT Not After : Sep 29 03:12:58 2026 GMT Subject: CN=9470A2CD508FFDBDBC8A8281A94155F8BD4086EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:8b:e4:8f:a2:5f:f1:e1:0c:5c:1f:7a:84:7a: 2b:19:62:05:8e:53:65:b7:26:83:0e:75:2f:d8:44: 05:05:1c:bc:fd:0d:12:3f:c3:8c:53:0f:54:c7:d4: a5:09:53:5b:0b:8d:f6:ce:e8:25:77:15:da:83:0c: 24:d9:54:e3:45:b3:24:14:21:86:a5:2a:c2:95:6b: 64:1e:77:b1:ad:46:b2:d9:10:27:18:59:fd:48:a0: 9f:03:ee:4f:75:ed:5f:2d:b1:67:31:2a:8b:43:a9: 37:bd:41:2a:e0:e1:ed:15:5c:c4:38:df:e3:05:90: d5:20:4a:e7:61:86:aa:58:c8:8d:79:60:50:b3:48: 7e:a7:8d:08:20:cd:04:26:10:f0:a8:0b:2f:d1:43: 8e:21:c2:ed:1e:b2:58:4c:04:cc:b7:44:33:b6:75: 31:9c:4e:53:a7:4c:0d:0f:21:b7:42:bd:3f:11:ae: 65:38:79:12:0c:30:c6:6b:05:e2:50:5e:09:4d:55: 1f:0a:b8:75:15:c5:68:9d:d0:59:ea:13:2a:06:f7: 61:4b:ab:13:82:40:de:15:1e:8b:39:0a:a9:f6:95: e9:7b:9a:1f:6e:07:4e:b5:a4:77:26:5d:4c:c1:c0: 43:ce:8c:e8:12:cf:fa:d2:1b:4b:77:bd:8e:61:4c: 41:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:70:A2:CD:50:8F:FD:BD:BC:8A:82:81:A9:41:55:F8:BD:40:86:EB X509v3 Authority Key Identifier: keyid:E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:be:28:34:83:24:0f:a7:03:61:ab:ef:4d:7f:dd:fd:b2:46: 4c:30:0c:47:04:cd:a2:5b:e4:27:00:f6:51:1d:76:86:bf:4d: 9b:34:91:fa:7e:a7:d5:52:31:aa:6f:7e:5f:b2:61:00:b5:ba: b4:8e:d7:9f:f5:b4:a3:44:48:14:73:2a:fa:09:a3:f1:a3:47: 32:9a:d5:10:f4:a0:d4:0d:b4:10:62:1a:5c:3d:33:06:a6:30: d2:3b:d3:09:ec:af:fa:d4:07:21:36:89:a9:8d:92:46:57:cb: 7e:81:20:b4:ca:aa:e3:25:3f:4a:76:39:d7:57:19:d6:ea:77: 07:1f:4e:e1:4b:4a:92:1f:55:fe:8c:9e:29:0c:4c:9b:9d:1b: e1:f1:9f:96:20:e5:76:36:59:ce:55:fb:1a:9f:4d:92:c3:71: 62:4b:c7:f9:0f:0d:d3:ed:f1:b3:6c:38:33:40:45:b6:63:39: 71:d6:5d:de:11:69:34:59:9a:0e:7f:c2:6c:a4:cd:f5:bf:18: 04:ef:02:be:97:39:7c:99:ff:d3:6e:e6:44:ef:37:18:f8:ed: 4d:ad:87:59:00:c8:f3:be:67:31:08:19:a3:e7:c4:1a:dc:a9: 69:18:a3:54:4d:14:24:d4:05:bc:fe:7c:ce:c1:ba:19:66:6f: 22:43:6d:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN/0X5yEGw27CAhRo2mFm4pdm81AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5 NEIwQjdFNzAeFw0yNjA5MjUyMzI3NThaFw0yNjA5MjkwMzEyNThaMDMxMTAvBgNV BAMTKDk0NzBBMkNENTA4RkZEQkRCQzhBODI4MUE5NDE1NUY4QkQ0MDg2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3i+SPol/x4QxcH3qEeisZYgWO U2W3JoMOdS/YRAUFHLz9DRI/w4xTD1TH1KUJU1sLjfbO6CV3FdqDDCTZVONFsyQU IYalKsKVa2Qed7GtRrLZECcYWf1IoJ8D7k917V8tsWcxKotDqTe9QSrg4e0VXMQ4 3+MFkNUgSudhhqpYyI15YFCzSH6njQggzQQmEPCoCy/RQ44hwu0eslhMBMy3RDO2 dTGcTlOnTA0PIbdCvT8RrmU4eRIMMMZrBeJQXglNVR8KuHUVxWid0FnqEyoG92FL qxOCQN4VHos5Cqn2lel7mh9uB061pHcmXUzBwEPOjOgSz/rSG0t3vY5hTEGxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlHCizVCP/b28ioKBqUFV+L1AhuswHwYDVR0j BBgwFoAU5+qTjIb9ok4kSV8ZUP2Ij5Swt+cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUyNDczNzg4MzA3ODY1OS8wL0U3RUE5MzhDODZGREEyNEUyNDQ5NUYxOTUwRkQ4 ODhGOTRCMEI3RTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTdFQTkzOEM4NkZEQTI0RTI0NDk1RjE5NTBGRDg4OEY5NEIwQjdFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MjQ3Mzc4ODMwNzg2NTkvMC9FN0VBOTM4Qzg2RkRB MjRFMjQ0OTVGMTk1MEZEODg4Rjk0QjBCN0U3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALb4oNIMkD6cD YavvTX/d/bJGTDAMRwTNolvkJwD2UR12hr9NmzSR+n6n1VIxqm9+X7JhALW6tI7X n/W0o0RIFHMq+gmj8aNHMprVEPSg1A20EGIaXD0zBqYw0jvTCeyv+tQHITaJqY2S RlfLfoEgtMqq4yU/SnY511cZ1up3Bx9O4UtKkh9V/oyeKQxMm50b4fGfliDldjZZ zlX7Gp9NksNxYkvH+Q8N0+3xs2w4M0BFtmM5cdZd3hFpNFmaDn/CbKTN9b8YBO8C vpc5fJn/027mRO83GPjtTa2HWQDI875nMQgZo+fEGtypaRijVE0UJNQFvP58zsG6 GWZvIkNtlg== -----END CERTIFICATE-----Generated at Sun Sep 27 16:06:27 2026 by rpki-client