$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft File: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft (raw, json) Hash identifier: 2Mz66eX1X4GHWOJRR40F/9IxwZKUI2ULKwXy5NN8qCA= Subject key identifier: 72:DA:5D:15:0D:F5:BD:3A:14:1D:76:00:52:D5:F1:6E:35:3A:F0:CB Authority key identifier: EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E Certificate issuer: /CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Certificate serial: 7DF04528060DC689F39B19C120DE1F3428973949 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft Manifest number: 3B Signing time: Fri 24 Jul 2026 07:10:36 +0000 Manifest this update: Fri 24 Jul 2026 07:05:36 +0000 Manifest next update: Sat 25 Jul 2026 10:38:36 +0000 Files and hashes: 1: 3231312e3130312e3234302e302f32322d3232203d3e2034383337.roa (hash: WxUpr8cULHOzVrI9C/5gSfR+6HBRy77JfYmpF48itNQ=) 2: 3231312e3130312e3139392e302f32342d3234203d3e2039383038.roa (hash: cQY1URll/8UZ/c14EdCWrPX/Wg9vQnf1toLmahOEpL0=) 3: 3231312e3130312e3139322e302f32312d3231203d3e2034383337.roa (hash: lIgnJypHCUc9AnMOj72UTe6iBajW3ZDvSTG8zwvjqmY=) 4: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl (hash: ZlrKkrYSBiSfPPOhkGcfcN/rJkGrXxzOhCmER0k2pSU=) 5: 3130332e3135322e37362e302f32332d3233203d3e2034383337.roa (hash: HdQ/94CPm4/WGSMVttHJ+aI+hHmp8gJufVncdHoHJkg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f0:45:28:06:0d:c6:89:f3:9b:19:c1:20:de:1f:34:28:97:39:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Validity Not Before: Jul 24 07:05:36 2026 GMT Not After : Jul 25 10:38:36 2026 GMT Subject: CN=72DA5D150DF5BD3A141D760052D5F16E353AF0CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:e9:18:10:05:b4:ed:51:68:db:9e:1c:73: 72:84:a6:34:20:dd:98:ff:25:2a:bd:50:c7:07:5e: bd:26:f4:ad:3c:5a:6b:97:95:03:ec:20:bc:cd:e5: f8:36:38:7a:83:34:13:6a:e8:ba:2f:48:6a:0f:a6: cf:e5:35:66:c8:14:57:aa:88:25:23:da:18:70:15: e7:48:47:b6:b7:d9:de:92:98:f7:43:fd:62:bd:6d: 77:6e:6a:81:16:a3:51:f6:ee:56:ca:77:e6:09:64: f1:2d:b7:16:4d:e9:a9:2b:84:cc:84:98:d8:50:9e: e7:e3:11:dc:6c:8e:9c:b5:67:7b:09:bf:49:29:6e: 91:9e:7c:a1:41:b8:b0:20:36:b5:62:e5:79:68:3c: ef:16:1a:70:6b:99:d9:56:de:76:b0:b0:e2:56:6f: 35:27:ca:2e:bb:b0:55:0a:cc:82:e5:85:bf:04:b8: 29:f1:2b:56:78:ba:75:08:23:8f:e3:f9:95:71:e6: a0:24:e5:21:ca:8d:c6:dd:79:d6:f1:18:3a:66:4a: 1c:05:8b:c0:07:a6:84:6d:13:cb:46:a2:61:51:4d: 1e:8e:6c:08:7c:ee:a8:05:3c:f9:ba:a5:ab:27:bf: b2:81:c7:43:91:fc:40:5f:60:2b:b1:89:3f:65:75: 56:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DA:5D:15:0D:F5:BD:3A:14:1D:76:00:52:D5:F1:6E:35:3A:F0:CB X509v3 Authority Key Identifier: keyid:EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6f:97:1c:2c:1e:3a:a4:f1:b0:34:6b:be:e6:ac:8c:c2:b3: a0:35:44:5f:cb:20:55:02:80:8f:96:98:70:c2:e7:f1:5d:3c: a7:01:a5:26:3b:09:e2:c8:99:47:b6:cf:e1:fd:ce:aa:80:c4: 27:dc:3a:d2:23:ae:75:ab:05:89:a5:c5:07:76:7d:7f:17:93: 71:85:a4:86:d4:4e:43:3c:47:f2:a4:36:d6:3c:7f:81:e5:21: cc:3f:96:8b:c1:58:35:bc:45:fc:63:af:8c:43:d7:07:05:60: 99:20:c4:03:5d:b8:7b:a6:99:3f:a5:e5:e6:04:a0:f6:ab:e5: db:e9:3a:e1:47:4d:d8:91:d7:87:98:8d:4e:e7:ee:27:1a:8b: f0:f1:aa:aa:9e:d0:b6:dc:56:30:1c:b8:e9:3a:d3:0b:e7:71: 32:06:31:ba:ec:20:a1:a5:0f:4d:24:dc:ac:ae:99:0e:a9:e6: f9:af:0f:a7:d0:c6:27:d5:68:8c:4e:e8:ca:e8:84:35:83:6d: 98:e3:04:6c:dd:92:03:1b:fc:9b:67:6f:90:26:19:3a:87:e4: 71:bb:8f:e2:9c:38:97:d1:05:fc:05:08:63:e9:d3:0e:3b:e9: da:f0:4b:a5:ea:1d:17:7b:6f:bd:aa:42:ac:c4:cc:02:be:23: 41:f7:2a:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUffBFKAYNxonzmxnBIN4fNCiXOUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1 RkFCNDQ4RTAeFw0yNjA3MjQwNzA1MzZaFw0yNjA3MjUxMDM4MzZaMDMxMTAvBgNV BAMTKDcyREE1RDE1MERGNUJEM0ExNDFENzYwMDUyRDVGMTZFMzUzQUYwQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwukYEAW07VFo254cc3KEpjQg 3Zj/JSq9UMcHXr0m9K08WmuXlQPsILzN5fg2OHqDNBNq6LovSGoPps/lNWbIFFeq iCUj2hhwFedIR7a32d6SmPdD/WK9bXduaoEWo1H27lbKd+YJZPEttxZN6akrhMyE mNhQnufjEdxsjpy1Z3sJv0kpbpGefKFBuLAgNrVi5XloPO8WGnBrmdlW3nawsOJW bzUnyi67sFUKzILlhb8EuCnxK1Z4unUII4/j+ZVx5qAk5SHKjcbdedbxGDpmShwF i8AHpoRtE8tGomFRTR6ObAh87qgFPPm6pasnv7KBx0OR/EBfYCuxiT9ldVatAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUctpdFQ31vToUHXYAUtXxbjU68MswHwYDVR0j BBgwFoAU6iQG4JEfBQEesnyx0+2wI1+rRI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzI1ODMzNzYyNTMwOTIxMS8wL0VBMjQwNkUwOTExRjA1MDExRUIyN0NCMUQzRURC MDIzNUZBQjQ0OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1RkFCNDQ4RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcyNTgzMzc2MjUzMDkyMTEvMC9FQTI0MDZFMDkxMUYw NTAxMUVCMjdDQjFEM0VEQjAyMzVGQUI0NDhFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW+XHCweOqTx sDRrvuasjMKzoDVEX8sgVQKAj5aYcMLn8V08pwGlJjsJ4siZR7bP4f3OqoDEJ9w6 0iOudasFiaXFB3Z9fxeTcYWkhtROQzxH8qQ21jx/geUhzD+Wi8FYNbxF/GOvjEPX BwVgmSDEA124e6aZP6Xl5gSg9qvl2+k64UdN2JHXh5iNTufuJxqL8PGqqp7QttxW MBy46TrTC+dxMgYxuuwgoaUPTSTcrK6ZDqnm+a8Pp9DGJ9VojE7oyuiENYNtmOME bN2SAxv8m2dvkCYZOofkcbuP4pw4l9EF/AUIY+nTDjvp2vBLpeodF3tvvapCrMTM Ar4jQfcquA== -----END CERTIFICATE-----Generated at Fri Jul 24 14:54:20 2026 by rpki-client