$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft File: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft (raw, json) Hash identifier: /OhDuHvaR0SkMQrw5bUN1H7banDY357fUODgY1Vtbb0= Subject key identifier: DA:A3:DA:3C:DC:0C:3B:81:94:D1:14:8A:A3:97:3E:D3:95:B2:0E:3C Authority key identifier: EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E Certificate issuer: /CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Certificate serial: 40264C5A0297AB1A687EA19D0AAF2704AAA2C67F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft Manifest number: 7A Signing time: Sat 03 Oct 2026 01:16:11 +0000 Manifest this update: Sat 03 Oct 2026 01:11:11 +0000 Manifest next update: Tue 06 Oct 2026 10:11:11 +0000 Files and hashes: 1: 3130332e3135322e37362e302f32332d3233203d3e2034383337.roa (hash: HdQ/94CPm4/WGSMVttHJ+aI+hHmp8gJufVncdHoHJkg=) 2: 3231312e3130312e3139392e302f32342d3234203d3e2039383038.roa (hash: cQY1URll/8UZ/c14EdCWrPX/Wg9vQnf1toLmahOEpL0=) 3: EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl (hash: 5m9ndjg1mebZDu6op4o2VcNsg8gSB27FxR5pZV4SESA=) 4: 3231312e3130312e3234302e302f32322d3232203d3e2034383337.roa (hash: WxUpr8cULHOzVrI9C/5gSfR+6HBRy77JfYmpF48itNQ=) 5: 3231312e3130312e3139322e302f32312d3231203d3e2034383337.roa (hash: lIgnJypHCUc9AnMOj72UTe6iBajW3ZDvSTG8zwvjqmY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 10:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:26:4c:5a:02:97:ab:1a:68:7e:a1:9d:0a:af:27:04:aa:a2:c6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EA2406E0911F05011EB27CB1D3EDB0235FAB448E Validity Not Before: Oct 3 01:11:11 2026 GMT Not After : Oct 6 10:11:11 2026 GMT Subject: CN=DAA3DA3CDC0C3B8194D1148AA3973ED395B20E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:86:cd:93:9a:78:ac:cb:8b:1d:06:51:b3:45: 37:35:94:0e:ed:4f:f8:73:e0:62:7e:4d:8e:bc:4b: f0:10:cb:f3:bd:42:75:3e:96:54:a1:f8:d1:f0:34: 11:f5:70:cd:e8:58:07:4b:98:be:63:b6:38:4f:2d: ba:cf:f4:02:32:f7:0d:59:2b:db:51:f1:93:b0:7e: 65:a1:91:73:51:b6:70:0f:72:ef:17:bf:de:15:5e: aa:5f:72:c8:bc:be:b1:b7:a1:99:a3:65:ee:51:8c: 9b:cf:9b:1c:0e:1e:8a:85:73:f1:06:aa:f4:cf:bb: 67:a1:9f:90:d9:29:83:37:86:d6:5f:d2:2b:2f:b5: f9:8d:9a:4a:cd:40:23:80:3c:be:19:92:1a:05:ee: 81:be:7b:0f:d1:ba:45:83:4c:75:68:bb:f8:54:7f: da:fd:4c:d3:8a:fe:f4:f7:66:ac:78:e7:e7:7c:1d: d2:f1:c5:5c:55:92:f9:59:75:89:ce:49:d5:04:aa: 52:84:81:ce:a9:23:75:0b:cf:f8:27:e6:72:0f:17: 2f:9b:3a:40:b2:ad:90:a1:e5:a6:1b:a0:f4:f5:bf: 92:dc:b4:d3:5c:f9:c7:6c:af:bc:66:2a:72:83:b8: 24:e2:b8:60:3f:f4:d7:bd:d9:71:b1:9a:e4:a8:68: 4f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A3:DA:3C:DC:0C:3B:81:94:D1:14:8A:A3:97:3E:D3:95:B2:0E:3C X509v3 Authority Key Identifier: keyid:EA:24:06:E0:91:1F:05:01:1E:B2:7C:B1:D3:ED:B0:23:5F:AB:44:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117258337625309211/0/EA2406E0911F05011EB27CB1D3EDB0235FAB448E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c5:78:03:49:5d:9a:8f:4a:d5:46:81:36:d5:79:15:ef:eb: 2f:75:60:4e:4c:86:c1:1b:f1:9a:ef:01:d1:44:0d:b3:ac:db: 47:f8:a0:18:7e:cd:3e:72:50:b6:e8:65:d3:83:46:08:e8:14: 45:01:93:19:70:69:d9:81:25:e9:e8:66:1f:2d:92:d3:2b:f3: 9f:71:4e:8f:b5:ce:c0:2f:32:61:3e:b7:f9:86:fb:49:e2:23: f3:f9:8c:f6:74:1e:11:2f:a9:a3:a7:9b:47:cb:a5:95:61:5c: 81:cd:ce:e5:2e:7f:07:ac:d5:6b:55:0d:24:a3:fe:e6:70:c9: 9f:6a:c7:f0:ba:9c:8f:a9:5b:eb:2f:8e:82:76:28:69:74:e5: 7c:38:69:9d:7e:b3:a1:41:b4:d4:57:76:2c:83:d1:af:53:8b: 2d:d2:87:b7:f2:a0:19:00:d7:31:57:20:7a:c4:2f:9e:c0:3e: 9b:1c:e3:98:e8:ea:02:e9:73:ca:66:a5:39:a3:ae:e0:89:25: 34:47:fb:37:89:41:93:de:72:de:b7:05:fb:33:c9:3e:a6:4b: 7c:4f:fb:7a:e4:65:1a:a4:15:8c:92:9c:8c:3e:06:ba:fe:c8: e9:95:da:c6:6b:61:97:f1:5c:61:f7:30:ed:78:8f:9e:c5:5a: 62:e9:d3:87 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQCZMWgKXqxpofqGdCq8nBKqixn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1 RkFCNDQ4RTAeFw0yNjEwMDMwMTExMTFaFw0yNjEwMDYxMDExMTFaMDMxMTAvBgNV BAMTKERBQTNEQTNDREMwQzNCODE5NEQxMTQ4QUEzOTczRUQzOTVCMjBFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlhs2Tmnisy4sdBlGzRTc1lA7t T/hz4GJ+TY68S/AQy/O9QnU+llSh+NHwNBH1cM3oWAdLmL5jtjhPLbrP9AIy9w1Z K9tR8ZOwfmWhkXNRtnAPcu8Xv94VXqpfcsi8vrG3oZmjZe5RjJvPmxwOHoqFc/EG qvTPu2ehn5DZKYM3htZf0isvtfmNmkrNQCOAPL4ZkhoF7oG+ew/RukWDTHVou/hU f9r9TNOK/vT3Zqx45+d8HdLxxVxVkvlZdYnOSdUEqlKEgc6pI3ULz/gn5nIPFy+b OkCyrZCh5aYboPT1v5LctNNc+cdsr7xmKnKDuCTiuGA/9Ne92XGxmuSoaE/HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2qPaPNwMO4GU0RSKo5c+05WyDjwwHwYDVR0j BBgwFoAU6iQG4JEfBQEesnyx0+2wI1+rRI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzI1ODMzNzYyNTMwOTIxMS8wL0VBMjQwNkUwOTExRjA1MDExRUIyN0NCMUQzRURC MDIzNUZBQjQ0OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUEyNDA2RTA5MTFGMDUwMTFFQjI3Q0IxRDNFREIwMjM1RkFCNDQ4RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcyNTgzMzc2MjUzMDkyMTEvMC9FQTI0MDZFMDkxMUYw NTAxMUVCMjdDQjFEM0VEQjAyMzVGQUI0NDhFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcV4A0ldmo9K 1UaBNtV5Fe/rL3VgTkyGwRvxmu8B0UQNs6zbR/igGH7NPnJQtuhl04NGCOgURQGT GXBp2YEl6ehmHy2S0yvzn3FOj7XOwC8yYT63+Yb7SeIj8/mM9nQeES+po6ebR8ul lWFcgc3O5S5/B6zVa1UNJKP+5nDJn2rH8Lqcj6lb6y+OgnYoaXTlfDhpnX6zoUG0 1Fd2LIPRr1OLLdKHt/KgGQDXMVcgesQvnsA+mxzjmOjqAulzymalOaOu4IklNEf7 N4lBk95y3rcF+zPJPqZLfE/7euRlGqQVjJKcjD4Guv7I6ZXaxmthl/FcYfcw7XiP nsVaYunThw== -----END CERTIFICATE-----Generated at Mon Oct 5 06:51:49 2026 by rpki-client