$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft File: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft (raw, json) Hash identifier: wJU6ZxLx5rMbRjV5e/uWcWkv6MNy9Oym2vFg0jUKawg= Subject key identifier: D8:0C:22:36:DE:74:21:F4:33:73:A0:95:79:39:A6:B2:2E:AC:AE:8A Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Certificate serial: 42A536AEFC819CB609434EF7B91D57013D464380 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft Manifest number: FB Signing time: Thu 23 Jul 2026 15:23:59 +0000 Manifest this update: Thu 23 Jul 2026 15:18:59 +0000 Manifest next update: Fri 24 Jul 2026 18:33:59 +0000 Files and hashes: 1: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (hash: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=) 2: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (hash: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=) 3: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (hash: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI=) 4: 323430333a356238303a3a2f33322d3332203d3e2030.roa (hash: 46/tjO14ih7NL7c3FlsSLZTwfgKKd0SVKFNff9MQoNM=) 5: 3130332e32342e3232382e302f32342d3234203d3e2034383337.roa (hash: EkHOAQ9SZLQtgUKfohxIGCu30Zcv63COLPGEXCHOHaY=) 6: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl (hash: JM+F5qRyckZO/xbNzSbA5sKbjdEulAfv/KJtP/poFhA=) 7: 3130332e32342e3232382e302f32322d3232203d3e2034383337.roa (hash: qJPJ83xaMw16qDsSncZcoy/olhHqgPT6g3PgUjqsbok=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a5:36:ae:fc:81:9c:b6:09:43:4e:f7:b9:1d:57:01:3d:46:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Validity Not Before: Jul 23 15:18:59 2026 GMT Not After : Jul 24 18:33:59 2026 GMT Subject: CN=D80C2236DE7421F43373A0957939A6B22EACAE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:3b:b6:69:69:a1:e5:1f:63:11:49:5b:c0: 5a:0d:ce:44:14:31:e5:f9:77:de:0b:78:20:d2:9f: d4:b3:28:0a:c6:43:78:9f:c8:fb:8c:79:74:1b:53: 81:89:07:21:7c:06:1f:c7:d3:1a:03:00:cf:61:4a: 6d:1f:07:29:72:b3:2a:f8:6c:57:3f:cd:e3:ec:4e: 6a:4f:09:c8:10:d9:46:e5:b6:c4:d0:ad:ae:98:89: 54:06:3f:8f:b8:54:f1:18:ed:87:c7:83:6e:a7:85: df:43:d9:d6:fa:70:ad:77:19:17:2a:33:48:0f:a5: 9b:a9:d4:c9:85:56:8c:60:1d:ea:c8:1a:7a:05:ab: cc:cb:f0:5c:1e:dd:0b:ac:1a:9b:ae:a8:17:ce:f5: 19:25:9e:73:c5:bb:39:44:0f:12:a8:6c:57:7c:b9: 88:de:d9:b8:04:b6:4a:37:e5:56:6d:e3:53:9b:06: fe:88:32:41:7b:3b:5e:c1:94:90:ce:04:91:36:e0: 97:3a:b7:01:fd:19:b4:ff:f1:94:3c:e8:9d:47:6b: b9:26:0f:b9:2e:d1:f6:c0:2d:cb:cd:49:99:a7:e8: ff:9b:bb:14:a6:0b:08:f4:c0:e9:13:47:12:1e:3a: 02:fa:c3:b5:3e:90:67:1f:52:d4:10:67:78:1f:32: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0C:22:36:DE:74:21:F4:33:73:A0:95:79:39:A6:B2:2E:AC:AE:8A X509v3 Authority Key Identifier: keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c2:83:23:b1:d2:a9:00:db:a5:9b:9b:7a:58:76:d5:e7:c8: f3:2d:4b:fd:7e:2b:7e:0b:e8:07:19:8d:f3:68:14:1e:d6:00: a8:13:bf:a4:bc:1b:4d:d9:93:d6:34:cd:8e:fd:8b:70:2b:7f: da:da:f7:02:67:74:1c:ce:f8:30:f3:b9:5f:74:06:21:d9:b3: ed:9c:ed:89:a0:e7:35:11:40:97:6d:81:ca:2a:0e:c5:1c:66: c4:59:16:53:b2:cd:3d:9b:8e:b0:57:e0:68:74:97:1a:9b:37: 21:ad:b3:ee:e7:fa:13:d9:f6:57:26:0b:43:e0:5f:6c:af:18: fb:80:a8:17:e0:a2:b9:e2:61:d2:17:9a:c1:2d:91:3c:d1:02: 2a:fe:7c:36:ab:fd:0c:e0:f0:24:7b:93:bb:36:93:b1:2c:b8: 3f:e8:10:9a:f3:17:ce:84:ff:c8:08:4a:ce:cc:57:9d:aa:b2: 7b:de:af:a7:bd:b7:b7:a1:fa:f6:66:c2:b6:e8:66:24:aa:49: 69:65:fb:8d:22:23:94:5c:6c:2e:12:cd:c8:36:eb:2a:d9:6f: f5:95:82:53:96:6a:ac:ec:af:14:7d:a1:4c:52:43:fe:02:20: 58:b5:a1:9d:ca:a1:ac:19:d7:bf:ab:4b:d8:96:2a:ed:a0:ec: 6e:87:46:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQqU2rvyBnLYJQ073uR1XAT1GQ4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVE OUIzNzM1OTAeFw0yNjA3MjMxNTE4NTlaFw0yNjA3MjQxODMzNTlaMDMxMTAvBgNV BAMTKEQ4MEMyMjM2REU3NDIxRjQzMzczQTA5NTc5MzlBNkIyMkVBQ0FFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWDu2aWmh5R9jEUlbwFoNzkQU MeX5d94LeCDSn9SzKArGQ3ifyPuMeXQbU4GJByF8Bh/H0xoDAM9hSm0fBylysyr4 bFc/zePsTmpPCcgQ2UbltsTQra6YiVQGP4+4VPEY7YfHg26nhd9D2db6cK13GRcq M0gPpZup1MmFVoxgHerIGnoFq8zL8Fwe3QusGpuuqBfO9RklnnPFuzlEDxKobFd8 uYje2bgEtko35VZt41ObBv6IMkF7O17BlJDOBJE24Jc6twH9GbT/8ZQ86J1Ha7km D7ku0fbALcvNSZmn6P+buxSmCwj0wOkTRxIeOgL6w7U+kGcfUtQQZ3gfMkZZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2AwiNt50IfQzc6CVeTmmsi6sroowHwYDVR0j BBgwFoAU61sIP5/Gq7cls/0eggJwbtmzc1kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTAzNjAzMy8wL0VCNUIwODNGOUZDNkFCQjcyNUIzRkQxRTgyMDI3 MDZFRDlCMzczNTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVEOUIzNzM1OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUwMzYwMzMvMC9FQjVCMDgzRjlGQzZB QkI3MjVCM0ZEMUU4MjAyNzA2RUQ5QjM3MzU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcKDI7HSqQDb pZubelh21efI8y1L/X4rfgvoBxmN82gUHtYAqBO/pLwbTdmT1jTNjv2LcCt/2tr3 Amd0HM74MPO5X3QGIdmz7ZztiaDnNRFAl22ByioOxRxmxFkWU7LNPZuOsFfgaHSX Gps3Ia2z7uf6E9n2VyYLQ+BfbK8Y+4CoF+CiueJh0heawS2RPNECKv58Nqv9DODw JHuTuzaTsSy4P+gQmvMXzoT/yAhKzsxXnaqye96vp723t6H69mbCtuhmJKpJaWX7 jSIjlFxsLhLNyDbrKtlv9ZWCU5ZqrOyvFH2hTFJD/gIgWLWhncqhrBnXv6tL2JYq 7aDsbodGqA== -----END CERTIFICATE-----Generated at Fri Jul 24 09:31:53 2026 by rpki-client