
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
File: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft (raw, json)
Hash identifier: jMpR4aDM4ZgtiIL0ofcVw5cZoFRmZBLY9HbNgJkEaCs=
Subject key identifier: 8C:33:67:17:B0:32:D9:68:26:AA:A4:6B:4A:3D:5A:CC:15:24:1F:9C
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial: 13B7F3415BFF9DE090B62D98C316619507077F74
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
Manifest number: 0139
Signing time: Mon 28 Sep 2026 18:11:14 +0000
Manifest this update: Mon 28 Sep 2026 18:06:14 +0000
Manifest next update: Thu 01 Oct 2026 19:20:14 +0000
Files and hashes: 1: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (hash: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI=)
2: 323430333a356238303a3a2f33322d3332203d3e2030.roa (hash: 46/tjO14ih7NL7c3FlsSLZTwfgKKd0SVKFNff9MQoNM=)
3: 3130332e32342e3232382e302f32322d3232203d3e2034383337.roa (hash: qJPJ83xaMw16qDsSncZcoy/olhHqgPT6g3PgUjqsbok=)
4: 3130332e32342e3232382e302f32342d3234203d3e2034383337.roa (hash: EkHOAQ9SZLQtgUKfohxIGCu30Zcv63COLPGEXCHOHaY=)
5: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (hash: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=)
6: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (hash: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=)
7: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl (hash: nXcPxuZ74IPa5EG/HCh/cUvdJBRUXKRL9ZwjFT9H+JA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 19:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b7:f3:41:5b:ff:9d:e0:90:b6:2d:98:c3:16:61:95:07:07:7f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Validity
Not Before: Sep 28 18:06:14 2026 GMT
Not After : Oct 1 19:20:14 2026 GMT
Subject: CN=8C336717B032D96826AAA46B4A3D5ACC15241F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4a:be:0d:90:80:17:74:08:a0:07:ed:9c:27:
19:90:66:0c:6e:66:3c:8c:08:9c:e6:64:92:cb:7b:
97:5a:18:5a:65:5d:69:cf:77:80:d8:d0:f1:05:30:
b7:4c:8e:86:3f:8a:ce:a5:3e:a6:be:23:fd:8f:bb:
68:10:84:6f:46:5b:47:fe:da:76:9e:6d:d7:90:8a:
33:f3:d9:9b:5d:02:54:20:48:f7:3d:8b:b6:3c:54:
30:24:98:51:c9:dc:2e:28:26:b1:dc:77:67:02:eb:
0f:bf:a8:f5:ba:a7:d7:b4:7f:a7:3a:22:d1:20:63:
3b:0a:0a:9f:42:6c:3b:6c:18:ad:e4:02:db:19:16:
91:49:6d:82:ba:71:84:eb:5f:d9:ef:a1:43:88:d3:
11:90:7f:63:43:d0:cb:53:be:e2:a0:bf:0a:ae:29:
fe:c1:0d:b8:68:da:2e:0c:01:3e:6b:e5:ea:6f:be:
6d:30:7a:4b:80:78:6a:63:9d:c4:5f:b9:f3:b9:91:
9e:ae:a8:9f:02:ce:dc:53:d7:14:16:a8:15:30:86:
85:35:f2:06:77:ec:62:fa:75:63:19:a4:c7:c3:5b:
a8:10:f0:97:d3:08:17:b0:8a:af:c4:29:e4:81:a8:
cd:25:0a:51:6e:77:5f:f6:7f:7c:6d:86:c4:88:07:
d9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:33:67:17:B0:32:D9:68:26:AA:A4:6B:4A:3D:5A:CC:15:24:1F:9C
X509v3 Authority Key Identifier:
keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e6:c1:44:9a:20:de:f2:2a:0b:1c:d3:61:4e:3d:6c:ab:d6:
3d:2c:3a:8b:78:b3:9a:36:aa:b7:ed:c1:f7:84:48:b9:c7:13:
f4:55:2c:1a:35:75:22:5c:3e:62:0d:0f:81:ab:fb:a5:db:1a:
d2:10:d7:61:4d:7d:83:a2:39:ec:01:36:4e:82:08:2d:52:aa:
8e:6a:84:10:2a:2f:21:31:d2:ca:36:d2:4c:47:55:3a:1b:1a:
d7:7d:05:ea:4b:3f:00:44:e4:3a:49:7f:7c:8b:d4:80:55:5e:
81:f2:9a:73:ab:75:f0:74:5c:d9:bb:12:16:e5:2e:68:53:05:
72:15:da:21:9d:a4:86:ec:70:22:05:e6:5c:c3:f8:cb:a0:78:
61:8e:2c:61:13:05:19:10:ea:a8:1a:de:e9:07:b6:8d:5c:14:
72:ec:95:ae:20:a0:12:28:a1:59:aa:10:e8:e0:30:fa:9d:49:
b8:7c:3c:6b:75:b6:0b:20:f3:4e:59:58:69:23:e9:94:22:14:
f1:5c:da:03:b5:15:c5:fb:15:d3:7e:df:46:a9:29:c4:78:6a:
ec:ae:a2:ea:7e:39:e2:99:93:59:bb:e8:91:11:4e:24:a5:1c:
55:11:17:c1:21:ad:c0:59:18:4f:eb:6a:85:5a:62:25:a9:ca:
ba:6d:18:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:25:52 2026 by rpki-client