
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
File: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft (raw, json)
Hash identifier: rjexf0yBmYdeCEz7zUEvXmZI1ErU1MuEHEofVyv02dw=
Subject key identifier: 05:28:C6:68:44:C1:A9:97:45:1B:BC:6F:31:04:56:57:14:AF:D3:39
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial: 15653F36F3B934279FBFC5010A92B8923E71CCED
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
Manifest number: 57
Signing time: Wed 25 Mar 2026 13:33:27 +0000
Manifest this update: Wed 25 Mar 2026 13:28:27 +0000
Manifest next update: Thu 26 Mar 2026 15:37:27 +0000
Files and hashes: 1: 3130332e32342e3232382e302f32322d3234203d3e2034383337.roa (hash: OovHk1dM5SRegXrOoxHUF4YMH6s4+waRg57vn/cYkAk=)
2: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl (hash: gENJiXiyuXS/fHuVAInKpbW7/dYeeEN+4S2WV8fhs0A=)
3: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (hash: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI=)
4: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (hash: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=)
5: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (hash: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 15:37:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:65:3f:36:f3:b9:34:27:9f:bf:c5:01:0a:92:b8:92:3e:71:cc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Validity
Not Before: Mar 25 13:28:27 2026 GMT
Not After : Mar 26 15:37:27 2026 GMT
Subject: CN=0528C66844C1A997451BBC6F3104565714AFD339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:28:03:f0:93:ea:d6:b3:68:6a:46:3e:9e:60:
33:00:e3:c5:ea:6f:ed:b0:f8:b1:9c:5f:36:06:b0:
fe:32:d2:2c:42:ae:7f:4d:8d:03:0d:f5:af:b9:ca:
4b:c3:f9:b6:62:01:a2:3e:58:87:fb:1b:82:ae:af:
60:96:c9:b9:ad:64:45:b7:0e:36:88:40:41:31:42:
22:ca:3c:64:2d:27:50:a3:1c:d5:fb:1e:12:ac:00:
e0:16:0f:21:0e:c4:bf:28:8e:fa:a4:77:52:4d:35:
7b:94:21:da:13:03:e6:7f:a8:ce:79:38:3c:2c:ef:
89:78:d9:ff:10:8a:e9:b8:65:7f:b5:fc:48:3a:27:
23:8d:a3:59:12:1f:2d:07:28:63:b6:fc:7c:08:6c:
ef:59:61:1a:5e:9a:e6:05:aa:d6:54:15:26:2e:25:
3c:f0:0c:e6:cf:b9:ae:e7:bf:c9:37:99:61:99:b6:
4d:a6:bd:b1:10:ed:a8:55:18:a1:e0:44:f3:75:bc:
23:9b:37:8f:a0:33:f5:b7:ae:46:31:56:92:88:1c:
a4:6d:86:a8:3f:f8:22:1d:4c:ac:2c:62:7a:77:63:
13:5b:67:87:46:27:e3:cf:ce:8d:c2:9f:ed:d2:be:
d8:f8:4f:21:74:f3:d6:c5:41:ac:1b:f9:07:26:f8:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:28:C6:68:44:C1:A9:97:45:1B:BC:6F:31:04:56:57:14:AF:D3:39
X509v3 Authority Key Identifier:
keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:76:a4:6f:78:df:55:2f:f3:f5:03:03:11:60:b2:03:41:97:
eb:e2:c0:70:e0:06:70:a9:3a:6d:39:9f:92:af:c3:4f:2b:09:
a8:6d:9e:41:dc:f4:7e:44:c7:03:8c:0f:5c:cd:ce:1c:6a:00:
a1:22:b4:ea:6c:ff:a4:d5:84:1a:e7:b7:c0:97:0c:43:c8:eb:
36:ad:03:b4:50:94:29:ac:08:fd:42:a9:00:86:e0:8e:68:3a:
ef:e3:99:4d:e7:3e:36:b6:94:30:7c:0b:41:53:70:f9:39:8e:
23:f8:5e:6f:dd:76:29:06:55:65:9f:f3:cd:fe:dc:9b:2c:34:
45:bc:be:06:1d:ce:d6:a8:da:91:a9:f2:ef:73:7f:90:05:ba:
07:d1:1a:91:5b:93:83:76:1e:46:e4:67:cc:98:5c:aa:97:d2:
d3:4c:f0:f6:46:ae:cd:17:40:75:83:72:8f:2a:7c:fc:70:db:
af:c8:f7:e8:3f:54:00:cd:73:ac:4e:8f:c7:97:f9:d8:fb:1d:
75:ef:91:fb:c7:50:a0:21:aa:ad:fa:ed:f8:af:8d:be:81:c1:
b8:2b:60:5e:32:65:f4:5d:7c:b7:e3:ee:c2:e6:dc:78:5e:70:
b3:b1:74:b6:9b:bd:a7:ee:7d:fe:69:44:0a:50:cb:d3:8c:4e:
b1:17:97:aa
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUFWU/NvO5NCefv8UBCpK4kj5xzO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVE
OUIzNzM1OTAeFw0yNjAzMjUxMzI4MjdaFw0yNjAzMjYxNTM3MjdaMDMxMTAvBgNV
BAMTKDA1MjhDNjY4NDRDMUE5OTc0NTFCQkM2RjMxMDQ1NjU3MTRBRkQzMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzKAPwk+rWs2hqRj6eYDMA48Xq
b+2w+LGcXzYGsP4y0ixCrn9NjQMN9a+5ykvD+bZiAaI+WIf7G4Kur2CWybmtZEW3
DjaIQEExQiLKPGQtJ1CjHNX7HhKsAOAWDyEOxL8ojvqkd1JNNXuUIdoTA+Z/qM55
ODws74l42f8Qium4ZX+1/Eg6JyONo1kSHy0HKGO2/HwIbO9ZYRpemuYFqtZUFSYu
JTzwDObPua7nv8k3mWGZtk2mvbEQ7ahVGKHgRPN1vCObN4+gM/W3rkYxVpKIHKRt
hqg/+CIdTKwsYnp3YxNbZ4dGJ+PPzo3Cn+3Svtj4TyF089bFQawb+Qcm+COPAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUBSjGaETBqZdFG7xvMQRWVxSv0zkwHwYDVR0j
BBgwFoAU61sIP5/Gq7cls/0eggJwbtmzc1kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNTAzNjAzMy8wL0VCNUIwODNGOUZDNkFCQjcyNUIzRkQxRTgyMDI3
MDZFRDlCMzczNTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVEOUIzNzM1OS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUwMzYwMzMvMC9FQjVCMDgzRjlGQzZB
QkI3MjVCM0ZEMUU4MjAyNzA2RUQ5QjM3MzU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXakb3jfVS/z
9QMDEWCyA0GX6+LAcOAGcKk6bTmfkq/DTysJqG2eQdz0fkTHA4wPXM3OHGoAoSK0
6mz/pNWEGue3wJcMQ8jrNq0DtFCUKawI/UKpAIbgjmg67+OZTec+NraUMHwLQVNw
+TmOI/heb912KQZVZZ/zzf7cmyw0Rby+Bh3O1qjakany73N/kAW6B9EakVuTg3Ye
RuRnzJhcqpfS00zw9kauzRdAdYNyjyp8/HDbr8j36D9UAM1zrE6Px5f52Psdde+R
+8dQoCGqrfrt+K+NvoHBuCtgXjJl9F18t+PuwubceF5ws7F0tpu9p+59/mlEClDL
04xOsReXqg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:54 2026 by rpki-client