
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
File: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json)
Hash identifier: tjEkpXpjBMx9wbw6ZqaiTd5OwTpADqPNhXiOWGjQ/g8=
Subject key identifier: 9C:A2:96:AE:44:1F:39:19:FD:8B:E3:BC:7C:D9:8D:B0:64:93:AC:E6
Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Certificate serial: 315797C30918DF07BE7DCCA73F61041828DF1238
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
Manifest number: F8
Signing time: Fri 24 Jul 2026 00:14:55 +0000
Manifest this update: Fri 24 Jul 2026 00:09:55 +0000
Manifest next update: Sat 25 Jul 2026 00:16:55 +0000
Files and hashes: 1: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=)
2: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=)
3: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=)
4: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=)
5: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=)
6: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=)
7: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: F7cfXqFrqXY5VrFtGMt9869lM7U4ufQg72+qFyCrWDo=)
8: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:57:97:c3:09:18:df:07:be:7d:cc:a7:3f:61:04:18:28:df:12:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Validity
Not Before: Jul 24 00:09:55 2026 GMT
Not After : Jul 25 00:16:55 2026 GMT
Subject: CN=9CA296AE441F3919FD8BE3BC7CD98DB06493ACE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:68:f5:b4:88:33:64:00:46:c8:0a:5a:58:
73:f6:82:0c:27:2c:94:43:57:c8:24:0c:c5:80:c3:
4e:28:34:5a:2d:cc:4a:c1:cf:76:8a:d5:5c:2d:ae:
b7:3b:ad:b3:4d:f7:8c:a7:47:1d:61:1d:65:26:77:
d2:c0:5d:bd:3c:d7:7a:57:9c:8e:64:e0:81:9d:2e:
4c:43:a2:24:56:c2:99:58:c4:44:93:95:0f:be:30:
72:54:af:78:58:11:2d:b9:c4:67:57:dd:68:d2:9d:
1d:0d:e3:ee:4e:3e:06:20:34:3f:3b:aa:e9:bd:3d:
85:de:17:41:59:94:c6:9f:c1:32:e8:91:75:50:02:
52:b8:18:ae:db:71:8b:58:bc:2f:cc:f7:49:6a:75:
ed:80:21:f2:2a:03:88:5d:bc:53:02:c8:16:cb:3f:
59:b2:ca:97:96:f4:c7:13:ce:df:a5:9c:93:17:e2:
d5:4b:70:e2:43:90:1b:a1:54:ef:8c:93:53:8c:7a:
64:8f:7f:7a:b8:1d:cb:59:81:3a:c4:21:09:80:0b:
c2:dc:96:09:9e:df:69:90:63:93:da:50:c4:b0:7a:
a8:a4:e0:b3:ab:29:fa:3b:34:d9:1a:e6:5b:f9:70:
df:02:ae:bb:5c:2c:40:cd:7f:f6:7d:3f:9f:ea:73:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A2:96:AE:44:1F:39:19:FD:8B:E3:BC:7C:D9:8D:B0:64:93:AC:E6
X509v3 Authority Key Identifier:
keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cf:3c:57:68:91:fd:db:32:f7:33:c5:37:86:b1:7e:73:bd:
d5:70:c1:3f:86:47:ed:d1:48:9a:d3:00:18:b9:cc:21:75:36:
e9:1c:45:f9:4f:bb:5d:c8:27:87:8d:9a:bf:3d:58:54:86:d9:
06:4e:c2:9b:7a:ab:1c:bb:44:b9:bb:31:12:f7:36:e1:b6:40:
5e:80:1e:47:02:0e:e4:b3:e1:66:5f:85:91:9a:36:fb:33:53:
d9:32:df:8d:31:b2:37:0f:d1:c8:c0:82:e7:2f:7b:af:60:c9:
6c:91:55:7d:c8:49:42:6e:fd:70:9b:1c:58:16:60:d4:7e:ab:
f4:09:bd:8b:95:a8:27:3e:fa:59:25:8f:c0:60:7a:bf:98:5b:
d5:9c:da:f7:83:31:09:54:51:8d:1e:07:71:40:6c:25:e3:69:
05:e5:0d:36:94:8d:75:d8:de:9a:f2:6b:dd:24:3d:36:90:3c:
b4:af:09:e6:d2:10:37:7c:d2:aa:ae:48:07:b5:b5:0a:8e:89:
b3:dc:39:e0:96:8b:3c:40:f5:6f:eb:72:1e:8e:b6:fb:de:d9:
4b:88:5f:5f:ee:b0:fd:97:a7:d4:84:1b:14:f2:6f:9f:b4:34:
a3:2d:82:cb:4b:c0:cc:fe:0e:00:91:cd:92:9e:17:4e:2a:2c:
6c:7c:7b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:47:40 2026 by rpki-client