$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft File: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json) Hash identifier: tHcFSy0pEW2fAIkNRhDQ5o9Orq9NKByTdPJV+DoHLvE= Subject key identifier: 7D:DB:0C:AB:FC:53:80:7C:C5:9E:47:C3:DE:10:E1:05:AB:A2:C2:D2 Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Certificate serial: 3D6234C3F467936AFA5AB4C921B426C136404589 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft Manifest number: 0135 Signing time: Tue 29 Sep 2026 13:02:26 +0000 Manifest this update: Tue 29 Sep 2026 12:57:26 +0000 Manifest next update: Fri 02 Oct 2026 21:32:26 +0000 Files and hashes: 1: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: 91/Vewepje72Ywj6bLQMgC+5Ax3ucDJYlGLP8Q0t71M=) 2: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=) 3: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=) 4: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=) 5: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=) 6: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=) 7: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=) 8: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 21:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:62:34:c3:f4:67:93:6a:fa:5a:b4:c9:21:b4:26:c1:36:40:45:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Validity Not Before: Sep 29 12:57:26 2026 GMT Not After : Oct 2 21:32:26 2026 GMT Subject: CN=7DDB0CABFC53807CC59E47C3DE10E105ABA2C2D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:39:80:61:5d:c8:f6:fb:77:92:34:9d:a7: 74:c6:e2:75:fe:a0:58:bd:06:f6:63:fe:9c:32:95: 3a:61:9c:d3:b8:ee:d5:fc:48:4c:12:73:43:29:06: f9:17:51:e2:f0:4e:86:c9:e3:a4:b6:0f:98:d5:bd: 4b:e7:4d:b5:58:30:63:87:11:ba:4d:f1:26:bb:05: b6:6c:af:d5:a9:42:bc:bd:d3:15:52:06:b9:d5:e2: 1b:0a:5a:1e:86:bf:ce:1d:ef:81:86:cb:7d:b6:03: 74:dd:45:2e:c1:ec:2c:50:c0:91:aa:b7:40:a2:68: 38:89:75:05:61:bb:45:0e:38:37:ed:8a:a8:75:7f: 0f:ba:1e:be:bc:fe:4f:78:11:10:7b:ff:10:01:ee: 65:95:da:b1:0f:c3:08:70:0f:46:b4:e6:b8:94:f6: a6:24:d3:a1:89:d5:84:38:68:6a:c1:f6:97:06:83: fd:93:45:44:58:59:60:5b:7f:f3:4b:61:fc:86:fc: 62:6f:ba:90:7c:fd:56:aa:da:da:8c:e9:6d:10:e4: d5:49:71:25:f1:29:86:65:bd:92:31:d4:99:27:f1: 0a:f2:f1:0c:f2:7c:a4:0e:62:4f:24:33:0e:a4:51: 4f:0f:d7:45:2a:9c:e3:95:84:2a:e8:f0:ff:c2:0b: ba:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DB:0C:AB:FC:53:80:7C:C5:9E:47:C3:DE:10:E1:05:AB:A2:C2:D2 X509v3 Authority Key Identifier: keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d9:1c:a3:27:7b:81:36:d1:c0:bf:c3:b7:95:ac:cc:0d:69: 8d:d9:d5:7f:fd:c1:ae:7c:eb:57:07:d8:82:33:ce:69:2d:8e: ed:73:f8:04:67:20:55:cc:ff:58:3c:03:46:fe:e1:72:d6:98: 8e:90:1a:14:68:81:04:24:b0:fc:02:d0:9a:39:ea:48:c1:34: fc:59:af:c1:ee:43:16:89:d0:f5:15:c8:ad:b9:30:19:a0:85: e1:aa:bd:ac:6c:65:5f:f5:5e:44:1c:61:54:2f:ae:8c:44:57: 31:d0:2e:0e:9f:d6:a3:df:85:ec:f8:e7:f2:0f:86:51:12:e4: 93:d9:31:84:27:2d:d8:6c:bc:98:9b:df:23:9d:bd:af:cc:20: 3b:da:68:d9:c5:dd:cd:c1:4d:81:ab:47:5e:ce:ac:72:d5:58: 04:9e:78:f8:7b:e2:28:63:ff:1e:35:bb:4c:d8:9d:b6:e7:1f: 8d:d0:f5:29:c4:6a:b2:f5:9f:aa:74:0b:e0:41:eb:02:20:01: dd:71:79:26:0d:0f:a6:39:ed:d2:56:ea:86:b6:11:17:a7:64: 2c:b2:a7:6f:91:7a:cb:7b:92:a9:3f:85:f2:f4:40:6c:50:2f: 6f:13:c7:17:62:92:b1:df:97:47:3e:6d:8c:69:f3:97:c5:85: e2:08:ea:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPWI0w/Rnk2r6WrTJIbQmwTZARYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0Yw QzQ4MUNBNTAeFw0yNjA5MjkxMjU3MjZaFw0yNjEwMDIyMTMyMjZaMDMxMTAvBgNV BAMTKDdEREIwQ0FCRkM1MzgwN0NDNTlFNDdDM0RFMTBFMTA1QUJBMkMyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxAzmAYV3I9vt3kjSdp3TG4nX+ oFi9BvZj/pwylTphnNO47tX8SEwSc0MpBvkXUeLwTobJ46S2D5jVvUvnTbVYMGOH EbpN8Sa7BbZsr9WpQry90xVSBrnV4hsKWh6Gv84d74GGy322A3TdRS7B7CxQwJGq t0CiaDiJdQVhu0UOODftiqh1fw+6Hr68/k94ERB7/xAB7mWV2rEPwwhwD0a05riU 9qYk06GJ1YQ4aGrB9pcGg/2TRURYWWBbf/NLYfyG/GJvupB8/Vaq2tqM6W0Q5NVJ cSXxKYZlvZIx1Jkn8Qry8QzyfKQOYk8kMw6kUU8P10UqnOOVhCro8P/CC7ppAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfdsMq/xTgHzFnkfD3hDhBauiwtIwHwYDVR0j BBgwFoAU66rT3yM2lqBh7C9W6MT5zwxIHKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODIyMjQ2Ni8wL0VCQUFEM0RGMjMzNjk2QTA2MUVDMkY1NkU4QzRG OUNGMEM0ODFDQTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0YwQzQ4MUNBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyMjI0NjYvMC9FQkFBRDNERjIzMzY5 NkEwNjFFQzJGNTZFOEM0RjlDRjBDNDgxQ0E1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9kcoyd7gTbR wL/Dt5WszA1pjdnVf/3BrnzrVwfYgjPOaS2O7XP4BGcgVcz/WDwDRv7hctaYjpAa FGiBBCSw/ALQmjnqSME0/Fmvwe5DFonQ9RXIrbkwGaCF4aq9rGxlX/VeRBxhVC+u jERXMdAuDp/Wo9+F7Pjn8g+GURLkk9kxhCct2Gy8mJvfI529r8wgO9po2cXdzcFN gatHXs6sctVYBJ54+HviKGP/HjW7TNidtucfjdD1KcRqsvWfqnQL4EHrAiAB3XF5 Jg0Ppjnt0lbqhrYRF6dkLLKnb5F6y3uSqT+F8vRAbFAvbxPHF2KSsd+XRz5tjGnz l8WF4gjqzg== -----END CERTIFICATE-----Generated at Wed Sep 30 16:29:07 2026 by rpki-client