$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft File: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json) Hash identifier: s72HCWJ+54ogJOL/uCubUZAUGi9t39LgURDQ3+Ym11o= Subject key identifier: 21:FE:A0:B5:9A:03:DC:57:AD:B2:73:AE:BB:41:FC:00:8E:53:6C:F1 Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Certificate serial: 2FBCEA6A0763FBD26C5B82FC7E03A00C3AC506BC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 20:28:28 +0000 Manifest this update: Thu 26 Mar 2026 20:23:28 +0000 Manifest next update: Fri 27 Mar 2026 23:47:28 +0000 Files and hashes: 1: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: ZqWGWyWw7cvSAOa0Lk+I8K/P6bp+ERWAvaI8TyH3cPs=) 2: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=) 3: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=) 4: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=) 5: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=) 6: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=) 7: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=) 8: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:bc:ea:6a:07:63:fb:d2:6c:5b:82:fc:7e:03:a0:0c:3a:c5:06:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Validity Not Before: Mar 26 20:23:28 2026 GMT Not After : Mar 27 23:47:28 2026 GMT Subject: CN=21FEA0B59A03DC57ADB273AEBB41FC008E536CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a8:3f:0e:b9:92:03:fb:51:08:a9:17:23:ef: c5:b9:14:c4:35:82:f0:d2:fb:2c:c8:53:b9:be:bb: 1e:35:2c:88:dd:9f:14:ec:0c:7e:f5:a7:aa:63:70: 99:f3:4a:ac:03:c7:bc:5e:78:92:8b:19:85:8d:5f: 43:ab:9e:8c:77:76:63:6c:65:1d:4b:65:a6:60:79: f3:00:32:5b:38:c0:0d:7f:16:b9:fb:d7:7a:1c:98: 8d:2a:74:f1:bb:bc:03:65:25:4a:d9:8d:6c:f5:2e: 1c:08:0e:44:0d:7a:8f:ab:24:3c:32:82:1a:bb:aa: ae:9c:cf:61:f9:9b:ec:fa:9b:49:7d:70:e6:19:b8: 64:f8:f1:8a:92:a4:07:99:d1:79:80:25:26:5c:f7: a3:aa:0f:19:d4:c8:80:a7:e4:11:6f:72:ca:ed:b8: 57:0a:ef:40:aa:c5:04:63:01:63:7e:cc:3c:3c:4f: 66:bd:b4:9f:5c:66:a4:1e:30:50:9d:ef:d3:17:14: fa:81:73:b7:bd:37:8f:0e:e3:7c:fb:f4:69:d3:0e: f3:80:a9:b9:9f:aa:44:c7:f5:b0:2a:e6:24:a3:4e: f1:22:17:9f:67:8b:43:20:a3:e6:37:ea:7e:74:cd: b8:0e:5d:b9:70:a4:19:b4:ee:c3:dc:fe:d2:02:0a: dc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FE:A0:B5:9A:03:DC:57:AD:B2:73:AE:BB:41:FC:00:8E:53:6C:F1 X509v3 Authority Key Identifier: keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:90:46:0d:e5:bb:88:1f:06:d2:d2:78:91:3c:0a:05:60:66: 79:6c:e0:c9:32:be:e1:89:5d:f4:98:ce:c9:09:c9:20:59:ad: 47:72:24:44:a8:a8:89:f2:ca:28:fc:11:88:d4:51:7e:59:18: 79:57:96:b0:58:11:35:d6:96:df:fa:0e:58:91:28:2a:fa:4a: df:41:7f:d1:2d:a3:a2:93:a8:93:07:79:f0:85:0a:a5:24:fd: a4:aa:93:d0:1f:2b:0f:ab:d5:26:69:db:c2:2d:d0:f2:25:f5: cd:0e:d9:96:07:08:08:5b:61:51:e2:a6:2f:2f:da:6d:a8:23: a0:6a:54:ea:9f:62:5f:6f:4c:d4:28:86:aa:1a:a5:ec:0c:fc: 45:56:26:e7:73:f4:c8:06:c8:fe:44:d1:63:80:24:75:5e:b9: 4f:f9:70:a1:23:ed:aa:9e:3e:ed:68:2c:3f:87:20:6d:8a:3d: d7:e8:36:f2:a9:b2:e7:1e:57:ce:53:b3:e9:a5:7a:43:4d:80: 6c:1a:1e:ac:dc:77:bf:dc:f1:8c:a4:19:eb:f6:7b:db:2e:3b: 24:d9:1f:f9:40:3f:2e:7b:4f:f7:c8:22:e4:bb:a1:b3:a0:08: 21:b4:96:29:88:ad:27:e5:18:3a:98:c6:8a:28:ae:30:69:c7: 07:f1:74:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL7zqagdj+9JsW4L8fgOgDDrFBrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0Yw QzQ4MUNBNTAeFw0yNjAzMjYyMDIzMjhaFw0yNjAzMjcyMzQ3MjhaMDMxMTAvBgNV BAMTKDIxRkVBMEI1OUEwM0RDNTdBREIyNzNBRUJCNDFGQzAwOEU1MzZDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqD8OuZID+1EIqRcj78W5FMQ1 gvDS+yzIU7m+ux41LIjdnxTsDH71p6pjcJnzSqwDx7xeeJKLGYWNX0Ornox3dmNs ZR1LZaZgefMAMls4wA1/Frn713ocmI0qdPG7vANlJUrZjWz1LhwIDkQNeo+rJDwy ghq7qq6cz2H5m+z6m0l9cOYZuGT48YqSpAeZ0XmAJSZc96OqDxnUyICn5BFvcsrt uFcK70CqxQRjAWN+zDw8T2a9tJ9cZqQeMFCd79MXFPqBc7e9N48O43z79GnTDvOA qbmfqkTH9bAq5iSjTvEiF59ni0Mgo+Y36n50zbgOXblwpBm07sPc/tICCtz5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIf6gtZoD3FetsnOuu0H8AI5TbPEwHwYDVR0j BBgwFoAU66rT3yM2lqBh7C9W6MT5zwxIHKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODIyMjQ2Ni8wL0VCQUFEM0RGMjMzNjk2QTA2MUVDMkY1NkU4QzRG OUNGMEM0ODFDQTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0YwQzQ4MUNBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyMjI0NjYvMC9FQkFBRDNERjIzMzY5 NkEwNjFFQzJGNTZFOEM0RjlDRjBDNDgxQ0E1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZBGDeW7iB8G 0tJ4kTwKBWBmeWzgyTK+4Yld9JjOyQnJIFmtR3IkRKioifLKKPwRiNRRflkYeVeW sFgRNdaW3/oOWJEoKvpK30F/0S2jopOokwd58IUKpST9pKqT0B8rD6vVJmnbwi3Q 8iX1zQ7ZlgcICFthUeKmLy/abagjoGpU6p9iX29M1CiGqhql7Az8RVYm53P0yAbI /kTRY4AkdV65T/lwoSPtqp4+7WgsP4cgbYo91+g28qmy5x5XzlOz6aV6Q02AbBoe rNx3v9zxjKQZ6/Z72y47JNkf+UA/LntP98gi5Luhs6AIIbSWKYitJ+UYOpjGiiiu MGnHB/F0Eg== -----END CERTIFICATE-----Generated at Fri Mar 27 06:21:09 2026 by rpki-client