$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft File: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json) Hash identifier: v5+Aj6vY0uSglBm1TUZ8wUlrC12hZ7dCvvzF37yphYc= Subject key identifier: 9C:61:29:60:22:E0:C0:70:02:3E:53:61:36:D3:65:22:7B:7E:CF:03 Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Certificate serial: 6B3FD3A693923EC327C49F1965EC300751265BCC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft Manifest number: 98 Signing time: Tue 12 May 2026 21:05:46 +0000 Manifest this update: Tue 12 May 2026 21:00:46 +0000 Manifest next update: Wed 13 May 2026 22:29:46 +0000 Files and hashes: 1: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=) 2: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=) 3: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=) 4: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=) 5: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: fSEZDkxZWZbLWXVuWflcDmastn/G9NZVx8LyOnKLVxw=) 6: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=) 7: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=) 8: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3f:d3:a6:93:92:3e:c3:27:c4:9f:19:65:ec:30:07:51:26:5b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Validity Not Before: May 12 21:00:46 2026 GMT Not After : May 13 22:29:46 2026 GMT Subject: CN=9C61296022E0C070023E536136D365227B7ECF03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:7a:7e:6a:1d:90:c6:5e:22:4f:67:28:50: a3:3f:91:16:6e:2c:5c:37:84:61:38:26:3b:3a:03: d5:82:a1:2d:8c:73:67:ef:4d:ed:7e:d8:1d:71:0a: 69:68:78:95:9d:10:7c:3a:02:38:a5:7c:50:82:61: 5b:40:64:96:e7:80:82:0c:ae:64:f0:df:a5:0b:70: 2c:1d:c2:fb:97:23:2a:41:95:15:ce:1e:87:f3:ac: 2a:56:3a:fa:09:e5:cc:a4:bd:5b:0c:49:5e:14:e4: 39:b1:09:46:0c:78:fa:4b:a5:24:5a:33:c6:9b:06: a2:3a:c8:e7:12:c8:a7:0b:54:df:0e:a3:a8:8e:f4: 7f:7a:ad:e1:c5:7c:21:34:e5:46:7b:64:a1:fa:db: 09:df:49:e4:22:f4:01:de:65:67:0d:ed:dc:90:a1: 5a:04:82:ca:39:c6:95:07:04:34:14:26:7c:6e:1b: ee:a7:90:52:24:cc:e5:aa:60:4c:7e:4a:5e:5c:de: 06:67:68:cc:cf:db:ea:87:8d:0f:a8:72:81:34:f2: 8d:1d:9e:a1:75:0f:c6:e0:cc:cb:1a:bc:35:72:dc: 64:c9:d3:dd:7b:17:16:a5:88:a2:5e:28:d0:c5:52: c0:3d:f2:55:da:89:db:2c:54:05:ea:85:f3:25:6a: 35:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:61:29:60:22:E0:C0:70:02:3E:53:61:36:D3:65:22:7B:7E:CF:03 X509v3 Authority Key Identifier: keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:20:a7:19:15:57:06:7b:b9:13:38:18:cc:ff:9a:c6:15:88: 4d:3f:89:42:b4:e4:3e:56:5a:3e:96:80:e7:81:2f:5a:33:78: 85:92:9c:77:39:04:5c:f5:f4:9e:86:ee:9c:55:2a:c2:95:83: 8e:eb:64:43:5d:5e:d7:ee:b4:f9:84:45:57:b4:e2:6c:54:c1: 66:62:44:76:35:d5:3e:71:e7:c2:d9:e1:fb:83:55:62:83:60: 99:34:42:45:c7:13:23:7c:39:32:22:6a:5d:0c:83:23:02:28: d5:0a:fa:da:80:88:60:32:16:60:8a:dc:b0:75:cc:86:2c:d7: 60:25:f9:5c:13:86:65:86:49:0a:86:78:f3:41:ef:30:00:5d: 41:cf:cc:4a:f6:9b:08:06:4a:ad:a5:cc:93:69:19:2a:71:51: 8b:9c:02:47:e4:b2:46:f3:4e:81:ee:8a:ae:5d:5e:9c:e8:f8: 52:48:a2:e6:f8:d8:b7:9d:e4:de:61:bc:91:65:a1:5a:8c:15: bc:a4:1d:9e:0f:e7:29:19:22:73:f4:30:e4:26:45:d9:83:52: 64:5b:7b:6a:e5:47:ab:a0:39:79:c3:df:05:77:3e:ae:62:de: f1:a5:91:58:33:cf:74:d9:92:8e:25:1d:2a:c9:5e:54:70:aa: e2:fe:86:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaz/TppOSPsMnxJ8ZZewwB1EmW8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0Yw QzQ4MUNBNTAeFw0yNjA1MTIyMTAwNDZaFw0yNjA1MTMyMjI5NDZaMDMxMTAvBgNV BAMTKDlDNjEyOTYwMjJFMEMwNzAwMjNFNTM2MTM2RDM2NTIyN0I3RUNGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCapXp+ah2Qxl4iT2coUKM/kRZu LFw3hGE4Jjs6A9WCoS2Mc2fvTe1+2B1xCmloeJWdEHw6AjilfFCCYVtAZJbngIIM rmTw36ULcCwdwvuXIypBlRXOHofzrCpWOvoJ5cykvVsMSV4U5DmxCUYMePpLpSRa M8abBqI6yOcSyKcLVN8Oo6iO9H96reHFfCE05UZ7ZKH62wnfSeQi9AHeZWcN7dyQ oVoEgso5xpUHBDQUJnxuG+6nkFIkzOWqYEx+Sl5c3gZnaMzP2+qHjQ+ocoE08o0d nqF1D8bgzMsavDVy3GTJ0917FxaliKJeKNDFUsA98lXaidssVAXqhfMlajVZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnGEpYCLgwHACPlNhNtNlInt+zwMwHwYDVR0j BBgwFoAU66rT3yM2lqBh7C9W6MT5zwxIHKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODIyMjQ2Ni8wL0VCQUFEM0RGMjMzNjk2QTA2MUVDMkY1NkU4QzRG OUNGMEM0ODFDQTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0YwQzQ4MUNBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyMjI0NjYvMC9FQkFBRDNERjIzMzY5 NkEwNjFFQzJGNTZFOEM0RjlDRjBDNDgxQ0E1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSCnGRVXBnu5 EzgYzP+axhWITT+JQrTkPlZaPpaA54EvWjN4hZKcdzkEXPX0nobunFUqwpWDjutk Q11e1+60+YRFV7TibFTBZmJEdjXVPnHnwtnh+4NVYoNgmTRCRccTI3w5MiJqXQyD IwIo1Qr62oCIYDIWYIrcsHXMhizXYCX5XBOGZYZJCoZ480HvMABdQc/MSvabCAZK raXMk2kZKnFRi5wCR+SyRvNOge6Krl1enOj4Ukii5vjYt53k3mG8kWWhWowVvKQd ng/nKRkic/Qw5CZF2YNSZFt7auVHq6A5ecPfBXc+rmLe8aWRWDPPdNmSjiUdKsle VHCq4v6Gew== -----END CERTIFICATE-----Generated at Wed May 13 15:11:54 2026 by rpki-client