
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
File: EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft (raw, json)
Hash identifier: JS+4guM+1TfVNgpMfC8nk1MK0WO0poi49Ov+GI6UuzY=
Subject key identifier: 75:C7:1A:64:F3:1C:8D:34:80:83:4F:A9:AA:E4:C9:6D:51:AC:B2:1D
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Certificate issuer: /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial: 114CC24EFE8D1FD008CFA1767F6F6945BA060C82
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
Manifest number: 38
Signing time: Wed 13 May 2026 17:16:05 +0000
Manifest this update: Wed 13 May 2026 17:11:05 +0000
Manifest next update: Thu 14 May 2026 20:44:05 +0000
Files and hashes: 1: 34332e3232352e3230392e302f32342d3234203d3e20313331353036.roa (hash: zo26PPoM+V0J+T2HAcAkhCil4kbIjKi2ohzaJjlHR4M=)
2: 3130332e34342e3137302e302f32332d3233203d3e20313331353036.roa (hash: nU+eWzfRVQqfbTiMZ3CslqG7e7JVD7phJIxxv/YQPvY=)
3: 3130332e34342e3136392e302f32342d3234203d3e20313331353036.roa (hash: 0MHN2JI6S+zl9psxVMy6H3GSyhW/oNzMPpTx/dHPwDk=)
4: 3130332e3135362e3137342e302f32332d3233203d3e20313331353036.roa (hash: PYP5jUQdczOCSYcN+CjV3ROnD900kbAkh56NJYA1EoQ=)
5: 3130332e34342e3137312e302f32342d3234203d3e20313331353036.roa (hash: dDVB95GOdlKiem0RPeoJ+o5H0W6WPtueIHcgrjv/yyU=)
6: 34332e3232352e3230382e302f32332d3233203d3e20313331353036.roa (hash: Ifydao389Ts8SX0fpNPrptnFJjCFFcPkrzfINNxLwKE=)
7: 323430313a643738303a3a2f34382d3438203d3e20313331353036.roa (hash: IpsexcgtGyJ+z3cYrXzZ6SOiKsWTzQyQl49/exqd790=)
8: 3130332e3135362e3138372e302f32342d3234203d3e20313331353036.roa (hash: x88O9p2ZLKHn4APTvzYiPG9hvr2oqiTbcnaJjKGRDZs=)
9: 3130332e3135362e3137352e302f32342d3234203d3e20313331353036.roa (hash: TKD32MInttw+NgzjjWoQCJHcrxNGZXX84Cw5hNESL/M=)
10: 3130332e3135362e3137342e302f32342d3234203d3e20313331353036.roa (hash: 5xOmdmKhQmNhVFfauoKuKn6B8VtRms4WvdeVegMHlFU=)
11: 323430313a643738303a3a2f33322d3332203d3e20313331353036.roa (hash: 1WaWO6RIA1a/HCSbXMpQSbbU+ma9gqpaM3KKpbXU0RQ=)
12: 3130332e3135362e3138362e302f32342d3234203d3e20313331353036.roa (hash: ik1O48XM7u2JMt3etk5nUA7G2hKXp5MXIhCGqQ732Ww=)
13: 34332e3232352e3230382e302f32342d3234203d3e20313331353036.roa (hash: 7ZEwYQHNTiMbSrqiXLL7Q56U2vDkT87WpvBGgULPBaw=)
14: 3130332e34342e3136382e302f32332d3233203d3e20313331353036.roa (hash: NGHyyVe1ZgVxAGSZW6VmuWYHgHfAbSJonRRmVYLMOXs=)
15: EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl (hash: +6C3mWpC/xgQbhmZmLThi6+Zh6rJRqK5+MieObiN+W4=)
16: 34332e3232352e3231302e302f32332d3233203d3e20313331353036.roa (hash: LmeHeeCAFaWZQQr0mnPS05Zx5LmmawN/aUqwsweDBCc=)
17: 34332e3232352e3231312e302f32342d3234203d3e20313331353036.roa (hash: ahdlpfPhXEDcp22YQWvlKcmdg++QNsS1lt1yso+RQTk=)
18: 3130332e34342e3137302e302f32342d3234203d3e20313331353036.roa (hash: LyTXFqKRNwhhCE3pcqu+AnpDTnZtyaw1LlPN2uXIVL8=)
19: 3130332e34342e3136382e302f32342d3234203d3e20313331353036.roa (hash: t2qYpUmXz6KqLk4TNdstb4nvK4+aZPP8aJubVqNa0yI=)
20: 34332e3232352e3231302e302f32342d3234203d3e20313331353036.roa (hash: lDnBFgBakcuUPAjKX1Upr+F/K3TMQR1ydrGGUqrFtQk=)
21: 3130332e3135362e3138362e302f32332d3233203d3e20313331353036.roa (hash: 1JZmCTUiVlI9g97MG2LUDDqwRiW30/dY2H1cmpnp/7k=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:4c:c2:4e:fe:8d:1f:d0:08:cf:a1:76:7f:6f:69:45:ba:06:0c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Validity
Not Before: May 13 17:11:05 2026 GMT
Not After : May 14 20:44:05 2026 GMT
Subject: CN=75C71A64F31C8D3480834FA9AAE4C96D51ACB21D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:d0:16:fe:5c:2c:40:0b:6e:85:e2:41:5f:
cc:88:76:5a:e2:43:a3:04:78:57:e6:4a:bc:6f:86:
f9:78:f7:5e:68:40:3b:ac:65:76:48:84:d8:41:87:
e8:da:de:89:3d:5d:d2:26:96:56:1b:49:8a:71:62:
0f:e0:ce:c6:4f:b8:54:c8:08:44:7e:5c:75:42:e2:
2b:f4:7b:ca:36:ba:81:85:16:f2:50:96:cb:66:b0:
e4:46:79:95:50:6e:39:d0:cd:80:8f:df:b9:96:d9:
87:06:3a:be:7d:29:9f:66:a3:f5:95:b2:46:eb:76:
2b:9f:60:c3:3a:71:04:ff:e6:0f:37:33:1f:21:03:
db:8e:86:d4:23:b4:5a:cf:98:f8:73:01:6e:17:f0:
3b:13:a5:ea:ab:0e:a3:f2:52:3d:c2:bd:46:d1:8c:
f5:d8:e8:b4:18:85:6c:6a:1c:c8:cc:b7:4c:78:0d:
c2:8a:2f:ee:55:6d:08:10:04:97:81:bf:81:78:66:
e7:f8:ff:ad:5c:5b:4f:ed:ac:6e:ef:89:ff:88:4f:
8b:09:28:92:bd:fb:98:5a:fb:f2:e1:e9:f1:5c:75:
e3:34:42:a4:bf:14:90:ae:8b:7f:05:b5:68:31:75:
58:e2:ad:0c:aa:6a:92:c2:19:20:33:30:03:57:7d:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C7:1A:64:F3:1C:8D:34:80:83:4F:A9:AA:E4:C9:6D:51:AC:B2:1D
X509v3 Authority Key Identifier:
keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:79:64:5c:02:ee:3b:2a:04:a1:90:28:b8:3e:95:03:17:41:
77:d0:ca:2f:2a:23:b2:1d:d4:e0:c8:c7:cb:66:7b:73:85:93:
ae:c6:c5:e1:26:85:c1:a9:b6:7d:56:7d:ce:3d:a4:d2:3d:60:
5b:dd:9a:6c:be:77:55:48:85:2d:44:a6:29:d9:3e:f7:56:30:
9c:7c:c4:e6:0b:1b:bf:ec:07:d1:d1:1d:0e:01:8c:b4:ca:d1:
99:59:fd:a8:be:cc:3c:ad:15:b7:60:95:a1:1e:f3:96:f9:ad:
44:6e:81:1c:81:06:1f:45:31:38:93:9d:16:e2:ae:0b:eb:44:
f4:fc:eb:92:13:6b:3b:49:41:8b:cb:5a:73:dc:be:a9:81:30:
02:98:5d:d3:f9:5a:a7:6c:3b:af:78:85:67:7f:7e:40:b1:07:
6f:6f:94:4a:76:40:11:b0:91:57:fb:49:01:73:2c:c2:56:cf:
e1:c8:4c:cc:fc:76:3f:e2:4d:62:83:74:61:5f:5f:3f:95:83:
4d:a2:1b:3f:92:5c:d6:8d:15:aa:d3:14:fe:ab:dd:8f:cf:8d:
c4:a3:cd:65:6e:b0:f8:27:b1:f4:3b:ad:57:4a:1b:69:20:81:
cd:a0:ba:75:9a:3f:ca:cc:3f:45:42:68:92:57:c2:91:88:bd:
3d:db:4f:79
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUEUzCTv6NH9AIz6F2f29pRboGDIIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUVBRjIxRjIxRjk1MURGRkNFOEVCOUNGMjk2RjhGOTI0
RDZENTE2MzAeFw0yNjA1MTMxNzExMDVaFw0yNjA1MTQyMDQ0MDVaMDMxMTAvBgNV
BAMTKDc1QzcxQTY0RjMxQzhEMzQ4MDgzNEZBOUFBRTRDOTZENTFBQ0IyMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM6tAW/lwsQAtuheJBX8yIdlri
Q6MEeFfmSrxvhvl4915oQDusZXZIhNhBh+ja3ok9XdImllYbSYpxYg/gzsZPuFTI
CER+XHVC4iv0e8o2uoGFFvJQlstmsORGeZVQbjnQzYCP37mW2YcGOr59KZ9mo/WV
skbrdiufYMM6cQT/5g83Mx8hA9uOhtQjtFrPmPhzAW4X8DsTpeqrDqPyUj3CvUbR
jPXY6LQYhWxqHMjMt0x4DcKKL+5VbQgQBJeBv4F4Zuf4/61cW0/trG7vif+IT4sJ
KJK9+5ha+/Lh6fFcdeM0QqS/FJCui38FtWgxdVjirQyqapLCGSAzMANXfSsPAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUdccaZPMcjTSAg0+pquTJbVGssh0wHwYDVR0j
BBgwFoAU7q8h8h+VHf/OjrnPKW+Pkk1tUWMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDQzNjE2MjU0Nzc0NDc3MC8wL0VFQUYyMUYyMUY5NTFERkZDRThFQjlDRjI5NkY4
RjkyNEQ2RDUxNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUVBRjIxRjIxRjk1MURGRkNFOEVCOUNGMjk2RjhGOTI0RDZENTE2My5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ0MzYxNjI1NDc3NDQ3NzAvMC9FRUFGMjFGMjFGOTUx
REZGQ0U4RUI5Q0YyOTZGOEY5MjRENkQ1MTYzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0XlkXALuOyoE
oZAouD6VAxdBd9DKLyojsh3U4MjHy2Z7c4WTrsbF4SaFwam2fVZ9zj2k0j1gW92a
bL53VUiFLUSmKdk+91YwnHzE5gsbv+wH0dEdDgGMtMrRmVn9qL7MPK0Vt2CVoR7z
lvmtRG6BHIEGH0UxOJOdFuKuC+tE9PzrkhNrO0lBi8tac9y+qYEwAphd0/lap2w7
r3iFZ39+QLEHb2+USnZAEbCRV/tJAXMswlbP4chMzPx2P+JNYoN0YV9fP5WDTaIb
P5Jc1o0VqtMU/qvdj8+NxKPNZW6w+Cex9DutV0obaSCBzaC6dZo/ysw/RUJoklfC
kYi9PdtPeQ==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:06 2026 by rpki-client