$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft File: EB221959BAB62CA0F2C1844E764159F081AE413B.mft (raw, json) Hash identifier: ClBg+jDKzZqDpho23bqW0VLqGhk94kDbts2p4zCwqyY= Subject key identifier: D7:43:A8:76:17:D4:77:0B:CF:52:A2:AB:13:AA:0A:B3:5F:CE:30:F5 Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B Certificate issuer: /CN=EB221959BAB62CA0F2C1844E764159F081AE413B Certificate serial: 06498C7638BF4D661E9EFC505198AEDE459DFB49 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft Manifest number: 8E Signing time: Thu 23 Jul 2026 23:49:52 +0000 Manifest this update: Thu 23 Jul 2026 23:44:52 +0000 Manifest next update: Sat 25 Jul 2026 00:22:52 +0000 Files and hashes: 1: 3130332e3231362e3234382e302f32322d3232203d3e2030.roa (hash: gSl2ZouhSu3TZUcpNStUpMOCuX4EXWUXGnNDBeo4IEk=) 2: 3130332e3231362e3234342e302f32322d3232203d3e2030.roa (hash: pbIJ5jx/pf8/NAcf/hXOdBb+q7VleSIVTqtoc77iUsM=) 3: 323430303a646565303a3a2f33322d3332203d3e2030.roa (hash: EdjUimtwDmmEb/7qnPllHoQilNinJIy02221yPSiAD4=) 4: 34352e3234382e3130302e302f32322d3232203d3e2030.roa (hash: evePIHhobdrqna9eeXg6NPN2qqunrVRaep6ZbuP+aTQ=) 5: 34352e3234382e3130342e302f32322d3232203d3e2030.roa (hash: Olt5MVy17egj99Gius/16ZJ0CP/XuP53qLG1H4AiBCE=) 6: EB221959BAB62CA0F2C1844E764159F081AE413B.crl (hash: N6kufBHGXqPyASC54Jsa7hY4CNkhwZUBpypZ81oPM8A=) 7: 3130332e38352e3138362e302f32332d3233203d3e2030.roa (hash: hbLJedcagKHXUcAguzbn4GEebd+SVTq2Cx2L9PEByro=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:49:8c:76:38:bf:4d:66:1e:9e:fc:50:51:98:ae:de:45:9d:fb:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B Validity Not Before: Jul 23 23:44:52 2026 GMT Not After : Jul 25 00:22:52 2026 GMT Subject: CN=D743A87617D4770BCF52A2AB13AA0AB35FCE30F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:fd:12:32:66:9e:15:ba:64:38:98:97:b1: 83:dd:e7:4c:fe:01:9f:8c:a4:f6:8a:11:fc:e4:2f: 8a:46:1e:98:eb:56:29:e9:1e:b6:62:1a:35:8d:5a: fc:b2:7a:5e:56:75:f6:61:ec:26:d7:dd:bf:62:e6: e8:81:e5:d6:58:1e:54:0b:97:39:41:2e:e0:0e:43: 70:4b:65:51:28:73:3d:6f:cd:65:1a:77:91:d8:fd: 7e:6b:88:b2:79:33:75:75:80:a2:b9:ea:47:37:2d: 22:62:9c:c3:e7:95:fb:cd:00:96:68:dc:97:74:b0: 9e:7e:ec:bc:6d:fc:80:2e:29:81:f7:3a:43:dc:60: e5:7d:9b:ea:ed:83:8f:05:64:be:a2:cb:e6:90:5e: 03:9a:54:44:b7:a5:51:21:26:34:8d:50:f3:0e:42: 07:be:bf:19:8e:a3:8c:08:c1:63:f8:d0:05:7d:4e: 75:3e:29:73:1f:83:85:0d:cf:0c:9c:26:20:37:23: 32:d1:03:7c:0f:dc:f4:5c:0c:d2:c1:29:e4:8f:c7: 62:6d:2a:ae:bf:31:12:27:3d:8e:ed:b2:fb:5c:03: 21:58:bd:ab:de:45:64:72:a8:f9:fa:e2:ce:e2:53: 2e:fb:ac:30:11:40:bf:c2:cb:68:ad:fb:91:aa:2a: 73:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:43:A8:76:17:D4:77:0B:CF:52:A2:AB:13:AA:0A:B3:5F:CE:30:F5 X509v3 Authority Key Identifier: keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a3:65:d4:f6:fa:20:9a:66:ff:60:fd:fa:ed:ce:5b:73:48: a2:d9:8f:02:d2:ca:fe:44:68:83:d0:2e:05:b9:08:6b:57:15: fb:ec:1c:a4:04:3a:d7:3f:f2:1a:f0:4d:57:e4:d4:c5:c3:11: 5a:4f:5c:10:37:fe:88:20:c8:03:c4:a2:28:1c:15:c1:9c:11: 6c:9f:2d:a6:07:e9:bb:2d:32:ac:3f:af:9e:3b:b8:02:00:60: f5:cf:e5:6c:d7:0a:3d:fe:d9:34:8c:33:4d:34:a5:ca:d3:ed: 1a:b9:7e:09:b7:68:1f:bc:85:7b:5b:eb:9f:bc:5a:49:f4:b8: cd:01:45:46:ae:ef:df:bb:8c:43:8a:d3:40:47:5d:f0:67:3b: 84:d8:18:07:7b:9b:6f:9d:f1:f5:e7:c2:b7:63:a0:91:87:bf: 4c:a3:fd:2f:29:ec:30:e6:ad:40:a9:12:b9:fa:01:c2:c1:81: 91:c4:f9:d5:60:64:4b:b9:ad:d7:2a:77:34:67:89:ec:88:5b: a6:b6:bd:9d:37:f3:89:80:a5:bd:f0:83:5b:43:9b:20:49:a2: 36:85:35:9a:57:43:59:58:61:84:4e:70:c7:6c:4d:29:a9:1d: 01:c8:fb:f2:f1:ae:95:19:c3:f0:17:32:81:d2:44:06:ae:67: 9f:c2:9e:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBkmMdji/TWYenvxQUZiu3kWd+0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4 MUFFNDEzQjAeFw0yNjA3MjMyMzQ0NTJaFw0yNjA3MjUwMDIyNTJaMDMxMTAvBgNV BAMTKEQ3NDNBODc2MTdENDc3MEJDRjUyQTJBQjEzQUEwQUIzNUZDRTMwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHf0SMmaeFbpkOJiXsYPd50z+ AZ+MpPaKEfzkL4pGHpjrVinpHrZiGjWNWvyyel5WdfZh7CbX3b9i5uiB5dZYHlQL lzlBLuAOQ3BLZVEocz1vzWUad5HY/X5riLJ5M3V1gKK56kc3LSJinMPnlfvNAJZo 3Jd0sJ5+7Lxt/IAuKYH3OkPcYOV9m+rtg48FZL6iy+aQXgOaVES3pVEhJjSNUPMO Qge+vxmOo4wIwWP40AV9TnU+KXMfg4UNzwycJiA3IzLRA3wP3PRcDNLBKeSPx2Jt Kq6/MRInPY7tsvtcAyFYvaveRWRyqPn64s7iUy77rDARQL/Cy2it+5GqKnPXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU10OodhfUdwvPUqKrE6oKs1/OMPUwHwYDVR0j BBgwFoAU6yIZWbq2LKDywYROdkFZ8IGuQTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMzYzOTI4ODcwOTEyMi8wL0VCMjIxOTU5QkFCNjJDQTBGMkMxODQ0RTc2NDE1 OUYwODFBRTQxM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4MUFFNDEzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjM2MzkyODg3MDkxMjIvMC9FQjIyMTk1OUJBQjYy Q0EwRjJDMTg0NEU3NjQxNTlGMDgxQUU0MTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqNl1Pb6IJpm /2D9+u3OW3NIotmPAtLK/kRog9AuBbkIa1cV++wcpAQ61z/yGvBNV+TUxcMRWk9c EDf+iCDIA8SiKBwVwZwRbJ8tpgfpuy0yrD+vnju4AgBg9c/lbNcKPf7ZNIwzTTSl ytPtGrl+CbdoH7yFe1vrn7xaSfS4zQFFRq7v37uMQ4rTQEdd8Gc7hNgYB3ubb53x 9efCt2OgkYe/TKP9LynsMOatQKkSufoBwsGBkcT51WBkS7mt1yp3NGeJ7Ihbpra9 nTfziYClvfCDW0ObIEmiNoU1mldDWVhhhE5wx2xNKakdAcj78vGulRnD8BcygdJE Bq5nn8KeHg== -----END CERTIFICATE-----Generated at Fri Jul 24 09:39:05 2026 by rpki-client