$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft File: EB221959BAB62CA0F2C1844E764159F081AE413B.mft (raw, json) Hash identifier: rPYkerkQnPH8r5qjLiy+PSdZQRhUO+eciNK6ZXsfZbU= Subject key identifier: 1F:A9:B5:2A:FA:3B:07:AA:02:FB:2D:65:17:A4:10:37:75:E9:1C:F3 Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B Certificate issuer: /CN=EB221959BAB62CA0F2C1844E764159F081AE413B Certificate serial: 7009A7DAAD26E07F0FD4C44E8CB7EAFD3524288E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft Manifest number: CA Signing time: Thu 24 Sep 2026 06:01:24 +0000 Manifest this update: Thu 24 Sep 2026 05:56:24 +0000 Manifest next update: Sun 27 Sep 2026 09:08:24 +0000 Files and hashes: 1: 34352e3234382e3130342e302f32322d3232203d3e2030.roa (hash: Olt5MVy17egj99Gius/16ZJ0CP/XuP53qLG1H4AiBCE=) 2: 34352e3234382e3130302e302f32322d3232203d3e2030.roa (hash: evePIHhobdrqna9eeXg6NPN2qqunrVRaep6ZbuP+aTQ=) 3: 3130332e38352e3138362e302f32332d3233203d3e2030.roa (hash: hbLJedcagKHXUcAguzbn4GEebd+SVTq2Cx2L9PEByro=) 4: 3130332e3231362e3234382e302f32322d3232203d3e2030.roa (hash: gSl2ZouhSu3TZUcpNStUpMOCuX4EXWUXGnNDBeo4IEk=) 5: EB221959BAB62CA0F2C1844E764159F081AE413B.crl (hash: mLDYPhXlQsJvHjfGYb/AP/tTBXN/y/IDrZcHJ63ot3g=) 6: 3130332e3231362e3234342e302f32322d3232203d3e2030.roa (hash: pbIJ5jx/pf8/NAcf/hXOdBb+q7VleSIVTqtoc77iUsM=) 7: 323430303a646565303a3a2f33322d3332203d3e2030.roa (hash: EdjUimtwDmmEb/7qnPllHoQilNinJIy02221yPSiAD4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 09:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:09:a7:da:ad:26:e0:7f:0f:d4:c4:4e:8c:b7:ea:fd:35:24:28:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B Validity Not Before: Sep 24 05:56:24 2026 GMT Not After : Sep 27 09:08:24 2026 GMT Subject: CN=1FA9B52AFA3B07AA02FB2D6517A4103775E91CF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c2:4a:66:fa:d0:d0:91:5a:ae:87:fb:9e:4b: 3a:b8:67:2a:fc:a9:7d:21:3a:1e:97:63:4f:e9:34: 27:0d:cc:13:47:31:3a:eb:1c:d8:d8:8b:1a:48:b9: b5:39:8a:bf:1e:67:93:40:c2:d2:0c:8d:78:e4:c2: 79:05:2a:18:76:1b:35:d7:f3:08:1b:12:bf:74:fe: 60:72:c7:29:6b:e4:cf:44:f7:f7:fd:fb:b8:87:5a: 75:0b:1e:9b:ca:05:e8:cc:93:86:42:d3:ed:33:79: bb:17:9e:4b:69:ed:aa:68:63:ab:d3:a3:20:b4:5f: eb:8b:59:31:7b:76:7e:ec:ad:3f:22:f0:35:b4:75: b7:ef:07:99:ce:60:24:43:03:4e:57:40:00:5c:99: d3:d2:65:13:68:72:af:91:bd:99:bc:20:50:1d:c0: 79:21:cb:ed:07:92:5e:d9:35:c9:da:4d:78:38:b2: 07:21:b8:ce:60:03:c3:84:67:53:bf:69:bd:04:75: 7e:78:c0:fc:0b:d6:e5:c6:f7:82:2f:c1:b3:84:71: 30:90:59:15:5f:bb:c0:0b:08:5e:a6:b4:18:0b:d9: 6c:f6:24:58:80:c9:41:b0:0a:83:22:52:34:46:c1: a3:54:7e:fb:96:38:14:65:08:9f:7c:20:90:06:1b: 67:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A9:B5:2A:FA:3B:07:AA:02:FB:2D:65:17:A4:10:37:75:E9:1C:F3 X509v3 Authority Key Identifier: keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fc:ec:af:fa:46:ba:8f:29:43:0a:0b:c6:80:fa:1d:b2:7d: c8:99:10:ce:43:2a:24:69:97:37:e0:11:fd:7f:42:0c:5a:ca: 8c:dd:be:af:80:fe:1d:ba:70:01:2d:0c:0e:b3:6a:e8:8e:8a: ba:f6:db:ad:19:f5:d6:1d:88:cb:5d:71:8b:e1:61:51:72:86: 60:ae:7d:56:a6:d1:eb:0b:43:9b:16:8e:38:36:fe:e0:13:43: 89:83:42:16:c6:ac:8a:f3:9c:6d:3b:7f:d6:33:77:e7:bc:30: dd:00:f3:30:81:3c:7c:fd:e7:f3:e2:3f:a8:50:c1:c0:2e:97: 91:26:89:3a:da:61:52:29:c7:f8:2f:38:ce:05:10:cf:c1:2b: 6a:60:ac:04:c0:67:0d:2a:d7:93:f7:50:ea:2b:41:0c:0c:a7: bd:b5:c5:36:64:ab:1a:46:7f:c4:7b:e0:5b:1e:1f:b7:d1:fa: f0:f8:c8:87:85:16:64:5e:c3:d8:e3:07:98:dd:87:f5:6e:9f: 50:3f:56:2b:86:91:e2:32:01:bd:cc:35:f4:e3:7c:b4:cb:e9: 6c:74:7f:ac:fa:6c:be:66:63:32:b0:ba:e6:35:66:fd:6d:12: 70:eb:f8:46:59:0e:98:0d:a1:1f:df:67:f7:8b:1c:28:4e:bd: cd:ce:4f:c5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcAmn2q0m4H8P1MROjLfq/TUkKI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4 MUFFNDEzQjAeFw0yNjA5MjQwNTU2MjRaFw0yNjA5MjcwOTA4MjRaMDMxMTAvBgNV BAMTKDFGQTlCNTJBRkEzQjA3QUEwMkZCMkQ2NTE3QTQxMDM3NzVFOTFDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZwkpm+tDQkVquh/ueSzq4Zyr8 qX0hOh6XY0/pNCcNzBNHMTrrHNjYixpIubU5ir8eZ5NAwtIMjXjkwnkFKhh2GzXX 8wgbEr90/mByxylr5M9E9/f9+7iHWnULHpvKBejMk4ZC0+0zebsXnktp7apoY6vT oyC0X+uLWTF7dn7srT8i8DW0dbfvB5nOYCRDA05XQABcmdPSZRNocq+RvZm8IFAd wHkhy+0Hkl7ZNcnaTXg4sgchuM5gA8OEZ1O/ab0EdX54wPwL1uXG94IvwbOEcTCQ WRVfu8ALCF6mtBgL2Wz2JFiAyUGwCoMiUjRGwaNUfvuWOBRlCJ98IJAGG2fxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUH6m1Kvo7B6oC+y1lF6QQN3XpHPMwHwYDVR0j BBgwFoAU6yIZWbq2LKDywYROdkFZ8IGuQTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMzYzOTI4ODcwOTEyMi8wL0VCMjIxOTU5QkFCNjJDQTBGMkMxODQ0RTc2NDE1 OUYwODFBRTQxM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4MUFFNDEzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjM2MzkyODg3MDkxMjIvMC9FQjIyMTk1OUJBQjYy Q0EwRjJDMTg0NEU3NjQxNTlGMDgxQUU0MTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfzsr/pGuo8p QwoLxoD6HbJ9yJkQzkMqJGmXN+AR/X9CDFrKjN2+r4D+HbpwAS0MDrNq6I6Kuvbb rRn11h2Iy11xi+FhUXKGYK59VqbR6wtDmxaOODb+4BNDiYNCFsasivOcbTt/1jN3 57ww3QDzMIE8fP3n8+I/qFDBwC6XkSaJOtphUinH+C84zgUQz8EramCsBMBnDSrX k/dQ6itBDAynvbXFNmSrGkZ/xHvgWx4ft9H68PjIh4UWZF7D2OMHmN2H9W6fUD9W K4aR4jIBvcw19ON8tMvpbHR/rPpsvmZjMrC65jVm/W0ScOv4RlkOmA2hH99n94sc KE69zc5PxQ== -----END CERTIFICATE-----Generated at Thu Sep 24 21:55:28 2026 by rpki-client