$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft File: EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft (raw, json) Hash identifier: 4EDJFP1pJ2Y3kGY+V+52dBQFAlMnsiAc+NPD/xZBti0= Subject key identifier: 85:C6:8E:BB:00:D1:8A:AC:EF:80:9C:E3:0E:B9:C8:54:BB:8C:6A:18 Authority key identifier: EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE Certificate issuer: /CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE Certificate serial: 2F3BCB9F27194B03144134FA9D3FA2A764BBFB5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft Manifest number: D1 Signing time: Wed 13 May 2026 02:50:54 +0000 Manifest this update: Wed 13 May 2026 02:45:54 +0000 Manifest next update: Thu 14 May 2026 06:49:54 +0000 Files and hashes: 1: EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl (hash: 25G5xA3LdrEHhhaBNukkoUvDa5OhKiRLFMIi4kUfPrM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3b:cb:9f:27:19:4b:03:14:41:34:fa:9d:3f:a2:a7:64:bb:fb:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE Validity Not Before: May 13 02:45:54 2026 GMT Not After : May 14 06:49:54 2026 GMT Subject: CN=85C68EBB00D18AACEF809CE30EB9C854BB8C6A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:49:3b:42:93:78:8a:b2:8c:06:f2:1f:9a: e9:84:17:aa:4b:b1:99:cb:ee:c2:16:39:b7:9a:31: a5:60:7f:df:92:03:f5:72:b5:aa:9e:cf:ff:77:08: 68:7e:69:ec:05:2e:7e:9c:a7:36:a0:b8:7c:e2:50: ac:54:e7:bc:2d:82:91:6c:fd:39:87:bf:f6:c5:d4: ae:d8:43:46:1c:b2:74:2d:6b:75:c0:0c:97:99:bc: 3a:9d:ad:b0:5e:37:4f:30:c2:04:9e:73:c8:2c:ca: f4:ef:1e:c2:98:71:ac:98:31:16:38:bd:30:b4:10: ab:85:d3:eb:b9:ec:78:a7:f6:82:cb:34:7d:6c:e8: e3:7d:74:9e:de:dc:fe:af:79:2f:bc:a6:b4:e9:54: e6:f1:67:2e:b1:be:bf:58:a2:6c:f5:e3:55:c0:e5: ac:e1:f4:10:fa:d9:b0:a3:c4:13:2a:ed:68:81:6f: 42:81:70:6f:be:a0:2b:d1:3c:90:6c:79:ec:5b:38: 59:9d:0e:78:21:c6:81:94:d8:b4:8b:3d:55:7d:6e: 15:c6:6a:be:ff:94:e2:25:fc:14:96:72:60:8e:bd: d7:3a:85:c0:18:b0:10:f5:47:2b:1a:4d:87:fe:ab: b6:f8:19:f8:7a:57:73:13:58:70:27:d4:90:41:e0: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C6:8E:BB:00:D1:8A:AC:EF:80:9C:E3:0E:B9:C8:54:BB:8C:6A:18 X509v3 Authority Key Identifier: keyid:EB:80:67:2A:D4:2A:27:96:AF:DB:6C:99:F7:FF:B6:29:E6:A0:A4:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098526607670247425/0/EB80672AD42A2796AFDB6C99F7FFB629E6A0A4EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:44:34:d3:06:b8:02:e5:30:86:e2:aa:ee:14:40:e5:43:79: b1:0a:96:9f:01:e9:62:a9:f1:39:17:1b:65:8f:64:fe:b1:aa: 0a:e5:86:a9:60:46:02:ed:68:10:9f:16:79:d5:dd:99:a0:ba: 7b:52:65:f9:50:98:b8:61:67:13:98:39:32:5e:7d:d6:d2:bb: 30:17:37:11:27:c1:33:46:47:f7:72:b6:7d:9f:52:68:ab:df: 43:b4:45:88:94:b3:5f:7f:7f:f6:39:9d:05:77:27:17:8f:d4: 42:a2:bf:ec:e9:0f:28:49:82:0b:d9:3d:77:55:9f:c2:c0:6c: 29:35:f1:e1:5d:99:fa:1e:bf:50:dd:7a:54:f6:de:53:d0:1d: fe:91:a8:f4:c1:2a:ec:97:26:f2:8f:a2:0d:45:82:3c:5c:9f: 6c:7b:22:5f:ec:eb:3c:01:6e:3f:7c:39:15:7c:a4:ba:93:04: 91:ca:32:8a:bc:d3:dc:a8:b0:14:f4:a7:83:e8:52:0b:96:71: ab:9a:1c:64:28:d7:08:5e:da:5b:70:37:5d:8c:0d:d4:fe:ac: 12:19:33:2a:f0:3f:ec:6b:b0:0b:0d:97:35:4f:71:c1:b4:08: 22:38:60:76:f9:b6:a5:bf:ab:48:b9:e1:f6:ce:a1:1e:df:90: fa:50:25:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULzvLnycZSwMUQTT6nT+ip2S7+14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI4MDY3MkFENDJBMjc5NkFGREI2Qzk5RjdGRkI2MjlF NkEwQTRFRTAeFw0yNjA1MTMwMjQ1NTRaFw0yNjA1MTQwNjQ5NTRaMDMxMTAvBgNV BAMTKDg1QzY4RUJCMDBEMThBQUNFRjgwOUNFMzBFQjlDODU0QkI4QzZBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2g0k7QpN4irKMBvIfmumEF6pL sZnL7sIWObeaMaVgf9+SA/Vytaqez/93CGh+aewFLn6cpzaguHziUKxU57wtgpFs /TmHv/bF1K7YQ0YcsnQta3XADJeZvDqdrbBeN08wwgSec8gsyvTvHsKYcayYMRY4 vTC0EKuF0+u57Hin9oLLNH1s6ON9dJ7e3P6veS+8prTpVObxZy6xvr9Yomz141XA 5azh9BD62bCjxBMq7WiBb0KBcG++oCvRPJBseexbOFmdDnghxoGU2LSLPVV9bhXG ar7/lOIl/BSWcmCOvdc6hcAYsBD1RysaTYf+q7b4Gfh6V3MTWHAn1JBB4B+/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhcaOuwDRiqzvgJzjDrnIVLuMahgwHwYDVR0j BBgwFoAU64BnKtQqJ5av22yZ9/+2KeagpO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUyNjYwNzY3MDI0NzQyNS8wL0VCODA2NzJBRDQyQTI3OTZBRkRCNkM5OUY3RkZC NjI5RTZBMEE0RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUI4MDY3MkFENDJBMjc5NkFGREI2Qzk5RjdGRkI2MjlFNkEwQTRFRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MjY2MDc2NzAyNDc0MjUvMC9FQjgwNjcyQUQ0MkEy Nzk2QUZEQjZDOTlGN0ZGQjYyOUU2QTBBNEVFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0Q00wa4AuUw huKq7hRA5UN5sQqWnwHpYqnxORcbZY9k/rGqCuWGqWBGAu1oEJ8WedXdmaC6e1Jl +VCYuGFnE5g5Ml591tK7MBc3ESfBM0ZH93K2fZ9SaKvfQ7RFiJSzX39/9jmdBXcn F4/UQqK/7OkPKEmCC9k9d1WfwsBsKTXx4V2Z+h6/UN16VPbeU9Ad/pGo9MEq7Jcm 8o+iDUWCPFyfbHsiX+zrPAFuP3w5FXykupMEkcoyirzT3KiwFPSng+hSC5Zxq5oc ZCjXCF7aW3A3XYwN1P6sEhkzKvA/7GuwCw2XNU9xwbQIIjhgdvm2pb+rSLnh9s6h Ht+Q+lAlbQ== -----END CERTIFICATE-----Generated at Wed May 13 20:55:08 2026 by rpki-client