
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
File: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft (raw, json)
Hash identifier: lg9oNwHcb/0HRimxjiBt4rpQ4IPoAOqRsb1LuPsls9E=
Subject key identifier: A1:2D:09:14:B9:CF:E7:C3:25:53:71:D1:8D:47:77:7D:C0:63:D1:D8
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial: 7F560F0F20318A7B2D4B50A025F4B3A9D0122087
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
Manifest number: 0100
Signing time: Mon 27 Jul 2026 10:53:57 +0000
Manifest this update: Mon 27 Jul 2026 10:48:57 +0000
Manifest next update: Tue 28 Jul 2026 14:47:57 +0000
Files and hashes: 1: 323430333a356238303a3a2f33322d3332203d3e2030.roa (hash: 46/tjO14ih7NL7c3FlsSLZTwfgKKd0SVKFNff9MQoNM=)
2: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl (hash: bTMfUOhnl6Z31tINWZcbY52KqQeZZ1c03XzAYhJ2Gz8=)
3: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (hash: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=)
4: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (hash: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI=)
5: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (hash: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=)
6: 3130332e32342e3232382e302f32342d3234203d3e2034383337.roa (hash: EkHOAQ9SZLQtgUKfohxIGCu30Zcv63COLPGEXCHOHaY=)
7: 3130332e32342e3232382e302f32322d3232203d3e2034383337.roa (hash: qJPJ83xaMw16qDsSncZcoy/olhHqgPT6g3PgUjqsbok=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:56:0f:0f:20:31:8a:7b:2d:4b:50:a0:25:f4:b3:a9:d0:12:20:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Validity
Not Before: Jul 27 10:48:57 2026 GMT
Not After : Jul 28 14:47:57 2026 GMT
Subject: CN=A12D0914B9CFE7C3255371D18D47777DC063D1D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:4b:d0:2f:87:a9:29:e2:3b:dd:67:d4:99:
b4:94:9f:34:3a:f0:08:7a:ba:4b:3f:51:7b:56:c0:
e9:97:bd:0d:5f:25:66:a5:ed:df:ae:cc:1f:05:5c:
5d:b5:af:91:cd:30:8b:94:75:2a:d1:77:4b:bc:fe:
bb:35:a7:ae:97:9a:fc:01:3a:04:2d:56:9c:e4:13:
88:37:16:f2:3b:38:a0:a4:38:ac:7d:13:4b:a6:ae:
d4:8a:6d:ba:0e:4c:7a:7c:2a:0a:f6:89:7c:c2:41:
07:0c:00:1c:98:0d:65:4a:cd:d8:66:99:fe:65:b2:
45:a1:9c:ab:24:95:0e:93:9e:d2:29:5a:03:a0:ce:
92:0b:5c:73:aa:fd:d5:a9:7c:4f:bd:6e:52:a9:75:
ee:b6:3f:76:bb:df:cb:e3:46:d0:05:16:b8:b9:ca:
5f:d2:fc:97:f0:85:e0:9e:3a:97:3a:09:3a:4b:c9:
8e:43:4d:ee:67:1a:d4:56:c6:68:ea:18:51:f5:f1:
43:54:aa:95:95:61:c8:df:9a:81:15:36:8e:a4:42:
96:c5:75:65:f4:9c:c6:96:5f:a1:5e:46:9c:49:af:
4c:dd:15:55:02:c3:1e:12:8b:dc:03:79:83:a8:39:
81:2b:d4:5d:ef:8f:5a:0b:c3:22:bf:09:48:73:41:
52:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2D:09:14:B9:CF:E7:C3:25:53:71:D1:8D:47:77:7D:C0:63:D1:D8
X509v3 Authority Key Identifier:
keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9f:38:01:56:14:3c:66:d6:84:33:e9:8b:7c:b8:7f:52:99:
3f:f4:93:48:74:72:12:42:b6:18:32:08:7c:a7:8f:ad:bc:91:
09:7d:16:43:17:59:86:4a:5e:6e:15:a5:2e:41:ca:bb:4f:05:
aa:2f:6b:68:85:c6:0b:b7:f8:73:bd:97:f1:2a:f6:8d:6c:ec:
08:35:88:27:48:b4:6c:85:56:9b:93:a3:69:93:7a:cc:f1:de:
3d:9d:8c:54:57:51:a4:9c:86:87:55:54:90:85:00:52:3b:52:
69:ff:df:9b:04:ea:84:67:fb:27:d9:9e:29:43:a8:24:3a:d3:
c4:cd:67:cb:5c:7f:3e:f8:e5:7e:d8:b7:35:70:18:ae:ff:7b:
26:4f:8c:3d:d7:c0:38:f1:15:72:fd:e8:c0:6e:69:eb:36:90:
3b:09:3c:1a:94:d4:0e:c7:f6:98:44:b5:6a:7f:69:4b:eb:f6:
6d:ed:28:64:7f:33:1f:51:bf:fc:b9:ec:95:98:ba:78:5f:30:
8c:43:5e:14:d0:c1:ee:b9:2d:b4:b8:13:3d:54:22:02:c1:63:
a5:59:15:7e:93:98:dd:82:40:e8:6a:58:93:fc:fe:a2:df:cd:
ed:be:6d:ff:6b:37:d6:89:fa:c9:94:21:88:3a:65:34:9f:7a:
2f:2f:1e:6d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUf1YPDyAxinstS1CgJfSzqdASIIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVE
OUIzNzM1OTAeFw0yNjA3MjcxMDQ4NTdaFw0yNjA3MjgxNDQ3NTdaMDMxMTAvBgNV
BAMTKEExMkQwOTE0QjlDRkU3QzMyNTUzNzFEMThENDc3NzdEQzA2M0QxRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2EvQL4epKeI73WfUmbSUnzQ6
8Ah6uks/UXtWwOmXvQ1fJWal7d+uzB8FXF21r5HNMIuUdSrRd0u8/rs1p66XmvwB
OgQtVpzkE4g3FvI7OKCkOKx9E0umrtSKbboOTHp8Kgr2iXzCQQcMAByYDWVKzdhm
mf5lskWhnKsklQ6TntIpWgOgzpILXHOq/dWpfE+9blKpde62P3a738vjRtAFFri5
yl/S/JfwheCeOpc6CTpLyY5DTe5nGtRWxmjqGFH18UNUqpWVYcjfmoEVNo6kQpbF
dWX0nMaWX6FeRpxJr0zdFVUCwx4Si9wDeYOoOYEr1F3vj1oLwyK/CUhzQVIjAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUoS0JFLnP58MlU3HRjUd3fcBj0dgwHwYDVR0j
BBgwFoAU61sIP5/Gq7cls/0eggJwbtmzc1kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNTAzNjAzMy8wL0VCNUIwODNGOUZDNkFCQjcyNUIzRkQxRTgyMDI3
MDZFRDlCMzczNTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVEOUIzNzM1OS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUwMzYwMzMvMC9FQjVCMDgzRjlGQzZB
QkI3MjVCM0ZEMUU4MjAyNzA2RUQ5QjM3MzU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqp84AVYUPGbW
hDPpi3y4f1KZP/STSHRyEkK2GDIIfKePrbyRCX0WQxdZhkpebhWlLkHKu08Fqi9r
aIXGC7f4c72X8Sr2jWzsCDWIJ0i0bIVWm5OjaZN6zPHePZ2MVFdRpJyGh1VUkIUA
UjtSaf/fmwTqhGf7J9meKUOoJDrTxM1ny1x/Pvjlfti3NXAYrv97Jk+MPdfAOPEV
cv3owG5p6zaQOwk8GpTUDsf2mES1an9pS+v2be0oZH8zH1G//LnslZi6eF8wjENe
FNDB7rkttLgTPVQiAsFjpVkVfpOY3YJA6GpYk/z+ot/N7b5t/2s31on6yZQhiDpl
NJ96Ly8ebQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:38:41 2026 by rpki-client