$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft File: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft (raw, json) Hash identifier: zhqBq9xrxsnk0BnInMPxxVVIGvsopWV4HLD/4Bq1q4I= Subject key identifier: 70:81:43:FA:8F:72:14:D1:B5:7F:6E:8F:A9:68:74:F9:D2:16:72:DB Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Certificate serial: 7915ABD6902570060687F6A806ABC36EFA96240E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft Manifest number: 87 Signing time: Mon 27 Apr 2026 11:28:47 +0000 Manifest this update: Mon 27 Apr 2026 11:23:47 +0000 Manifest next update: Tue 28 Apr 2026 14:47:47 +0000 Files and hashes: 1: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl (hash: V+7Z8rl7SrXNOxmihqxl+BeWjmCZwILPXvuveyFPCWo=) 2: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (hash: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=) 3: 323430333a356238303a3a2f33322d3332203d3e2030.roa (hash: 46/tjO14ih7NL7c3FlsSLZTwfgKKd0SVKFNff9MQoNM=) 4: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (hash: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=) 5: 3130332e32342e3232382e302f32342d3234203d3e2034383337.roa (hash: EkHOAQ9SZLQtgUKfohxIGCu30Zcv63COLPGEXCHOHaY=) 6: 3130332e3234312e3232302e302f32322d3232203d3e2030.roa (hash: vffwqsc1y5fLsjUwVEkmdZ5MIluj2AqYi6xrs73+I0k=) 7: 3130332e32342e3232382e302f32322d3232203d3e2034383337.roa (hash: qJPJ83xaMw16qDsSncZcoy/olhHqgPT6g3PgUjqsbok=) 8: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (hash: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:15:ab:d6:90:25:70:06:06:87:f6:a8:06:ab:c3:6e:fa:96:24:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Validity Not Before: Apr 27 11:23:47 2026 GMT Not After : Apr 28 14:47:47 2026 GMT Subject: CN=708143FA8F7214D1B57F6E8FA96874F9D21672DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:b8:99:55:16:64:82:79:01:1d:57:89:43: 93:42:4d:fb:60:85:2c:ce:5f:15:f7:37:fa:d3:20: c2:39:ad:39:e0:52:ae:be:0e:1c:c0:58:28:9f:7a: 2c:65:cf:68:0b:70:43:79:e0:f4:e1:10:47:1f:14: 49:6c:6f:a4:1d:e3:99:ac:e2:6a:c0:21:db:ff:a6: a4:82:61:39:4a:30:68:5d:76:2d:38:d4:c8:e3:41: f5:1a:01:fc:c8:41:06:05:68:06:a3:0e:f7:76:c0: e7:c0:c9:9d:d7:46:f0:46:b5:8e:05:6d:4e:f9:02: 88:ef:e6:41:05:a0:f2:29:4a:dd:29:50:d6:f1:e1: 1f:f2:86:8a:fa:d8:9d:11:05:6a:ca:9a:4a:d3:0e: 3f:8d:93:cd:d3:97:f1:84:19:84:d9:a5:b1:37:70: 4d:84:22:31:81:cc:96:ca:36:25:67:fb:d6:65:ef: 89:8c:70:df:85:0e:51:2f:d0:6f:3d:67:2f:73:1d: ec:18:81:50:7d:60:cb:1c:f8:43:11:e8:94:c5:1a: cb:a3:81:43:70:c2:10:a4:63:e7:24:a9:31:f7:35: 5a:42:a4:ac:04:38:80:1b:cb:4c:dd:6f:95:68:c0: c0:17:a2:f8:26:28:9a:f8:d5:30:aa:7b:09:34:e3: cc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:81:43:FA:8F:72:14:D1:B5:7F:6E:8F:A9:68:74:F9:D2:16:72:DB X509v3 Authority Key Identifier: keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c9:31:d1:3f:c8:80:fb:5e:b3:80:71:e9:67:7a:bc:99:1b: db:3f:9e:ac:fb:3d:aa:f7:f1:f6:55:d0:e7:f6:40:05:84:d4: 99:f5:a5:59:90:88:43:05:45:b3:35:1b:b6:c2:77:96:d2:2d: 21:ea:b5:02:41:ef:e6:c1:dd:cc:66:e2:7d:1c:6a:81:64:d1: 77:7b:9c:1a:c8:19:7d:79:ca:0d:4c:73:df:d8:95:f6:3b:b8: ba:b0:df:95:fb:99:77:a0:cd:06:37:29:03:7a:da:57:83:39: 73:d8:02:8c:19:8e:1e:f1:8c:5a:e3:25:07:ec:bf:41:77:1a: 09:7e:f2:bd:80:5d:1a:ca:9e:ef:5f:6e:c8:c3:ad:23:51:ab: bb:f2:51:4f:a3:e0:fe:0d:5e:0d:12:72:ff:5b:59:3a:d7:56: 15:a6:ac:32:8b:59:9c:73:0b:5b:e0:dc:4f:19:f0:1f:5c:c5: cd:69:45:ca:89:5f:72:0b:d1:41:13:81:97:97:ec:9f:18:00: 30:d9:6b:2d:c8:82:fc:ce:fb:52:df:94:42:7d:7c:43:b0:2c: 77:50:d1:c0:0f:cb:d5:11:15:c2:02:df:1d:ba:07:a5:57:04: 7d:dd:92:fb:f6:3a:3f:a8:1a:7d:d0:0c:69:e7:84:d6:75:9f: f6:ba:29:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeRWr1pAlcAYGh/aoBqvDbvqWJA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVE OUIzNzM1OTAeFw0yNjA0MjcxMTIzNDdaFw0yNjA0MjgxNDQ3NDdaMDMxMTAvBgNV BAMTKDcwODE0M0ZBOEY3MjE0RDFCNTdGNkU4RkE5Njg3NEY5RDIxNjcyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMriZVRZkgnkBHVeJQ5NCTftg hSzOXxX3N/rTIMI5rTngUq6+DhzAWCifeixlz2gLcEN54PThEEcfFElsb6Qd45ms 4mrAIdv/pqSCYTlKMGhddi041MjjQfUaAfzIQQYFaAajDvd2wOfAyZ3XRvBGtY4F bU75Aojv5kEFoPIpSt0pUNbx4R/yhor62J0RBWrKmkrTDj+Nk83Tl/GEGYTZpbE3 cE2EIjGBzJbKNiVn+9Zl74mMcN+FDlEv0G89Zy9zHewYgVB9YMsc+EMR6JTFGsuj gUNwwhCkY+ckqTH3NVpCpKwEOIAby0zdb5VowMAXovgmKJr41TCqewk048wFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcIFD+o9yFNG1f26PqWh0+dIWctswHwYDVR0j BBgwFoAU61sIP5/Gq7cls/0eggJwbtmzc1kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTAzNjAzMy8wL0VCNUIwODNGOUZDNkFCQjcyNUIzRkQxRTgyMDI3 MDZFRDlCMzczNTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVEOUIzNzM1OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUwMzYwMzMvMC9FQjVCMDgzRjlGQzZB QkI3MjVCM0ZEMUU4MjAyNzA2RUQ5QjM3MzU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8kx0T/IgPte s4Bx6Wd6vJkb2z+erPs9qvfx9lXQ5/ZABYTUmfWlWZCIQwVFszUbtsJ3ltItIeq1 AkHv5sHdzGbifRxqgWTRd3ucGsgZfXnKDUxz39iV9ju4urDflfuZd6DNBjcpA3ra V4M5c9gCjBmOHvGMWuMlB+y/QXcaCX7yvYBdGsqe719uyMOtI1Gru/JRT6Pg/g1e DRJy/1tZOtdWFaasMotZnHMLW+DcTxnwH1zFzWlFyolfcgvRQROBl5fsnxgAMNlr LciC/M77Ut+UQn18Q7Asd1DRwA/L1REVwgLfHboHpVcEfd2S+/Y6P6gafdAMaeeE 1nWf9ropbg== -----END CERTIFICATE-----Generated at Mon Apr 27 21:54:40 2026 by rpki-client