
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
File: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft (raw, json)
Hash identifier: R1WAOkorfx2OxJZhHU7CE7PrcxqIKFQumFwIfdxDdMY=
Subject key identifier: 73:A7:B1:64:3E:D5:89:07:71:BB:E1:4E:45:9E:98:55:A7:2C:FC:92
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial: 779898A95BE8FA137DACF507B4A583F2CF7CB1A4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
Manifest number: C4
Signing time: Thu 11 Jun 2026 21:19:24 +0000
Manifest this update: Thu 11 Jun 2026 21:14:24 +0000
Manifest next update: Sat 13 Jun 2026 00:28:24 +0000
Files and hashes: 1: 3130332e32342e3232382e302f32322d3232203d3e2034383337.roa (hash: qJPJ83xaMw16qDsSncZcoy/olhHqgPT6g3PgUjqsbok=)
2: 3130332e32342e3232382e302f32342d3234203d3e2034383337.roa (hash: EkHOAQ9SZLQtgUKfohxIGCu30Zcv63COLPGEXCHOHaY=)
3: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (hash: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=)
4: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (hash: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI=)
5: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl (hash: mjrdhClV03c1Y9rULV67WoJmC/IRdmNC3tL4mfaKEHM=)
6: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (hash: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=)
7: 323430333a356238303a3a2f33322d3332203d3e2030.roa (hash: 46/tjO14ih7NL7c3FlsSLZTwfgKKd0SVKFNff9MQoNM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 00:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:98:98:a9:5b:e8:fa:13:7d:ac:f5:07:b4:a5:83:f2:cf:7c:b1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Validity
Not Before: Jun 11 21:14:24 2026 GMT
Not After : Jun 13 00:28:24 2026 GMT
Subject: CN=73A7B1643ED5890771BBE14E459E9855A72CFC92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ba:e0:0d:ac:cb:2e:1b:bc:ec:f3:93:13:de:
2c:d7:9c:4d:8c:00:2e:60:33:cf:06:c5:91:84:b7:
9b:99:71:db:90:6f:08:ef:9e:6a:03:82:9d:0b:79:
e8:b7:f7:1b:f2:0c:70:86:f3:e9:93:ed:89:0d:d8:
78:d1:d2:22:ed:62:9c:1b:25:55:bd:f4:3f:52:11:
62:5c:43:68:4c:f6:f1:b5:74:e4:b7:57:5c:b9:e3:
dc:ee:a2:a9:51:11:5b:a5:e8:1d:f7:a0:9a:af:cb:
76:45:a9:cc:97:0d:d0:a8:8a:bb:d3:ec:b7:45:7d:
71:1a:af:6e:db:46:2f:d3:1b:df:2c:4f:57:6b:fb:
a3:89:ad:e5:f3:20:ac:f7:5a:f0:e2:6e:e5:04:ba:
2b:2f:56:d0:29:00:ff:7c:18:6a:4b:6d:eb:4a:85:
4c:9b:c9:86:cc:37:dd:e5:c7:81:32:7a:82:24:d0:
34:7b:af:4c:c5:c0:6f:f5:e8:cd:b7:97:c0:76:f2:
9a:41:5f:eb:bc:ba:6b:eb:7a:bd:22:0a:f9:7f:b2:
a6:d0:c4:6a:52:15:a2:11:df:3c:f8:f8:63:37:68:
13:45:46:15:16:af:a9:89:db:b8:cb:6f:e4:08:b3:
6b:91:aa:81:42:c6:08:44:30:75:af:95:c3:b4:98:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A7:B1:64:3E:D5:89:07:71:BB:E1:4E:45:9E:98:55:A7:2C:FC:92
X509v3 Authority Key Identifier:
keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:64:52:65:54:12:af:f0:bb:05:49:df:fa:1c:35:ae:90:15:
9d:f9:5e:4b:da:1b:b2:0b:09:37:75:d3:27:aa:dc:ec:5f:db:
69:c8:a2:32:d8:26:d2:a3:0f:96:a3:96:1b:7d:18:4b:7d:45:
9d:12:c7:bb:bf:04:f1:b6:bb:fb:7d:77:49:b2:65:f1:b0:8e:
c0:4b:8a:81:d7:c2:1f:84:e7:da:21:81:80:ea:d8:18:8c:67:
b2:c5:23:7b:ed:2d:2e:f7:20:ec:01:7b:5c:6b:9f:07:68:cc:
dc:6c:84:13:10:15:89:b6:48:2f:2c:5f:7a:72:e6:9c:b8:33:
50:ef:80:fe:86:13:55:f7:eb:3c:82:bc:6d:d0:10:8f:b4:b2:
85:7b:a3:e0:60:7e:9b:93:86:32:84:cf:f3:ce:69:c1:10:aa:
68:ed:41:d8:5b:72:82:79:51:de:7a:a5:da:f2:33:b2:55:b8:
01:e8:30:cb:bc:bf:d3:6f:08:0e:50:48:2b:ef:b7:b3:79:cb:
1a:2c:ce:3c:fc:03:de:35:17:14:1e:7a:e8:66:4e:34:f7:99:
72:26:1a:47:b0:19:c2:af:33:06:7a:bf:1a:7b:8d:57:6c:0a:
24:3e:b2:90:0c:f8:5f:63:83:20:8c:a3:46:e1:d3:26:0a:99:
21:b5:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:53:37 2026 by rpki-client