
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
File: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft (raw, json)
Hash identifier: m8wA2M/6i+2vaFltEA4yMwZa71ia/h1EX89iUeJvjtc=
Subject key identifier: 73:52:FD:DF:36:7D:1C:A4:A7:7A:8F:CE:36:4F:6A:E5:B1:B0:15:9A
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial: 421F8FEAA81EEC6C65A8BFD678B2F74B4445752F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
Manifest number: 0131
Signing time: Thu 10 Sep 2026 12:16:33 +0000
Manifest this update: Thu 10 Sep 2026 12:11:33 +0000
Manifest next update: Sun 13 Sep 2026 21:22:33 +0000
Files and hashes: 1: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (hash: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=)
2: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (hash: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI=)
3: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl (hash: arEgkBpGETeczPnzCzTZtWlP2SKqTpAqRMWqykSNOc0=)
4: 3130332e32342e3232382e302f32322d3232203d3e2034383337.roa (hash: qJPJ83xaMw16qDsSncZcoy/olhHqgPT6g3PgUjqsbok=)
5: 323430333a356238303a3a2f33322d3332203d3e2030.roa (hash: 46/tjO14ih7NL7c3FlsSLZTwfgKKd0SVKFNff9MQoNM=)
6: 3130332e32342e3232382e302f32342d3234203d3e2034383337.roa (hash: EkHOAQ9SZLQtgUKfohxIGCu30Zcv63COLPGEXCHOHaY=)
7: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (hash: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 00:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:1f:8f:ea:a8:1e:ec:6c:65:a8:bf:d6:78:b2:f7:4b:44:45:75:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Validity
Not Before: Sep 10 12:11:33 2026 GMT
Not After : Sep 13 21:22:33 2026 GMT
Subject: CN=7352FDDF367D1CA4A77A8FCE364F6AE5B1B0159A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d6:28:e1:61:91:e0:55:a6:cb:30:b3:f1:70:
ca:ab:d0:eb:1f:1a:ad:e3:fe:37:50:0f:1d:db:c6:
78:44:d2:51:16:2b:8c:d8:c7:04:3a:95:3a:7b:1c:
9a:2a:7c:41:fa:1e:ce:5e:6d:8b:49:f0:ae:78:bf:
39:a1:94:19:4e:54:0f:1c:5c:55:ff:6f:1c:3f:4b:
7e:c8:7f:d6:6b:ed:c4:1a:ec:36:b4:a9:16:91:8e:
c4:ef:44:33:2b:e9:97:92:92:69:6a:64:3b:3b:67:
59:a9:43:bd:70:88:12:e5:64:09:04:0d:d3:17:3c:
4e:3c:02:86:c9:18:10:a9:71:ec:90:31:e9:79:e6:
96:3c:d1:fd:91:e8:bf:22:24:25:15:c5:ce:2f:d0:
dc:4b:81:cd:1e:06:21:da:45:b0:93:4b:bc:47:5d:
79:6b:74:dc:3a:22:8d:93:4d:1b:66:e2:01:b3:67:
28:89:71:b3:6a:af:0e:21:c6:37:45:25:ed:3e:67:
c9:6c:1d:41:3f:7f:73:27:0d:b3:b3:09:c7:45:2d:
0f:18:75:c4:d3:12:c8:e9:59:a5:c4:dd:4a:30:cc:
45:fb:78:80:1b:ea:33:31:3a:76:af:17:56:3e:ef:
2c:fc:c3:fc:f4:35:97:fa:58:bb:32:a9:1b:fe:51:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:52:FD:DF:36:7D:1C:A4:A7:7A:8F:CE:36:4F:6A:E5:B1:B0:15:9A
X509v3 Authority Key Identifier:
keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d9:6d:9f:fc:7d:42:b6:ed:7a:2c:ac:5c:dd:9e:bd:d1:c5:
2d:b5:9c:34:70:5f:5e:e3:cb:28:69:ba:3f:8d:82:7d:c1:eb:
50:db:bb:2b:26:68:38:34:6e:c2:69:6f:21:7d:a3:b6:34:de:
96:e4:a6:3e:e9:13:ed:ab:ba:f8:67:ce:08:7a:54:2a:3e:dc:
8a:09:d7:31:30:ef:5b:2e:82:b3:3d:03:d4:3d:8f:ee:62:c3:
2b:4c:e7:ca:70:19:65:1c:6a:84:06:cb:32:f0:2f:ca:21:a1:
f7:fa:54:06:73:bc:5f:15:1a:ca:78:c4:a6:e9:69:2f:d0:c8:
94:cb:dd:e7:b9:fa:87:22:2c:d0:a2:86:6f:4f:a4:49:ed:00:
ec:bc:73:a2:f1:89:0f:2e:2d:13:f7:ae:2e:27:d1:0c:6f:56:
a4:b4:c7:42:7b:d4:9d:12:a3:b9:67:b6:a8:cb:8d:a6:cc:64:
26:f4:03:53:df:7d:0e:39:41:47:55:f1:70:d5:29:9f:3e:e1:
f1:62:64:03:4e:59:d1:81:4d:24:ff:b3:4c:64:61:a0:91:27:
20:75:31:b6:92:71:2d:2f:76:07:42:13:d2:61:de:fe:19:2c:
de:43:d4:ff:25:d5:84:ee:f9:3b:d1:02:f8:fd:55:1f:0b:4a:
bd:91:e4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:59:14 2026 by rpki-client