$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft File: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft (raw, json) Hash identifier: h31JJEAS0jYnfkhkK1ctICYxbO5KSks5C4aIuhu4FoU= Subject key identifier: C8:E4:91:3A:99:3E:E1:6E:6A:B6:0E:C8:ED:DC:3D:24:C4:4B:0A:3B Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Certificate serial: 3FB860388E089A7DEABB5F5EB4FDFAAB76DBD4AD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft Manifest number: 45 Signing time: Thu 12 Mar 2026 03:13:39 +0000 Manifest this update: Thu 12 Mar 2026 03:08:39 +0000 Manifest next update: Fri 13 Mar 2026 04:40:39 +0000 Files and hashes: 1: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (hash: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=) 2: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl (hash: acTZLPJXhF1XN9yekvFtGvQKNVEtRsdAEPDWmSgk5Yk=) 3: 3130332e32342e3232382e302f32322d3234203d3e2034383337.roa (hash: OovHk1dM5SRegXrOoxHUF4YMH6s4+waRg57vn/cYkAk=) 4: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (hash: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI=) 5: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (hash: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 04:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b8:60:38:8e:08:9a:7d:ea:bb:5f:5e:b4:fd:fa:ab:76:db:d4:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Validity Not Before: Mar 12 03:08:39 2026 GMT Not After : Mar 13 04:40:39 2026 GMT Subject: CN=C8E4913A993EE16E6AB60EC8EDDC3D24C44B0A3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bd:c9:f8:5b:b2:fb:77:a7:8b:27:84:da:ba: 83:27:50:fc:57:fe:81:61:44:5b:80:e6:a0:c8:07: 1a:3c:49:e7:d3:67:6b:bd:33:f1:b5:41:d1:6b:9b: 0f:fa:49:3f:b3:69:45:92:e2:ec:d4:14:eb:95:b3: f2:0f:a4:69:ed:b3:fa:54:db:f8:ce:55:8a:34:b0: b2:09:b1:98:4a:3b:46:d1:ef:d6:af:fb:84:71:53: 11:1f:d5:ae:04:e9:21:ad:97:92:ef:0e:7f:a0:02: e7:59:67:8d:55:e4:2f:05:e4:62:64:d3:0a:d5:86: b2:1c:ee:9e:9e:2a:ad:e4:2d:6a:d4:13:6c:a1:fb: 37:69:05:f6:50:c4:f5:87:fd:bd:67:c2:66:47:67: b2:0f:76:b3:e2:bf:07:7e:3c:a0:88:8a:fc:cb:66: b0:31:fd:48:b0:87:80:f5:fc:0b:ac:97:93:41:a7: f8:e0:19:48:b5:3a:c4:9b:a1:ab:9e:46:1c:9b:20: e0:72:62:51:38:41:60:95:9b:2e:4b:0e:ba:19:39: f8:3b:8b:0a:ac:1f:75:e8:a7:80:5a:47:4b:59:cb: 0d:e3:dc:69:c5:24:28:90:07:a0:33:82:4d:e1:76: c6:cf:d4:87:13:67:19:f4:75:ed:37:45:b6:96:94: 00:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E4:91:3A:99:3E:E1:6E:6A:B6:0E:C8:ED:DC:3D:24:C4:4B:0A:3B X509v3 Authority Key Identifier: keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:df:bb:06:93:0e:85:56:b5:fc:88:b2:20:63:cc:b5:0e:3b: 06:57:5e:1f:be:0b:09:c2:7f:5f:e1:5f:3d:68:cc:18:cb:68: dd:bd:fa:1b:95:d1:a3:13:99:7e:55:30:46:1a:85:1c:5d:ca: 5f:51:e5:f0:99:4c:76:90:b6:6d:2b:f9:33:c8:6e:33:a1:24: d6:39:c7:6f:5b:fc:21:64:32:e2:a9:11:1e:62:70:52:a5:ad: 02:08:c2:60:47:94:0a:d7:9f:86:1d:28:86:33:c1:21:0a:96: ce:14:81:11:b4:95:58:2f:a8:c2:95:0d:aa:41:35:01:5c:50: 18:e0:e9:ed:41:f5:1a:d0:58:4c:4b:cf:bf:e4:eb:72:53:cc: f3:5f:21:50:e0:ad:09:b6:1e:79:71:cf:7c:22:14:61:ba:e9: 08:1f:56:9f:34:7b:e0:1a:9d:4a:ae:c8:f7:1f:a0:fc:6f:bd: 5f:89:89:71:2b:3a:53:fa:1a:73:89:06:cd:59:0a:55:86:50: e2:8a:c6:f2:10:28:4f:9e:bc:b7:a1:58:b6:e1:5b:d6:44:c4: 16:e6:0a:00:ea:a0:06:35:06:d3:9a:0b:90:c9:35:c9:8a:c6: 6b:b6:0e:d2:c3:a7:c7:1b:a7:ea:0d:79:94:da:20:63:7b:9b: 31:99:ea:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP7hgOI4Imn3qu19etP36q3bb1K0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVE OUIzNzM1OTAeFw0yNjAzMTIwMzA4MzlaFw0yNjAzMTMwNDQwMzlaMDMxMTAvBgNV BAMTKEM4RTQ5MTNBOTkzRUUxNkU2QUI2MEVDOEVEREMzRDI0QzQ0QjBBM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCovcn4W7L7d6eLJ4TauoMnUPxX /oFhRFuA5qDIBxo8SefTZ2u9M/G1QdFrmw/6ST+zaUWS4uzUFOuVs/IPpGnts/pU 2/jOVYo0sLIJsZhKO0bR79av+4RxUxEf1a4E6SGtl5LvDn+gAudZZ41V5C8F5GJk 0wrVhrIc7p6eKq3kLWrUE2yh+zdpBfZQxPWH/b1nwmZHZ7IPdrPivwd+PKCIivzL ZrAx/Uiwh4D1/Ausl5NBp/jgGUi1OsSboaueRhybIOByYlE4QWCVmy5LDroZOfg7 iwqsH3Xop4BaR0tZyw3j3GnFJCiQB6Azgk3hdsbP1IcTZxn0de03RbaWlACnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyOSROpk+4W5qtg7I7dw9JMRLCjswHwYDVR0j BBgwFoAU61sIP5/Gq7cls/0eggJwbtmzc1kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTAzNjAzMy8wL0VCNUIwODNGOUZDNkFCQjcyNUIzRkQxRTgyMDI3 MDZFRDlCMzczNTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVEOUIzNzM1OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUwMzYwMzMvMC9FQjVCMDgzRjlGQzZB QkI3MjVCM0ZEMUU4MjAyNzA2RUQ5QjM3MzU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9+7BpMOhVa1 /IiyIGPMtQ47BldeH74LCcJ/X+FfPWjMGMto3b36G5XRoxOZflUwRhqFHF3KX1Hl 8JlMdpC2bSv5M8huM6Ek1jnHb1v8IWQy4qkRHmJwUqWtAgjCYEeUCtefhh0ohjPB IQqWzhSBEbSVWC+owpUNqkE1AVxQGODp7UH1GtBYTEvPv+TrclPM818hUOCtCbYe eXHPfCIUYbrpCB9WnzR74BqdSq7I9x+g/G+9X4mJcSs6U/oac4kGzVkKVYZQ4orG 8hAoT568t6FYtuFb1kTEFuYKAOqgBjUG05oLkMk1yYrGa7YO0sOnxxun6g15lNog Y3ubMZnqkw== -----END CERTIFICATE-----Generated at Thu Mar 12 18:18:58 2026 by rpki-client