$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft File: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json) Hash identifier: fuazGozncB93oQ1GNI6CrHgxeBgYqexkfe4qMIaO5gA= Subject key identifier: 82:79:C8:15:07:8D:90:C2:7C:B2:BF:2E:3A:E5:23:AC:14:2D:55:1F Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Certificate serial: 18825CF851805D3D62395343F8469D27CA321B93 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft Manifest number: 0141 Signing time: Mon 26 Oct 2026 11:58:41 +0000 Manifest this update: Mon 26 Oct 2026 11:53:41 +0000 Manifest next update: Thu 29 Oct 2026 23:24:41 +0000 Files and hashes: 1: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=) 2: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=) 3: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: TMkmGRP678RR0lyQhxxIM8TbjvN50kZck6A8atQWP9o=) 4: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=) 5: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=) 6: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=) 7: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=) 8: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 03:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:82:5c:f8:51:80:5d:3d:62:39:53:43:f8:46:9d:27:ca:32:1b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Validity Not Before: Oct 26 11:53:41 2026 GMT Not After : Oct 29 23:24:41 2026 GMT Subject: CN=8279C815078D90C27CB2BF2E3AE523AC142D551F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a2:5c:4c:27:78:ed:72:d8:6a:5a:5c:72:07: bc:85:30:e5:72:48:89:cc:dc:6f:e8:1a:4c:48:50: 10:8a:70:c9:10:95:f4:c8:44:73:0b:42:bc:cf:af: f5:b1:5d:bc:1d:00:26:fb:18:1e:e9:17:a2:6b:41: d1:db:9c:e6:ae:8a:e8:ec:2f:4f:87:6f:a1:b7:5a: 23:b6:ed:22:f7:7f:c1:8c:58:1b:d6:24:a8:b7:15: d9:15:55:59:d3:2d:d2:de:64:09:fc:b3:18:66:8f: 4c:82:12:81:f3:2b:b6:8f:87:6f:1c:36:b3:1d:a5: 01:6e:86:3b:0c:47:12:46:dd:e2:28:b4:6c:41:42: 73:08:f8:3e:29:ce:6c:66:bc:ae:7c:19:9f:d5:2d: 91:bc:51:3a:68:f5:39:d0:3b:24:f2:c9:74:a5:4e: 42:c2:04:0f:07:11:0d:28:db:fb:91:b8:ea:8c:b5: f0:a0:1e:9b:f7:06:b5:98:bc:b2:55:05:a4:ca:ae: 98:de:04:0a:4c:57:3a:ed:b4:ea:c5:47:4e:b1:40: f0:d1:8c:11:ac:2a:0a:87:ed:43:f5:10:c0:c0:f0: 61:70:cb:fe:5c:da:d2:2e:b9:c3:b0:f2:db:0f:68: 07:b7:05:af:34:f8:97:3e:8d:c4:0a:1c:c8:13:38: 3f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:79:C8:15:07:8D:90:C2:7C:B2:BF:2E:3A:E5:23:AC:14:2D:55:1F X509v3 Authority Key Identifier: keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:23:3f:f4:9f:80:84:5d:5e:d5:93:eb:ac:39:53:5b:1f:c6: da:6d:26:24:2f:1c:cd:c3:c5:8b:56:c2:0e:e7:02:5a:36:14: fb:55:f3:ab:16:24:e6:43:65:e3:be:9e:81:91:e4:d7:90:7e: 9c:d1:b0:a9:d4:4e:25:4b:09:70:ac:35:21:a5:32:13:96:3e: d4:cd:f1:7e:a5:4e:00:50:0f:7e:f6:fb:75:d7:81:8b:a4:c1: 99:a6:2f:ae:d2:bc:0e:91:82:be:a7:c3:18:06:5c:a6:45:62: c3:98:46:13:d7:56:ad:59:ec:2e:ab:db:b8:7b:d0:71:3b:c8: 39:c7:f3:2b:eb:e0:27:ed:33:6f:79:a2:c7:f2:d0:43:b9:7b: a0:51:2e:86:48:e8:43:0e:5e:b0:c3:f9:c4:fa:2c:73:19:1b: 04:e7:bd:35:b4:c7:cd:51:17:d6:4d:15:7a:e2:2d:fd:ae:84: 73:0b:d6:59:48:83:34:66:64:fa:96:ee:ad:03:10:dc:46:56: 20:4d:9e:ea:30:b1:36:ce:aa:26:6d:12:00:fb:46:c0:43:cf: 01:e2:c9:bb:d7:30:91:9e:a8:8c:53:d7:b0:0a:d9:b2:b6:d8: 79:d3:58:37:34:b6:15:6a:58:3f:0c:2e:d8:d1:96:68:f0:ae: 65:cc:4e:d8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGIJc+FGAXT1iOVND+EadJ8oyG5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0Yw QzQ4MUNBNTAeFw0yNjEwMjYxMTUzNDFaFw0yNjEwMjkyMzI0NDFaMDMxMTAvBgNV BAMTKDgyNzlDODE1MDc4RDkwQzI3Q0IyQkYyRTNBRTUyM0FDMTQyRDU1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRolxMJ3jtcthqWlxyB7yFMOVy SInM3G/oGkxIUBCKcMkQlfTIRHMLQrzPr/WxXbwdACb7GB7pF6JrQdHbnOauiujs L0+Hb6G3WiO27SL3f8GMWBvWJKi3FdkVVVnTLdLeZAn8sxhmj0yCEoHzK7aPh28c NrMdpQFuhjsMRxJG3eIotGxBQnMI+D4pzmxmvK58GZ/VLZG8UTpo9TnQOyTyyXSl TkLCBA8HEQ0o2/uRuOqMtfCgHpv3BrWYvLJVBaTKrpjeBApMVzrttOrFR06xQPDR jBGsKgqH7UP1EMDA8GFwy/5c2tIuucOw8tsPaAe3Ba80+Jc+jcQKHMgTOD8FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgnnIFQeNkMJ8sr8uOuUjrBQtVR8wHwYDVR0j BBgwFoAU66rT3yM2lqBh7C9W6MT5zwxIHKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODIyMjQ2Ni8wL0VCQUFEM0RGMjMzNjk2QTA2MUVDMkY1NkU4QzRG OUNGMEM0ODFDQTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0YwQzQ4MUNBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyMjI0NjYvMC9FQkFBRDNERjIzMzY5 NkEwNjFFQzJGNTZFOEM0RjlDRjBDNDgxQ0E1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCM/9J+AhF1e 1ZPrrDlTWx/G2m0mJC8czcPFi1bCDucCWjYU+1XzqxYk5kNl476egZHk15B+nNGw qdROJUsJcKw1IaUyE5Y+1M3xfqVOAFAPfvb7ddeBi6TBmaYvrtK8DpGCvqfDGAZc pkViw5hGE9dWrVnsLqvbuHvQcTvIOcfzK+vgJ+0zb3mix/LQQ7l7oFEuhkjoQw5e sMP5xPoscxkbBOe9NbTHzVEX1k0VeuIt/a6EcwvWWUiDNGZk+pburQMQ3EZWIE2e 6jCxNs6qJm0SAPtGwEPPAeLJu9cwkZ6ojFPXsArZsrbYedNYNzS2FWpYPwwu2NGW aPCuZcxO2A== -----END CERTIFICATE-----Generated at Mon Oct 26 23:31:16 2026 by rpki-client