
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
File: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json)
Hash identifier: wSHzOi8InVUa8PYLEB2O8OYV+zqnQU3L8aSqo9Dfu1Y=
Subject key identifier: A7:99:09:F5:61:EE:AF:C1:54:A0:45:E9:57:3F:37:BD:6F:67:8D:B2
Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Certificate serial: 72A214DEF6095A2D000F2F130A3F585CAFDBF54A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
Manifest number: FC
Signing time: Sun 26 Jul 2026 22:42:44 +0000
Manifest this update: Sun 26 Jul 2026 22:37:44 +0000
Manifest next update: Tue 28 Jul 2026 02:12:44 +0000
Files and hashes: 1: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: Bk8f3npfYRm/6J1Q+ltcvvWOny3Zc2IJciwDkQn9xZw=)
2: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=)
3: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=)
4: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=)
5: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=)
6: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=)
7: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=)
8: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a2:14:de:f6:09:5a:2d:00:0f:2f:13:0a:3f:58:5c:af:db:f5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Validity
Not Before: Jul 26 22:37:44 2026 GMT
Not After : Jul 28 02:12:44 2026 GMT
Subject: CN=A79909F561EEAFC154A045E9573F37BD6F678DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:ff:62:e8:19:7f:3e:38:58:ec:4b:98:4d:
fd:e8:00:a3:03:12:09:63:f4:2b:66:3e:ea:a4:af:
c1:95:47:2f:ab:d0:ef:93:79:b3:77:3f:ed:ed:b8:
27:ab:e2:e9:08:63:34:4b:db:51:a2:8a:80:e2:5a:
35:15:f7:ca:d1:77:ba:f1:2b:14:9f:2a:3e:2b:be:
ce:75:bc:78:ee:f8:de:30:58:51:80:3b:36:6c:02:
98:77:93:8a:81:0e:66:c9:22:45:2b:c3:7b:bf:cd:
70:69:09:05:11:32:0a:ff:4a:fa:e8:df:d4:f1:78:
1c:63:e5:66:00:89:1d:c2:f5:85:d7:32:b8:a2:8e:
2b:11:88:15:bf:e3:63:1e:37:dc:be:06:fb:73:b6:
66:ca:20:c9:d9:e1:33:b4:24:5b:b9:c4:7c:6c:39:
f6:0b:ce:ca:d9:6a:ec:5f:84:82:dd:f2:fe:4a:29:
0a:c5:68:cf:cb:14:c8:72:8d:fb:d8:56:5f:d8:3f:
0e:8a:f0:cf:de:68:fc:8c:9a:16:89:52:76:96:a7:
28:29:74:ee:2a:27:d8:e3:55:8b:4c:10:66:a5:15:
68:35:46:a8:f8:ae:3e:42:9b:82:bd:0c:9f:83:10:
50:09:56:b0:5a:9a:aa:4b:8f:4d:f7:f0:ad:c0:0c:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:99:09:F5:61:EE:AF:C1:54:A0:45:E9:57:3F:37:BD:6F:67:8D:B2
X509v3 Authority Key Identifier:
keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3a:67:c8:02:7a:bb:40:e8:01:84:30:4a:12:17:fe:08:7b:
2b:c3:fc:14:de:a0:41:8e:e9:3d:24:49:41:20:eb:d8:cf:62:
11:5d:47:41:59:d7:dc:3e:04:3c:a4:83:87:bf:ee:15:e8:38:
c9:37:3a:02:65:a8:8c:e9:f0:d5:cb:d6:34:01:f7:ce:fe:25:
5e:34:8a:8f:49:f7:52:ac:5d:9f:e9:da:e9:19:f8:1b:2f:96:
cf:8a:ce:e1:86:89:3f:d3:9f:7b:80:e7:6d:dd:bb:3c:12:e5:
3b:c6:4c:c1:0f:64:c1:16:6e:4d:91:ed:06:5a:8b:19:aa:dc:
24:d3:1e:23:8f:13:f0:30:1e:1f:af:1b:49:9a:17:59:0c:7c:
03:7f:e2:39:9d:16:a7:31:af:a7:26:b8:01:d3:1b:0f:9d:a6:
66:e3:0d:66:68:26:97:1f:4b:1e:81:d8:66:26:10:3c:b2:25:
6a:8b:7a:f1:13:cd:4b:bb:0c:49:9e:0f:fe:fd:eb:49:a8:4f:
8d:fd:0c:d9:2e:69:35:be:6e:18:4a:fb:7b:0b:e5:2c:de:9c:
66:85:a6:9c:06:19:53:25:f7:72:1f:8a:95:83:46:95:e9:19:
79:13:17:cb:ac:35:91:96:2d:94:13:84:8e:5a:31:cb:96:f8:
e5:9a:9e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:50:42 2026 by rpki-client