$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft File: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json) Hash identifier: H5Vs8+B9gImMEOWtqWFSUJGNAPF1vQJ6QjlLKFd6iL8= Subject key identifier: 4A:71:8E:CE:2F:CB:DA:0B:7A:44:1D:2C:EA:39:69:BF:E0:7A:8B:4E Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Certificate serial: 13C26409633886CBF6CBB6BCFDDC129468E8CFC4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft Manifest number: 84 Signing time: Tue 28 Apr 2026 02:38:56 +0000 Manifest this update: Tue 28 Apr 2026 02:33:56 +0000 Manifest next update: Wed 29 Apr 2026 04:27:56 +0000 Files and hashes: 1: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=) 2: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=) 3: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=) 4: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=) 5: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=) 6: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: PvPnrukSZvS0/BmlbyXYjuKlt9cLrunpStHzugN4QRs=) 7: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=) 8: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 04:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c2:64:09:63:38:86:cb:f6:cb:b6:bc:fd:dc:12:94:68:e8:cf:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Validity Not Before: Apr 28 02:33:56 2026 GMT Not After : Apr 29 04:27:56 2026 GMT Subject: CN=4A718ECE2FCBDA0B7A441D2CEA3969BFE07A8B4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:33:b9:fd:13:ed:5b:cb:ef:0b:d6:e9:96:b4: e9:32:40:02:98:00:24:da:03:0b:55:8b:f3:98:61: 89:7a:ec:2f:ff:6a:89:a5:9a:a4:96:f8:e9:aa:63: 29:1a:ee:38:e2:2f:0a:f0:20:6e:7c:c8:c2:fe:30: 96:a4:36:12:ee:b5:0a:f6:09:77:da:b6:13:4a:7a: ae:ce:a3:2f:e2:61:20:58:d8:c1:da:7b:dd:e4:9b: 2b:24:83:c4:f3:52:4a:91:c5:b9:17:e3:20:66:1e: bd:14:71:f0:9c:45:25:cc:89:96:c3:b3:0c:fb:d0: 66:6e:c6:b1:74:32:a5:6b:ab:82:fc:14:d5:20:7a: 43:e3:c6:f9:98:be:cd:fc:35:22:ac:cc:2e:c4:e9: 55:bc:d1:8d:20:27:d5:dc:00:43:93:0b:77:c4:c4: 39:c1:52:67:c1:76:39:b7:c2:dd:e1:01:70:fd:1b: 14:6c:73:87:e7:3d:e5:5c:12:0e:d9:54:17:5a:6a: a6:ff:58:fa:67:16:c4:19:7a:fc:55:b2:c8:89:d4: 5f:d1:90:16:8a:f7:4a:92:43:69:65:fc:f0:ca:7f: 55:7a:0a:df:29:9e:eb:a1:2e:3b:ce:46:a6:24:04: 1f:b2:1d:4c:fb:c0:b2:c0:3b:81:8b:04:58:25:84: b3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:71:8E:CE:2F:CB:DA:0B:7A:44:1D:2C:EA:39:69:BF:E0:7A:8B:4E X509v3 Authority Key Identifier: keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6c:7d:d4:39:ec:bd:40:fa:95:2c:69:59:4e:8a:68:37:c6: 76:5a:c4:1f:75:03:ee:dd:6e:3a:6d:27:54:54:ac:98:d1:63: 90:81:54:ab:64:08:d9:98:cd:97:8f:df:92:7f:67:e6:fb:7e: 5a:7f:49:43:22:6b:41:d7:4e:88:0c:5e:11:c3:a5:19:66:55: 86:70:73:b7:98:1e:53:4c:6a:32:39:14:7b:77:83:fa:f8:e5: 7e:16:7d:a4:62:b2:19:f3:1b:1e:3c:66:1c:47:69:f2:f9:7c: 59:6c:d3:f4:29:0e:22:5e:60:13:fc:fd:52:c8:36:70:f3:f5: 68:d8:b0:3c:63:bb:2e:93:11:5d:38:a4:99:b6:6f:01:f3:ee: fa:74:eb:b4:a3:69:66:be:0c:3e:74:8e:4c:90:fd:a6:e5:ba: 0f:3c:56:84:fe:83:28:0f:9b:66:46:ea:ee:6c:77:69:57:a5: 68:bb:2b:ed:1b:1a:fa:87:a0:48:54:f1:39:3e:06:b5:f1:53: 86:64:99:42:bc:55:b8:68:35:06:f3:15:22:ae:a3:b3:1d:63: bb:aa:8e:ab:9b:31:ee:d4:52:eb:12:9b:99:7a:d7:ca:12:4e: 81:36:6f:9e:ec:4f:26:cb:8a:f6:8f:7d:cb:87:a6:d6:8c:a4: 9c:15:be:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE8JkCWM4hsv2y7a8/dwSlGjoz8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0Yw QzQ4MUNBNTAeFw0yNjA0MjgwMjMzNTZaFw0yNjA0MjkwNDI3NTZaMDMxMTAvBgNV BAMTKDRBNzE4RUNFMkZDQkRBMEI3QTQ0MUQyQ0VBMzk2OUJGRTA3QThCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhM7n9E+1by+8L1umWtOkyQAKY ACTaAwtVi/OYYYl67C//aomlmqSW+OmqYyka7jjiLwrwIG58yML+MJakNhLutQr2 CXfathNKeq7Ooy/iYSBY2MHae93kmyskg8TzUkqRxbkX4yBmHr0UcfCcRSXMiZbD swz70GZuxrF0MqVrq4L8FNUgekPjxvmYvs38NSKszC7E6VW80Y0gJ9XcAEOTC3fE xDnBUmfBdjm3wt3hAXD9GxRsc4fnPeVcEg7ZVBdaaqb/WPpnFsQZevxVssiJ1F/R kBaK90qSQ2ll/PDKf1V6Ct8pnuuhLjvORqYkBB+yHUz7wLLAO4GLBFglhLMjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSnGOzi/L2gt6RB0s6jlpv+B6i04wHwYDVR0j BBgwFoAU66rT3yM2lqBh7C9W6MT5zwxIHKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODIyMjQ2Ni8wL0VCQUFEM0RGMjMzNjk2QTA2MUVDMkY1NkU4QzRG OUNGMEM0ODFDQTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0YwQzQ4MUNBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyMjI0NjYvMC9FQkFBRDNERjIzMzY5 NkEwNjFFQzJGNTZFOEM0RjlDRjBDNDgxQ0E1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2x91DnsvUD6 lSxpWU6KaDfGdlrEH3UD7t1uOm0nVFSsmNFjkIFUq2QI2ZjNl4/fkn9n5vt+Wn9J QyJrQddOiAxeEcOlGWZVhnBzt5geU0xqMjkUe3eD+vjlfhZ9pGKyGfMbHjxmHEdp 8vl8WWzT9CkOIl5gE/z9Usg2cPP1aNiwPGO7LpMRXTikmbZvAfPu+nTrtKNpZr4M PnSOTJD9puW6DzxWhP6DKA+bZkbq7mx3aVelaLsr7Rsa+oegSFTxOT4GtfFThmSZ QrxVuGg1BvMVIq6jsx1ju6qOq5sx7tRS6xKbmXrXyhJOgTZvnuxPJsuK9o99y4em 1oyknBW+oQ== -----END CERTIFICATE-----Generated at Tue Apr 28 09:09:11 2026 by rpki-client