$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft File: EB221959BAB62CA0F2C1844E764159F081AE413B.mft (raw, json) Hash identifier: R8rUf210T/D6km1VKVGNE5ec9tpKoRsF2FH2KYLtFDw= Subject key identifier: ED:2B:7F:7F:C3:32:13:CA:91:39:92:0B:EE:38:67:F6:BB:98:F5:3B Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B Certificate issuer: /CN=EB221959BAB62CA0F2C1844E764159F081AE413B Certificate serial: 7A45B064AE732186566A6A67284DEFF4BEDD879C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft Manifest number: D3 Signing time: Wed 14 Oct 2026 15:04:17 +0000 Manifest this update: Wed 14 Oct 2026 14:59:17 +0000 Manifest next update: Sat 17 Oct 2026 21:15:17 +0000 Files and hashes: 1: 323430303a646565303a3a2f33322d3332203d3e2030.roa (hash: EdjUimtwDmmEb/7qnPllHoQilNinJIy02221yPSiAD4=) 2: 34352e3234382e3130302e302f32322d3232203d3e2030.roa (hash: evePIHhobdrqna9eeXg6NPN2qqunrVRaep6ZbuP+aTQ=) 3: EB221959BAB62CA0F2C1844E764159F081AE413B.crl (hash: p3BD+cC+wJaGB3FJiGNNOdwXf6QAZwBMddraSLvqEwc=) 4: 3130332e3231362e3234382e302f32322d3232203d3e2030.roa (hash: gSl2ZouhSu3TZUcpNStUpMOCuX4EXWUXGnNDBeo4IEk=) 5: 34352e3234382e3130342e302f32322d3232203d3e2030.roa (hash: Olt5MVy17egj99Gius/16ZJ0CP/XuP53qLG1H4AiBCE=) 6: 3130332e38352e3138362e302f32332d3233203d3e2030.roa (hash: hbLJedcagKHXUcAguzbn4GEebd+SVTq2Cx2L9PEByro=) 7: 3130332e3231362e3234342e302f32322d3232203d3e2030.roa (hash: pbIJ5jx/pf8/NAcf/hXOdBb+q7VleSIVTqtoc77iUsM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:45:b0:64:ae:73:21:86:56:6a:6a:67:28:4d:ef:f4:be:dd:87:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B Validity Not Before: Oct 14 14:59:17 2026 GMT Not After : Oct 17 21:15:17 2026 GMT Subject: CN=ED2B7F7FC33213CA9139920BEE3867F6BB98F53B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:b2:14:3c:71:2c:6a:69:af:22:4a:3e:68: 38:58:34:d0:c7:90:c7:6a:8c:b5:25:42:92:68:42: 9c:c0:78:9c:01:88:21:9d:55:7b:04:a7:90:f7:f7: 33:2c:ac:72:73:6f:2a:fd:39:39:c4:5d:cd:f7:14: 16:c5:d1:b9:8b:e4:22:1a:2c:73:0d:3f:6d:5b:bb: 65:73:c6:3e:e3:a5:9e:a1:b5:33:ce:bb:3d:95:1f: 7d:5e:6d:7d:6d:49:8c:39:1f:07:3a:8e:77:cc:d8: 25:84:5e:9c:9e:ed:97:b7:b8:26:b1:c4:78:56:fd: 22:c9:e1:79:78:56:4d:e9:26:d4:fb:c5:f6:c6:25: d0:0d:f1:68:99:dd:1f:fc:aa:00:75:38:08:38:0b: b2:5e:6f:ad:22:dc:fe:cb:85:7c:4b:9a:83:84:81: 61:32:0b:d3:14:6b:75:36:76:9e:cd:78:de:8f:61: 21:31:23:e5:a2:ae:1e:a8:09:44:26:24:f7:fd:dd: 7c:40:4b:07:fe:08:7a:3d:7c:75:38:58:eb:60:36: 6b:f4:aa:3a:67:36:f3:fd:77:54:78:0c:c1:38:bb: 72:00:dd:25:1d:69:98:e2:7b:03:ca:18:b1:41:01: d5:28:86:d1:f7:43:ca:49:60:de:de:8f:3a:24:bc: 78:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2B:7F:7F:C3:32:13:CA:91:39:92:0B:EE:38:67:F6:BB:98:F5:3B X509v3 Authority Key Identifier: keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:60:41:36:a8:e7:be:44:2c:03:f8:f0:0c:b7:ad:97:ff:73: fc:30:f6:be:a5:04:db:b8:e9:75:b9:67:c5:8a:ac:65:be:05: 72:5f:2e:3a:73:66:bb:4b:ff:ec:ab:41:cc:95:b8:0c:50:e1: f0:e1:65:c5:93:f8:d5:99:d2:dc:55:b4:98:d0:35:20:1c:a8: ee:03:82:d2:8b:3e:75:b4:d0:d2:14:c3:4c:4e:ff:ec:3d:95: b0:0a:ca:f3:2f:c3:53:7e:cc:60:f7:29:09:4f:0b:ce:c7:32: e5:6a:6f:36:71:37:aa:b6:e4:b2:01:03:74:27:4a:d6:68:56: a5:cd:bf:6d:9a:fb:5c:90:33:6f:24:65:e8:8e:58:43:45:a4: 89:d3:ba:97:60:9b:75:96:a9:2e:38:28:64:82:fd:91:0f:8e: a0:ef:12:bf:b6:52:44:77:1f:ad:95:55:f2:14:0f:55:40:89: 41:80:d3:65:1b:76:c6:f0:11:31:03:5e:f4:63:59:c2:78:d6: c1:70:d9:3b:7a:22:08:54:53:51:b7:d6:24:9a:8c:74:3d:cf: 33:bf:5e:6d:41:39:ea:34:16:4c:ea:91:f8:2a:02:14:48:f5: 9d:72:30:c3:0f:13:81:30:cd:24:ac:a7:e8:91:54:57:0a:f9: 5a:32:0f:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUekWwZK5zIYZWampnKE3v9L7dh5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4 MUFFNDEzQjAeFw0yNjEwMTQxNDU5MTdaFw0yNjEwMTcyMTE1MTdaMDMxMTAvBgNV BAMTKEVEMkI3RjdGQzMzMjEzQ0E5MTM5OTIwQkVFMzg2N0Y2QkI5OEY1M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCes7IUPHEsammvIko+aDhYNNDH kMdqjLUlQpJoQpzAeJwBiCGdVXsEp5D39zMsrHJzbyr9OTnEXc33FBbF0bmL5CIa LHMNP21bu2Vzxj7jpZ6htTPOuz2VH31ebX1tSYw5Hwc6jnfM2CWEXpye7Ze3uCax xHhW/SLJ4Xl4Vk3pJtT7xfbGJdAN8WiZ3R/8qgB1OAg4C7Jeb60i3P7LhXxLmoOE gWEyC9MUa3U2dp7NeN6PYSExI+Wirh6oCUQmJPf93XxASwf+CHo9fHU4WOtgNmv0 qjpnNvP9d1R4DME4u3IA3SUdaZjiewPKGLFBAdUohtH3Q8pJYN7ejzokvHhvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7St/f8MyE8qROZIL7jhn9ruY9TswHwYDVR0j BBgwFoAU6yIZWbq2LKDywYROdkFZ8IGuQTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMzYzOTI4ODcwOTEyMi8wL0VCMjIxOTU5QkFCNjJDQTBGMkMxODQ0RTc2NDE1 OUYwODFBRTQxM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4MUFFNDEzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjM2MzkyODg3MDkxMjIvMC9FQjIyMTk1OUJBQjYy Q0EwRjJDMTg0NEU3NjQxNTlGMDgxQUU0MTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmBBNqjnvkQs A/jwDLetl/9z/DD2vqUE27jpdblnxYqsZb4Fcl8uOnNmu0v/7KtBzJW4DFDh8OFl xZP41ZnS3FW0mNA1IByo7gOC0os+dbTQ0hTDTE7/7D2VsArK8y/DU37MYPcpCU8L zscy5WpvNnE3qrbksgEDdCdK1mhWpc2/bZr7XJAzbyRl6I5YQ0WkidO6l2CbdZap LjgoZIL9kQ+OoO8Sv7ZSRHcfrZVV8hQPVUCJQYDTZRt2xvARMQNe9GNZwnjWwXDZ O3oiCFRTUbfWJJqMdD3PM79ebUE56jQWTOqR+CoCFEj1nXIwww8TgTDNJKyn6JFU Vwr5WjIP1w== -----END CERTIFICATE-----Generated at Wed Oct 14 18:56:28 2026 by rpki-client