
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
File: EB221959BAB62CA0F2C1844E764159F081AE413B.mft (raw, json)
Hash identifier: 6cdDelBWT7shp5qRaY8QH0FNlJYLTtxDxiuQgOTm5ro=
Subject key identifier: 7D:69:4F:C3:20:0B:A4:29:E0:D1:14:D8:E7:EA:18:26:3A:85:0E:8F
Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
Certificate issuer: /CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Certificate serial: 727EC4588802969346F9C1DC74ACDEA6640AD468
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
Manifest number: 44
Signing time: Fri 29 May 2026 07:27:42 +0000
Manifest this update: Fri 29 May 2026 07:22:42 +0000
Manifest next update: Sat 30 May 2026 07:45:42 +0000
Files and hashes: 1: 3130332e3231362e3234342e302f32322d3232203d3e2030.roa (hash: pbIJ5jx/pf8/NAcf/hXOdBb+q7VleSIVTqtoc77iUsM=)
2: 3130332e3231362e3234382e302f32322d3232203d3e2030.roa (hash: gSl2ZouhSu3TZUcpNStUpMOCuX4EXWUXGnNDBeo4IEk=)
3: 34352e3234382e3130342e302f32322d3232203d3e2030.roa (hash: Olt5MVy17egj99Gius/16ZJ0CP/XuP53qLG1H4AiBCE=)
4: 323430303a646565303a3a2f33322d3332203d3e2030.roa (hash: EdjUimtwDmmEb/7qnPllHoQilNinJIy02221yPSiAD4=)
5: EB221959BAB62CA0F2C1844E764159F081AE413B.crl (hash: 7ZayzryRGu8Bp6rrNuxQpQXqouwAhmZH2JEvfgZf8UA=)
6: 3130332e38352e3138362e302f32332d3233203d3e2030.roa (hash: hbLJedcagKHXUcAguzbn4GEebd+SVTq2Cx2L9PEByro=)
7: 34352e3234382e3130302e302f32322d3232203d3e2030.roa (hash: evePIHhobdrqna9eeXg6NPN2qqunrVRaep6ZbuP+aTQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 07:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:7e:c4:58:88:02:96:93:46:f9:c1:dc:74:ac:de:a6:64:0a:d4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Validity
Not Before: May 29 07:22:42 2026 GMT
Not After : May 30 07:45:42 2026 GMT
Subject: CN=7D694FC3200BA429E0D114D8E7EA18263A850E8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5a:21:16:45:cc:72:09:ee:97:bd:ff:ea:0c:
dd:b1:7e:1f:6a:b5:53:8d:65:32:cf:8f:e5:87:7f:
14:d5:4b:0b:b8:67:e9:44:0f:54:1c:13:c8:8a:7b:
ec:27:a4:52:1d:b8:ec:d4:7d:27:ce:e9:ef:97:a2:
9f:bf:43:f4:3c:c7:cf:35:ed:0f:a9:58:0e:49:4f:
0a:90:66:52:70:63:01:1a:3d:c6:53:1c:68:cd:7d:
d1:c8:72:56:75:53:aa:4c:31:16:37:a9:8c:23:c2:
7d:ce:4d:6b:4a:31:71:53:50:ae:6a:c9:93:3d:43:
39:9c:7f:ea:bd:9a:36:f7:1f:a8:1f:36:f4:51:44:
73:4a:71:c6:c9:90:da:ef:e0:b4:36:20:6e:9e:81:
db:74:68:0c:33:3a:6a:90:c6:67:ae:38:8e:df:9e:
b7:51:28:f5:1c:14:1f:87:61:e1:bf:d8:68:f4:bb:
d0:bc:c5:50:1a:91:2e:79:31:bd:a5:2b:94:3d:70:
e5:e0:66:ca:5f:54:cb:4f:1f:23:88:68:a7:2c:33:
b3:ed:2d:68:c8:22:61:34:3d:14:be:d4:f3:ac:59:
1c:13:ca:5f:89:74:fa:7c:fd:37:0a:bd:d0:e7:62:
7b:10:18:02:51:57:9c:41:69:1d:0a:49:39:2a:5d:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:69:4F:C3:20:0B:A4:29:E0:D1:14:D8:E7:EA:18:26:3A:85:0E:8F
X509v3 Authority Key Identifier:
keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:62:c1:50:7e:b7:4f:ab:40:26:f8:22:ec:03:a9:04:56:f0:
a7:d7:e2:b9:0b:a4:ca:7c:0f:5e:2f:f6:03:c9:fb:e7:ab:25:
f0:13:db:1d:88:c6:18:28:96:3b:51:ea:46:10:67:70:a1:82:
65:55:97:c1:c8:b8:d8:72:50:12:86:18:53:9a:cf:8f:d2:33:
22:2f:7b:cc:31:42:c6:ff:3b:2a:ed:15:74:d0:00:c9:cb:e2:
d1:74:77:47:49:12:24:ca:42:51:17:3c:7f:20:a1:c8:b2:4e:
2b:8c:f2:3d:7a:9b:56:9e:64:66:14:a7:7b:34:11:5a:e7:43:
d6:f4:1b:34:56:a6:dd:c1:98:3f:eb:c9:38:00:97:b0:df:5c:
2e:7b:ad:94:de:d1:92:23:0d:8c:18:69:0a:e5:fc:7c:13:32:
47:c9:f6:c2:f2:27:7a:6a:12:81:af:c8:36:bc:eb:46:90:19:
29:48:25:11:9c:26:a5:a8:8e:0c:55:4c:98:3b:70:b6:31:77:
9c:22:44:1e:b5:24:0a:6d:69:2c:c8:4e:ab:2b:0b:38:9b:fa:
cf:5f:c8:d4:77:8c:a5:29:17:0f:6b:ec:ff:94:58:c3:d8:d5:
a1:0e:cd:8a:8e:9f:56:a7:ba:9e:d6:a1:6f:89:71:44:f3:00:
a8:e9:98:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:22 2026 by rpki-client