$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft File: EB221959BAB62CA0F2C1844E764159F081AE413B.mft (raw, json) Hash identifier: q6xU9hOmgy8chjBH8y3iBhmumxB47rhvfNkLtlM0ZgQ= Subject key identifier: 43:21:25:F7:86:C7:1E:E1:DE:5E:13:89:76:85:19:9A:5D:7F:FD:CF Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B Certificate issuer: /CN=EB221959BAB62CA0F2C1844E764159F081AE413B Certificate serial: 5351EEAFC45F6F5C05D5B590D161ACEB57BBB992 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft Manifest number: BE Signing time: Fri 28 Aug 2026 06:47:46 +0000 Manifest this update: Fri 28 Aug 2026 06:42:46 +0000 Manifest next update: Mon 31 Aug 2026 13:53:46 +0000 Files and hashes: 1: 3130332e3231362e3234342e302f32322d3232203d3e2030.roa (hash: pbIJ5jx/pf8/NAcf/hXOdBb+q7VleSIVTqtoc77iUsM=) 2: 34352e3234382e3130342e302f32322d3232203d3e2030.roa (hash: Olt5MVy17egj99Gius/16ZJ0CP/XuP53qLG1H4AiBCE=) 3: 323430303a646565303a3a2f33322d3332203d3e2030.roa (hash: EdjUimtwDmmEb/7qnPllHoQilNinJIy02221yPSiAD4=) 4: 3130332e3231362e3234382e302f32322d3232203d3e2030.roa (hash: gSl2ZouhSu3TZUcpNStUpMOCuX4EXWUXGnNDBeo4IEk=) 5: 3130332e38352e3138362e302f32332d3233203d3e2030.roa (hash: hbLJedcagKHXUcAguzbn4GEebd+SVTq2Cx2L9PEByro=) 6: 34352e3234382e3130302e302f32322d3232203d3e2030.roa (hash: evePIHhobdrqna9eeXg6NPN2qqunrVRaep6ZbuP+aTQ=) 7: EB221959BAB62CA0F2C1844E764159F081AE413B.crl (hash: Svk9QCDetlEGTX1Uo99LEQBRVDJMMXEXeVSYDpHPY40=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:51:ee:af:c4:5f:6f:5c:05:d5:b5:90:d1:61:ac:eb:57:bb:b9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B Validity Not Before: Aug 28 06:42:46 2026 GMT Not After : Aug 31 13:53:46 2026 GMT Subject: CN=432125F786C71EE1DE5E13897685199A5D7FFDCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0d:1f:74:46:76:d0:fa:67:d5:c9:d1:40:d9: c5:67:ba:9d:58:f3:ec:a8:1d:4f:2e:af:48:f6:6a: fb:8d:4b:dd:4e:c8:ce:4d:cc:15:4d:7a:a2:26:df: 21:fa:be:14:76:5b:ee:c2:c9:8c:d6:78:6c:89:1d: c7:9e:ee:a9:f6:9f:db:ed:2c:19:3e:de:a2:05:ea: fb:d9:66:f6:bf:a0:70:19:d1:a7:59:fd:3c:77:71: 74:21:89:86:bf:ba:a1:ce:8a:97:60:57:c3:d0:56: 54:4d:bf:21:b3:36:c5:86:c6:03:04:72:14:cc:28: 5c:ab:10:0d:bd:e9:7d:80:cc:be:4a:63:c6:c2:7f: 7e:71:cc:f9:5a:9b:a8:d2:8e:35:f9:4e:70:ac:17: cb:73:a0:1f:dd:fc:a7:b1:04:80:22:66:03:f1:6a: e3:03:2f:0b:81:8e:d0:da:11:5b:2f:8a:4a:90:06: 52:23:a2:d3:6c:49:7a:66:2c:3b:ea:84:f7:1d:5b: c6:e2:33:df:19:fb:b9:9c:35:42:ff:ad:43:88:da: 90:5d:e0:50:cb:94:19:9f:b2:fb:ec:71:1b:6f:eb: 40:cc:4e:52:2b:c1:f5:b9:9a:88:8b:7d:85:ba:26: 0f:8a:91:d7:0f:98:3d:0e:96:50:e6:c5:8b:2c:5e: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:21:25:F7:86:C7:1E:E1:DE:5E:13:89:76:85:19:9A:5D:7F:FD:CF X509v3 Authority Key Identifier: keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:bf:0b:14:3f:db:2e:6f:08:b1:3e:64:a1:5f:63:96:36:27: 02:f7:2a:ff:a3:9c:4b:a7:a6:9d:21:62:e3:36:64:2b:29:4c: fc:0c:4f:1c:d8:21:35:09:53:7e:82:00:46:6c:02:d1:b4:a9: 5b:f8:7f:59:ab:4a:57:27:f6:b0:1e:f7:94:7e:10:97:eb:36: 85:99:44:bf:0e:08:17:91:be:20:c0:99:9d:8e:51:12:54:66: 99:f8:c1:5e:a7:a2:f9:c3:4d:10:b2:30:e0:16:d6:84:8d:98: ed:90:6d:b4:a0:f0:df:49:c9:9a:26:85:08:15:ac:2a:40:4c: b9:b1:91:54:b4:40:90:7f:9d:3f:9d:be:0c:f2:db:31:a0:e8: ae:95:34:c5:e4:b7:4c:d4:1f:f4:35:cf:4c:79:2b:44:c0:5f: 08:e2:91:97:31:61:0b:f4:c0:e9:cf:59:39:de:8c:99:92:c9: 24:ba:62:fb:97:65:20:56:4d:07:60:07:2b:3a:5b:7f:70:a1: f2:0c:68:7a:f4:c9:a8:0e:07:45:43:f8:3c:1c:8b:50:0f:93: a4:f6:ac:cb:62:6b:f2:2e:44:a1:cc:54:6f:dd:a9:b0:87:28: 34:02:69:22:e6:08:4c:f0:5d:06:ff:af:d7:11:f0:1d:e2:06: c3:01:18:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU1Hur8Rfb1wF1bWQ0WGs61e7uZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4 MUFFNDEzQjAeFw0yNjA4MjgwNjQyNDZaFw0yNjA4MzExMzUzNDZaMDMxMTAvBgNV BAMTKDQzMjEyNUY3ODZDNzFFRTFERTVFMTM4OTc2ODUxOTlBNUQ3RkZEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYDR90RnbQ+mfVydFA2cVnup1Y 8+yoHU8ur0j2avuNS91OyM5NzBVNeqIm3yH6vhR2W+7CyYzWeGyJHcee7qn2n9vt LBk+3qIF6vvZZva/oHAZ0adZ/Tx3cXQhiYa/uqHOipdgV8PQVlRNvyGzNsWGxgME chTMKFyrEA296X2AzL5KY8bCf35xzPlam6jSjjX5TnCsF8tzoB/d/KexBIAiZgPx auMDLwuBjtDaEVsvikqQBlIjotNsSXpmLDvqhPcdW8biM98Z+7mcNUL/rUOI2pBd 4FDLlBmfsvvscRtv60DMTlIrwfW5moiLfYW6Jg+KkdcPmD0OllDmxYssXjHpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQyEl94bHHuHeXhOJdoUZml1//c8wHwYDVR0j BBgwFoAU6yIZWbq2LKDywYROdkFZ8IGuQTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMzYzOTI4ODcwOTEyMi8wL0VCMjIxOTU5QkFCNjJDQTBGMkMxODQ0RTc2NDE1 OUYwODFBRTQxM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4MUFFNDEzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjM2MzkyODg3MDkxMjIvMC9FQjIyMTk1OUJBQjYy Q0EwRjJDMTg0NEU3NjQxNTlGMDgxQUU0MTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF78LFD/bLm8I sT5koV9jljYnAvcq/6OcS6emnSFi4zZkKylM/AxPHNghNQlTfoIARmwC0bSpW/h/ WatKVyf2sB73lH4Ql+s2hZlEvw4IF5G+IMCZnY5RElRmmfjBXqei+cNNELIw4BbW hI2Y7ZBttKDw30nJmiaFCBWsKkBMubGRVLRAkH+dP52+DPLbMaDorpU0xeS3TNQf 9DXPTHkrRMBfCOKRlzFhC/TA6c9ZOd6MmZLJJLpi+5dlIFZNB2AHKzpbf3Ch8gxo evTJqA4HRUP4PByLUA+TpPasy2Jr8i5EocxUb92psIcoNAJpIuYITPBdBv+v1xHw HeIGwwEY0g== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:27 2026 by rpki-client