$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft File: EB221959BAB62CA0F2C1844E764159F081AE413B.mft (raw, json) Hash identifier: 8HesXwZNUXtYm0ePKSKKRx/Fx2TeIJDLtahdTq/Nz6s= Subject key identifier: E4:93:D9:3A:93:97:82:09:23:26:4E:EB:3E:C0:16:8C:48:A9:E5:61 Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B Certificate issuer: /CN=EB221959BAB62CA0F2C1844E764159F081AE413B Certificate serial: 1361132A7E646A1C0F75F8C084D068CA532080F0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft Manifest number: 07 Signing time: Mon 13 Apr 2026 08:14:17 +0000 Manifest this update: Mon 13 Apr 2026 08:09:17 +0000 Manifest next update: Tue 14 Apr 2026 09:14:17 +0000 Files and hashes: 1: 3130332e38352e3138362e302f32332d3233203d3e2030.roa (hash: hbLJedcagKHXUcAguzbn4GEebd+SVTq2Cx2L9PEByro=) 2: 3130332e3231362e3234342e302f32322d3232203d3e2030.roa (hash: pbIJ5jx/pf8/NAcf/hXOdBb+q7VleSIVTqtoc77iUsM=) 3: EB221959BAB62CA0F2C1844E764159F081AE413B.crl (hash: gUpGJq/n67ONQD6pKSHpPeK++bc3zdhLaNc/h5srbrE=) 4: 323430303a646565303a3a2f33322d3332203d3e2030.roa (hash: EdjUimtwDmmEb/7qnPllHoQilNinJIy02221yPSiAD4=) 5: 3130332e3231362e3234382e302f32322d3232203d3e2030.roa (hash: gSl2ZouhSu3TZUcpNStUpMOCuX4EXWUXGnNDBeo4IEk=) 6: 34352e3234382e3130302e302f32322d3232203d3e2030.roa (hash: evePIHhobdrqna9eeXg6NPN2qqunrVRaep6ZbuP+aTQ=) 7: 34352e3234382e3130342e302f32322d3232203d3e2030.roa (hash: Olt5MVy17egj99Gius/16ZJ0CP/XuP53qLG1H4AiBCE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:61:13:2a:7e:64:6a:1c:0f:75:f8:c0:84:d0:68:ca:53:20:80:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B Validity Not Before: Apr 13 08:09:17 2026 GMT Not After : Apr 14 09:14:17 2026 GMT Subject: CN=E493D93A9397820923264EEB3EC0168C48A9E561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:bc:86:b6:38:41:40:cc:48:3f:94:68:d6: b2:94:aa:b0:a5:c3:43:67:4b:71:6a:da:59:36:01: 87:cc:9f:cd:3d:d9:4d:41:c5:7f:f0:87:56:59:23: 6b:9e:e9:d3:fa:cf:ab:d9:3d:a7:39:b0:09:99:45: 41:b8:24:2d:fb:23:80:d0:40:81:55:e1:ed:48:b6: 29:d0:b0:30:b0:e6:fe:30:4b:12:26:3b:57:b0:91: aa:47:d1:ad:0c:7d:58:cc:42:6d:68:fd:50:2d:23: d4:8d:77:c5:2a:77:19:90:cb:96:79:f9:c2:3a:ba: 87:58:b7:e7:4d:cf:af:18:43:62:0a:e2:97:e6:bb: 8b:b5:85:dd:11:55:d9:4f:8d:95:dc:16:0e:e0:df: 65:9f:b6:c8:a5:e3:d3:42:18:38:3b:a4:f9:e4:b4: 7c:d5:ac:bd:4a:55:57:94:ce:9c:b9:85:74:91:56: 08:ac:bc:52:32:34:4b:94:fb:a1:19:3d:61:01:cd: 6d:41:2c:e5:a3:0c:a4:f3:83:48:de:59:97:0d:00: 51:d1:d4:e5:86:cd:f0:6c:e7:ca:8a:ca:1f:ea:ee: eb:eb:dc:87:c3:dd:7b:8e:3a:2c:7b:35:3b:eb:61: 64:0e:34:4b:b8:c8:c6:60:38:8f:b0:e4:2e:98:5f: f3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:93:D9:3A:93:97:82:09:23:26:4E:EB:3E:C0:16:8C:48:A9:E5:61 X509v3 Authority Key Identifier: keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:bf:be:b9:c1:02:d6:08:a7:48:d0:99:2c:b3:f0:d6:4f:d0: 42:4f:35:20:26:f5:57:76:59:d1:94:a4:12:e3:8b:b4:a2:a0: 6d:f6:cf:d6:20:37:3a:4d:9c:12:44:da:fa:fa:c6:e8:61:90: 1a:b0:55:0b:56:c6:b3:0a:1e:c3:f4:f0:2d:42:2a:9b:ac:d1: 2a:1d:10:82:28:40:37:b9:8b:eb:95:0f:05:e5:7f:de:e6:3c: 47:7c:b6:ce:79:e1:e0:f1:8f:db:21:57:5a:60:7f:46:b7:2f: 1c:16:c3:b0:e6:4a:50:be:40:6d:32:35:c0:cb:ed:ab:37:ad: 3c:13:2e:3a:8c:8e:e3:a0:fa:9a:1f:f3:94:18:62:71:e5:cc: da:a9:7a:a7:d8:a5:84:e4:df:10:46:98:7a:4a:44:b0:a8:ee: bc:db:e8:94:93:d6:72:88:d2:f9:4f:c8:a9:4c:0b:f2:ec:7f: 98:65:a8:32:25:12:67:90:90:25:a1:5f:87:e3:78:c1:f2:96: e0:cf:80:fc:91:ff:57:9c:90:6c:26:f1:cd:fb:52:88:77:17: 89:50:36:9c:27:8d:b2:f6:9a:9b:65:69:f4:e2:db:d4:be:b8: 56:af:23:89:9a:72:0e:59:50:26:78:9d:6f:22:5d:01:30:b8: a2:99:eb:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE2ETKn5kahwPdfjAhNBoylMggPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4 MUFFNDEzQjAeFw0yNjA0MTMwODA5MTdaFw0yNjA0MTQwOTE0MTdaMDMxMTAvBgNV BAMTKEU0OTNEOTNBOTM5NzgyMDkyMzI2NEVFQjNFQzAxNjhDNDhBOUU1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjGbyGtjhBQMxIP5Ro1rKUqrCl w0NnS3Fq2lk2AYfMn8092U1BxX/wh1ZZI2ue6dP6z6vZPac5sAmZRUG4JC37I4DQ QIFV4e1ItinQsDCw5v4wSxImO1ewkapH0a0MfVjMQm1o/VAtI9SNd8UqdxmQy5Z5 +cI6uodYt+dNz68YQ2IK4pfmu4u1hd0RVdlPjZXcFg7g32Wftsil49NCGDg7pPnk tHzVrL1KVVeUzpy5hXSRVgisvFIyNEuU+6EZPWEBzW1BLOWjDKTzg0jeWZcNAFHR 1OWGzfBs58qKyh/q7uvr3IfD3XuOOix7NTvrYWQONEu4yMZgOI+w5C6YX/MzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5JPZOpOXggkjJk7rPsAWjEip5WEwHwYDVR0j BBgwFoAU6yIZWbq2LKDywYROdkFZ8IGuQTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMzYzOTI4ODcwOTEyMi8wL0VCMjIxOTU5QkFCNjJDQTBGMkMxODQ0RTc2NDE1 OUYwODFBRTQxM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4MUFFNDEzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjM2MzkyODg3MDkxMjIvMC9FQjIyMTk1OUJBQjYy Q0EwRjJDMTg0NEU3NjQxNTlGMDgxQUU0MTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyb++ucEC1gin SNCZLLPw1k/QQk81ICb1V3ZZ0ZSkEuOLtKKgbfbP1iA3Ok2cEkTa+vrG6GGQGrBV C1bGswoew/TwLUIqm6zRKh0QgihAN7mL65UPBeV/3uY8R3y2znnh4PGP2yFXWmB/ RrcvHBbDsOZKUL5AbTI1wMvtqzetPBMuOoyO46D6mh/zlBhiceXM2ql6p9ilhOTf EEaYekpEsKjuvNvolJPWcojS+U/IqUwL8ux/mGWoMiUSZ5CQJaFfh+N4wfKW4M+A /JH/V5yQbCbxzftSiHcXiVA2nCeNsvaam2Vp9OLb1L64Vq8jiZpyDllQJnidbyJd ATC4opnrpg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:10 2026 by rpki-client