$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft File: EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft (raw, json) Hash identifier: XIv85cafWU/y9KpT13BfyDL4Ss2Yw4+Nd5qREZYxmjA= Subject key identifier: A5:E0:EA:7D:43:44:B9:D6:7A:B3:D6:7D:B8:6C:69:A4:56:7B:12:EB Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E Certificate issuer: /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E Certificate serial: 74F454B75F50D66705612D3E8E6DF1815A0BBAFA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft Manifest number: 10 Signing time: Fri 29 May 2026 09:57:46 +0000 Manifest this update: Fri 29 May 2026 09:52:46 +0000 Manifest next update: Sat 30 May 2026 13:25:46 +0000 Files and hashes: 1: EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl (hash: +oWPs1Z7lmVYw8x7JlN8BmQRyLuRIJjrFi+1N8H26cE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f4:54:b7:5f:50:d6:67:05:61:2d:3e:8e:6d:f1:81:5a:0b:ba:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E Validity Not Before: May 29 09:52:46 2026 GMT Not After : May 30 13:25:46 2026 GMT Subject: CN=A5E0EA7D4344B9D67AB3D67DB86C69A4567B12EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:94:06:42:17:4c:c3:be:47:12:f0:3d:da:fb: d2:ba:3b:3d:c1:3e:f0:68:37:d2:f7:47:c9:b8:aa: c1:fe:e0:5b:fa:d1:72:d1:dd:33:9f:31:e8:52:22: 8c:6e:2d:67:7b:c3:02:cb:65:7a:fd:36:4c:7d:8e: e4:3a:50:56:7e:b5:97:12:02:8f:2f:e7:76:91:58: ef:c1:5b:2a:30:49:83:96:66:6f:ef:4e:ca:c4:f6: b5:e3:7b:5b:2a:3a:81:a5:30:f5:a8:4f:6d:d0:3e: c0:e0:19:05:60:7f:d8:f9:5a:3c:69:57:2a:22:3f: 3f:af:64:1d:21:cd:72:4e:da:9d:a9:20:ac:22:c0: 20:3e:25:c6:83:35:f2:6d:62:78:20:55:eb:35:11: 77:ce:0a:d6:2c:51:a1:ba:88:6d:00:d3:d1:2b:a6: 6c:10:ba:4f:bf:f7:1e:c2:4f:e2:8c:92:3c:7c:c4: b2:6c:7f:56:fc:92:d6:c8:9d:e3:fc:69:fd:ca:e7: 0e:5f:7a:24:f3:31:a7:48:96:b6:25:65:2e:5b:8a: 57:ee:99:9f:2d:58:66:b7:6c:da:76:fc:f9:b1:1e: c2:46:cf:42:07:b2:a2:2b:b6:0e:f0:ba:d7:e7:e1: 09:bd:f6:ac:88:b2:4b:99:c1:e6:f2:69:dc:ea:3e: b9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E0:EA:7D:43:44:B9:D6:7A:B3:D6:7D:B8:6C:69:A4:56:7B:12:EB X509v3 Authority Key Identifier: keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:09:77:79:65:60:09:44:35:82:b0:75:84:28:bd:6a:ff:a1: 16:b7:32:35:14:a4:4e:c0:93:1b:70:69:0a:c3:a1:f2:1f:34: bf:00:87:22:fd:6f:ea:27:7b:48:b8:03:f9:a1:f7:10:11:51: e7:59:b8:dc:2e:62:77:a2:a8:8a:57:5c:88:d1:5c:49:5e:36: f0:21:5b:ac:e5:71:e7:b2:0f:98:a1:9a:f4:c7:5d:1e:43:f1: 76:c8:5c:e7:b2:c2:41:c6:7e:b6:a2:73:41:40:35:54:65:19: c9:fd:c4:2d:c3:51:fc:a1:cb:c6:5c:5b:31:50:64:83:f1:b0: ca:ef:d3:cc:66:55:f2:12:7e:09:69:6d:6e:53:e2:92:e1:79: d0:f7:f2:5c:7b:38:35:22:67:dc:37:5f:27:e7:3e:ca:99:27: 83:76:46:72:50:1d:06:d7:19:ec:e3:14:37:66:a5:49:8b:61: fa:75:77:53:e7:d9:bc:6c:ff:b3:ab:91:82:68:ce:86:05:9a: ab:d5:00:8e:ac:ae:01:5e:ac:f2:c9:ea:5c:5c:90:57:7a:22: de:31:d9:7d:ed:98:d2:68:2e:f4:98:e2:a6:3b:79:77:e0:d1: 83:f6:d8:c5:be:ef:29:c1:d9:42:5a:59:f0:a4:6c:a0:2a:19: 64:e3:30:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdPRUt19Q1mcFYS0+jm3xgVoLuvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2 MjlEMEYzRTAeFw0yNjA1MjkwOTUyNDZaFw0yNjA1MzAxMzI1NDZaMDMxMTAvBgNV BAMTKEE1RTBFQTdENDM0NEI5RDY3QUIzRDY3REI4NkM2OUE0NTY3QjEyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6lAZCF0zDvkcS8D3a+9K6Oz3B PvBoN9L3R8m4qsH+4Fv60XLR3TOfMehSIoxuLWd7wwLLZXr9Nkx9juQ6UFZ+tZcS Ao8v53aRWO/BWyowSYOWZm/vTsrE9rXje1sqOoGlMPWoT23QPsDgGQVgf9j5Wjxp VyoiPz+vZB0hzXJO2p2pIKwiwCA+JcaDNfJtYnggVes1EXfOCtYsUaG6iG0A09Er pmwQuk+/9x7CT+KMkjx8xLJsf1b8ktbIneP8af3K5w5feiTzMadIlrYlZS5bilfu mZ8tWGa3bNp2/PmxHsJGz0IHsqIrtg7wutfn4Qm99qyIskuZwebyadzqPrnRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpeDqfUNEudZ6s9Z9uGxppFZ7EuswHwYDVR0j BBgwFoAU6+i05up8WLLlbjxZn4ahMmKdDz4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY1NjI3MTU1ODQ0MzAyNy8wL0VCRThCNEU2RUE3QzU4QjJFNTZFM0M1OTlGODZB MTMyNjI5RDBGM0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2MjlEMEYzRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NTYyNzE1NTg0NDMwMjcvMC9FQkU4QjRFNkVBN0M1 OEIyRTU2RTNDNTk5Rjg2QTEzMjYyOUQwRjNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQl3eWVgCUQ1 grB1hCi9av+hFrcyNRSkTsCTG3BpCsOh8h80vwCHIv1v6id7SLgD+aH3EBFR51m4 3C5id6KoildciNFcSV428CFbrOVx57IPmKGa9MddHkPxdshc57LCQcZ+tqJzQUA1 VGUZyf3ELcNR/KHLxlxbMVBkg/Gwyu/TzGZV8hJ+CWltblPikuF50PfyXHs4NSJn 3DdfJ+c+ypkng3ZGclAdBtcZ7OMUN2alSYth+nV3U+fZvGz/s6uRgmjOhgWaq9UA jqyuAV6s8snqXFyQV3oi3jHZfe2Y0mgu9Jjipjt5d+DRg/bYxb7vKcHZQlpZ8KRs oCoZZOMwhQ== -----END CERTIFICATE-----Generated at Fri May 29 22:03:33 2026 by rpki-client