$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft File: EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft (raw, json) Hash identifier: x4k8G0EntRKRDPSaRaBcu3UtDzBxqv2WFMvjMR7i4Fk= Subject key identifier: 97:16:A8:04:92:7B:80:0E:FC:86:BD:F9:6B:E5:A6:E1:12:95:5B:93 Authority key identifier: ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F Certificate issuer: /CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Certificate serial: 5C12FD3E7D3F16691C2EF22B6BBE348C84F4B11C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft Manifest number: EE Signing time: Fri 28 Aug 2026 09:17:16 +0000 Manifest this update: Fri 28 Aug 2026 09:12:16 +0000 Manifest next update: Mon 31 Aug 2026 17:22:16 +0000 Files and hashes: 1: AS9808.roa (hash: ukD6uHCZiHk4h+GlQsCyMcdqRNeHZgvh2Pf0jbdkj1c=) 2: EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl (hash: kcfYBBjiOdhj6pyT+fIDlq6OxOk2e14hrSaGnES/Lds=) 3: AS55960.roa (hash: axQ+Zk+/ThXdJkJcFwq8ZZ20uuf40SbWtnIM9SUc+MA=) 4: AS4808.roa (hash: atc3V2kNqNA+K8hLlCpSQfNr004rh0ZV925GjgrnF2Q=) 5: AS23724.roa (hash: FMMtT9syIhfTkxUsfe+CVB9j1W0JxaQLuGASRzXKP0U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:12:fd:3e:7d:3f:16:69:1c:2e:f2:2b:6b:be:34:8c:84:f4:b1:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDB73071044B6AA67901EB0A11A028B8B2CEEC5F Validity Not Before: Aug 28 09:12:16 2026 GMT Not After : Aug 31 17:22:16 2026 GMT Subject: CN=9716A804927B800EFC86BDF96BE5A6E112955B93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:91:a9:72:53:0e:45:3b:c0:6a:d9:b0:cd: 83:e7:13:fc:55:a4:47:77:2b:6b:e7:af:f7:8e:63: 89:43:88:b9:28:f5:d4:90:8d:4e:db:66:d7:f0:46: 56:44:ae:c1:2c:75:74:a9:80:d9:85:24:52:06:6a: 91:3c:a2:52:15:c3:53:00:bb:13:d2:8e:c6:2d:87: 7a:5b:37:49:f2:72:8e:1a:20:5c:b4:0c:fa:df:50: c4:07:65:b9:ba:92:cb:41:25:de:cb:65:66:ab:ae: cf:51:03:66:b3:a4:34:40:fe:e8:43:ce:95:94:9c: de:03:45:d4:0c:d3:87:23:e2:3b:0b:23:32:b8:6d: 93:dc:12:15:bd:3a:cb:ec:4e:f9:e5:86:40:4f:04: 9c:50:1e:1c:6a:28:f5:36:c1:e1:ce:82:8f:6a:56: 65:ac:da:b6:9b:59:63:bd:6d:b2:5c:35:70:6e:45: 86:33:4c:8f:df:1c:7e:bf:74:d4:8c:95:6b:a4:4b: 82:52:82:e3:4e:58:48:21:5f:b8:ee:7d:8c:64:e4: be:9d:46:43:15:d0:9c:d3:74:13:0d:4a:e2:1b:55: 3d:d6:cb:e3:bd:a4:9a:a3:29:5a:60:7f:29:70:98: 72:56:79:78:33:4e:b4:09:eb:f6:28:46:f4:2b:70: ed:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:16:A8:04:92:7B:80:0E:FC:86:BD:F9:6B:E5:A6:E1:12:95:5B:93 X509v3 Authority Key Identifier: keyid:ED:B7:30:71:04:4B:6A:A6:79:01:EB:0A:11:A0:28:B8:B2:CE:EC:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108677435395670037/0/EDB73071044B6AA67901EB0A11A028B8B2CEEC5F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:71:48:5d:fe:90:a9:ce:58:25:72:df:60:bb:28:7e:e8:e8: 83:cd:49:e1:66:57:ad:0a:77:6e:5e:72:8d:c9:30:d9:97:62: 26:0c:53:e8:17:93:19:f7:05:f4:ad:26:17:49:d4:63:4e:1a: c6:b8:09:e0:1a:28:35:45:38:c2:91:b0:04:03:b4:17:09:63: a0:cd:9e:75:a0:cd:ab:4e:f8:3c:21:04:db:81:7b:74:2d:98: 7b:9a:b4:4d:c6:69:81:5f:51:26:d9:26:fa:bb:72:04:70:67: 54:fa:3c:be:46:28:14:c4:6e:ed:0a:66:8f:c9:be:64:ff:40: 81:55:e2:83:d1:01:0e:1e:2c:b3:2f:81:79:22:1b:3d:f7:94: 20:7a:82:da:34:1c:cf:73:88:ca:8b:45:91:21:d8:6a:81:6d: f4:49:06:74:24:1d:66:d7:64:a0:b3:69:09:24:0b:6d:77:61: 85:4b:03:24:0d:a8:79:b7:56:67:06:43:b1:7d:c1:d5:83:b2: 8d:2b:01:f8:9f:f9:e1:d5:04:3c:af:96:4e:b5:ed:63:aa:2e: 0f:b9:2d:7e:29:73:22:50:55:ae:6f:23:9e:d9:69:13:ed:f6: 65:80:b3:24:ad:44:fb:60:24:db:18:2e:c2:57:f8:a2:0c:88: 76:39:e6:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXBL9Pn0/FmkcLvIra740jIT0sRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhC MkNFRUM1RjAeFw0yNjA4MjgwOTEyMTZaFw0yNjA4MzExNzIyMTZaMDMxMTAvBgNV BAMTKDk3MTZBODA0OTI3QjgwMEVGQzg2QkRGOTZCRTVBNkUxMTI5NTVCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcOpGpclMORTvAatmwzYPnE/xV pEd3K2vnr/eOY4lDiLko9dSQjU7bZtfwRlZErsEsdXSpgNmFJFIGapE8olIVw1MA uxPSjsYth3pbN0nyco4aIFy0DPrfUMQHZbm6kstBJd7LZWarrs9RA2azpDRA/uhD zpWUnN4DRdQM04cj4jsLIzK4bZPcEhW9OsvsTvnlhkBPBJxQHhxqKPU2weHOgo9q VmWs2rabWWO9bbJcNXBuRYYzTI/fHH6/dNSMlWukS4JSguNOWEghX7jufYxk5L6d RkMV0JzTdBMNSuIbVT3Wy+O9pJqjKVpgfylwmHJWeXgzTrQJ6/YoRvQrcO2LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlxaoBJJ7gA78hr35a+Wm4RKVW5MwHwYDVR0j BBgwFoAU7bcwcQRLaqZ5AesKEaAouLLO7F8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY3NzQzNTM5NTY3MDAzNy8wL0VEQjczMDcxMDQ0QjZBQTY3OTAxRUIwQTExQTAy OEI4QjJDRUVDNUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRURCNzMwNzEwNDRCNkFBNjc5MDFFQjBBMTFBMDI4QjhCMkNFRUM1Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2Nzc0MzUzOTU2NzAwMzcvMC9FREI3MzA3MTA0NEI2 QUE2NzkwMUVCMEExMUEwMjhCOEIyQ0VFQzVGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXFIXf6Qqc5Y JXLfYLsofujog81J4WZXrQp3bl5yjckw2ZdiJgxT6BeTGfcF9K0mF0nUY04axrgJ 4BooNUU4wpGwBAO0FwljoM2edaDNq074PCEE24F7dC2Ye5q0TcZpgV9RJtkm+rty BHBnVPo8vkYoFMRu7Qpmj8m+ZP9AgVXig9EBDh4ssy+BeSIbPfeUIHqC2jQcz3OI yotFkSHYaoFt9EkGdCQdZtdkoLNpCSQLbXdhhUsDJA2oebdWZwZDsX3B1YOyjSsB +J/54dUEPK+WTrXtY6ouD7ktfilzIlBVrm8jntlpE+32ZYCzJK1E+2Ak2xguwlf4 ogyIdjnmvA== -----END CERTIFICATE-----Generated at Sat Aug 29 07:17:24 2026 by rpki-client