
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111104529014718485/0/EB98A4B01406A8EED8ADC5238364680D159B816B.mft
File: EB98A4B01406A8EED8ADC5238364680D159B816B.mft (raw, json)
Hash identifier: DwuCtvH4INP0yMr+4qVeUQ27/Vo1IHdd6CL82h2zajI=
Subject key identifier: 53:21:F1:10:D3:C6:5E:CA:EA:C7:E7:D9:EB:7D:7A:13:CD:E8:73:29
Authority key identifier: EB:98:A4:B0:14:06:A8:EE:D8:AD:C5:23:83:64:68:0D:15:9B:81:6B
Certificate issuer: /CN=EB98A4B01406A8EED8ADC5238364680D159B816B
Certificate serial: 6FE6AC043C70C3A8F3EA21C4A0FB300E045DE116
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB98A4B01406A8EED8ADC5238364680D159B816B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111104529014718485/0/EB98A4B01406A8EED8ADC5238364680D159B816B.mft
Manifest number: 07
Signing time: Fri 29 May 2026 10:22:46 +0000
Manifest this update: Fri 29 May 2026 10:17:46 +0000
Manifest next update: Sat 30 May 2026 13:26:46 +0000
Files and hashes: 1: EB98A4B01406A8EED8ADC5238364680D159B816B.crl (hash: JQYusENb2nuhZ+IkK/fZRkCsvnqKjz82h08yYwPrHog=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111104529014718485/0/EB98A4B01406A8EED8ADC5238364680D159B816B.crl
rsync://rpki-rps.cnnic.cn/repo/A1111104529014718485/0/EB98A4B01406A8EED8ADC5238364680D159B816B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB98A4B01406A8EED8ADC5238364680D159B816B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 13:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e6:ac:04:3c:70:c3:a8:f3:ea:21:c4:a0:fb:30:0e:04:5d:e1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB98A4B01406A8EED8ADC5238364680D159B816B
Validity
Not Before: May 29 10:17:46 2026 GMT
Not After : May 30 13:26:46 2026 GMT
Subject: CN=5321F110D3C65ECAEAC7E7D9EB7D7A13CDE87329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:4d:be:39:d9:0d:65:3b:09:cd:db:17:a8:
5a:ae:db:7f:3c:d9:72:b5:b8:7a:d1:6b:02:67:9d:
17:87:e2:75:41:dc:64:f2:5d:14:c4:e9:57:e7:b5:
2e:04:1e:bc:4f:d1:42:91:67:34:db:d0:b4:7b:c4:
1d:b7:22:ec:5e:87:8b:02:fc:0d:6b:36:15:df:3c:
ca:71:9b:49:f5:32:aa:7e:28:bc:8c:67:f1:ff:66:
24:33:69:96:f3:77:8e:ec:69:31:b1:c7:91:32:50:
f0:31:30:97:c7:b7:49:ad:d9:c0:cd:32:16:b9:4a:
9c:9b:12:23:df:d6:39:8b:50:80:de:b1:0a:d4:6a:
67:c2:1b:29:62:1d:ef:70:c7:64:ee:7d:3a:df:93:
51:1f:c9:1a:87:00:2d:dd:ad:d3:e0:f4:8a:bc:35:
b2:62:c0:b6:d9:34:ae:17:67:84:d2:9c:34:54:6d:
0b:ea:fe:6d:c1:94:d1:89:2d:20:d9:c6:a6:54:93:
f3:b1:1a:74:dc:76:3a:3f:ab:eb:85:cf:32:5c:1d:
3b:43:39:02:3b:64:9b:f6:a0:59:4b:22:50:a0:36:
18:d9:8e:be:38:bd:d1:da:5e:8b:bc:3d:77:da:c6:
f6:5f:79:f4:c5:d2:37:fb:41:f4:14:c0:77:30:f0:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:21:F1:10:D3:C6:5E:CA:EA:C7:E7:D9:EB:7D:7A:13:CD:E8:73:29
X509v3 Authority Key Identifier:
keyid:EB:98:A4:B0:14:06:A8:EE:D8:AD:C5:23:83:64:68:0D:15:9B:81:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111104529014718485/0/EB98A4B01406A8EED8ADC5238364680D159B816B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB98A4B01406A8EED8ADC5238364680D159B816B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111104529014718485/0/EB98A4B01406A8EED8ADC5238364680D159B816B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a5:d0:e6:c9:ff:ba:8b:5e:d2:1c:d3:2c:8d:26:26:99:53:
84:5c:e6:b8:68:21:f1:c2:f0:16:9e:b0:65:49:6a:30:3f:30:
a8:10:26:13:65:18:40:bc:d9:d8:09:ec:ce:46:01:70:b4:8f:
e1:75:ad:11:4c:dd:5e:b8:87:36:b8:4f:fa:12:2a:be:c5:67:
e1:f3:b0:3d:5f:eb:be:09:09:2a:f4:6d:e8:1f:7f:57:cd:82:
28:20:2c:34:6e:4d:7e:71:e8:1c:b9:9d:87:4e:5a:11:71:d5:
40:9c:7a:85:96:34:a1:64:05:36:f0:ea:22:31:91:7a:a1:9e:
68:4a:b9:32:a5:3f:1a:03:64:43:0b:11:e1:1e:48:0a:6b:84:
1b:24:dd:12:c6:13:01:86:9d:58:2b:87:71:03:41:47:fc:f6:
d4:ca:71:85:81:fd:94:f1:66:6f:9e:08:65:4f:5a:c8:44:71:
05:2b:75:0b:7f:b9:c6:4a:a8:bf:02:80:9c:3a:5f:54:3b:be:
1c:06:02:44:bd:9a:5e:71:ae:25:f6:a9:9d:03:f9:51:68:96:
25:87:0d:fb:a1:be:96:e2:7c:39:23:d7:9d:9f:e6:33:54:0f:
2a:52:5a:be:5e:68:30:d3:c7:82:e1:76:df:cf:14:4a:da:80:
49:02:f3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:56 2026 by rpki-client