$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft File: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft (raw, json) Hash identifier: 0GNeSIiL5AZDTttEVAqf5SET3FHzchMZordkPGElPiM= Subject key identifier: 5D:20:CF:43:AC:99:48:90:B4:B6:BA:1F:DF:E1:FD:7D:9D:7B:AD:6B Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Certificate serial: 32873CFF5734618D4B596D74641050FE65198967 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 06:18:16 +0000 Manifest this update: Mon 02 Mar 2026 06:13:16 +0000 Manifest next update: Tue 03 Mar 2026 08:10:16 +0000 Files and hashes: 1: 3130332e32342e3232382e302f32322d3234203d3e2034383337.roa (hash: OovHk1dM5SRegXrOoxHUF4YMH6s4+waRg57vn/cYkAk=) 2: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (hash: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=) 3: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (hash: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI=) 4: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl (hash: Mw1XDzT6blQ6sbjTgqWJrYTKCh8g28kTAbiMgn0OEK0=) 5: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (hash: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:87:3c:ff:57:34:61:8d:4b:59:6d:74:64:10:50:fe:65:19:89:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359 Validity Not Before: Mar 2 06:13:16 2026 GMT Not After : Mar 3 08:10:16 2026 GMT Subject: CN=5D20CF43AC994890B4B6BA1FDFE1FD7D9D7BAD6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:dd:f7:3e:c2:3b:74:5e:55:96:61:06:61: cd:a4:7b:03:ef:c6:26:dc:c6:67:5e:3f:27:2b:61: 3a:21:d3:fc:0d:b5:06:c1:81:51:b6:60:ab:87:00: 56:77:1a:0d:9c:c5:1c:3e:d2:97:d6:ad:47:62:e5: 65:c3:12:51:00:ed:de:75:2d:a4:7f:b2:a5:e4:ab: 2d:36:0e:26:94:4f:ad:a3:42:b0:e4:02:89:6a:97: e5:cb:87:74:1b:cb:25:1d:46:ef:75:4c:32:e9:f9: 90:37:35:6e:39:cf:e3:fd:15:cf:e3:59:df:5c:be: c3:0f:d0:33:66:ef:00:b2:6e:a1:d0:e4:d1:b1:df: 30:ce:8c:5f:e5:97:eb:f9:d1:9d:dd:ad:68:d2:d6: 88:ae:67:8a:ba:54:d5:a4:8e:fa:08:4e:8c:c2:83: 67:4c:e3:34:3e:ce:61:76:80:41:5c:a9:e3:3b:89: f0:d6:93:ae:8b:cc:62:f9:ba:f1:65:6b:82:c7:39: cd:eb:1a:89:e1:a4:4b:6e:1f:ba:0a:34:3b:6e:f7: 79:fe:c1:4a:99:bf:d1:2e:48:3f:8f:3e:98:f8:9c: 10:dd:fc:ca:dd:16:e4:3a:ae:f8:31:f9:22:68:72: ba:bb:11:f2:dc:e1:3d:ca:94:b0:4c:d3:5e:7b:f3: 1f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:20:CF:43:AC:99:48:90:B4:B6:BA:1F:DF:E1:FD:7D:9D:7B:AD:6B X509v3 Authority Key Identifier: keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:11:5b:07:d6:22:28:37:35:b4:af:6c:90:b4:69:2b:9f:93: 1c:af:98:31:50:d2:b0:12:f0:40:3c:fd:6c:66:67:e3:d9:30: f3:ab:31:3d:b4:ed:da:fb:8b:3a:d3:9f:07:3d:8e:ac:f6:0e: b2:59:f4:10:80:19:0a:29:27:da:28:1c:4f:a8:65:1b:9f:2a: 16:e3:39:67:18:1e:71:68:ea:88:c0:13:06:f6:a7:c1:07:b2: 3e:a9:22:91:5c:f0:c3:79:da:ce:b7:1b:b0:30:44:9a:6b:75: 3f:10:0b:09:c9:ee:bc:13:7d:1e:96:87:88:27:ee:35:de:04: cf:53:61:f3:a1:72:4c:a4:b3:8e:33:18:df:b7:ae:b6:74:c7: 5a:bc:be:37:f8:e1:28:86:33:f4:bc:b4:f7:65:1f:25:60:9f: 50:66:ed:e6:e2:61:e1:79:31:94:4f:e5:9f:75:8d:8c:73:14: 5c:e4:62:7b:8a:75:60:db:0e:7f:2a:98:1b:cc:0b:ad:d6:88: 42:a5:03:cc:0f:f6:71:7d:83:52:0e:c0:4d:98:67:fb:c9:65: fe:88:de:e3:15:a2:8d:c6:2d:4e:4a:d4:75:74:e3:4f:84:18: a6:87:03:e1:8c:e0:54:b8:9f:6c:e4:9a:4d:dc:cc:bf:6c:ec: 60:e9:f5:1f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMoc8/1c0YY1LWW10ZBBQ/mUZiWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVE OUIzNzM1OTAeFw0yNjAzMDIwNjEzMTZaFw0yNjAzMDMwODEwMTZaMDMxMTAvBgNV BAMTKDVEMjBDRjQzQUM5OTQ4OTBCNEI2QkExRkRGRTFGRDdEOUQ3QkFENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFL933PsI7dF5VlmEGYc2kewPv xibcxmdePycrYToh0/wNtQbBgVG2YKuHAFZ3Gg2cxRw+0pfWrUdi5WXDElEA7d51 LaR/sqXkqy02DiaUT62jQrDkAolql+XLh3QbyyUdRu91TDLp+ZA3NW45z+P9Fc/j Wd9cvsMP0DNm7wCybqHQ5NGx3zDOjF/ll+v50Z3drWjS1oiuZ4q6VNWkjvoITozC g2dM4zQ+zmF2gEFcqeM7ifDWk66LzGL5uvFla4LHOc3rGonhpEtuH7oKNDtu93n+ wUqZv9EuSD+PPpj4nBDd/MrdFuQ6rvgx+SJocrq7EfLc4T3KlLBM01578x/HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXSDPQ6yZSJC0trof3+H9fZ17rWswHwYDVR0j BBgwFoAU61sIP5/Gq7cls/0eggJwbtmzc1kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTAzNjAzMy8wL0VCNUIwODNGOUZDNkFCQjcyNUIzRkQxRTgyMDI3 MDZFRDlCMzczNTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUI1QjA4M0Y5RkM2QUJCNzI1QjNGRDFFODIwMjcwNkVEOUIzNzM1OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUwMzYwMzMvMC9FQjVCMDgzRjlGQzZB QkI3MjVCM0ZEMUU4MjAyNzA2RUQ5QjM3MzU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBFbB9YiKDc1 tK9skLRpK5+THK+YMVDSsBLwQDz9bGZn49kw86sxPbTt2vuLOtOfBz2OrPYOsln0 EIAZCikn2igcT6hlG58qFuM5ZxgecWjqiMATBvanwQeyPqkikVzww3nazrcbsDBE mmt1PxALCcnuvBN9HpaHiCfuNd4Ez1Nh86FyTKSzjjMY37eutnTHWry+N/jhKIYz 9Ly092UfJWCfUGbt5uJh4XkxlE/ln3WNjHMUXORie4p1YNsOfyqYG8wLrdaIQqUD zA/2cX2DUg7ATZhn+8ll/oje4xWijcYtTkrUdXTjT4QYpocD4YzgVLifbOSaTdzM v2zsYOn1Hw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:13:28 2026 by rpki-client