
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
File: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft (raw, json)
Hash identifier: f389CAvsTN6xFq947ortIvoAtVNmzyiML/lL4fU4nLc=
Subject key identifier: AE:D5:A3:02:2F:C7:3D:25:D2:E1:A1:CF:97:C3:AD:CE:A4:3D:57:BB
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial: 682F0147B3540EC5203C9D6CA455DCFD2765ABCC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
Manifest number: 78
Signing time: Thu 16 Apr 2026 06:37:29 +0000
Manifest this update: Thu 16 Apr 2026 06:32:29 +0000
Manifest next update: Fri 17 Apr 2026 07:29:29 +0000
Files and hashes: 1: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (hash: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI=)
2: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl (hash: 2RXwjlTSLUSNJq0OVRkckJQ+jhCpnHIlhkbylEA70Lw=)
3: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (hash: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=)
4: 3130332e3234312e3232302e302f32322d3232203d3e2030.roa (hash: vffwqsc1y5fLsjUwVEkmdZ5MIluj2AqYi6xrs73+I0k=)
5: 3130332e32342e3232382e302f32342d3234203d3e2034383337.roa (hash: EkHOAQ9SZLQtgUKfohxIGCu30Zcv63COLPGEXCHOHaY=)
6: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (hash: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=)
7: 3130332e32342e3232382e302f32322d3232203d3e2034383337.roa (hash: qJPJ83xaMw16qDsSncZcoy/olhHqgPT6g3PgUjqsbok=)
8: 323430333a356238303a3a2f33322d3332203d3e2030.roa (hash: 46/tjO14ih7NL7c3FlsSLZTwfgKKd0SVKFNff9MQoNM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 07:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2f:01:47:b3:54:0e:c5:20:3c:9d:6c:a4:55:dc:fd:27:65:ab:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Validity
Not Before: Apr 16 06:32:29 2026 GMT
Not After : Apr 17 07:29:29 2026 GMT
Subject: CN=AED5A3022FC73D25D2E1A1CF97C3ADCEA43D57BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:71:07:d6:aa:50:40:fa:f4:e2:5b:f0:a8:
8b:76:d7:76:5d:33:1b:7b:89:85:f2:70:b6:ad:14:
50:12:fe:b9:5b:9f:59:c0:52:a8:99:a6:74:0d:fb:
cc:76:39:bf:03:36:37:55:d1:60:c0:28:12:1a:d3:
87:45:e6:38:03:be:2f:d4:44:1c:9f:bb:bf:f2:b8:
b6:d7:9c:b2:af:84:2a:da:59:84:8b:fc:c3:ae:f6:
24:74:48:5e:01:c1:98:13:3d:76:3f:ed:4c:4e:69:
ac:60:43:f4:1a:ee:c8:99:dc:cd:b2:99:76:db:fd:
67:c6:7f:c8:52:86:8b:1e:6f:2b:d8:10:95:de:a7:
51:18:f4:8b:3d:38:e9:d9:40:38:04:d2:ba:c2:95:
a6:d9:04:69:6c:01:ea:34:e8:19:82:0c:2e:19:96:
68:9d:af:b2:cf:1d:bf:e3:89:c1:ae:50:b2:89:e4:
87:67:25:5e:03:d5:86:f8:1f:c6:4c:b4:1f:22:fd:
7f:bb:68:d5:ff:1f:fb:e3:d9:7e:3b:bc:76:eb:3a:
12:c6:e8:15:ad:97:b1:61:a6:9e:9b:78:ed:9b:6a:
95:eb:ff:92:16:94:5a:84:76:3c:90:76:24:33:5a:
9d:75:e5:80:31:c0:e2:da:d7:37:36:49:d1:4e:d8:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D5:A3:02:2F:C7:3D:25:D2:E1:A1:CF:97:C3:AD:CE:A4:3D:57:BB
X509v3 Authority Key Identifier:
keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:8e:79:74:05:78:f4:d3:ed:b8:0c:08:70:7d:81:54:39:4a:
b3:38:30:71:57:ba:9c:bd:e3:65:3e:4c:e6:1a:4b:a5:95:24:
c7:33:20:95:da:99:25:2a:34:4b:93:9a:c4:8b:79:3a:99:3b:
e3:75:c0:5e:ef:57:7b:74:77:16:1b:fe:ce:27:42:94:ab:50:
9d:a0:7e:ce:f6:af:a4:ad:39:05:f8:af:b3:7e:2f:92:ec:16:
84:5b:f1:48:01:d4:85:c6:b7:07:cb:9f:24:f8:50:58:8f:6b:
10:ca:e1:07:8e:ff:b0:07:3f:72:e4:cc:b9:ae:03:77:0c:f5:
71:ec:32:41:71:8a:a0:21:f7:a8:37:d7:f2:14:c0:93:2b:3f:
3c:5a:b9:3b:5c:22:ae:48:6a:06:c5:e3:60:d0:c0:bd:61:ef:
c7:bb:00:a6:ab:11:83:20:ec:d2:4d:b2:11:c2:ea:6d:da:25:
18:10:3a:92:5a:55:d4:0a:b7:17:53:25:58:13:bb:d9:a9:71:
e5:f0:40:c7:e8:8a:45:88:b9:66:ad:05:87:29:0d:03:31:75:
4c:56:0e:f4:37:e5:66:fa:14:d9:53:81:d9:92:9e:75:13:5b:
8f:31:c3:42:8b:ff:d1:cc:8e:0b:e0:c2:67:81:01:a1:b9:7e:
f2:7e:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:24 2026 by rpki-client