
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
File: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft (raw, json)
Hash identifier: bLHHEyFKbpxIEQTs64/gXXwZ7iSk3uVkHFomszzmK6c=
Subject key identifier: 4F:FE:44:86:A0:A6:90:3D:D6:5A:8F:68:47:F1:D2:1A:9F:8E:32:77
Authority key identifier: EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
Certificate issuer: /CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Certificate serial: 372A43457DCCED6FE3C2D253B9662A6B02F81DF5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
Manifest number: 013B
Signing time: Fri 02 Oct 2026 20:35:43 +0000
Manifest this update: Fri 02 Oct 2026 20:30:43 +0000
Manifest next update: Tue 06 Oct 2026 02:40:43 +0000
Files and hashes: 1: 3130332e32342e3232392e302f32342d3234203d3e2034383337.roa (hash: tIYbCTEEe97OE/KWJljazx6cT9bTVWAFZ1brjtk+iLM=)
2: EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl (hash: Z0BjJjzm7shcuZZOuYWveKeIFMKt/B8vt71ElmCx4N8=)
3: 3130332e32342e3233312e302f32342d3234203d3e2034383337.roa (hash: A58QvVj09pn33sJ3RcU2xC2QKhKMYlLbd561TzgrR5Q=)
4: 3130332e32342e3232382e302f32342d3234203d3e2034383337.roa (hash: EkHOAQ9SZLQtgUKfohxIGCu30Zcv63COLPGEXCHOHaY=)
5: 323430333a356238303a3a2f33322d3332203d3e2030.roa (hash: 46/tjO14ih7NL7c3FlsSLZTwfgKKd0SVKFNff9MQoNM=)
6: 3130332e32342e3232382e302f32322d3232203d3e2034383337.roa (hash: qJPJ83xaMw16qDsSncZcoy/olhHqgPT6g3PgUjqsbok=)
7: 3130332e32342e3233302e302f32342d3234203d3e2034383337.roa (hash: oZGP5PGrey+EhIN6YJFgAxqxUD7ccc3dSaZdXnwy+TI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 09:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:2a:43:45:7d:cc:ed:6f:e3:c2:d2:53:b9:66:2a:6b:02:f8:1d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB5B083F9FC6ABB725B3FD1E8202706ED9B37359
Validity
Not Before: Oct 2 20:30:43 2026 GMT
Not After : Oct 6 02:40:43 2026 GMT
Subject: CN=4FFE4486A0A6903DD65A8F6847F1D21A9F8E3277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:ba:98:9c:16:a0:fb:1a:6d:61:4f:44:6a:
a6:c3:50:1b:89:90:d1:7c:62:17:25:a5:59:0a:a3:
44:f7:a2:0b:dd:88:fb:93:88:ea:1a:97:06:d6:b2:
74:d1:61:f6:a1:fa:75:7f:33:4f:9a:9c:df:c7:05:
d6:e1:53:e5:8b:87:1e:29:fc:d3:0e:b7:89:ce:70:
bb:9d:da:e5:8d:c8:35:f7:bc:f6:a1:f5:df:0c:76:
e0:a9:16:10:7a:1b:8e:5e:ab:00:41:fa:b0:05:cf:
54:cd:ec:b0:4c:7f:85:69:f9:67:a0:07:47:37:50:
0d:a8:28:70:27:31:7d:eb:0d:1d:f7:da:25:08:fe:
34:60:70:dd:b2:74:72:b0:7f:c7:b3:57:c0:a1:40:
88:0e:c2:f4:2e:04:86:9b:ee:06:0d:6f:01:fb:a2:
ee:01:b8:6c:03:d3:e7:10:35:03:1a:db:c6:a1:72:
c6:2f:19:d7:2b:26:d5:0c:e5:16:b6:b1:e6:f6:06:
66:c3:61:25:c8:19:84:34:94:80:ac:9f:14:80:9c:
7c:04:63:f0:05:60:f5:1e:0b:f6:7a:c0:11:6e:c3:
9d:7e:73:0f:15:3e:44:a0:6b:21:0c:3d:a4:e9:b1:
16:38:0b:42:05:0c:30:d9:5f:e4:de:d6:7d:a6:68:
08:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FE:44:86:A0:A6:90:3D:D6:5A:8F:68:47:F1:D2:1A:9F:8E:32:77
X509v3 Authority Key Identifier:
keyid:EB:5B:08:3F:9F:C6:AB:B7:25:B3:FD:1E:82:02:70:6E:D9:B3:73:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525036033/0/EB5B083F9FC6ABB725B3FD1E8202706ED9B37359.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:84:90:f9:bd:bd:f7:fe:ec:60:e6:e7:15:68:dc:3a:1d:84:
86:7d:7a:1e:91:e0:2e:23:0b:4e:91:fb:d5:60:e8:12:d9:67:
7b:78:72:6a:91:ce:3f:1d:63:a0:1d:c8:db:8a:a6:c0:f7:30:
26:60:b2:58:b4:38:69:73:85:d8:e5:b1:91:1a:74:cb:1d:eb:
f4:43:73:73:db:a3:5f:02:87:d7:87:06:11:05:9b:d8:b1:46:
a9:ec:d9:07:6e:ed:9d:5a:c0:df:4c:d2:20:c1:89:73:66:b8:
16:3e:36:30:b8:71:a2:99:86:51:1d:1e:0e:ab:45:ef:52:ea:
42:93:54:10:46:bd:0c:0e:81:2e:14:7c:b8:8b:02:5f:ea:0f:
7e:3d:a0:8b:d9:bd:74:02:c0:3a:ef:1f:aa:83:70:b7:17:98:
47:78:66:11:c3:d9:40:69:86:1f:57:ee:b5:19:a7:c3:ca:c5:
a7:92:2f:df:e7:c6:3d:16:89:18:6e:03:43:ab:d8:15:63:00:
4e:fa:ca:00:85:ea:ca:8a:11:79:bc:d6:ea:d9:d2:a6:db:34:
70:b6:d1:96:8f:d4:7e:d2:dd:41:0f:93:95:42:17:b4:de:d7:
54:1c:9e:5c:f7:5c:03:94:7d:5b:1c:f3:96:e5:d0:1a:fa:6b:
0d:7a:7b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:15:33 2026 by rpki-client