
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
File: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json)
Hash identifier: T/mokDafPCwtHlDzyi5/aMdBI2jV5QouqmnbD2LVHMs=
Subject key identifier: 93:C2:0F:00:6B:7B:44:FA:F5:58:76:DE:48:70:C2:F9:D1:E5:3A:15
Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Certificate serial: 1F4315F9084C622E93A14B48B250E2E750D94125
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
Manifest number: 0139
Signing time: Thu 08 Oct 2026 19:12:41 +0000
Manifest this update: Thu 08 Oct 2026 19:07:41 +0000
Manifest next update: Mon 12 Oct 2026 00:41:41 +0000
Files and hashes: 1: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=)
2: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=)
3: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: 6B9p570sHfw74tper15k7DCdjHUtG77gtIiGwrDo9J8=)
4: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=)
5: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=)
6: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=)
7: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=)
8: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 00:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:43:15:f9:08:4c:62:2e:93:a1:4b:48:b2:50:e2:e7:50:d9:41:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Validity
Not Before: Oct 8 19:07:41 2026 GMT
Not After : Oct 12 00:41:41 2026 GMT
Subject: CN=93C20F006B7B44FAF55876DE4870C2F9D1E53A15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:60:b9:41:fe:a9:a7:9c:3c:77:a4:cf:d5:
e3:74:80:ba:ff:01:b9:9e:de:60:5a:d5:38:bc:38:
2a:fd:be:ee:2c:5d:57:59:9b:8e:a0:29:0f:b3:54:
db:87:0d:ae:09:d0:5a:f8:ef:58:6d:da:2d:e8:41:
29:3a:01:8d:46:5a:a7:61:68:26:84:26:e8:fe:0d:
35:a2:df:07:88:65:8d:5f:0b:03:6b:a6:7b:64:5e:
48:01:7f:5a:ce:58:d3:a7:82:1c:eb:c1:26:ac:af:
8d:42:1a:ec:99:46:99:96:94:de:80:f7:71:86:5c:
dd:35:63:4f:85:eb:9d:c1:c6:dc:61:93:df:f0:bd:
0e:14:c9:a2:ee:c9:42:2f:80:be:a7:cf:5f:24:e2:
22:47:ee:d6:63:e3:89:8a:a2:f9:01:3f:4b:20:24:
c8:b1:c5:23:5f:37:76:10:6f:12:72:76:a9:5a:bc:
f4:4b:5d:ef:7f:3c:02:a0:3c:05:04:53:fb:8b:79:
8d:21:76:08:dd:2e:78:37:3a:6e:e1:2e:89:41:32:
88:98:ab:0d:71:d4:0a:19:5e:3f:27:0e:6c:5d:bb:
99:3f:3d:b7:98:03:ff:28:d2:9f:c1:b7:83:b7:3a:
41:90:56:8f:25:78:16:89:28:6f:9d:66:06:64:cf:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C2:0F:00:6B:7B:44:FA:F5:58:76:DE:48:70:C2:F9:D1:E5:3A:15
X509v3 Authority Key Identifier:
keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:40:fb:da:af:db:96:cb:aa:6e:84:2d:35:6a:03:18:b4:50:
fa:34:26:15:fd:5d:03:b3:07:16:2b:84:f3:ce:60:bd:70:c3:
09:29:93:85:46:d1:9f:dc:28:86:cb:2e:58:fb:e8:87:ef:89:
4a:95:3d:05:5e:71:1f:04:8d:8e:52:2e:9d:c9:a2:ee:9f:71:
0c:38:d6:da:0b:28:c8:23:4d:07:99:20:43:2e:df:12:b8:58:
0a:77:95:65:f7:95:54:66:da:ca:37:c7:2a:51:db:2c:58:f9:
0c:b5:04:5d:5a:cf:01:b6:37:d3:2f:9f:5e:30:7e:ad:4e:5c:
6b:d7:70:58:3b:6e:c8:ef:23:48:f7:da:76:f6:04:b0:2e:e4:
0d:27:10:14:54:8d:9e:49:43:aa:d5:23:f0:42:91:82:8e:88:
6e:a3:32:99:1f:46:d6:22:09:41:a4:66:fc:af:b6:9f:a9:9b:
08:d9:a1:fb:25:59:3d:14:be:f0:c1:a3:5a:67:3e:49:bd:ac:
48:ad:c4:5a:b6:b8:ff:44:e8:90:77:5b:d9:a4:28:5a:8c:25:
ad:04:25:af:fe:8d:8a:eb:95:95:be:4f:52:55:86:e5:4b:1d:
76:77:65:86:07:a7:19:20:0f:47:b4:8f:d6:a5:b9:ee:69:4a:
61:96:a9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:17:33 2026 by rpki-client