
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
File: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json)
Hash identifier: odzbRDpJxinI2jTY3GWulHL5mooblX5RqOHlEToaDgA=
Subject key identifier: 75:94:80:91:50:8A:D8:48:2D:EA:E0:E5:A8:F9:52:74:75:F3:CF:DC
Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Certificate serial: 49408799B680496268F1CAD718C053BD0ABA433D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
Manifest number: FF
Signing time: Wed 29 Jul 2026 07:03:44 +0000
Manifest this update: Wed 29 Jul 2026 06:58:44 +0000
Manifest next update: Thu 30 Jul 2026 10:30:44 +0000
Files and hashes: 1: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=)
2: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=)
3: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=)
4: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=)
5: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=)
6: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: ttBIQfm5jeJwOPXI0RFaHKqLtjD1iN/SzSDM7po+ECk=)
7: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=)
8: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:40:87:99:b6:80:49:62:68:f1:ca:d7:18:c0:53:bd:0a:ba:43:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5
Validity
Not Before: Jul 29 06:58:44 2026 GMT
Not After : Jul 30 10:30:44 2026 GMT
Subject: CN=75948091508AD8482DEAE0E5A8F9527475F3CFDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:29:ef:97:66:a3:4d:13:26:c0:f5:8a:00:
e6:d6:8a:d9:9b:4a:84:5c:45:f6:5e:bc:11:db:8e:
e1:74:e9:0e:10:11:8a:68:d3:37:cd:6c:18:a5:95:
7b:30:17:db:a9:39:7d:f9:f0:33:0b:a4:a7:9e:91:
b5:bd:b3:ac:b7:13:06:7a:19:2e:83:e9:8c:27:3d:
60:6c:c2:20:6a:1b:b0:89:4d:f0:82:19:8b:80:04:
a2:06:81:21:dc:06:d0:4f:67:c6:ad:a9:b1:94:c6:
d7:cd:8e:af:55:93:07:7e:05:f1:c2:60:38:f2:26:
3c:ff:b0:1e:4b:07:8a:a2:76:e9:a1:94:38:44:82:
93:cb:be:87:ef:fe:70:fa:71:ca:d6:1d:63:68:b9:
15:8f:c0:d0:fb:92:c6:4e:11:a1:22:ad:51:69:db:
7c:cf:96:2a:f2:28:bc:0c:40:05:7b:a2:42:8c:69:
c5:10:d6:77:46:11:b2:55:93:f2:3c:c5:95:c8:b0:
94:b2:0a:b0:17:2b:5e:71:29:41:2d:2d:1b:68:d6:
f8:c0:41:c6:4a:aa:4f:c0:9a:31:ad:11:fd:c5:b8:
6f:c2:de:5a:66:21:c7:43:0e:9f:02:40:f3:94:db:
a8:a9:59:96:11:46:98:8f:72:e5:a4:1a:4f:b7:7a:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:94:80:91:50:8A:D8:48:2D:EA:E0:E5:A8:F9:52:74:75:F3:CF:DC
X509v3 Authority Key Identifier:
keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d9:56:40:6d:7b:42:21:c5:87:ba:61:3c:38:cd:c9:e4:f8:
1a:83:64:3a:93:ee:5d:da:4f:5e:7a:ec:de:59:85:0d:74:cc:
ae:22:e2:52:89:4e:1c:36:7d:e9:c4:98:7e:4c:51:42:f6:f9:
7f:b7:1f:18:ab:62:34:9f:31:34:1b:54:a5:1a:c1:7c:61:9d:
6e:8e:b7:4f:c1:ad:49:14:fd:b3:cc:74:33:22:b8:2b:1b:45:
07:ab:4f:e3:2b:ed:7b:19:07:d6:86:1c:53:ca:2c:21:5f:c4:
f8:cf:75:ae:b2:45:4d:eb:f7:a9:a9:8e:d1:7c:7e:8d:93:8c:
02:de:34:f3:2c:f1:51:82:1f:41:75:1b:b2:06:40:43:32:b5:
60:0a:f9:5c:71:29:58:6e:84:ae:53:37:5e:ab:a3:e9:39:d5:
1f:37:9b:b8:ee:a6:44:f2:a6:5c:a8:4b:4f:83:d7:2d:96:5f:
99:46:34:32:61:88:54:71:38:87:c0:7b:b4:6f:4e:c2:ab:09:
2c:df:5d:50:39:32:84:38:22:2c:37:25:b9:98:22:1d:ad:ad:
31:54:94:3d:d2:d4:66:29:8a:ae:da:34:34:fd:c2:db:25:0c:
eb:d9:97:d7:6d:31:3e:49:b4:0d:f2:66:b4:bc:4e:cf:e9:b3:
13:19:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:50:17 2026 by rpki-client