$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft File: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json) Hash identifier: jibTRK754E14G8EYRQu3qqV++yQ4y3eUOyieueIJcpY= Subject key identifier: 14:D4:A1:CC:95:38:BF:BB:D5:BE:14:52:77:28:AC:E1:83:21:6A:FD Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Certificate serial: 383D59FA43339A204B21037A62624A7C55D1937E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 22:34:48 +0000 Manifest this update: Fri 17 Apr 2026 22:29:48 +0000 Manifest next update: Sun 19 Apr 2026 02:02:48 +0000 Files and hashes: 1: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: 0U8D/C2eyyc/qfk6iiRhhDsWj6uFbai6+hosyDLLsfQ=) 2: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=) 3: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=) 4: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=) 5: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=) 6: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=) 7: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=) 8: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3d:59:fa:43:33:9a:20:4b:21:03:7a:62:62:4a:7c:55:d1:93:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Validity Not Before: Apr 17 22:29:48 2026 GMT Not After : Apr 19 02:02:48 2026 GMT Subject: CN=14D4A1CC9538BFBBD5BE14527728ACE183216AFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:b8:4e:f3:a3:9f:98:fe:23:de:53:5c:31: df:a8:67:a7:82:3d:0e:95:99:94:60:d3:86:0b:3b: 9f:f3:fe:3d:85:42:fb:22:f3:5d:05:d8:3a:66:25: 0e:25:21:29:40:7a:0b:1d:5a:0f:cc:25:ef:86:3f: 54:02:f8:82:e4:0a:36:1e:d4:0a:e0:7f:ab:83:1f: 17:0f:bb:59:82:ba:e1:7e:c4:0d:7d:44:42:fb:cc: 49:56:30:e8:c8:53:5e:f0:a4:11:4d:ed:3a:b5:20: 5a:16:2d:3b:f2:4f:d4:82:8a:b4:b3:1e:39:3e:8f: 68:06:70:63:cc:60:b8:08:ad:57:7a:dd:80:4e:d3: 9b:15:f3:05:7f:16:84:55:51:30:8a:66:3f:19:b8: f9:df:b9:ed:8d:f8:f4:60:23:90:2f:cf:47:0e:48: f7:3c:3a:97:72:e2:dd:ab:ba:73:22:ad:8c:52:f6: ed:e5:55:c5:79:a2:25:15:66:5f:91:76:5e:29:de: ff:ac:58:1e:b9:bc:ea:db:56:4b:62:e2:37:99:58: d0:4b:00:6b:bf:50:66:72:93:38:ef:ce:3c:aa:c8: db:75:b8:b1:40:c6:93:8f:f8:ee:f9:54:30:06:90: dc:f1:da:46:51:5f:7e:5c:5b:b6:67:7d:27:5f:c7: d5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D4:A1:CC:95:38:BF:BB:D5:BE:14:52:77:28:AC:E1:83:21:6A:FD X509v3 Authority Key Identifier: keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a3:b3:78:77:86:7c:70:e7:ff:9c:a1:58:93:ff:2d:06:3c: 3b:26:64:c7:04:fe:4b:89:22:75:85:1e:8f:0b:51:c7:d9:2d: 89:1e:67:0c:89:8c:d7:9a:a2:cb:85:ed:19:cc:35:ef:78:86: 19:08:1d:2c:23:ed:02:60:3c:1d:68:7d:c2:89:e1:00:0b:66: a0:b6:c8:ac:a5:2f:ad:b1:1a:c0:a5:40:82:f0:18:fe:84:94: 23:ed:96:d8:0a:5f:d4:c1:39:19:df:4e:f2:73:65:b2:d7:b7: 97:d5:34:c0:a0:f7:30:ca:c0:40:e8:2d:ea:83:1f:7f:67:4f: 33:25:f6:69:bd:95:88:63:5a:6a:cf:db:84:83:52:b6:05:c3: 44:fd:32:d1:6d:88:bc:ee:80:f6:fb:37:fd:64:c1:c0:94:c4: 6f:7c:78:4c:90:53:52:ec:8d:1a:32:5b:ca:d4:7c:ee:5f:0d: 4f:83:60:85:a8:98:23:8f:81:56:6d:96:d5:e0:7a:6a:c8:92: 47:dd:6f:b7:38:db:66:c6:ca:e1:3a:85:c6:36:b5:ac:b6:b4: ee:95:a4:28:22:68:48:62:a3:d6:89:42:7b:7e:57:5b:4f:32: 94:c6:3c:3b:aa:7f:6d:7c:f1:57:f2:19:85:a6:73:56:75:78: fd:b2:7c:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOD1Z+kMzmiBLIQN6YmJKfFXRk34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0Yw QzQ4MUNBNTAeFw0yNjA0MTcyMjI5NDhaFw0yNjA0MTkwMjAyNDhaMDMxMTAvBgNV BAMTKDE0RDRBMUNDOTUzOEJGQkJENUJFMTQ1Mjc3MjhBQ0UxODMyMTZBRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+LhO86OfmP4j3lNcMd+oZ6eC PQ6VmZRg04YLO5/z/j2FQvsi810F2DpmJQ4lISlAegsdWg/MJe+GP1QC+ILkCjYe 1Argf6uDHxcPu1mCuuF+xA19REL7zElWMOjIU17wpBFN7Tq1IFoWLTvyT9SCirSz Hjk+j2gGcGPMYLgIrVd63YBO05sV8wV/FoRVUTCKZj8ZuPnfue2N+PRgI5Avz0cO SPc8Opdy4t2runMirYxS9u3lVcV5oiUVZl+Rdl4p3v+sWB65vOrbVkti4jeZWNBL AGu/UGZykzjvzjyqyNt1uLFAxpOP+O75VDAGkNzx2kZRX35cW7ZnfSdfx9XjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFNShzJU4v7vVvhRSdyis4YMhav0wHwYDVR0j BBgwFoAU66rT3yM2lqBh7C9W6MT5zwxIHKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODIyMjQ2Ni8wL0VCQUFEM0RGMjMzNjk2QTA2MUVDMkY1NkU4QzRG OUNGMEM0ODFDQTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0YwQzQ4MUNBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyMjI0NjYvMC9FQkFBRDNERjIzMzY5 NkEwNjFFQzJGNTZFOEM0RjlDRjBDNDgxQ0E1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaOzeHeGfHDn /5yhWJP/LQY8OyZkxwT+S4kidYUejwtRx9ktiR5nDImM15qiy4XtGcw173iGGQgd LCPtAmA8HWh9wonhAAtmoLbIrKUvrbEawKVAgvAY/oSUI+2W2Apf1ME5Gd9O8nNl ste3l9U0wKD3MMrAQOgt6oMff2dPMyX2ab2ViGNaas/bhINStgXDRP0y0W2IvO6A 9vs3/WTBwJTEb3x4TJBTUuyNGjJbytR87l8NT4NghaiYI4+BVm2W1eB6asiSR91v tzjbZsbK4TqFxja1rLa07pWkKCJoSGKj1olCe35XW08ylMY8O6p/bXzxV/IZhaZz VnV4/bJ8dA== -----END CERTIFICATE-----Generated at Sat Apr 18 01:06:34 2026 by rpki-client