$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft File: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft (raw, json) Hash identifier: fwA2/LFAd6utjLDaDlbIfWYorpCWXkvKOas4bbvhEaY= Subject key identifier: B3:DA:D7:95:8D:4C:8B:76:1C:BB:82:99:E7:DB:F3:1B:5B:E8:7D:74 Authority key identifier: EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 Certificate issuer: /CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Certificate serial: 1595E74D5680F08EC48418C5D5150A62B5EE3100 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 17:23:16 +0000 Manifest this update: Sun 01 Mar 2026 17:18:16 +0000 Manifest next update: Mon 02 Mar 2026 19:47:16 +0000 Files and hashes: 1: 3130332e35322e38342e302f32322d3234203d3e203337393633.roa (hash: 648f0v+6Syck71WmiSU5QyTAb0qI/aqVHynjS+GgLq0=) 2: 3130332e35322e38302e302f32322d3234203d3e203337393633.roa (hash: wLQnYJBPn2Rj7NbLra0xfQK8gQOH+7TdM82xqwCRvs8=) 3: 3130332e35322e37362e302f32322d3234203d3e203337393633.roa (hash: UgrtRjXubMXVxm5MBuSVLVN+kCIsoNHNec8DCx4Yr6o=) 4: 323430333a323863303a3a2f33322d3438203d3e203337393633.roa (hash: d4YcD6lJJ84+zdCWBlCpYi/S9XDeEhMPNN6+PNTXKj0=) 5: 3130332e34312e3134302e302f32322d3234203d3e203337393633.roa (hash: iSb7zleU41clh4sTk7TUfTD1YHZR09f3RvdncylygYI=) 6: 3130332e35322e37322e302f32322d3234203d3e203337393633.roa (hash: +Qj2W4IGYR8CNvbDkRyke0+T6ciyVc8coyR+cnjj/80=) 7: 3130332e34392e37362e302f32322d3234203d3e203337393633.roa (hash: 2sJESfmIIsv43ggkPty83uuW9c2QdLDf1U/KEjfklC0=) 8: EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl (hash: LIZElCEeQXrc4yJvwOuWr5ryYfaBpLUecetfyp3kcKQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 19:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:95:e7:4d:56:80:f0:8e:c4:84:18:c5:d5:15:0a:62:b5:ee:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5 Validity Not Before: Mar 1 17:18:16 2026 GMT Not After : Mar 2 19:47:16 2026 GMT Subject: CN=B3DAD7958D4C8B761CBB8299E7DBF31B5BE87D74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6c:cc:d7:e8:01:45:67:58:cb:e0:c7:d2:16: 5b:50:b6:c6:62:fe:16:2d:a1:94:b9:85:92:b1:39: 73:3b:b8:42:34:a2:b4:14:ef:83:82:a8:20:23:ce: 6d:13:f1:25:17:8b:1a:c1:f1:ef:d3:c9:9a:a4:9b: c4:b5:d2:e2:a1:b3:68:d4:c5:cc:51:08:7a:09:03: 8d:70:f7:6f:31:33:1b:f7:53:2b:34:f3:93:dc:bb: da:d0:6f:c6:a0:01:1c:5b:32:bf:30:16:99:44:a0: 37:b3:c0:36:29:21:7a:cd:40:7b:e7:f8:f2:f2:03: 1a:7f:a2:c4:97:8c:c0:3e:bb:da:8c:75:14:66:d1: 32:cf:9b:91:b6:c2:db:23:e7:5d:17:87:e2:18:f2: 65:79:d0:92:f6:2b:12:70:77:0f:11:65:61:0c:a0: 3e:8a:c1:ca:a0:a2:af:97:d3:6a:db:23:7a:18:2c: 2d:c7:eb:c8:3d:9e:74:d4:2a:64:57:31:d1:bc:6b: 63:a0:44:cc:76:8c:ba:c7:49:b3:fb:07:dc:91:10: 4f:95:80:2f:b8:b6:70:a8:ae:ff:c2:bf:7d:c4:6a: 04:4f:8f:03:d9:6b:de:78:77:ca:56:47:4e:66:1d: a6:19:f9:8c:ba:6d:0c:2e:9b:c9:ad:08:5d:a8:7f: 31:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DA:D7:95:8D:4C:8B:76:1C:BB:82:99:E7:DB:F3:1B:5B:E8:7D:74 X509v3 Authority Key Identifier: keyid:EB:AA:D3:DF:23:36:96:A0:61:EC:2F:56:E8:C4:F9:CF:0C:48:1C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548222466/0/EBAAD3DF233696A061EC2F56E8C4F9CF0C481CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:06:3e:c7:1a:4d:94:06:aa:4e:86:57:f1:24:2d:60:00:c0: 5c:d3:ee:28:86:9b:82:01:6d:dc:9f:9f:d1:1a:2b:47:e4:63: 67:73:3c:56:37:13:7a:74:17:47:c5:74:d3:1b:bf:e5:73:f1: bf:29:63:bb:28:24:02:35:8f:81:f2:70:af:fc:b0:57:6d:71: 27:1a:51:da:4f:30:f9:a6:4e:30:2a:6b:64:0c:d7:6b:7b:a4: 72:20:6f:a1:6c:51:26:42:6f:2f:67:52:a1:e5:24:99:92:e4: 44:21:85:5e:44:bc:6b:fa:18:06:1c:d9:5c:09:97:32:cf:b7: 91:1c:d6:e4:d2:ee:83:86:af:7e:76:0f:43:ce:af:78:09:5f: b1:e7:d6:ff:c7:cb:6b:ba:65:f9:50:2c:9c:37:48:e7:7c:63: 01:7b:0f:5d:55:f6:2b:3b:61:31:37:09:85:c7:dd:8f:2c:61: f2:86:a5:f6:83:71:f3:f6:9a:cc:c8:bf:35:4e:19:35:dc:d8: d5:7e:92:71:36:b7:fd:6b:72:11:c8:1c:4f:5c:67:07:ae:2b: f8:f2:c1:49:c1:cf:0b:e5:8e:09:a8:72:3e:2b:4c:e4:06:93: 2e:be:1f:5f:7c:4e:ec:48:31:59:2f:88:fc:89:67:eb:63:1c: db:59:b4:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFZXnTVaA8I7EhBjF1RUKYrXuMQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0Yw QzQ4MUNBNTAeFw0yNjAzMDExNzE4MTZaFw0yNjAzMDIxOTQ3MTZaMDMxMTAvBgNV BAMTKEIzREFENzk1OEQ0QzhCNzYxQ0JCODI5OUU3REJGMzFCNUJFODdENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcbMzX6AFFZ1jL4MfSFltQtsZi /hYtoZS5hZKxOXM7uEI0orQU74OCqCAjzm0T8SUXixrB8e/TyZqkm8S10uKhs2jU xcxRCHoJA41w928xMxv3Uys085Pcu9rQb8agARxbMr8wFplEoDezwDYpIXrNQHvn +PLyAxp/osSXjMA+u9qMdRRm0TLPm5G2wtsj510Xh+IY8mV50JL2KxJwdw8RZWEM oD6Kwcqgoq+X02rbI3oYLC3H68g9nnTUKmRXMdG8a2OgRMx2jLrHSbP7B9yREE+V gC+4tnCorv/Cv33EagRPjwPZa954d8pWR05mHaYZ+Yy6bQwum8mtCF2ofzH3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUs9rXlY1Mi3Ycu4KZ59vzG1vofXQwHwYDVR0j BBgwFoAU66rT3yM2lqBh7C9W6MT5zwxIHKUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODIyMjQ2Ni8wL0VCQUFEM0RGMjMzNjk2QTA2MUVDMkY1NkU4QzRG OUNGMEM0ODFDQTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJBQUQzREYyMzM2OTZBMDYxRUMyRjU2RThDNEY5Q0YwQzQ4MUNBNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyMjI0NjYvMC9FQkFBRDNERjIzMzY5 NkEwNjFFQzJGNTZFOEM0RjlDRjBDNDgxQ0E1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQY+xxpNlAaq ToZX8SQtYADAXNPuKIabggFt3J+f0RorR+RjZ3M8VjcTenQXR8V00xu/5XPxvylj uygkAjWPgfJwr/ywV21xJxpR2k8w+aZOMCprZAzXa3ukciBvoWxRJkJvL2dSoeUk mZLkRCGFXkS8a/oYBhzZXAmXMs+3kRzW5NLug4avfnYPQ86veAlfsefW/8fLa7pl +VAsnDdI53xjAXsPXVX2KzthMTcJhcfdjyxh8oal9oNx8/aazMi/NU4ZNdzY1X6S cTa3/WtyEcgcT1xnB64r+PLBScHPC+WOCahyPitM5AaTLr4fX3xO7EgxWS+I/Iln 62Mc21m0XQ== -----END CERTIFICATE-----Generated at Mon Mar 2 06:58:02 2026 by rpki-client