$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft File: EB221959BAB62CA0F2C1844E764159F081AE413B.mft (raw, json) Hash identifier: k9M40tYBFXceq10MrgxkVKl4hDyJgBrcLYKL8JaSN8E= Subject key identifier: B9:47:81:AE:91:69:07:29:C8:92:24:7E:5A:F0:DD:D3:C6:08:CB:E3 Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B Certificate issuer: /CN=EB221959BAB62CA0F2C1844E764159F081AE413B Certificate serial: 647918E09E119F267AED1AA4305FEA4ABB2D9847 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft Manifest number: 0B Signing time: Thu 16 Apr 2026 11:14:32 +0000 Manifest this update: Thu 16 Apr 2026 11:09:32 +0000 Manifest next update: Fri 17 Apr 2026 13:35:32 +0000 Files and hashes: 1: 3130332e38352e3138362e302f32332d3233203d3e2030.roa (hash: hbLJedcagKHXUcAguzbn4GEebd+SVTq2Cx2L9PEByro=) 2: 34352e3234382e3130302e302f32322d3232203d3e2030.roa (hash: evePIHhobdrqna9eeXg6NPN2qqunrVRaep6ZbuP+aTQ=) 3: 323430303a646565303a3a2f33322d3332203d3e2030.roa (hash: EdjUimtwDmmEb/7qnPllHoQilNinJIy02221yPSiAD4=) 4: 34352e3234382e3130342e302f32322d3232203d3e2030.roa (hash: Olt5MVy17egj99Gius/16ZJ0CP/XuP53qLG1H4AiBCE=) 5: 3130332e3231362e3234382e302f32322d3232203d3e2030.roa (hash: gSl2ZouhSu3TZUcpNStUpMOCuX4EXWUXGnNDBeo4IEk=) 6: 3130332e3231362e3234342e302f32322d3232203d3e2030.roa (hash: pbIJ5jx/pf8/NAcf/hXOdBb+q7VleSIVTqtoc77iUsM=) 7: EB221959BAB62CA0F2C1844E764159F081AE413B.crl (hash: ta8GoQzctd4u0GKHWjeOtOrT4qr/JBe/vvOSXpPJKQw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 13:35:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:79:18:e0:9e:11:9f:26:7a:ed:1a:a4:30:5f:ea:4a:bb:2d:98:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B Validity Not Before: Apr 16 11:09:32 2026 GMT Not After : Apr 17 13:35:32 2026 GMT Subject: CN=B94781AE91690729C892247E5AF0DDD3C608CBE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2a:f1:eb:d1:a9:5c:7e:ec:d1:2d:1d:5e:f9: 13:cb:e3:ac:86:02:37:65:90:23:71:d7:80:99:9f: 28:da:74:d8:6b:99:06:f0:a3:9f:3f:a1:c9:48:3c: c3:47:97:05:db:ce:38:b5:9b:9a:b8:b9:55:a3:f1: b2:3f:bd:d5:f2:ed:46:a2:b7:26:77:c8:5d:5a:75: c2:9a:04:89:cc:ba:4e:e6:3f:36:56:44:f4:e9:3c: a9:67:98:76:8f:57:5d:e8:94:b1:96:6b:dc:33:0e: 18:b9:42:d2:b4:9f:d9:fe:03:ba:22:20:b1:97:95: 78:a3:af:e3:fd:d2:e9:c2:5e:69:f9:b7:34:c2:71: f6:52:96:23:24:0f:1e:42:96:0e:b1:7a:c4:68:11: 16:cd:47:2b:6b:0a:6b:79:fe:d8:3f:2a:13:e4:43: b1:9a:5b:d3:88:eb:5e:c7:95:4a:fa:a1:a5:9c:70: 49:d7:10:59:d5:26:be:b0:01:5e:72:35:f3:23:1f: 03:e0:77:0f:34:29:2e:0a:3f:7c:24:a6:b1:e3:e2: ce:c2:91:78:67:62:a0:ad:d7:ca:d9:6a:62:ea:3e: 88:5d:21:9f:db:3e:c2:52:fd:b0:f6:44:3f:db:d9: 30:bf:7f:01:f9:d7:d4:69:92:af:7a:7e:b0:17:04: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:47:81:AE:91:69:07:29:C8:92:24:7E:5A:F0:DD:D3:C6:08:CB:E3 X509v3 Authority Key Identifier: keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4f:26:d7:18:67:ff:4d:6d:f1:c1:6d:7b:ad:3c:0e:95:20: c1:22:ba:69:83:48:b7:10:56:1e:91:94:6a:4b:84:0d:79:3d: 69:18:6f:0d:fb:3a:8c:1f:e6:c5:d3:06:4b:72:80:01:b6:e8: 62:8e:81:7c:5a:a4:61:da:82:f6:06:3d:72:7f:c8:e7:e1:8f: cd:39:00:14:38:1e:e1:c5:ba:2b:4c:5d:a1:5b:1f:9e:25:5b: 13:72:b2:b9:f0:c5:b2:69:d9:d7:9f:3e:9b:c1:f8:e7:31:35: d7:6f:e2:3d:13:40:a5:24:98:3f:26:48:5a:0b:68:00:32:3f: 5b:6d:e1:21:9c:3a:a9:b0:8d:d6:e0:f3:4c:20:8b:04:ea:b3: 8c:09:21:4f:be:af:52:b7:9e:c6:41:89:20:cc:ed:03:2e:3d: a9:1f:f2:45:7a:57:d3:1e:21:41:9c:6b:27:1d:45:e8:5b:e8: 5d:9f:b1:db:2b:b4:4f:1c:09:5c:9a:f6:c4:36:ea:20:a1:9f: 5b:c7:ca:eb:5f:cc:a9:62:3a:fa:9c:4c:8e:83:ac:a1:c1:7d: b1:2f:8f:10:ea:dc:8d:36:f7:92:c1:bd:51:a0:6d:44:e6:0e: ab:fd:e0:78:ad:67:64:6f:af:43:73:86:45:2a:93:1d:8d:60: 71:31:0d:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZHkY4J4RnyZ67RqkMF/qSrstmEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4 MUFFNDEzQjAeFw0yNjA0MTYxMTA5MzJaFw0yNjA0MTcxMzM1MzJaMDMxMTAvBgNV BAMTKEI5NDc4MUFFOTE2OTA3MjlDODkyMjQ3RTVBRjBEREQzQzYwOENCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChKvHr0alcfuzRLR1e+RPL46yG AjdlkCNx14CZnyjadNhrmQbwo58/oclIPMNHlwXbzji1m5q4uVWj8bI/vdXy7Uai tyZ3yF1adcKaBInMuk7mPzZWRPTpPKlnmHaPV13olLGWa9wzDhi5QtK0n9n+A7oi ILGXlXijr+P90unCXmn5tzTCcfZSliMkDx5Clg6xesRoERbNRytrCmt5/tg/KhPk Q7GaW9OI617HlUr6oaWccEnXEFnVJr6wAV5yNfMjHwPgdw80KS4KP3wkprHj4s7C kXhnYqCt18rZamLqPohdIZ/bPsJS/bD2RD/b2TC/fwH519Rpkq96frAXBE6VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuUeBrpFpBynIkiR+WvDd08YIy+MwHwYDVR0j BBgwFoAU6yIZWbq2LKDywYROdkFZ8IGuQTswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMzYzOTI4ODcwOTEyMi8wL0VCMjIxOTU5QkFCNjJDQTBGMkMxODQ0RTc2NDE1 OUYwODFBRTQxM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUIyMjE5NTlCQUI2MkNBMEYyQzE4NDRFNzY0MTU5RjA4MUFFNDEzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjM2MzkyODg3MDkxMjIvMC9FQjIyMTk1OUJBQjYy Q0EwRjJDMTg0NEU3NjQxNTlGMDgxQUU0MTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjU8m1xhn/01t 8cFte608DpUgwSK6aYNItxBWHpGUakuEDXk9aRhvDfs6jB/mxdMGS3KAAbboYo6B fFqkYdqC9gY9cn/I5+GPzTkAFDge4cW6K0xdoVsfniVbE3KyufDFsmnZ158+m8H4 5zE112/iPRNApSSYPyZIWgtoADI/W23hIZw6qbCN1uDzTCCLBOqzjAkhT76vUree xkGJIMztAy49qR/yRXpX0x4hQZxrJx1F6FvoXZ+x2yu0TxwJXJr2xDbqIKGfW8fK 61/MqWI6+pxMjoOsocF9sS+PEOrcjTb3ksG9UaBtROYOq/3geK1nZG+vQ3OGRSqT HY1gcTENKA== -----END CERTIFICATE-----Generated at Thu Apr 16 23:53:02 2026 by rpki-client