
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
File: EB221959BAB62CA0F2C1844E764159F081AE413B.mft (raw, json)
Hash identifier: xGHolQOZzaasffrOMIwhbPlYq1DYW8qct7VnR1R9JUk=
Subject key identifier: A3:B6:FF:6E:BC:46:70:53:81:A8:04:AB:AE:B9:F5:A2:20:DC:B4:62
Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
Certificate issuer: /CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Certificate serial: DD82EAB4BA2EA849DC571BEC2787A3CE79679E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
Manifest number: D1
Signing time: Fri 09 Oct 2026 17:28:38 +0000
Manifest this update: Fri 09 Oct 2026 17:23:38 +0000
Manifest next update: Tue 13 Oct 2026 04:09:38 +0000
Files and hashes: 1: 3130332e3231362e3234382e302f32322d3232203d3e2030.roa (hash: gSl2ZouhSu3TZUcpNStUpMOCuX4EXWUXGnNDBeo4IEk=)
2: 3130332e38352e3138362e302f32332d3233203d3e2030.roa (hash: hbLJedcagKHXUcAguzbn4GEebd+SVTq2Cx2L9PEByro=)
3: 3130332e3231362e3234342e302f32322d3232203d3e2030.roa (hash: pbIJ5jx/pf8/NAcf/hXOdBb+q7VleSIVTqtoc77iUsM=)
4: 323430303a646565303a3a2f33322d3332203d3e2030.roa (hash: EdjUimtwDmmEb/7qnPllHoQilNinJIy02221yPSiAD4=)
5: 34352e3234382e3130302e302f32322d3232203d3e2030.roa (hash: evePIHhobdrqna9eeXg6NPN2qqunrVRaep6ZbuP+aTQ=)
6: 34352e3234382e3130342e302f32322d3232203d3e2030.roa (hash: Olt5MVy17egj99Gius/16ZJ0CP/XuP53qLG1H4AiBCE=)
7: EB221959BAB62CA0F2C1844E764159F081AE413B.crl (hash: oKtcXgN1mu1PnrA7L/eswMnjClzw4vTpQyGl/BfWTjc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 04:09:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
dd:82:ea:b4:ba:2e:a8:49:dc:57:1b:ec:27:87:a3:ce:79:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Validity
Not Before: Oct 9 17:23:38 2026 GMT
Not After : Oct 13 04:09:38 2026 GMT
Subject: CN=A3B6FF6EBC46705381A804ABAEB9F5A220DCB462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:7a:6a:16:79:a3:2e:6b:f2:8f:af:bf:7d:
69:85:aa:c8:f2:83:4f:f5:a0:b8:8b:3f:6e:85:6f:
45:25:7e:3e:7b:58:0a:51:85:8f:47:89:a7:c9:cd:
4e:8f:8c:b7:67:da:57:b3:4d:02:d3:7c:4a:1e:5c:
71:f1:53:f3:24:bc:7b:03:21:fa:bd:6f:65:14:12:
a1:43:45:98:a8:12:8c:25:bd:3e:2f:9c:5c:5f:ab:
e2:47:f2:cb:a1:bc:92:e0:40:23:e3:97:cf:83:98:
96:34:b6:8d:18:10:be:eb:2b:37:b3:71:a7:86:21:
8a:7b:8b:45:9a:95:a3:e9:5e:f7:7f:72:5f:a3:9b:
b1:31:98:e1:3e:9f:e1:99:ee:81:de:a1:a1:36:d0:
2c:90:13:5c:40:48:f0:25:9d:0d:7a:73:8a:77:72:
5d:50:7e:94:a3:0b:03:d3:e4:72:f7:26:d0:95:6d:
28:64:ef:ae:f0:a2:97:7a:16:a1:73:71:76:ca:30:
d8:1d:1f:a6:fb:e5:8f:cd:09:5a:6c:b9:c1:9a:3b:
2e:6a:3b:16:c9:88:14:28:bd:d3:2f:f4:a5:81:42:
45:89:7e:e5:a2:d3:eb:4a:54:ac:ae:e1:5a:1a:18:
5b:87:fb:86:68:73:75:c2:e9:40:86:d8:f0:c3:08:
19:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B6:FF:6E:BC:46:70:53:81:A8:04:AB:AE:B9:F5:A2:20:DC:B4:62
X509v3 Authority Key Identifier:
keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:8a:6c:27:7b:40:8a:f4:1a:98:f9:26:de:ca:c4:f5:e8:0a:
74:22:e0:12:46:f5:65:17:08:7d:42:d8:4e:c6:02:75:7b:cb:
6e:8c:bd:89:01:88:6d:91:ff:e4:2b:46:51:c6:a7:c7:84:9b:
c8:2f:1d:88:f7:d0:e7:bb:7d:a8:6e:07:10:26:01:2c:f8:2d:
3c:a4:a3:17:76:03:32:81:94:08:b7:da:ad:7c:66:80:25:93:
cf:ac:ef:1c:30:0e:8d:cb:e3:5c:73:08:4f:65:84:d1:37:44:
92:c7:8e:94:08:bd:35:3f:2a:d4:b9:66:4e:e6:ae:7c:d9:de:
5a:b2:55:62:dd:76:27:8f:8f:6d:7e:1a:cf:5e:7a:93:5f:9b:
f8:81:b5:fc:73:d2:a9:ab:4e:b1:23:7b:2c:e8:73:57:ae:21:
13:2e:8f:4b:4f:ab:1b:21:b3:40:89:23:6c:40:af:98:ca:12:
47:95:57:57:12:52:6e:37:f1:57:8c:e4:40:70:d3:6b:fd:12:
f8:0c:ac:b1:0e:33:35:03:44:ff:32:f0:b9:4a:37:61:09:9e:
6c:e4:96:fc:a6:c7:8a:c8:62:ca:6e:39:0e:9a:ae:8d:77:63:
dc:e3:3e:6b:ee:5e:ab:29:e0:dd:9b:6f:1a:06:de:e0:3e:a2:
eb:e7:10:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:07:04 2026 by rpki-client