
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
File: EB221959BAB62CA0F2C1844E764159F081AE413B.mft (raw, json)
Hash identifier: SI/kT3H1jiTxnnbGOCM1A162T0xm8nabBJFF3PKW2Rk=
Subject key identifier: 58:96:12:73:59:C4:64:27:5F:00:31:73:11:04:EE:90:64:61:79:1E
Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
Certificate issuer: /CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Certificate serial: 4D91EFCDCA18088A55B8F702061CF5880ED33FB7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
Manifest number: 58
Signing time: Sat 13 Jun 2026 08:56:37 +0000
Manifest this update: Sat 13 Jun 2026 08:51:37 +0000
Manifest next update: Sun 14 Jun 2026 10:11:37 +0000
Files and hashes: 1: 323430303a646565303a3a2f33322d3332203d3e2030.roa (hash: EdjUimtwDmmEb/7qnPllHoQilNinJIy02221yPSiAD4=)
2: 3130332e3231362e3234382e302f32322d3232203d3e2030.roa (hash: gSl2ZouhSu3TZUcpNStUpMOCuX4EXWUXGnNDBeo4IEk=)
3: EB221959BAB62CA0F2C1844E764159F081AE413B.crl (hash: O+9XFRxolEzceM5ayHJezkIdCgxLczF11xlOIMi/SO0=)
4: 34352e3234382e3130302e302f32322d3232203d3e2030.roa (hash: evePIHhobdrqna9eeXg6NPN2qqunrVRaep6ZbuP+aTQ=)
5: 3130332e3231362e3234342e302f32322d3232203d3e2030.roa (hash: pbIJ5jx/pf8/NAcf/hXOdBb+q7VleSIVTqtoc77iUsM=)
6: 34352e3234382e3130342e302f32322d3232203d3e2030.roa (hash: Olt5MVy17egj99Gius/16ZJ0CP/XuP53qLG1H4AiBCE=)
7: 3130332e38352e3138362e302f32332d3233203d3e2030.roa (hash: hbLJedcagKHXUcAguzbn4GEebd+SVTq2Cx2L9PEByro=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 10:11:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:91:ef:cd:ca:18:08:8a:55:b8:f7:02:06:1c:f5:88:0e:d3:3f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Validity
Not Before: Jun 13 08:51:37 2026 GMT
Not After : Jun 14 10:11:37 2026 GMT
Subject: CN=5896127359C464275F0031731104EE906461791E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:ea:1a:5d:32:68:fe:48:2d:d9:16:f6:1f:
19:70:13:a7:bd:bf:27:16:21:1d:86:97:fa:8c:c3:
05:9f:5b:8a:47:7c:a0:32:75:a7:ef:92:9a:08:ea:
9b:ca:46:c1:27:a5:b6:7b:3b:39:36:7c:e1:84:63:
98:4e:17:8b:fd:3d:a7:f9:2d:c0:8f:4c:93:c4:d7:
2a:c0:d2:d3:b4:ac:28:ab:28:4c:6d:fa:30:63:91:
5a:37:45:a9:29:7c:cc:89:37:de:e1:d1:5d:1b:40:
cf:19:c2:5f:ae:de:1b:f4:7b:b3:ea:58:89:c8:d5:
b2:c3:a3:95:22:8c:7c:07:63:00:92:88:d4:b0:9d:
91:e8:4e:68:33:00:92:40:99:4c:f3:d8:57:e7:24:
7f:8b:b4:fd:7f:1e:db:d0:6d:b4:7a:2d:38:c4:69:
95:2b:06:01:f8:ce:90:d0:64:b5:68:11:41:60:37:
94:ae:f9:84:2b:f8:d7:53:3b:6e:0e:cf:c8:59:59:
89:86:86:ac:33:92:4b:28:3a:17:ce:ee:d1:87:8d:
28:e8:6e:67:f3:bc:8f:5b:00:0f:bf:45:ad:40:18:
4b:8a:10:04:9d:41:4d:19:fe:a5:85:bc:97:96:f6:
24:da:2f:ca:a3:92:9e:af:8c:b3:59:f2:95:b1:d7:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:96:12:73:59:C4:64:27:5F:00:31:73:11:04:EE:90:64:61:79:1E
X509v3 Authority Key Identifier:
keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:cf:a9:2a:99:4b:d5:ba:07:d7:97:39:1c:34:32:ed:2f:2d:
00:41:07:a2:d2:d2:28:8a:e3:fd:6b:d3:a4:0c:26:30:73:04:
69:f8:d7:eb:2c:c2:7b:e4:cb:a1:13:89:6f:4f:c1:2e:7e:0f:
19:4c:6f:37:aa:54:4f:93:c4:50:30:01:58:46:00:37:39:62:
78:cc:90:b1:d8:23:8e:73:49:29:30:a6:c5:fe:c9:bb:42:d7:
d6:2c:6b:cf:4c:63:02:77:4d:aa:c0:a3:08:8a:e3:45:82:46:
4f:0b:4b:de:48:a3:82:5b:c8:20:66:59:74:e4:52:97:77:06:
cf:c8:87:d2:e1:4e:25:0c:c5:37:ce:93:de:d6:9a:f9:cb:a5:
a6:ad:28:b7:83:1a:73:3b:04:75:fb:32:0e:4f:e9:96:ee:00:
68:71:de:14:88:e4:53:2d:8e:dd:7c:53:f6:89:1c:dd:25:70:
fa:be:92:f3:e9:16:32:03:71:6f:38:42:5c:4d:f3:fa:93:16:
c9:24:fa:8e:40:18:36:46:41:f0:04:84:20:da:51:12:a5:01:
22:66:cb:bc:c7:dc:1e:7c:a8:f1:1e:a2:75:0f:2b:5e:57:e1:
5c:21:83:e5:24:f9:50:0e:39:7f:cf:d0:51:04:2b:51:71:a6:
a8:c4:f3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:51:56 2026 by rpki-client