
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
File: EB221959BAB62CA0F2C1844E764159F081AE413B.mft (raw, json)
Hash identifier: /a8GnBagAOEa8+DicLMmh5y2m7gz4mDU6jPLhLhB/9E=
Subject key identifier: 6E:03:BB:BB:3C:95:3C:88:C0:CB:8B:51:C0:3F:C6:20:96:3E:27:15
Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
Certificate issuer: /CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Certificate serial: 7CA9DB6233E82F8083ACE992191C88F78EE866E1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
Manifest number: 96
Signing time: Wed 29 Jul 2026 18:34:56 +0000
Manifest this update: Wed 29 Jul 2026 18:29:56 +0000
Manifest next update: Thu 30 Jul 2026 20:47:56 +0000
Files and hashes: 1: 3130332e3231362e3234342e302f32322d3232203d3e2030.roa (hash: pbIJ5jx/pf8/NAcf/hXOdBb+q7VleSIVTqtoc77iUsM=)
2: 34352e3234382e3130342e302f32322d3232203d3e2030.roa (hash: Olt5MVy17egj99Gius/16ZJ0CP/XuP53qLG1H4AiBCE=)
3: 323430303a646565303a3a2f33322d3332203d3e2030.roa (hash: EdjUimtwDmmEb/7qnPllHoQilNinJIy02221yPSiAD4=)
4: EB221959BAB62CA0F2C1844E764159F081AE413B.crl (hash: m3rpLRU6L11H0J/Mc5ynbp7sJeS9pB4g1g0iFb7U3N0=)
5: 3130332e3231362e3234382e302f32322d3232203d3e2030.roa (hash: gSl2ZouhSu3TZUcpNStUpMOCuX4EXWUXGnNDBeo4IEk=)
6: 3130332e38352e3138362e302f32332d3233203d3e2030.roa (hash: hbLJedcagKHXUcAguzbn4GEebd+SVTq2Cx2L9PEByro=)
7: 34352e3234382e3130302e302f32322d3232203d3e2030.roa (hash: evePIHhobdrqna9eeXg6NPN2qqunrVRaep6ZbuP+aTQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 20:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a9:db:62:33:e8:2f:80:83:ac:e9:92:19:1c:88:f7:8e:e8:66:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Validity
Not Before: Jul 29 18:29:56 2026 GMT
Not After : Jul 30 20:47:56 2026 GMT
Subject: CN=6E03BBBB3C953C88C0CB8B51C03FC620963E2715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6a:30:bf:44:0e:bd:a1:d8:a8:fd:32:38:bb:
02:5e:32:af:64:72:cf:cd:f7:ad:af:37:eb:f5:2d:
b9:74:12:a5:ee:89:f4:74:96:d0:09:f5:9b:fc:cf:
bd:13:e3:c5:8f:15:c5:d7:f3:8f:4a:36:34:5a:b6:
4f:c2:6b:d4:20:0a:42:8e:f3:1a:2c:10:58:ca:55:
ca:ad:9e:5e:67:b4:c4:8b:39:04:12:b5:b0:77:08:
b5:a8:ec:13:4f:0d:e7:20:38:41:d7:d5:a4:94:f1:
cc:32:00:14:36:46:13:aa:79:79:5c:6e:eb:48:f8:
0e:76:a3:e3:d1:8a:23:9a:30:fa:5c:03:9d:3b:64:
db:5e:36:44:66:17:3a:cb:0a:78:c8:4f:a7:33:7e:
56:2b:b7:93:3f:ee:2f:8d:df:00:67:f7:d7:55:08:
ab:88:fc:52:85:9e:83:df:b8:ac:ce:03:98:c4:f2:
0a:87:4f:70:ff:6e:8f:09:49:79:a5:7d:a1:cf:a8:
5e:a5:0a:ac:17:b9:92:65:8a:e2:83:c5:29:9b:41:
b5:9d:86:f0:2b:50:87:ec:bd:08:62:b0:37:5d:80:
b5:33:bd:04:ed:6e:67:b4:23:fc:e6:48:1c:88:c6:
98:54:67:01:01:dd:2b:4c:6d:6d:6d:8a:5b:63:1b:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:03:BB:BB:3C:95:3C:88:C0:CB:8B:51:C0:3F:C6:20:96:3E:27:15
X509v3 Authority Key Identifier:
keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:11:db:2c:d9:ae:85:55:9a:90:59:6c:f4:e4:ab:2c:8b:b5:
d6:c0:c5:c9:67:c4:c2:1a:25:f6:e2:02:8c:75:7f:25:bb:99:
c1:1e:65:b2:9c:90:3f:b4:08:0e:fc:c3:b1:2f:d5:7e:2d:2e:
99:14:c1:b6:06:e4:cc:90:35:2e:b8:98:f2:7a:52:99:3d:9a:
d5:e0:08:21:9f:2c:fa:6d:a7:34:21:f7:09:d2:a0:10:16:c2:
3f:11:09:c8:c6:ea:28:40:a5:1f:e9:6b:2a:f2:e2:b2:1e:4d:
48:4a:29:a2:c1:3c:f3:89:d1:86:53:ab:17:28:a7:d4:ad:03:
50:80:67:f1:f3:07:72:b3:b2:1e:c5:74:08:e2:fd:e4:9f:d0:
83:71:8a:93:e0:3e:c5:0e:99:1d:bf:02:b0:05:83:be:80:7d:
a8:88:dc:f3:0b:d5:b7:2a:de:a7:1f:f2:c6:f5:c3:38:95:4b:
19:d3:0e:17:97:f2:39:0c:a9:21:36:29:f6:be:0d:9c:00:88:
87:43:51:39:b1:56:3d:58:4d:36:65:a0:7b:a2:19:b0:6f:b6:
1c:07:74:c6:01:c0:c0:a7:8b:50:11:41:3e:ef:ab:4b:db:13:
cf:d9:7c:b1:cb:5f:06:21:91:ec:d1:6d:02:de:bd:4d:d5:f7:
5e:ce:ff:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:03:07 2026 by rpki-client