$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft File: EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft (raw, json) Hash identifier: K2I4y3ZzdC8iQv0BOszstTjnfI6PtPpKkbhXpKt8UzM= Subject key identifier: 12:65:60:36:D8:22:25:2C:A1:77:A8:FD:26:4D:59:31:A3:1B:43:DF Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E Certificate issuer: /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E Certificate serial: 76A2FDFD377C05F54CC517A02DBF0E56724C401D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft Manifest number: 25 Signing time: Sat 13 Jun 2026 12:36:49 +0000 Manifest this update: Sat 13 Jun 2026 12:31:49 +0000 Manifest next update: Sun 14 Jun 2026 13:47:49 +0000 Files and hashes: 1: 34352e3131332e3230362e302f32342d3234203d3e2034383038.roa (hash: zcRmo63dclxgiZ3nFyKCKGrLFhXcY5p/S+EzqtAO7J0=) 2: EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl (hash: BEZQZ0eQ7aFinA6WD2I4BxzPlrQlpZySgvh7Ul05m+k=) 3: 323430333a653763303a333a3a2f34382d3438203d3e2034383038.roa (hash: 5Cssj0oD+zq7BYXS/ITi5VE8H5pPSZbUy+Vkm3Mrsh8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 13:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a2:fd:fd:37:7c:05:f5:4c:c5:17:a0:2d:bf:0e:56:72:4c:40:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E Validity Not Before: Jun 13 12:31:49 2026 GMT Not After : Jun 14 13:47:49 2026 GMT Subject: CN=12656036D822252CA177A8FD264D5931A31B43DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:31:98:14:2f:c9:19:3a:47:c4:28:37:4c:6d: 44:b3:76:9e:f5:ee:ac:f4:8e:44:9e:6c:9c:b8:85: a0:16:d8:73:64:0d:73:2c:9a:f9:1f:42:ee:de:fc: 31:7c:d7:7d:16:0d:14:7f:58:c7:5a:41:56:8a:65: 04:3e:11:d2:4a:75:16:09:f9:a7:94:50:f6:f9:e5: 6d:fb:0e:bf:a1:70:c6:81:c3:97:9e:61:8e:11:0f: 25:0a:6f:a3:5e:bb:84:cc:88:d2:5f:96:3e:ef:f7: 07:24:6e:c9:b3:21:cd:84:82:f4:b8:c6:d9:4e:5f: ed:06:e0:4e:03:dd:73:9e:dc:93:cc:96:e7:bc:4b: f6:d6:f6:c1:48:6c:5a:a8:8b:10:5d:32:14:4e:0e: 7d:0a:66:b4:98:d2:8f:77:06:17:8a:8b:54:b9:a5: 72:d9:0a:6c:33:40:ca:1b:9a:f1:81:1c:7f:43:4a: 75:8c:14:b1:91:53:17:b0:0f:75:81:bc:3a:82:74: 72:25:ad:db:e7:28:78:db:7a:a4:17:74:13:d7:19: 2e:63:13:f5:25:59:e1:9f:98:5c:75:40:e9:d8:97: ed:53:8b:46:10:52:3b:57:4a:71:36:1a:04:2b:c1: b0:db:e4:c5:84:3f:af:76:b6:27:db:ab:37:45:76: 01:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:65:60:36:D8:22:25:2C:A1:77:A8:FD:26:4D:59:31:A3:1B:43:DF X509v3 Authority Key Identifier: keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e3:19:d4:a1:f0:61:a2:82:3f:cb:43:6d:e7:d9:93:70:7c: 7b:e4:19:32:15:f6:2b:7d:9d:1a:2f:44:dd:40:35:f2:e5:fc: 02:d5:9f:ec:50:7a:ec:e1:5c:2b:ea:39:56:3b:7b:ce:c4:99: ba:cb:18:f7:18:82:99:35:a6:11:11:67:86:22:75:ae:b3:22: 51:7b:c4:5d:a8:bd:af:b1:53:b7:2f:ff:20:78:35:ab:98:d4: 16:a0:7a:92:44:e6:e0:bc:23:f5:2b:d5:46:07:6d:65:91:e7: a0:ce:9c:14:f3:9a:2e:56:0f:e3:1a:38:ee:8c:74:d8:95:3a: 05:98:c6:2b:1e:ae:02:8d:ec:a2:c5:a1:ec:4b:11:bf:df:03: 36:da:78:c8:d7:3e:c8:92:85:c9:b7:c0:c2:29:e3:49:05:47: 5c:19:7e:ad:c4:01:d7:86:5b:e6:35:6e:06:72:a6:14:27:31: 74:cf:ca:c6:cd:05:63:48:3f:56:45:46:de:51:ac:29:be:e3: ea:7a:b7:a5:2f:06:77:98:ab:15:d0:d3:3b:dd:d6:8a:8e:91: ca:c0:cb:f1:64:78:a6:b7:d3:84:7c:dc:07:ba:d9:bd:29:03: 01:39:36:ad:82:69:fc:bf:08:f8:25:dd:7a:d3:ad:c1:9a:c1: 3c:71:d1:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdqL9/Td8BfVMxRegLb8OVnJMQB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2 MjlEMEYzRTAeFw0yNjA2MTMxMjMxNDlaFw0yNjA2MTQxMzQ3NDlaMDMxMTAvBgNV BAMTKDEyNjU2MDM2RDgyMjI1MkNBMTc3QThGRDI2NEQ1OTMxQTMxQjQzREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZMZgUL8kZOkfEKDdMbUSzdp71 7qz0jkSebJy4haAW2HNkDXMsmvkfQu7e/DF8130WDRR/WMdaQVaKZQQ+EdJKdRYJ +aeUUPb55W37Dr+hcMaBw5eeYY4RDyUKb6Neu4TMiNJflj7v9wckbsmzIc2EgvS4 xtlOX+0G4E4D3XOe3JPMlue8S/bW9sFIbFqoixBdMhRODn0KZrSY0o93BheKi1S5 pXLZCmwzQMobmvGBHH9DSnWMFLGRUxewD3WBvDqCdHIlrdvnKHjbeqQXdBPXGS5j E/UlWeGfmFx1QOnYl+1Ti0YQUjtXSnE2GgQrwbDb5MWEP692tifbqzdFdgHJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEmVgNtgiJSyhd6j9Jk1ZMaMbQ98wHwYDVR0j BBgwFoAU6+i05up8WLLlbjxZn4ahMmKdDz4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY1NjI3MTU1ODQ0MzAyNy8wL0VCRThCNEU2RUE3QzU4QjJFNTZFM0M1OTlGODZB MTMyNjI5RDBGM0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2MjlEMEYzRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2NTYyNzE1NTg0NDMwMjcvMC9FQkU4QjRFNkVBN0M1 OEIyRTU2RTNDNTk5Rjg2QTEzMjYyOUQwRjNFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOMZ1KHwYaKC P8tDbefZk3B8e+QZMhX2K32dGi9E3UA18uX8AtWf7FB67OFcK+o5Vjt7zsSZussY 9xiCmTWmERFnhiJ1rrMiUXvEXai9r7FTty//IHg1q5jUFqB6kkTm4Lwj9SvVRgdt ZZHnoM6cFPOaLlYP4xo47ox02JU6BZjGKx6uAo3sosWh7EsRv98DNtp4yNc+yJKF ybfAwinjSQVHXBl+rcQB14Zb5jVuBnKmFCcxdM/Kxs0FY0g/VkVG3lGsKb7j6nq3 pS8Gd5irFdDTO93Wio6RysDL8WR4prfThHzcB7rZvSkDATk2rYJp/L8I+CXdetOt wZrBPHHRbQ== -----END CERTIFICATE-----Generated at Sun Jun 14 00:25:52 2026 by rpki-client