$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft File: AE487B72C4F38EA548F6721BB60B773705BD9515.mft (raw, json) Hash identifier: gU8w6TQdiA+BgSX99TWdhu6jJKrKhuzPkgEP3AOFTiM= Subject key identifier: 13:C6:C3:88:B7:72:68:EA:D4:38:40:14:38:E6:78:25:C0:21:1F:68 Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 1375CE0589FEFC0456EC7A624EFDAA81726BF28D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 01:48:16 +0000 Manifest this update: Mon 02 Mar 2026 01:43:16 +0000 Manifest next update: Tue 03 Mar 2026 04:04:16 +0000 Files and hashes: 1: AE487B72C4F38EA548F6721BB60B773705BD9515.crl (hash: M3VvTIPrIjJUujrz1aWMU3FyhrmbSHNGv6sSLhfzFfg=) 2: 323430333a383038303a3130313a3a2f34382d3438203d3e2034383437.roa (hash: kyxkLgkSkLdtiphgwfgYitM4gd3kF0CU9WboqJpH+Kg=) 3: 323430333a383038303a3a2f33322d3634203d3e203137393634.roa (hash: piQDqbo6ovz4X+QtGKO2nAVFYTFJJbefb5lvlP5mnSU=) 4: 323430333a383838303a3a2f33322d3634203d3e203137393634.roa (hash: +pvZ0/1DLgneMPaWbyvqBXYh1zOEumfoQPnHJUD/aYo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:75:ce:05:89:fe:fc:04:56:ec:7a:62:4e:fd:aa:81:72:6b:f2:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Mar 2 01:43:16 2026 GMT Not After : Mar 3 04:04:16 2026 GMT Subject: CN=13C6C388B77268EAD438401438E67825C0211F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a4:cf:42:29:14:28:85:2d:ad:cc:68:56:66: 4d:14:6f:4b:49:64:ac:54:ee:c0:02:7e:d9:b7:23: 84:07:19:3e:9f:86:76:b1:3e:20:3f:27:0d:0b:2b: 9b:c1:b2:0c:24:40:eb:7d:8c:6f:c4:a0:f4:3f:bc: 97:ff:df:2f:7c:56:cd:84:fc:6c:7e:f6:7d:33:24: cd:7e:5f:d1:85:32:51:55:4f:bc:63:2b:f6:47:da: fa:8f:46:b3:9f:7a:5e:7e:08:94:6c:24:f0:cf:da: ca:47:7e:22:3c:55:c3:4d:bb:2d:52:e7:b0:c5:f0: 07:35:29:60:2c:0e:21:30:04:a4:1b:27:20:a7:44: d3:23:40:62:ab:20:65:d3:12:8b:1e:02:7d:ed:9c: 95:4c:9c:87:82:ab:87:e6:46:0b:83:98:9e:18:89: 45:b6:bc:24:a3:d7:17:36:97:c7:70:99:fb:af:c9: 3d:41:4e:1c:ec:16:0f:26:7c:0e:1e:f5:58:ad:61: 72:80:b2:65:c5:1d:5e:af:bd:d2:03:54:a1:b6:7f: 79:76:ad:c9:0d:78:b8:8c:e9:fc:94:8c:7e:d4:4c: 07:16:56:1f:50:29:49:91:fa:36:5b:9f:65:cc:dd: 8b:11:3b:d7:21:7c:05:5e:b3:66:ee:f7:a5:b0:7a: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C6:C3:88:B7:72:68:EA:D4:38:40:14:38:E6:78:25:C0:21:1F:68 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:f5:db:97:67:13:aa:ca:73:61:9e:e7:c2:8b:a2:b2:a4:b3: 6f:bb:f0:e6:20:5c:0a:63:04:6e:67:c3:75:5b:5c:4d:c5:12: 16:1a:7a:6c:0e:6d:b5:f2:9b:27:12:d1:e9:e7:63:6f:f2:06: d2:de:d7:26:44:b2:96:db:59:5f:68:30:85:61:0b:2a:87:5d: 66:b4:f3:f3:50:3b:0a:ac:b8:b6:a7:54:01:a2:63:ce:44:e4: 85:0d:63:0a:5b:15:8a:7e:9e:ca:72:fb:b4:f9:76:d9:3c:9d: da:07:77:27:aa:5e:ee:88:05:fb:db:ef:95:7a:1b:0a:ff:e6: 8a:08:e5:52:47:be:b8:63:c7:d2:e9:fb:15:e1:ad:f2:0f:42: e2:09:33:d5:65:d7:d6:27:47:ed:50:09:9e:16:09:67:76:e2: 72:e6:ef:9d:ac:61:62:0c:45:c4:5c:e2:f6:d9:08:56:0b:cf: 9d:15:32:f2:39:ab:3c:48:13:46:31:ae:84:a1:de:c4:cb:63: 50:3c:a2:1c:c2:05:0a:b7:33:ed:94:c3:87:1c:5d:bd:ea:95: 8d:ff:62:fc:bf:40:9a:43:ee:e2:1f:be:71:45:a1:4a:ed:dd: d4:de:ec:04:ed:d9:cf:b8:b1:e8:cb:74:e0:e3:45:ac:ff:ad: 74:71:fa:f2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE3XOBYn+/ARW7HpiTv2qgXJr8o0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjAzMDIwMTQzMTZaFw0yNjAzMDMwNDA0MTZaMDMxMTAvBgNV BAMTKDEzQzZDMzg4Qjc3MjY4RUFENDM4NDAxNDM4RTY3ODI1QzAyMTFGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpM9CKRQohS2tzGhWZk0Ub0tJ ZKxU7sACftm3I4QHGT6fhnaxPiA/Jw0LK5vBsgwkQOt9jG/EoPQ/vJf/3y98Vs2E /Gx+9n0zJM1+X9GFMlFVT7xjK/ZH2vqPRrOfel5+CJRsJPDP2spHfiI8VcNNuy1S 57DF8Ac1KWAsDiEwBKQbJyCnRNMjQGKrIGXTEoseAn3tnJVMnIeCq4fmRguDmJ4Y iUW2vCSj1xc2l8dwmfuvyT1BThzsFg8mfA4e9VitYXKAsmXFHV6vvdIDVKG2f3l2 rckNeLiM6fyUjH7UTAcWVh9QKUmR+jZbn2XM3YsRO9chfAVes2bu96Wwev79AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUE8bDiLdyaOrUOEAUOOZ4JcAhH2gwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc5NDM5MzkvMC9BRTQ4N0I3MkM0RjM4 RUE1NDhGNjcyMUJCNjBCNzczNzA1QkQ5NTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfXbl2cTqspz YZ7nwouisqSzb7vw5iBcCmMEbmfDdVtcTcUSFhp6bA5ttfKbJxLR6edjb/IG0t7X JkSylttZX2gwhWELKoddZrTz81A7Cqy4tqdUAaJjzkTkhQ1jClsVin6eynL7tPl2 2Tyd2gd3J6pe7ogF+9vvlXobCv/migjlUke+uGPH0un7FeGt8g9C4gkz1WXX1idH 7VAJnhYJZ3bicubvnaxhYgxFxFzi9tkIVgvPnRUy8jmrPEgTRjGuhKHexMtjUDyi HMIFCrcz7ZTDhxxdveqVjf9i/L9AmkPu4h++cUWhSu3d1N7sBO3Zz7ix6Mt04ONF rP+tdHH68g== -----END CERTIFICATE-----Generated at Mon Mar 2 22:16:20 2026 by rpki-client