$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: htMKhMhMcEhS/w0BNHCjYhfI2P/A4jniuFOmd7TOuCI= Subject key identifier: 9F:51:ED:F4:37:2E:0F:C2:3C:BE:AA:95:A6:39:34:E6:E3:EA:34:96 Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 145D851EFC713DB08FB95E6D088257BFDE117919 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 02:44:38 +0000 Manifest this update: Fri 17 Apr 2026 02:39:38 +0000 Manifest next update: Sat 18 Apr 2026 05:44:38 +0000 Files and hashes: 1: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: tQuxnwacWFEW+LnvX51M9aPwUNaD2Bv4Nkw8Ybru71U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5d:85:1e:fc:71:3d:b0:8f:b9:5e:6d:08:82:57:bf:de:11:79:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Apr 17 02:39:38 2026 GMT Not After : Apr 18 05:44:38 2026 GMT Subject: CN=9F51EDF4372E0FC23CBEAA95A63934E6E3EA3496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:d8:3e:38:51:fe:e2:09:4c:02:f5:3d:40: 56:fe:2a:06:e5:07:f8:01:4f:79:e8:6d:64:75:a9: 63:12:58:ae:81:0e:98:2a:cd:eb:33:7a:70:11:ed: c4:07:fc:80:6e:86:cf:48:a4:6d:0a:1d:66:98:36: 73:3c:7e:d8:25:9a:d7:a8:76:1a:e6:8d:5b:54:fb: 31:55:f2:2f:47:d2:97:74:2e:3b:2d:54:0d:23:6f: b3:0d:c9:d1:9a:0b:77:a3:c6:e4:e9:8a:29:cf:81: 0f:52:1d:d0:fc:ca:be:8e:7d:e7:49:2d:89:23:00: f9:7d:6e:de:d4:5d:2e:df:e6:1c:42:94:e6:43:87: a1:82:0c:99:ca:0a:0d:ac:c2:39:49:d7:29:6e:d8: b5:1f:f3:24:0d:2c:6f:1a:5e:fe:dc:7b:83:1d:27: 89:e4:5a:95:cd:d8:2d:64:cf:6b:5f:71:d5:1f:ab: 58:2c:79:24:0d:82:ff:c2:af:c3:83:75:3e:fc:91: b1:58:5b:50:e8:b6:4b:4a:78:0f:4f:a8:7c:f9:dc: 4a:30:cd:32:41:7e:01:79:d0:67:e2:89:3a:3c:40: 9d:db:28:a4:5a:94:1d:27:2f:84:1b:b1:8f:59:9d: e8:65:fc:b4:ec:d0:b3:6c:66:49:b7:77:ff:9b:18: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:51:ED:F4:37:2E:0F:C2:3C:BE:AA:95:A6:39:34:E6:E3:EA:34:96 X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:45:90:e1:ce:2e:08:96:86:f7:ad:47:27:4d:6b:d3:ff:b6: 07:5a:58:4f:93:26:53:1b:77:67:a2:e6:8e:39:6a:91:45:f0: ae:63:2e:8c:4e:05:d0:f4:71:8f:00:72:8d:54:2f:2d:99:80: bd:39:41:6d:90:b3:dd:95:6d:3b:9a:c4:91:78:93:d5:99:16: 86:85:74:8c:e6:9f:65:e8:68:17:f3:d6:6f:cf:4f:68:6d:45: 95:07:6d:e7:5b:f7:2f:99:70:7e:ac:99:6f:1a:0b:df:62:62: 75:76:c1:37:b8:8f:49:7c:07:7a:19:ac:cf:5a:ce:30:e9:eb: de:48:9a:d6:85:e6:c1:31:06:8b:5c:31:cb:73:f6:4b:34:28: 5f:53:d2:11:12:ea:30:a3:b2:62:97:5b:fe:fa:b0:58:a7:e5: 9f:42:7d:82:8c:fc:cd:99:c1:c4:6f:a4:db:3f:dd:74:a6:e1: 9f:54:9c:c5:3d:de:75:3d:0f:6d:3c:e9:63:51:ff:cc:f0:39: 3f:43:ef:aa:52:d4:cd:af:ef:7b:0e:47:e4:d6:cb:94:c9:23: 4c:67:99:42:d3:8a:c0:82:0b:36:6a:59:3c:5c:b5:0a:88:48: 19:aa:88:ca:85:9c:f2:d1:fd:24:38:29:19:42:01:f2:3c:ae: 89:2f:bc:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFF2FHvxxPbCPuV5tCIJXv94ReRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjA0MTcwMjM5MzhaFw0yNjA0MTgwNTQ0MzhaMDMxMTAvBgNV BAMTKDlGNTFFREY0MzcyRTBGQzIzQ0JFQUE5NUE2MzkzNEU2RTNFQTM0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBNg+OFH+4glMAvU9QFb+Kgbl B/gBT3nobWR1qWMSWK6BDpgqzeszenAR7cQH/IBuhs9IpG0KHWaYNnM8ftglmteo dhrmjVtU+zFV8i9H0pd0LjstVA0jb7MNydGaC3ejxuTpiinPgQ9SHdD8yr6OfedJ LYkjAPl9bt7UXS7f5hxClOZDh6GCDJnKCg2swjlJ1ylu2LUf8yQNLG8aXv7ce4Md J4nkWpXN2C1kz2tfcdUfq1gseSQNgv/Cr8ODdT78kbFYW1DotktKeA9PqHz53Eow zTJBfgF50GfiiTo8QJ3bKKRalB0nL4QbsY9Znehl/LTs0LNsZkm3d/+bGOfFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUn1Ht9DcuD8I8vqqVpjk05uPqNJYwHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0WQ4c4uCJaG 961HJ01r0/+2B1pYT5MmUxt3Z6LmjjlqkUXwrmMujE4F0PRxjwByjVQvLZmAvTlB bZCz3ZVtO5rEkXiT1ZkWhoV0jOafZehoF/PWb89PaG1FlQdt51v3L5lwfqyZbxoL 32JidXbBN7iPSXwHehmsz1rOMOnr3kia1oXmwTEGi1wxy3P2SzQoX1PSERLqMKOy Ypdb/vqwWKfln0J9goz8zZnBxG+k2z/ddKbhn1ScxT3edT0PbTzpY1H/zPA5P0Pv qlLUza/vew5H5NbLlMkjTGeZQtOKwIILNmpZPFy1CohIGaqIyoWc8tH9JDgpGUIB 8jyuiS+8TQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:39:42 2026 by rpki-client