$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: PcXeja7kPUjuj/gU6zkZnn+nd4muA0m4nW2qsdaY4/s= Subject key identifier: 67:91:71:ED:88:46:BA:6A:C6:05:94:E7:40:B0:6B:EE:3C:0D:21:70 Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 20FC9E4B708C7DF3AAAFA5CE6E9A21098FE0EBD0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: 0101 Signing time: Tue 28 Jul 2026 14:52:04 +0000 Manifest this update: Tue 28 Jul 2026 14:47:04 +0000 Manifest next update: Wed 29 Jul 2026 18:19:04 +0000 Files and hashes: 1: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: sD8Cx2dzFimJflIRLY+SLBBqlMDQuaWasAW1RKV+BiY=) 2: 3134302e3230352e302e302f31362d3234203d3e203337393633.roa (hash: 4T+Ny17GQGa7oMvo1y349IVyjaqe3SnHiVL4XvhRzI8=) 3: 3134302e3230352e302e302f31362d3234203d3e203435313032.roa (hash: pQRnaurNhavozvk/Uf/xbHRB5WSXCOHAuz30poaAiH8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:fc:9e:4b:70:8c:7d:f3:aa:af:a5:ce:6e:9a:21:09:8f:e0:eb:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Jul 28 14:47:04 2026 GMT Not After : Jul 29 18:19:04 2026 GMT Subject: CN=679171ED8846BA6AC60594E740B06BEE3C0D2170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:95:ed:8b:4c:c3:ff:fa:54:47:35:3d:db:6f: 38:6b:14:74:45:ad:2e:76:2c:ca:ce:e5:7e:8e:65: f9:12:6a:78:2b:f8:ff:18:18:14:6e:73:c9:fa:8d: a5:5a:ef:8c:c1:8d:77:91:7e:e6:d4:4b:4c:ea:62: ec:1e:76:80:a2:3d:3f:2e:aa:28:6d:a3:18:d5:48: 7c:27:66:1e:0e:35:62:4c:96:e2:0a:ce:be:8a:c5: 1b:de:fc:99:90:3f:d0:c4:3b:db:77:a6:56:b1:0b: b7:51:aa:11:2c:a5:bd:00:f3:f8:da:ef:49:bb:9d: 4b:96:de:91:bb:88:f0:15:dc:a9:de:35:51:0d:0c: 2a:6c:cf:8d:86:74:c9:53:bd:86:78:f3:32:ed:c2: 5d:52:c9:e7:f2:3e:79:aa:81:4c:bc:ed:c7:09:22: a2:bc:f3:3b:fd:5b:c3:ea:98:fa:9f:d2:f9:b5:85: 7f:c1:3c:69:0e:60:2b:4b:c0:90:f9:12:4f:ae:6a: 73:1d:9e:64:c3:5d:1a:4c:bb:c9:93:2c:6f:30:68: 35:42:13:bc:4f:5b:dc:9b:4f:47:08:51:87:e1:2b: e6:05:9e:d3:20:6c:85:53:c0:09:fc:60:21:ae:24: fb:db:63:3a:ba:92:d5:5c:3f:6f:18:9a:45:e0:de: ff:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:91:71:ED:88:46:BA:6A:C6:05:94:E7:40:B0:6B:EE:3C:0D:21:70 X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:38:71:98:69:aa:f7:8e:1c:2f:52:6e:05:21:72:85:9b:84: fd:b7:34:5b:db:a6:6e:4c:1f:c6:22:a7:26:2e:1c:5e:9c:71: 2d:11:f0:ec:8f:39:ec:dd:67:59:f7:97:3a:c3:45:1f:f7:86: 05:14:b0:d8:6e:78:31:8f:ea:52:32:bc:65:b3:50:30:1a:7b: 80:73:6c:3c:df:db:5b:e2:5f:d6:92:a7:c4:50:a4:79:4f:d4: cc:c4:94:91:28:cf:28:ed:7e:ea:cc:46:f6:cc:69:30:66:a8: 1b:9c:b0:9a:12:e0:d8:40:89:44:3a:fa:18:24:f7:63:36:bf: 4a:09:cd:b1:96:9d:c7:c4:da:63:b8:29:85:e2:34:a0:dd:c6: 81:8a:e4:40:86:94:ad:f7:9c:31:5a:2c:6f:77:e0:29:a6:a8: 68:2e:a0:3a:65:7a:ef:5a:ed:2c:a8:59:58:eb:d8:da:68:9e: c7:ca:29:f3:1e:16:b3:7d:8e:67:a3:05:5c:70:99:16:b9:17: 0d:19:90:06:87:9f:f9:c7:4b:02:2d:42:00:69:1c:4f:5f:d1: b8:34:c9:da:64:4b:32:4e:88:b4:cb:95:7b:12:f8:f0:b2:67: da:3c:c8:03:8f:38:b6:a7:43:c8:d6:19:14:31:a7:c0:a7:63: 11:b9:b7:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIPyeS3CMffOqr6XObpohCY/g69AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjA3MjgxNDQ3MDRaFw0yNjA3MjkxODE5MDRaMDMxMTAvBgNV BAMTKDY3OTE3MUVEODg0NkJBNkFDNjA1OTRFNzQwQjA2QkVFM0MwRDIxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsle2LTMP/+lRHNT3bbzhrFHRF rS52LMrO5X6OZfkSangr+P8YGBRuc8n6jaVa74zBjXeRfubUS0zqYuwedoCiPT8u qihtoxjVSHwnZh4ONWJMluIKzr6KxRve/JmQP9DEO9t3plaxC7dRqhEspb0A8/ja 70m7nUuW3pG7iPAV3KneNVENDCpsz42GdMlTvYZ48zLtwl1SyefyPnmqgUy87ccJ IqK88zv9W8PqmPqf0vm1hX/BPGkOYCtLwJD5Ek+uanMdnmTDXRpMu8mTLG8waDVC E7xPW9ybT0cIUYfhK+YFntMgbIVTwAn8YCGuJPvbYzq6ktVcP28YmkXg3v+1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZ5Fx7YhGumrGBZTnQLBr7jwNIXAwHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMThxmGmq944c L1JuBSFyhZuE/bc0W9umbkwfxiKnJi4cXpxxLRHw7I857N1nWfeXOsNFH/eGBRSw 2G54MY/qUjK8ZbNQMBp7gHNsPN/bW+Jf1pKnxFCkeU/UzMSUkSjPKO1+6sxG9sxp MGaoG5ywmhLg2ECJRDr6GCT3Yza/SgnNsZadx8TaY7gpheI0oN3GgYrkQIaUrfec MVosb3fgKaaoaC6gOmV671rtLKhZWOvY2miex8op8x4Ws32OZ6MFXHCZFrkXDRmQ Boef+cdLAi1CAGkcT1/RuDTJ2mRLMk6ItMuVexL48LJn2jzIA484tqdDyNYZFDGn wKdjEbm3vQ== -----END CERTIFICATE-----Generated at Wed Jul 29 04:16:58 2026 by rpki-client