$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: 3X8e30gc/eAWTKMRuvKTCr7uP3MvypWNNTUBlq1e8cw= Subject key identifier: 61:5D:EC:AB:87:50:21:DD:47:89:DA:B3:6C:80:A4:46:8F:32:84:70 Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 1BC6514FA6CA1F7473FB4D55BDB4FA881B769A5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 10:53:17 +0000 Manifest this update: Mon 02 Mar 2026 10:48:17 +0000 Manifest next update: Tue 03 Mar 2026 11:36:17 +0000 Files and hashes: 1: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: TgGYQG1OFLiA+haBsvEJeNeb94o56ogyCGn3T2J9MGM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c6:51:4f:a6:ca:1f:74:73:fb:4d:55:bd:b4:fa:88:1b:76:9a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Mar 2 10:48:17 2026 GMT Not After : Mar 3 11:36:17 2026 GMT Subject: CN=615DECAB875021DD4789DAB36C80A4468F328470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:b3:62:34:18:61:2a:5e:83:1c:24:a3:56: ae:17:5c:97:2a:2e:60:b8:8f:0a:9a:61:ff:05:10: 7d:7b:8f:8f:dc:5c:06:1c:36:79:18:ba:9f:56:68: 6f:d7:7b:e7:4c:a0:34:07:5f:e9:1e:84:bb:4d:43: 9a:45:13:70:e6:d5:cd:e1:f1:ae:66:b6:c8:dd:da: 66:8c:ba:07:92:97:ec:c7:72:c5:35:31:79:fe:c5: 4d:80:4f:a1:be:6c:94:18:ae:0c:37:66:5a:be:94: 44:25:68:b3:1e:a0:0d:66:76:02:9d:11:df:3c:e5: 58:f1:df:3f:53:eb:d5:d1:6e:30:b1:85:a5:09:d6: f7:90:58:06:96:54:3a:e4:43:4c:8f:19:a9:a7:95: 87:5b:e5:62:f5:f9:fc:4d:ba:64:a9:e2:95:1e:b5: 5c:29:96:e0:fb:60:e8:f8:64:af:48:8d:78:75:5b: 29:fc:cf:2c:b0:fb:2a:ba:77:0d:10:fb:ee:d5:49: c5:7f:7b:50:0e:86:52:19:45:61:08:38:5e:db:1f: cf:50:f0:8b:0f:c7:1f:a1:49:fb:a0:c8:ac:6b:fe: 84:92:90:09:4b:c8:96:ea:47:f5:33:5d:87:72:4e: d5:3b:16:ff:a3:d3:18:0e:8e:b2:3f:16:19:83:1f: 90:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5D:EC:AB:87:50:21:DD:47:89:DA:B3:6C:80:A4:46:8F:32:84:70 X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:77:24:4d:5a:04:fa:c1:6e:4b:ec:2c:83:b5:2d:ca:1c:95: bb:52:fc:ea:32:80:d8:72:36:59:2b:01:3b:97:41:15:b2:20: 83:61:52:da:20:07:8a:af:dc:b3:52:9f:18:eb:68:1f:0b:5e: 08:9d:64:40:a9:99:38:a6:92:8e:b3:f5:e3:2e:a2:8c:2c:cc: d8:3f:84:b4:64:dc:99:d0:3e:a1:b5:c4:73:f8:0d:10:14:5b: de:17:a5:c6:49:19:4e:f2:15:e2:78:3a:31:f7:06:e6:79:4f: de:dc:86:c9:e7:d8:fd:5b:a6:8f:2b:c9:9f:e2:a9:5e:bb:0b: c4:56:ac:08:35:ce:7c:80:e5:51:69:4d:43:d3:3c:9b:80:06: df:59:12:55:5b:94:90:0c:ed:c0:20:bd:cc:48:f0:0d:3d:2f: 6e:dd:d4:6f:5b:6a:dc:7a:f2:11:ea:a6:25:d7:e0:f6:63:7f: 81:fd:fd:08:68:e9:e0:5a:d0:60:03:10:f9:b4:fa:bd:12:fa: a1:69:ca:82:e0:3f:7e:8e:34:7e:21:cb:2f:79:b0:24:ce:ec: 22:32:e2:ab:07:51:3a:35:57:4d:81:5b:8d:4c:f0:fa:ce:6f: 19:04:4a:4d:c8:c4:89:1a:43:70:55:92:a4:c9:14:3d:d7:5b: 97:27:3b:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUG8ZRT6bKH3Rz+01VvbT6iBt2ml4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjAzMDIxMDQ4MTdaFw0yNjAzMDMxMTM2MTdaMDMxMTAvBgNV BAMTKDYxNURFQ0FCODc1MDIxREQ0Nzg5REFCMzZDODBBNDQ2OEYzMjg0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVg7NiNBhhKl6DHCSjVq4XXJcq LmC4jwqaYf8FEH17j4/cXAYcNnkYup9WaG/Xe+dMoDQHX+kehLtNQ5pFE3Dm1c3h 8a5mtsjd2maMugeSl+zHcsU1MXn+xU2AT6G+bJQYrgw3Zlq+lEQlaLMeoA1mdgKd Ed885Vjx3z9T69XRbjCxhaUJ1veQWAaWVDrkQ0yPGamnlYdb5WL1+fxNumSp4pUe tVwpluD7YOj4ZK9IjXh1Wyn8zyyw+yq6dw0Q++7VScV/e1AOhlIZRWEIOF7bH89Q 8IsPxx+hSfugyKxr/oSSkAlLyJbqR/UzXYdyTtU7Fv+j0xgOjrI/FhmDH5BfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYV3sq4dQId1HidqzbICkRo8yhHAwHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHckTVoE+sFu S+wsg7UtyhyVu1L86jKA2HI2WSsBO5dBFbIgg2FS2iAHiq/cs1KfGOtoHwteCJ1k QKmZOKaSjrP14y6ijCzM2D+EtGTcmdA+obXEc/gNEBRb3helxkkZTvIV4ng6MfcG 5nlP3tyGyefY/VumjyvJn+KpXrsLxFasCDXOfIDlUWlNQ9M8m4AG31kSVVuUkAzt wCC9zEjwDT0vbt3Ub1tq3HryEeqmJdfg9mN/gf39CGjp4FrQYAMQ+bT6vRL6oWnK guA/fo40fiHLL3mwJM7sIjLiqwdROjVXTYFbjUzw+s5vGQRKTcjEiRpDcFWSpMkU Pddblyc7Dg== -----END CERTIFICATE-----Generated at Mon Mar 2 21:41:25 2026 by rpki-client