$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: LaCU/OV7Lg6/hEqOxwZHo1mdyhf3NqVPkUYBHe1y9mc= Subject key identifier: A0:F0:8E:64:4D:EA:A1:9A:DF:0D:CB:06:2C:78:77:49:84:17:37:ED Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 7C9E75091D55C571D664CD6AE6EA4341B7611F88 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: 013D Signing time: Tue 06 Oct 2026 19:20:22 +0000 Manifest this update: Tue 06 Oct 2026 19:15:22 +0000 Manifest next update: Fri 09 Oct 2026 21:45:22 +0000 Files and hashes: 1: 3134302e3230352e302e302f31362d3234203d3e203337393633.roa (hash: 4T+Ny17GQGa7oMvo1y349IVyjaqe3SnHiVL4XvhRzI8=) 2: 3134302e3230352e302e302f31362d3234203d3e203435313032.roa (hash: pQRnaurNhavozvk/Uf/xbHRB5WSXCOHAuz30poaAiH8=) 3: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: fzO/a+TU/WDc5urni9MvEoaFCZxzpotSSnki6vgytUc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 21:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9e:75:09:1d:55:c5:71:d6:64:cd:6a:e6:ea:43:41:b7:61:1f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Oct 6 19:15:22 2026 GMT Not After : Oct 9 21:45:22 2026 GMT Subject: CN=A0F08E644DEAA19ADF0DCB062C787749841737ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:5f:45:fd:d9:23:f4:ba:5b:5c:14:6e:fb:76: 8a:46:e6:0f:83:9c:18:bc:a6:9d:7b:12:3c:da:2c: 11:2d:ac:36:de:4a:8e:01:89:60:14:ca:69:40:c4: 29:2a:4b:11:32:fc:f1:08:7d:ca:73:2b:14:3c:0c: a8:d8:5f:38:cb:d1:3e:c9:6b:11:ff:d1:7d:f3:7d: 38:d9:7d:d6:74:57:1e:03:14:c7:b7:96:3c:8b:2b: d6:17:9f:9a:45:5a:42:74:f8:7f:1a:94:c6:27:f7: 0e:f6:c3:b3:9e:81:c0:55:ab:69:42:b0:df:ff:dc: 88:c0:e2:a2:7f:92:70:93:10:bb:49:fc:dc:7a:3d: 3d:42:44:fb:68:01:a6:76:46:d5:ef:d1:22:ed:95: e3:be:1a:b7:5d:de:9a:da:85:e5:53:13:77:af:6d: b5:49:61:8c:1e:1f:41:f9:96:80:d7:88:4e:99:1b: 07:60:ac:cc:ed:9b:af:cd:8b:de:9b:e2:ff:f8:7d: 00:16:36:fb:f8:5a:31:7c:39:64:3f:2b:99:02:55: f2:d3:00:60:5f:ff:00:c9:ec:2e:ec:a2:94:e3:53: 9c:4f:65:87:ca:8b:09:35:92:f4:78:5f:a4:e7:42: ec:75:1e:06:e9:d7:10:b2:62:21:38:1a:bc:23:0e: 50:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F0:8E:64:4D:EA:A1:9A:DF:0D:CB:06:2C:78:77:49:84:17:37:ED X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:18:18:5e:df:fb:c5:65:ff:1b:09:6a:1e:53:6a:14:3b:87: 0e:5d:cf:d8:d2:21:fa:c3:f3:ba:58:52:e0:ee:98:a1:82:9f: 63:9f:4a:b7:ba:3c:e0:81:68:dd:e8:e7:33:f9:37:5d:24:3c: f3:2e:1b:0b:04:f2:31:9c:71:eb:30:56:a1:a4:07:d0:06:c3: 5c:fe:79:01:8d:e1:e2:d9:4d:6a:b0:33:81:c1:7b:4b:75:68: 86:39:8a:48:a0:a6:59:6a:ae:87:06:51:2d:65:93:e6:b4:f5: 57:12:23:ad:a2:17:c8:d9:ff:f4:31:ad:c0:a2:16:83:87:90: f7:d3:f6:19:6b:82:36:d0:c0:a4:0a:57:d7:68:85:96:f3:85: 45:00:e4:de:20:5a:b3:27:92:e4:f1:9c:6f:fd:9b:8a:db:e0: 64:7d:b4:af:e2:37:e6:47:de:30:52:ba:15:b0:e9:f1:bf:fb: 09:94:5a:39:86:25:f9:c6:a9:c1:4b:2e:df:51:df:26:b1:f3: c4:61:31:3d:b2:51:6c:8c:17:5b:8c:45:34:20:94:33:ac:83: b6:ed:df:04:2f:eb:77:42:7d:74:d4:2d:bc:11:b2:2c:f2:7a: cc:dc:d7:4c:89:45:1c:d8:74:dc:8e:09:65:2b:23:90:48:3f: 13:60:03:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfJ51CR1VxXHWZM1q5upDQbdhH4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjEwMDYxOTE1MjJaFw0yNjEwMDkyMTQ1MjJaMDMxMTAvBgNV BAMTKEEwRjA4RTY0NERFQUExOUFERjBEQ0IwNjJDNzg3NzQ5ODQxNzM3RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5X0X92SP0ultcFG77dopG5g+D nBi8pp17EjzaLBEtrDbeSo4BiWAUymlAxCkqSxEy/PEIfcpzKxQ8DKjYXzjL0T7J axH/0X3zfTjZfdZ0Vx4DFMe3ljyLK9YXn5pFWkJ0+H8alMYn9w72w7OegcBVq2lC sN//3IjA4qJ/knCTELtJ/Nx6PT1CRPtoAaZ2RtXv0SLtleO+Grdd3praheVTE3ev bbVJYYweH0H5loDXiE6ZGwdgrMztm6/Ni96b4v/4fQAWNvv4WjF8OWQ/K5kCVfLT AGBf/wDJ7C7sopTjU5xPZYfKiwk1kvR4X6TnQux1Hgbp1xCyYiE4GrwjDlCVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoPCOZE3qoZrfDcsGLHh3SYQXN+0wHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRgYXt/7xWX/ GwlqHlNqFDuHDl3P2NIh+sPzulhS4O6YoYKfY59Kt7o84IFo3ejnM/k3XSQ88y4b CwTyMZxx6zBWoaQH0AbDXP55AY3h4tlNarAzgcF7S3VohjmKSKCmWWquhwZRLWWT 5rT1VxIjraIXyNn/9DGtwKIWg4eQ99P2GWuCNtDApApX12iFlvOFRQDk3iBasyeS 5PGcb/2bitvgZH20r+I35kfeMFK6FbDp8b/7CZRaOYYl+capwUsu31HfJrHzxGEx PbJRbIwXW4xFNCCUM6yDtu3fBC/rd0J9dNQtvBGyLPJ6zNzXTIlFHNh03I4JZSsj kEg/E2ADLw== -----END CERTIFICATE-----Generated at Thu Oct 8 12:25:58 2026 by rpki-client