$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft File: AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft (raw, json) Hash identifier: I1BkgsM8bC+dHj9C9WqvUNgtX4FPtSLtduYSUZojO0M= Subject key identifier: 43:B3:16:B6:36:70:2B:37:62:B1:D1:D8:C9:F2:D8:A7:F0:52:C3:62 Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 413D9A478647A81A03DB0CC06268D609E7F4FAA2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft Manifest number: 7C Signing time: Fri 17 Apr 2026 06:39:40 +0000 Manifest this update: Fri 17 Apr 2026 06:34:40 +0000 Manifest next update: Sat 18 Apr 2026 09:00:40 +0000 Files and hashes: 1: 3133392e392e39382e302f32342d3234203d3e20313336393037.roa (hash: lZaKhgGI3B+5kNzxcRuw4YEW8BfMtEAeUJ2JE/46huU=) 2: 3133392e392e39382e302f32342d3234203d3e203535393930.roa (hash: /IJlTWQZGnZ4U5xl7321ZidCdM7PTAGx3Acj6o0Y2UM=) 3: 3133392e392e39392e302f32342d3234203d3e20313336393037.roa (hash: dIhQmZptxW8DU3+OwJQTGx8lpEItTIFryKTB4UedByw=) 4: AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl (hash: /u3NaDcpd5l5uFbtKYTMceMU881Kc/AGdbMbnqcsKCU=) 5: 3133392e392e39392e302f32342d3234203d3e203535393930.roa (hash: uxSQgRL3N6waphidCmEdw7Fzhu6iZ8Wq7e8/zIvLlJc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3d:9a:47:86:47:a8:1a:03:db:0c:c0:62:68:d6:09:e7:f4:fa:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Apr 17 06:34:40 2026 GMT Not After : Apr 18 09:00:40 2026 GMT Subject: CN=43B316B636702B3762B1D1D8C9F2D8A7F052C362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7f:ce:66:ab:d8:83:8d:12:43:f9:8e:3d:94: e9:6a:76:cf:19:39:78:23:1c:04:b2:2b:d9:fe:de: 4f:c9:91:7e:a4:1f:c1:84:45:98:10:34:7e:6a:03: 2f:e0:ef:e9:42:f5:26:10:76:9a:1c:35:82:fa:34: da:d9:1b:fd:a3:ae:9e:56:e2:f7:5c:9a:82:0c:9e: a7:f9:c5:22:42:ba:a0:ec:64:90:46:84:55:5a:c8: 2f:b1:ed:bc:f3:9b:65:a2:92:21:58:39:a4:a4:e4: 7a:74:ab:fc:a5:a2:4b:1f:aa:3e:21:15:59:20:50: 3f:de:83:08:3a:c6:8b:db:c0:84:0a:e2:74:02:46: 35:08:23:d8:52:aa:61:22:3c:bb:6c:31:00:4b:d5: e8:2e:89:d9:07:81:99:e5:1a:0e:0b:30:73:08:6a: d1:00:52:fd:fe:8e:15:df:f9:db:65:3d:e5:3e:9b: 87:6c:49:0b:f4:c8:12:23:95:bc:3b:d9:56:c7:b3: ca:9a:37:d6:3a:ca:cb:f6:fa:e9:a8:13:01:bb:ed: 35:b0:ff:8d:04:c3:d1:0f:cb:f4:2b:78:25:2f:9a: 4a:d7:85:8d:a9:87:1d:dd:40:cf:e6:fd:e4:98:01: 84:1a:50:d9:ff:ab:24:78:23:e6:7e:d2:15:68:b9: ca:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B3:16:B6:36:70:2B:37:62:B1:D1:D8:C9:F2:D8:A7:F0:52:C3:62 X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2a:1e:0a:54:92:ec:42:eb:60:7a:d5:3e:3d:0a:fd:d6:d5: ad:37:be:d2:dc:2e:f1:53:60:c8:c3:6b:f8:9e:c3:01:fb:e4: 35:9b:01:c6:6f:8e:6e:4f:d5:98:49:02:30:c2:47:45:b2:81: e1:76:74:89:ae:8e:45:7d:92:e7:24:d7:ad:25:5c:09:e8:a5: 35:cd:29:4a:45:a6:f1:f7:99:93:eb:e2:4a:c4:be:65:71:a2: c8:62:5f:29:99:31:a1:d3:49:70:c9:09:89:60:3e:ad:0e:dd: bf:cc:43:2b:bd:43:01:94:06:fe:5f:45:80:2c:62:38:8e:ad: 23:61:98:21:23:52:be:0b:17:cb:a5:9f:b7:6d:4c:b3:cf:4a: 60:77:0e:8c:cf:e0:a4:5c:2e:2a:0a:b6:89:d8:38:ab:2a:0c: 52:44:85:4d:53:94:9b:3c:54:10:63:c4:31:81:6e:19:d2:4e: 15:49:e2:0d:91:f1:b1:1f:34:c0:25:58:4e:1a:be:49:af:7c: 95:db:af:e4:50:a0:93:1b:a7:fc:3f:d6:74:c8:8d:c9:fd:fc: fd:08:06:f9:1d:bc:93:4f:61:c1:e6:4b:ce:e8:96:62:7f:d7: 2b:8b:9d:40:8d:d1:67:cd:b0:ea:16:b9:73:b0:96:f3:eb:e7: e5:ba:1f:20 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQT2aR4ZHqBoD2wzAYmjWCef0+qIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjA0MTcwNjM0NDBaFw0yNjA0MTgwOTAwNDBaMDMxMTAvBgNV BAMTKDQzQjMxNkI2MzY3MDJCMzc2MkIxRDFEOEM5RjJEOEE3RjA1MkMzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSf85mq9iDjRJD+Y49lOlqds8Z OXgjHASyK9n+3k/JkX6kH8GERZgQNH5qAy/g7+lC9SYQdpocNYL6NNrZG/2jrp5W 4vdcmoIMnqf5xSJCuqDsZJBGhFVayC+x7bzzm2WikiFYOaSk5Hp0q/yloksfqj4h FVkgUD/egwg6xovbwIQK4nQCRjUII9hSqmEiPLtsMQBL1eguidkHgZnlGg4LMHMI atEAUv3+jhXf+dtlPeU+m4dsSQv0yBIjlbw72VbHs8qaN9Y6ysv2+umoEwG77TWw /40Ew9EPy/QreCUvmkrXhY2phx3dQM/m/eSYAYQaUNn/qyR4I+Z+0hVoucovAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQ7MWtjZwKzdisdHYyfLYp/BSw2IwHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS9BRTE0MzFDRENBM0M1 MjQ1NkIwMTQ2QzQ5RDVFRUUzMjk2MUQ3OTNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSoeClSS7ELr YHrVPj0K/dbVrTe+0twu8VNgyMNr+J7DAfvkNZsBxm+Obk/VmEkCMMJHRbKB4XZ0 ia6ORX2S5yTXrSVcCeilNc0pSkWm8feZk+viSsS+ZXGiyGJfKZkxodNJcMkJiWA+ rQ7dv8xDK71DAZQG/l9FgCxiOI6tI2GYISNSvgsXy6Wft21Ms89KYHcOjM/gpFwu Kgq2idg4qyoMUkSFTVOUmzxUEGPEMYFuGdJOFUniDZHxsR80wCVYThq+Sa98lduv 5FCgkxun/D/WdMiNyf38/QgG+R28k09hweZLzuiWYn/XK4udQI3RZ82w6ha5c7CW 8+vn5bofIA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:23:54 2026 by rpki-client