$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft File: AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft (raw, json) Hash identifier: rh3kae7B7kGMMVAmtrkI+XSg391AlF/ANqB/yLixDwc= Subject key identifier: DD:F0:33:AE:47:FF:46:51:29:BD:96:34:B9:64:2F:64:98:F4:80:B5 Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 22182869B7EF74DE77CD13AD0EDBCFA0D7339BD0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft Manifest number: 3E Signing time: Mon 02 Mar 2026 03:08:16 +0000 Manifest this update: Mon 02 Mar 2026 03:03:16 +0000 Manifest next update: Tue 03 Mar 2026 05:16:16 +0000 Files and hashes: 1: AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl (hash: dKHy4jGNTFtmUJWdbWJDM5uAh4AOU52cCH6KIAZy76k=) 2: 3133392e392e39382e302f32342d3234203d3e20313336393037.roa (hash: lZaKhgGI3B+5kNzxcRuw4YEW8BfMtEAeUJ2JE/46huU=) 3: 3133392e392e39392e302f32342d3234203d3e203535393930.roa (hash: uxSQgRL3N6waphidCmEdw7Fzhu6iZ8Wq7e8/zIvLlJc=) 4: 3133392e392e39382e302f32342d3234203d3e203535393930.roa (hash: /IJlTWQZGnZ4U5xl7321ZidCdM7PTAGx3Acj6o0Y2UM=) 5: 3133392e392e39392e302f32342d3234203d3e20313336393037.roa (hash: dIhQmZptxW8DU3+OwJQTGx8lpEItTIFryKTB4UedByw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 05:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:18:28:69:b7:ef:74:de:77:cd:13:ad:0e:db:cf:a0:d7:33:9b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Mar 2 03:03:16 2026 GMT Not After : Mar 3 05:16:16 2026 GMT Subject: CN=DDF033AE47FF465129BD9634B9642F6498F480B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:51:c7:e1:19:1d:f9:9c:1e:0a:23:97:a9:bf: f7:34:17:26:66:e6:4d:ae:55:79:8a:f7:ba:91:56: 5b:2c:16:5c:c0:4e:64:3a:56:ca:ac:fa:d0:0d:bd: 85:05:3c:14:a9:1f:ac:f3:ac:8f:f2:04:75:2a:30: 65:89:68:e4:3a:81:07:1d:ea:66:70:82:88:02:a6: f3:2a:5b:7c:72:e8:8e:92:3f:e6:b1:59:21:87:92: 98:15:48:a2:6f:cb:63:8b:18:4d:2e:0b:33:e8:38: 2f:ef:df:0f:d2:41:0b:52:4b:e1:3a:64:32:8b:61: 59:a3:fa:a9:45:5f:16:fd:5d:f9:63:72:88:04:1c: 63:db:4d:84:91:95:c1:d5:e1:76:eb:f2:a6:cb:38: 52:6b:9c:36:76:0e:14:1d:27:39:fb:53:33:66:33: c8:2e:09:cf:59:79:52:4f:c4:3e:a8:f1:28:6a:d0: 29:5b:a6:f6:1a:a6:cc:1b:5a:9a:58:d8:10:16:b9: 78:a5:b8:d4:57:b2:ad:c4:67:b3:2e:80:f2:8b:e1: 8b:3e:c7:93:0d:48:09:6f:95:ef:84:03:d2:68:79: 2e:bc:20:74:8d:17:d7:5a:49:d6:d8:98:40:09:c0: b6:2c:da:69:cf:76:cd:c6:2d:dc:38:b0:da:35:0d: d7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F0:33:AE:47:FF:46:51:29:BD:96:34:B9:64:2F:64:98:F4:80:B5 X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e6:51:77:b3:ce:be:51:6f:a6:9d:c4:52:68:ac:12:f8:a1: 83:d5:89:90:d1:d0:c5:49:bf:d1:fc:ca:a9:7b:37:d2:77:21: 9d:76:9b:46:30:9a:a7:6c:77:48:4b:7e:de:c1:44:be:48:80: 15:53:c9:0a:c1:75:75:cd:8b:34:2f:72:2f:a2:b9:11:b2:0d: 5e:d8:8a:eb:53:78:f5:87:6f:ee:03:6e:02:47:18:9d:05:cd: ce:d0:27:fe:d0:74:12:30:52:87:40:4d:56:f8:8d:67:1c:77: ee:f4:a3:70:68:39:05:70:e4:37:26:3d:8c:a1:5d:1c:da:9a: 91:a6:8e:2e:a8:b4:a2:87:f5:b2:c0:81:e2:a3:c0:d6:53:5a: fe:55:91:78:a3:b6:3c:b9:8e:97:9e:4a:69:c1:2f:6b:99:a8: f6:ae:90:dd:59:29:c6:73:ec:42:e7:89:a6:ee:f3:5a:22:74: b8:8e:67:fe:06:92:c9:3a:bd:b6:b8:64:37:b8:e1:2d:39:ae: dd:80:3d:86:00:e6:5f:1d:68:00:2f:cd:e2:08:0d:49:4b:9e: bf:f3:ae:8e:d8:d2:72:4b:a5:bb:05:a8:33:d5:41:7f:66:b8: 34:28:63:ba:54:6b:96:a3:e7:98:6d:a9:78:ee:90:fa:86:9c: cf:fd:5d:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIhgoabfvdN53zROtDtvPoNczm9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjAzMDIwMzAzMTZaFw0yNjAzMDMwNTE2MTZaMDMxMTAvBgNV BAMTKERERjAzM0FFNDdGRjQ2NTEyOUJEOTYzNEI5NjQyRjY0OThGNDgwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjUcfhGR35nB4KI5epv/c0FyZm 5k2uVXmK97qRVlssFlzATmQ6Vsqs+tANvYUFPBSpH6zzrI/yBHUqMGWJaOQ6gQcd 6mZwgogCpvMqW3xy6I6SP+axWSGHkpgVSKJvy2OLGE0uCzPoOC/v3w/SQQtSS+E6 ZDKLYVmj+qlFXxb9XfljcogEHGPbTYSRlcHV4Xbr8qbLOFJrnDZ2DhQdJzn7UzNm M8guCc9ZeVJPxD6o8Shq0ClbpvYapswbWppY2BAWuXiluNRXsq3EZ7MugPKL4Ys+ x5MNSAlvle+EA9JoeS68IHSNF9daSdbYmEAJwLYs2mnPds3GLdw4sNo1Dde5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3fAzrkf/RlEpvZY0uWQvZJj0gLUwHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS9BRTE0MzFDRENBM0M1 MjQ1NkIwMTQ2QzQ5RDVFRUUzMjk2MUQ3OTNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+ZRd7POvlFv pp3EUmisEvihg9WJkNHQxUm/0fzKqXs30nchnXabRjCap2x3SEt+3sFEvkiAFVPJ CsF1dc2LNC9yL6K5EbINXtiK61N49Ydv7gNuAkcYnQXNztAn/tB0EjBSh0BNVviN Zxx37vSjcGg5BXDkNyY9jKFdHNqakaaOLqi0oof1ssCB4qPA1lNa/lWReKO2PLmO l55KacEva5mo9q6Q3VkpxnPsQueJpu7zWiJ0uI5n/gaSyTq9trhkN7jhLTmu3YA9 hgDmXx1oAC/N4ggNSUuev/OujtjSckuluwWoM9VBf2a4NChjulRrlqPnmG2peO6Q +oacz/1dDg== -----END CERTIFICATE-----Generated at Mon Mar 2 15:46:26 2026 by rpki-client