$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft File: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft (raw, json) Hash identifier: QjKsLYv69IaqRK8HzqHq0Yvb1ZPBDQD+1Zv64PVJ/dw= Subject key identifier: 05:C3:3F:BF:0C:C4:F8:5D:87:6A:E4:5B:61:92:1E:FD:D1:1C:45:EF Authority key identifier: AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 Certificate issuer: /CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Certificate serial: 5A09AF0DD340888DD832F98AA60D1B169F86AB9F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft Manifest number: FE Signing time: Tue 28 Jul 2026 15:37:09 +0000 Manifest this update: Tue 28 Jul 2026 15:32:09 +0000 Manifest next update: Wed 29 Jul 2026 18:41:09 +0000 Files and hashes: 1: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl (hash: wWEeGY5ikjjxHf8pOpjHgJloHofaNcafJ2Fg34ELfE8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:09:af:0d:d3:40:88:8d:d8:32:f9:8a:a6:0d:1b:16:9f:86:ab:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Validity Not Before: Jul 28 15:32:09 2026 GMT Not After : Jul 29 18:41:09 2026 GMT Subject: CN=05C33FBF0CC4F85D876AE45B61921EFDD11C45EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c2:a7:34:3a:58:0b:91:f2:fd:bd:6f:fd:9d: f1:55:a5:60:fe:43:0d:90:a6:ef:fc:fa:62:17:82: ac:3d:5f:df:8b:7f:86:db:eb:9a:ad:72:03:e6:34: f6:95:46:37:3d:81:57:c2:67:34:04:59:58:b0:d3: 8a:0b:27:35:a5:1c:d8:d0:e9:e0:d8:0e:17:0d:6a: e8:80:2b:0f:1a:d6:ab:14:ef:b6:31:ed:73:76:2b: 56:47:bd:b3:a0:c8:3c:30:bc:96:5a:98:32:ec:f1: 11:9d:5d:99:b3:dd:50:57:9c:c9:97:e2:b1:fb:c9: 39:0e:55:3f:eb:26:83:1c:61:8e:9e:cd:4a:3e:5a: 15:92:e0:3a:c7:40:da:93:72:6c:3c:a6:85:a9:f2: 45:3f:d5:8f:dd:9c:34:1e:2a:3a:61:8b:38:60:0e: 9c:e9:8a:dd:0d:0c:30:e7:a3:44:17:e1:24:f8:bd: d4:c3:a7:54:a9:af:c6:54:5c:e6:99:b4:6e:66:46: 34:71:68:fc:ec:86:8c:6e:af:fb:b8:93:81:5f:07: 30:36:b1:30:bb:d0:7c:0c:5a:a7:d3:d0:70:62:1f: 45:40:db:41:f3:bd:23:7c:a8:1b:72:27:9d:58:99: 2b:38:d3:cf:e9:61:2b:67:ea:67:e0:f9:ed:46:4e: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C3:3F:BF:0C:C4:F8:5D:87:6A:E4:5B:61:92:1E:FD:D1:1C:45:EF X509v3 Authority Key Identifier: keyid:AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:32:84:19:dc:ae:d1:e1:32:60:89:a3:52:4c:9d:41:c2:65: 06:46:ec:02:b9:47:19:55:af:30:74:c2:2b:96:aa:31:5e:1e: f4:75:48:75:ad:b9:ff:58:68:26:64:5d:0a:07:c6:0c:70:67: e5:9a:28:f8:9d:9c:c2:3a:c0:67:87:a5:13:e1:79:9c:70:8c: 23:fe:95:90:7a:24:34:f1:2c:9d:33:d3:60:3d:e9:91:92:12: 1b:d9:d6:ae:37:12:4d:b2:42:44:c9:7b:1f:a2:30:53:9c:74: 0a:07:23:c9:3b:73:b8:92:b2:75:7c:3c:55:55:8c:48:ff:09: 70:09:6f:88:37:95:c7:db:d5:1d:87:39:55:e3:2a:c6:83:d3: 8e:08:62:eb:6c:3d:0c:89:97:ca:f4:72:f6:e4:f3:a2:40:4b: 15:0b:0b:3f:8c:52:2b:2b:7d:d1:90:92:40:f6:92:1b:ef:45: 5d:fb:81:85:26:fe:20:a8:47:e3:b9:6f:ec:de:19:dc:af:ee: 07:c5:95:ea:29:d0:c0:0b:d4:24:b8:2c:b4:2c:05:59:17:36: 8b:ad:7f:46:d0:e0:8c:3e:50:2c:5d:85:f6:15:08:c9:08:b3: 54:3e:4b:ea:ea:4a:ae:58:14:5f:5c:73:86:88:db:e7:16:e6: f2:65:d8:d6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWgmvDdNAiI3YMvmKpg0bFp+Gq58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYz QzFGNzNDNjAeFw0yNjA3MjgxNTMyMDlaFw0yNjA3MjkxODQxMDlaMDMxMTAvBgNV BAMTKDA1QzMzRkJGMENDNEY4NUQ4NzZBRTQ1QjYxOTIxRUZERDExQzQ1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjwqc0OlgLkfL9vW/9nfFVpWD+ Qw2Qpu/8+mIXgqw9X9+Lf4bb65qtcgPmNPaVRjc9gVfCZzQEWViw04oLJzWlHNjQ 6eDYDhcNauiAKw8a1qsU77Yx7XN2K1ZHvbOgyDwwvJZamDLs8RGdXZmz3VBXnMmX 4rH7yTkOVT/rJoMcYY6ezUo+WhWS4DrHQNqTcmw8poWp8kU/1Y/dnDQeKjphizhg Dpzpit0NDDDno0QX4ST4vdTDp1Spr8ZUXOaZtG5mRjRxaPzshoxur/u4k4FfBzA2 sTC70HwMWqfT0HBiH0VA20HzvSN8qBtyJ51YmSs408/pYStn6mfg+e1GTmcJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBcM/vwzE+F2HauRbYZIe/dEcRe8wHwYDVR0j BBgwFoAUruGZHmaaawyX6KHcnJZXVjwfc8YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8xL0FFRTE5OTFFNjY5QTZCMEM5N0U4QTFEQzlDOTY1 NzU2M0MxRjczQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYzQzFGNzNDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMS9BRUUxOTkxRTY2OUE2 QjBDOTdFOEExREM5Qzk2NTc1NjNDMUY3M0M2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6zKEGdyu0eEy YImjUkydQcJlBkbsArlHGVWvMHTCK5aqMV4e9HVIda25/1hoJmRdCgfGDHBn5Zoo +J2cwjrAZ4elE+F5nHCMI/6VkHokNPEsnTPTYD3pkZISG9nWrjcSTbJCRMl7H6Iw U5x0CgcjyTtzuJKydXw8VVWMSP8JcAlviDeVx9vVHYc5VeMqxoPTjghi62w9DImX yvRy9uTzokBLFQsLP4xSKyt90ZCSQPaSG+9FXfuBhSb+IKhH47lv7N4Z3K/uB8WV 6inQwAvUJLgstCwFWRc2i61/RtDgjD5QLF2F9hUIyQizVD5L6upKrlgUX1xzhojb 5xbm8mXY1g== -----END CERTIFICATE-----Generated at Wed Jul 29 07:59:21 2026 by rpki-client