$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft File: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft (raw, json) Hash identifier: a+tW1Jj7eTgOl8niiBFr1oQQtgod3XL2YZcmIP7v1AM= Subject key identifier: 5A:70:D4:A7:2F:7D:A2:99:EF:12:BC:90:BD:C2:28:6A:17:0B:B1:AC Authority key identifier: AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 Certificate issuer: /CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Certificate serial: 39FF9169A72C25B7A9F2ED98DB536BA73DB0A4F6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft Manifest number: C2 Signing time: Sat 13 Jun 2026 10:01:43 +0000 Manifest this update: Sat 13 Jun 2026 09:56:43 +0000 Manifest next update: Sun 14 Jun 2026 11:43:43 +0000 Files and hashes: 1: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl (hash: hNYOGlbwqzTPGs1eN0tzIbcPisU/APLZbgutV1CXSZc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 11:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ff:91:69:a7:2c:25:b7:a9:f2:ed:98:db:53:6b:a7:3d:b0:a4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Validity Not Before: Jun 13 09:56:43 2026 GMT Not After : Jun 14 11:43:43 2026 GMT Subject: CN=5A70D4A72F7DA299EF12BC90BDC2286A170BB1AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:19:92:34:8c:b6:d9:c0:bc:90:da:03:15:88: e1:b3:50:1f:28:3a:44:df:ff:e5:37:29:ce:18:e4: 63:db:08:ae:9e:11:01:d7:6a:66:99:ce:b0:73:09: 9a:e2:f6:ce:0f:6c:16:69:65:e9:26:27:60:d1:1f: 4a:7e:a2:af:fb:e8:2b:fe:bd:b4:ca:41:37:1d:f6: f2:bc:49:90:87:a7:b4:5a:9e:d3:c9:cf:f4:75:d5: c1:ac:fc:ef:90:0f:1d:54:17:ee:ca:58:0b:0c:21: b9:48:1e:40:a2:d0:bb:6e:97:ff:3c:ea:92:ff:c6: f7:96:d1:69:88:7b:e7:80:7d:df:cf:24:14:3a:70: 7f:16:14:97:a8:f4:80:18:68:10:32:38:d7:f7:f1: 8e:97:21:c7:fb:af:fc:d7:61:e6:88:4f:82:2e:ea: c9:58:a8:ca:33:cf:84:5b:e3:a1:75:f4:30:ed:13: 9e:21:60:58:e2:4f:fd:b6:27:36:66:aa:12:6e:49: 79:88:2c:46:ff:40:87:a5:b0:42:39:1c:42:7a:80: e4:c4:b6:dd:d4:d3:2c:03:63:49:2f:34:34:d2:a1: 86:61:16:9e:58:48:61:e7:e1:70:01:96:2b:9b:f7: b8:61:74:e0:12:1d:15:7b:01:85:c8:1c:de:ac:e6: 3c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:70:D4:A7:2F:7D:A2:99:EF:12:BC:90:BD:C2:28:6A:17:0B:B1:AC X509v3 Authority Key Identifier: keyid:AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a4:11:f8:9c:f4:15:b7:9b:c9:8a:a7:de:c1:b9:c6:33:d6: 12:f5:8c:b2:0e:d3:7e:b1:6e:b9:2b:3f:fd:c9:68:f2:5a:7a: cc:a0:a7:13:48:63:89:bc:a4:11:f6:3a:93:e6:fe:16:ff:3c: a9:e0:04:2b:2f:8a:64:37:b2:c0:a0:b1:b6:da:08:df:dd:33: cb:1c:f7:ca:b1:be:aa:df:85:25:c2:13:bd:d3:5a:30:64:7c: 90:92:4b:0d:5e:5e:97:b6:a0:b0:21:85:1f:82:d0:90:d5:bf: c0:00:e5:d0:16:ed:f9:d9:90:03:55:17:0a:8c:0b:9a:60:fe: 82:b0:7a:f4:a8:87:76:e9:f4:f7:06:f9:44:17:d2:66:29:f5: 91:24:26:ba:36:69:1b:cf:cb:eb:e6:51:43:3f:ab:cf:9d:f6: 29:5e:43:b0:31:51:c5:70:4a:fb:d0:dc:8d:cb:8f:dd:44:d7: 3d:31:6e:b0:04:89:28:b2:37:e9:8a:ba:c1:08:80:fe:12:04: ec:21:b2:19:15:1a:58:5b:a8:6a:e9:1e:36:54:f3:47:4a:ae: a9:6f:32:10:d8:ee:1d:6f:9b:42:5a:8b:e3:98:ad:01:de:2c: 77:b7:30:c7:3d:85:1a:10:f1:33:73:ab:17:ef:01:eb:4b:50: e6:3c:c1:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOf+RaacsJbep8u2Y21Nrpz2wpPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYz QzFGNzNDNjAeFw0yNjA2MTMwOTU2NDNaFw0yNjA2MTQxMTQzNDNaMDMxMTAvBgNV BAMTKDVBNzBENEE3MkY3REEyOTlFRjEyQkM5MEJEQzIyODZBMTcwQkIxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYGZI0jLbZwLyQ2gMViOGzUB8o OkTf/+U3Kc4Y5GPbCK6eEQHXamaZzrBzCZri9s4PbBZpZekmJ2DRH0p+oq/76Cv+ vbTKQTcd9vK8SZCHp7RantPJz/R11cGs/O+QDx1UF+7KWAsMIblIHkCi0Ltul/88 6pL/xveW0WmIe+eAfd/PJBQ6cH8WFJeo9IAYaBAyONf38Y6XIcf7r/zXYeaIT4Iu 6slYqMozz4Rb46F19DDtE54hYFjiT/22JzZmqhJuSXmILEb/QIelsEI5HEJ6gOTE tt3U0ywDY0kvNDTSoYZhFp5YSGHn4XABliub97hhdOASHRV7AYXIHN6s5jxNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWnDUpy99opnvEryQvcIoahcLsawwHwYDVR0j BBgwFoAUruGZHmaaawyX6KHcnJZXVjwfc8YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8xL0FFRTE5OTFFNjY5QTZCMEM5N0U4QTFEQzlDOTY1 NzU2M0MxRjczQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYzQzFGNzNDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMS9BRUUxOTkxRTY2OUE2 QjBDOTdFOEExREM5Qzk2NTc1NjNDMUY3M0M2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKQR+Jz0Fbeb yYqn3sG5xjPWEvWMsg7TfrFuuSs//clo8lp6zKCnE0hjibykEfY6k+b+Fv88qeAE Ky+KZDeywKCxttoI390zyxz3yrG+qt+FJcITvdNaMGR8kJJLDV5el7agsCGFH4LQ kNW/wADl0Bbt+dmQA1UXCowLmmD+grB69KiHdun09wb5RBfSZin1kSQmujZpG8/L 6+ZRQz+rz532KV5DsDFRxXBK+9DcjcuP3UTXPTFusASJKLI36Yq6wQiA/hIE7CGy GRUaWFuoaukeNlTzR0quqW8yENjuHW+bQlqL45itAd4sd7cwxz2FGhDxM3OrF+8B 60tQ5jzBrA== -----END CERTIFICATE-----Generated at Sun Jun 14 05:22:56 2026 by rpki-client