$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft File: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft (raw, json) Hash identifier: TwL2ZKOqVVakz+lkKAAzM9K7AEilA0O667uwIU098TA= Subject key identifier: 91:2E:40:32:75:9E:DA:B2:40:F4:03:78:44:70:FA:6F:C2:41:21:10 Authority key identifier: AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 Certificate issuer: /CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Certificate serial: 612A3C3AAED8460B8E5C1F2EC335DA64FF4330EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft Manifest number: 30 Signing time: Mon 02 Mar 2026 04:23:16 +0000 Manifest this update: Mon 02 Mar 2026 04:18:16 +0000 Manifest next update: Tue 03 Mar 2026 07:58:16 +0000 Files and hashes: 1: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl (hash: 7rl7uIhs/wMyEZ+vSlX8C1CI6TLSy7/lrDsUC63AtDM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:2a:3c:3a:ae:d8:46:0b:8e:5c:1f:2e:c3:35:da:64:ff:43:30:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Validity Not Before: Mar 2 04:18:16 2026 GMT Not After : Mar 3 07:58:16 2026 GMT Subject: CN=912E4032759EDAB240F403784470FA6FC2412110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8e:c6:43:fa:63:24:36:77:cf:0a:3a:ec:f6: e6:d7:7d:98:e9:82:5b:b6:7f:18:be:52:57:5f:5d: 3d:c5:83:81:14:92:3d:dc:49:48:29:c1:f4:b3:d6: f2:5e:a4:d0:e4:9b:80:bc:9e:32:9d:01:5b:7c:cd: 8c:50:de:99:2d:2e:5a:70:2a:fa:f4:9f:52:23:ba: 68:42:bd:95:63:8c:c6:99:df:40:f9:85:ea:5c:8f: de:cd:ef:f1:6a:b0:80:fa:ec:ee:e6:ba:61:59:fe: cd:dc:e0:9b:a5:d4:6b:bd:87:99:2f:b9:02:a7:a8: 73:31:5d:65:8a:cf:28:de:51:a8:83:46:33:0c:e7: d0:9b:d3:52:62:91:12:da:6b:34:68:84:5a:d1:b2: ca:18:6e:c0:57:87:d9:11:a8:23:d6:4d:ea:aa:ef: 7d:67:14:d6:18:14:77:db:38:ce:73:62:b7:e9:4e: dc:aa:1f:93:5f:21:31:52:48:65:9c:c9:37:1d:8c: ee:44:e1:86:cc:7a:ff:0c:89:d2:59:25:98:e0:55: 13:96:a1:1f:eb:54:93:72:63:bd:21:4b:89:28:50: 31:ad:0a:3b:52:ae:ef:49:fe:00:ef:8f:fb:72:c6: b5:60:c6:f6:40:7f:82:5d:08:d7:04:91:68:46:ad: 23:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2E:40:32:75:9E:DA:B2:40:F4:03:78:44:70:FA:6F:C2:41:21:10 X509v3 Authority Key Identifier: keyid:AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:12:ad:6d:7f:b4:f4:41:e8:f0:af:c9:dd:74:2c:5b:44:f7: 71:57:10:7b:26:e2:25:3c:15:d5:94:e5:13:44:46:9a:04:cd: ac:8c:de:78:34:13:44:69:9f:77:c2:fd:2a:93:9a:dd:79:34: df:a9:a5:67:b7:21:e7:f0:a1:1e:0e:1a:d2:1e:4b:cd:b1:2c: 00:0a:f0:34:eb:75:0e:69:12:2b:f6:5c:2b:13:b4:25:10:46: 0b:84:1d:94:d7:77:4b:72:f5:1c:e6:43:99:7a:1a:de:9c:0f: a8:f3:74:6e:9d:0e:45:e5:51:64:70:50:86:c4:a0:27:a9:67: e9:41:d2:39:8f:6c:62:a2:30:23:d4:ef:f4:7b:41:1d:71:ab: 65:93:c8:88:61:74:cb:fe:ad:11:b1:92:10:a0:31:b5:23:9f: 26:51:e5:93:37:c8:57:91:cc:2c:d7:cf:da:15:2d:3d:6a:68: 7f:12:ce:a1:e6:2c:86:c3:ee:00:84:5f:1d:e9:e3:e3:c6:0f: 24:1f:93:d0:03:1c:d8:b1:a8:2c:7a:e1:2e:8d:ad:c2:73:2c: d8:1f:82:7e:e2:ec:2c:75:bd:11:e4:22:cc:21:db:79:69:26: bc:a0:62:3f:bc:4c:67:ef:ca:b5:f7:b0:38:ed:08:b4:2d:96: 4a:30:06:f2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYSo8Oq7YRguOXB8uwzXaZP9DMO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYz QzFGNzNDNjAeFw0yNjAzMDIwNDE4MTZaFw0yNjAzMDMwNzU4MTZaMDMxMTAvBgNV BAMTKDkxMkU0MDMyNzU5RURBQjI0MEY0MDM3ODQ0NzBGQTZGQzI0MTIxMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkjsZD+mMkNnfPCjrs9ubXfZjp glu2fxi+UldfXT3Fg4EUkj3cSUgpwfSz1vJepNDkm4C8njKdAVt8zYxQ3pktLlpw Kvr0n1IjumhCvZVjjMaZ30D5hepcj97N7/FqsID67O7mumFZ/s3c4Jul1Gu9h5kv uQKnqHMxXWWKzyjeUaiDRjMM59Cb01JikRLaazRohFrRssoYbsBXh9kRqCPWTeqq 731nFNYYFHfbOM5zYrfpTtyqH5NfITFSSGWcyTcdjO5E4YbMev8MidJZJZjgVROW oR/rVJNyY70hS4koUDGtCjtSru9J/gDvj/tyxrVgxvZAf4JdCNcEkWhGrSN7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkS5AMnWe2rJA9AN4RHD6b8JBIRAwHwYDVR0j BBgwFoAUruGZHmaaawyX6KHcnJZXVjwfc8YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8xL0FFRTE5OTFFNjY5QTZCMEM5N0U4QTFEQzlDOTY1 NzU2M0MxRjczQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYzQzFGNzNDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMS9BRUUxOTkxRTY2OUE2 QjBDOTdFOEExREM5Qzk2NTc1NjNDMUY3M0M2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBKtbX+09EHo 8K/J3XQsW0T3cVcQeybiJTwV1ZTlE0RGmgTNrIzeeDQTRGmfd8L9KpOa3Xk036ml Z7ch5/ChHg4a0h5LzbEsAArwNOt1DmkSK/ZcKxO0JRBGC4QdlNd3S3L1HOZDmXoa 3pwPqPN0bp0OReVRZHBQhsSgJ6ln6UHSOY9sYqIwI9Tv9HtBHXGrZZPIiGF0y/6t EbGSEKAxtSOfJlHlkzfIV5HMLNfP2hUtPWpofxLOoeYshsPuAIRfHenj48YPJB+T 0AMc2LGoLHrhLo2twnMs2B+CfuLsLHW9EeQizCHbeWkmvKBiP7xMZ+/KtfewOO0I tC2WSjAG8g== -----END CERTIFICATE-----Generated at Mon Mar 2 22:32:10 2026 by rpki-client