$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft File: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft (raw, json) Hash identifier: dfUkkEZQEucPxrHoKxR55lZzCBKvNhJ/FuPSrSMnH+U= Subject key identifier: 37:CB:4F:81:0F:2B:BF:BC:95:C2:48:FE:47:C2:95:D9:86:2E:E6:6C Authority key identifier: AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 Certificate issuer: /CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Certificate serial: 2995B135DDA90068A49413394BB6D6B3464C491C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft Manifest number: 81 Signing time: Sat 13 Jun 2026 13:41:49 +0000 Manifest this update: Sat 13 Jun 2026 13:36:49 +0000 Manifest next update: Sun 14 Jun 2026 17:08:49 +0000 Files and hashes: 1: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl (hash: LEuiOkZp4Zfs9iCYaaI7pMd9pQH39ZgPkeTKTaBqg+I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:95:b1:35:dd:a9:00:68:a4:94:13:39:4b:b6:d6:b3:46:4c:49:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Validity Not Before: Jun 13 13:36:49 2026 GMT Not After : Jun 14 17:08:49 2026 GMT Subject: CN=37CB4F810F2BBFBC95C248FE47C295D9862EE66C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:aa:ea:cf:86:af:16:eb:4b:c0:8d:25:2c: fb:0d:bd:95:b3:c4:10:3b:5c:1d:95:9e:63:2e:73: 5b:ad:3f:45:ab:7b:37:56:d7:a6:2d:6e:91:47:4c: 49:35:a1:01:99:fd:0b:79:a0:b7:08:ce:42:ec:e4: 1c:f3:10:2b:64:d8:bb:83:21:99:1c:95:b6:b8:ad: d7:49:1f:fe:e6:7c:c8:a5:72:ed:34:d9:54:81:cc: c6:07:61:f4:36:d1:32:c3:a2:ab:f1:ae:b6:6e:1b: ae:39:8e:21:a7:cb:56:d3:22:d7:2d:c8:36:74:02: 84:11:26:f8:72:58:2b:c6:ef:8e:78:76:6b:77:32: 58:2a:80:9c:f7:d2:60:b9:b4:b7:33:12:91:b2:df: 20:aa:a0:bf:ec:bc:f8:7a:97:5a:67:aa:75:3d:f5: 18:d0:a3:50:51:b7:15:ef:aa:ad:61:0c:73:22:c4: 08:cf:af:03:ce:bb:9b:b0:31:c2:f2:a9:fc:ed:49: c6:c3:b7:b8:05:e8:bb:1c:e9:0c:39:f8:19:7d:4f: d1:c4:1f:c9:b0:d4:7b:7b:c2:6a:bd:66:97:43:64: 0d:ef:0d:1b:ed:0a:04:53:74:03:87:49:d3:a5:5f: 9d:ed:5d:4c:11:b8:9a:2f:d3:b5:a8:a5:42:e1:0a: cd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CB:4F:81:0F:2B:BF:BC:95:C2:48:FE:47:C2:95:D9:86:2E:E6:6C X509v3 Authority Key Identifier: keyid:AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:04:7f:ef:e9:fc:e9:10:53:ab:1c:35:2a:0c:13:7f:d9:e3: 5a:0d:1f:88:88:58:e9:38:9f:9f:39:c2:90:dd:69:2d:50:25: 70:34:23:f0:1b:8e:b5:75:ac:04:f0:00:c8:23:8f:0c:a1:05: bc:fc:ca:50:10:37:91:d9:6d:95:de:91:db:ca:79:70:aa:1f: 45:ed:1f:2b:f6:f2:8e:43:b5:b3:bd:78:64:19:d7:6d:6a:ca: 3d:c1:91:9e:2d:62:a8:ed:61:90:14:76:8a:df:5f:72:aa:8d: bf:5e:57:8f:8b:a1:2f:bd:c5:62:d7:ea:8d:61:96:f7:86:32: 4f:ed:1f:28:97:ef:0e:8a:a3:b7:c8:fb:01:5a:dd:da:3e:b0: 98:21:f2:1c:63:64:e7:dd:05:ef:6c:58:96:0d:2b:4d:7f:1d: b7:c0:c9:2d:e0:70:6a:37:fe:5c:18:27:65:84:a1:9f:f7:3a: 7a:5f:56:54:4b:62:aa:ac:12:1b:bb:50:9a:aa:f4:1e:a6:21: 29:6a:34:f1:33:8b:74:d2:29:4d:d3:16:1b:ed:c7:d6:75:bd: 84:19:14:49:a2:dd:02:cc:e9:4e:4d:b3:7f:99:9c:97:7c:b8: fc:cd:8c:08:13:f2:21:8b:0b:71:4a:67:9f:ec:eb:6a:4d:18: 49:db:54:d1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKZWxNd2pAGiklBM5S7bWs0ZMSRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5 RjBEREM5MTAeFw0yNjA2MTMxMzM2NDlaFw0yNjA2MTQxNzA4NDlaMDMxMTAvBgNV BAMTKDM3Q0I0RjgxMEYyQkJGQkM5NUMyNDhGRTQ3QzI5NUQ5ODYyRUU2NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfV6rqz4avFutLwI0lLPsNvZWz xBA7XB2VnmMuc1utP0WrezdW16YtbpFHTEk1oQGZ/Qt5oLcIzkLs5BzzECtk2LuD IZkclba4rddJH/7mfMilcu002VSBzMYHYfQ20TLDoqvxrrZuG645jiGny1bTItct yDZ0AoQRJvhyWCvG7454dmt3MlgqgJz30mC5tLczEpGy3yCqoL/svPh6l1pnqnU9 9RjQo1BRtxXvqq1hDHMixAjPrwPOu5uwMcLyqfztScbDt7gF6Lsc6Qw5+Bl9T9HE H8mw1Ht7wmq9ZpdDZA3vDRvtCgRTdAOHSdOlX53tXUwRuJov07WopULhCs0/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUN8tPgQ8rv7yVwkj+R8KV2YYu5mwwHwYDVR0j BBgwFoAUrnHfcALdrGnSZolRr4Wfu58N3JEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MzU2NjEyNDUyOTg3Njk5NS8wL0FFNzFERjcwMDJEREFDNjlEMjY2ODk1MUFGODU5 RkJCOUYwRERDOTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5RjBEREM5MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODM1NjYxMjQ1Mjk4NzY5OTUvMC9BRTcxREY3MDAyRERB QzY5RDI2Njg5NTFBRjg1OUZCQjlGMEREQzkxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAR/7+n86RBT qxw1KgwTf9njWg0fiIhY6TifnznCkN1pLVAlcDQj8BuOtXWsBPAAyCOPDKEFvPzK UBA3kdltld6R28p5cKofRe0fK/byjkO1s714ZBnXbWrKPcGRni1iqO1hkBR2it9f cqqNv15Xj4uhL73FYtfqjWGW94YyT+0fKJfvDoqjt8j7AVrd2j6wmCHyHGNk590F 72xYlg0rTX8dt8DJLeBwajf+XBgnZYShn/c6el9WVEtiqqwSG7tQmqr0HqYhKWo0 8TOLdNIpTdMWG+3H1nW9hBkUSaLdAszpTk2zf5mcl3y4/M2MCBPyIYsLcUpnn+zr ak0YSdtU0Q== -----END CERTIFICATE-----Generated at Sun Jun 14 07:09:36 2026 by rpki-client