$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft File: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft (raw, json) Hash identifier: 7+oVzvo7zh0VQ7mAe3kONLsE5+Xz7bzSxZjpHNYbNFg= Subject key identifier: 3D:D1:33:30:DC:B4:C0:44:AF:FB:BA:5B:3E:6E:E6:0E:21:1F:59:7C Authority key identifier: AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 Certificate issuer: /CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Certificate serial: 692DBE6EFE9058918FD03CA43A8299C39714034D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft Manifest number: 34 Signing time: Thu 16 Apr 2026 21:59:35 +0000 Manifest this update: Thu 16 Apr 2026 21:54:35 +0000 Manifest next update: Fri 17 Apr 2026 23:44:35 +0000 Files and hashes: 1: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl (hash: che5W2fmvbiWtYt8SOOGR1uTjkfzWgDNFZPo2D8QmK8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 23:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:2d:be:6e:fe:90:58:91:8f:d0:3c:a4:3a:82:99:c3:97:14:03:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Validity Not Before: Apr 16 21:54:35 2026 GMT Not After : Apr 17 23:44:35 2026 GMT Subject: CN=3DD13330DCB4C044AFFBBA5B3E6EE60E211F597C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:5d:e7:4b:4f:30:cb:39:1d:79:24:93:1d: 8a:7c:eb:17:48:f1:28:66:fd:53:a7:29:8e:9e:7e: 79:53:3d:de:da:39:2c:e0:6a:b0:05:53:98:50:14: 3c:4f:4b:54:db:6c:4d:f4:6f:13:5f:ec:93:88:b6: 7f:cc:5b:87:82:51:7f:9c:57:d7:7d:b8:2c:65:37: c3:f3:6e:d3:db:87:9f:1e:87:8c:35:81:a0:1f:09: d7:fe:92:bb:07:02:3b:7d:3c:dd:2f:c6:2f:a7:b7: 22:8e:cd:14:73:d7:96:4a:99:df:2d:b2:2f:bf:e9: 1a:7e:fb:6b:77:a4:32:d6:cc:83:a9:d1:23:66:d0: 20:ad:1d:a4:f7:70:b2:74:7b:82:1f:09:09:1c:d8: d3:1d:ac:31:ed:f1:75:1d:ae:d3:ab:e3:2c:d8:ac: df:84:12:84:9c:3f:d9:59:e8:e4:c8:80:8f:57:78: 71:94:d2:c8:35:d5:74:f6:d7:52:b4:7e:73:94:f7: 03:e1:70:d0:6f:2f:93:48:84:ed:4b:b6:d8:f6:da: 59:e5:60:08:7a:2d:39:88:1d:a5:c4:d3:ed:28:92: 47:b9:b6:e8:76:75:0b:e7:3e:88:7d:26:8c:b5:bb: 2e:3c:7d:80:d4:b3:fb:30:12:cd:74:69:31:9f:38: d6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D1:33:30:DC:B4:C0:44:AF:FB:BA:5B:3E:6E:E6:0E:21:1F:59:7C X509v3 Authority Key Identifier: keyid:AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:2b:0f:15:2a:2f:d1:04:29:c6:fe:88:d3:52:37:0d:6e:1a: 80:90:d4:5e:2d:bd:9f:b4:32:c3:f7:87:c9:47:fe:c6:92:d7: 18:f9:6f:c1:76:d0:b0:52:fe:19:c5:16:76:bd:f3:09:32:b2: 63:20:04:89:98:2b:bc:79:4c:04:80:dd:19:4b:a7:9d:ff:e3: e3:d8:75:f3:40:b6:5d:a2:d2:27:51:b7:d0:5b:b0:a6:2c:7e: 06:d7:18:69:3c:b6:73:7f:1e:fe:ae:28:e3:9f:16:ac:ea:11: 77:a0:95:f2:d4:a0:62:5f:db:38:5d:19:6d:ee:af:b3:24:7f: db:7b:8b:5e:72:03:36:fc:df:f2:c0:2a:30:9b:34:8c:c3:da: f9:b5:3e:4a:8f:8b:59:ad:98:11:1c:88:9d:b4:69:2c:50:a5: 83:e8:b4:76:78:7e:f3:72:af:84:0d:fe:a0:ac:b4:63:36:b0: 42:07:57:5b:49:c5:f9:47:14:72:1f:03:34:03:04:22:05:28: 9b:36:e2:19:3d:a4:c5:b9:78:a6:a7:fb:96:13:4e:77:f2:ff: 68:af:31:f2:16:15:ab:06:73:00:93:36:23:a1:92:47:00:06: 5e:30:4f:36:0e:b1:25:3b:2b:39:d7:66:97:a0:af:0d:1b:96: e2:df:33:fd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaS2+bv6QWJGP0DykOoKZw5cUA00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5 RjBEREM5MTAeFw0yNjA0MTYyMTU0MzVaFw0yNjA0MTcyMzQ0MzVaMDMxMTAvBgNV BAMTKDNERDEzMzMwRENCNEMwNDRBRkZCQkE1QjNFNkVFNjBFMjExRjU5N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXF3nS08wyzkdeSSTHYp86xdI 8Shm/VOnKY6efnlTPd7aOSzgarAFU5hQFDxPS1TbbE30bxNf7JOItn/MW4eCUX+c V9d9uCxlN8PzbtPbh58eh4w1gaAfCdf+krsHAjt9PN0vxi+ntyKOzRRz15ZKmd8t si+/6Rp++2t3pDLWzIOp0SNm0CCtHaT3cLJ0e4IfCQkc2NMdrDHt8XUdrtOr4yzY rN+EEoScP9lZ6OTIgI9XeHGU0sg11XT211K0fnOU9wPhcNBvL5NIhO1Lttj22lnl YAh6LTmIHaXE0+0okke5tuh2dQvnPoh9Joy1uy48fYDUs/swEs10aTGfONZTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPdEzMNy0wESv+7pbPm7mDiEfWXwwHwYDVR0j BBgwFoAUrnHfcALdrGnSZolRr4Wfu58N3JEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MzU2NjEyNDUyOTg3Njk5NS8wL0FFNzFERjcwMDJEREFDNjlEMjY2ODk1MUFGODU5 RkJCOUYwRERDOTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5RjBEREM5MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODM1NjYxMjQ1Mjk4NzY5OTUvMC9BRTcxREY3MDAyRERB QzY5RDI2Njg5NTFBRjg1OUZCQjlGMEREQzkxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnysPFSov0QQp xv6I01I3DW4agJDUXi29n7Qyw/eHyUf+xpLXGPlvwXbQsFL+GcUWdr3zCTKyYyAE iZgrvHlMBIDdGUunnf/j49h180C2XaLSJ1G30Fuwpix+BtcYaTy2c38e/q4o458W rOoRd6CV8tSgYl/bOF0Zbe6vsyR/23uLXnIDNvzf8sAqMJs0jMPa+bU+So+LWa2Y ERyInbRpLFClg+i0dnh+83KvhA3+oKy0YzawQgdXW0nF+UcUch8DNAMEIgUomzbi GT2kxbl4pqf7lhNOd/L/aK8x8hYVqwZzAJM2I6GSRwAGXjBPNg6xJTsrOddml6Cv DRuW4t8z/Q== -----END CERTIFICATE-----Generated at Fri Apr 17 05:24:53 2026 by rpki-client