$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft File: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft (raw, json) Hash identifier: aKWYh77lj8SCl6sJ0ew8PhMyeBYSXHNldHtAlW+ZsG0= Subject key identifier: 59:DB:9E:54:61:41:A6:14:96:26:AB:88:ED:14:62:44:C7:C5:B1:62 Authority key identifier: AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 Certificate issuer: /CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Certificate serial: 4CC48023E74AE7FCF9097CE88594377B8DAE4D88 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft Manifest number: BE Signing time: Wed 29 Jul 2026 11:44:16 +0000 Manifest this update: Wed 29 Jul 2026 11:39:16 +0000 Manifest next update: Thu 30 Jul 2026 14:33:16 +0000 Files and hashes: 1: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl (hash: KsbN3SnLA3XM5lcySxxED0E6XzJFzhTpIEZ05MZdNr4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 14:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c4:80:23:e7:4a:e7:fc:f9:09:7c:e8:85:94:37:7b:8d:ae:4d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Validity Not Before: Jul 29 11:39:16 2026 GMT Not After : Jul 30 14:33:16 2026 GMT Subject: CN=59DB9E546141A6149626AB88ED146244C7C5B162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:3e:7d:f1:b1:3c:e0:bc:d1:4a:bc:d5:37: d4:c9:ef:19:a1:a3:72:09:6c:ab:0f:0e:64:3c:72: d2:86:71:0a:77:58:c3:ae:d8:e6:10:a9:3f:42:a7: 12:69:2f:b5:9a:0d:61:9b:8a:b9:39:8d:30:36:2c: 13:d5:eb:93:64:21:8a:88:cd:d0:64:4e:5b:93:6b: 2a:94:24:95:08:6c:bc:de:0d:e5:9b:e9:49:8d:7a: 6a:e6:11:dd:19:d8:da:97:a3:6c:24:e2:56:44:d2: 25:75:d3:6c:9f:cd:5d:6f:1c:fb:5b:ed:a0:74:d8: e0:3b:61:8c:92:16:85:90:e3:c3:ec:8b:b8:3a:70: f8:77:7e:04:89:ca:69:34:da:63:ad:15:ad:76:e9: 68:29:a9:72:f1:7d:9a:1d:41:d5:19:aa:7e:88:06: 77:da:59:83:64:66:70:76:5a:a0:ee:6d:5c:bb:67: 86:af:12:0d:e0:8f:5a:6e:3f:8d:89:1b:b6:54:ef: dc:4f:18:2d:d7:1d:b9:12:1a:87:c6:c9:a6:57:73: 53:48:7a:54:d2:91:99:b4:58:e0:9b:db:0e:8c:0f: f5:03:e0:36:ae:a5:15:6f:39:c5:77:08:eb:3a:12: dd:3b:cb:84:04:b9:73:a3:7d:36:2c:fa:96:1d:a4: 3d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DB:9E:54:61:41:A6:14:96:26:AB:88:ED:14:62:44:C7:C5:B1:62 X509v3 Authority Key Identifier: keyid:AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ce:a8:d5:12:71:ac:1b:32:4d:25:6b:a8:0b:81:a2:be:cb: 2f:b7:08:26:77:ce:30:38:fb:11:8f:d5:72:65:af:b0:74:ca: 96:1f:3b:f3:26:a2:a3:cb:1c:f7:f2:40:a9:1a:25:8f:e6:6b: 55:53:af:2f:c8:c8:f9:a9:a8:cd:be:50:40:a8:d5:7f:41:a3: 01:ef:8f:d6:fc:c4:07:b6:cf:3e:3b:b0:fe:20:5a:3f:ab:64: 08:9c:a5:a3:80:03:de:1b:8c:5a:8f:42:c2:48:ad:cf:ca:b9: 30:37:2b:26:d4:79:d0:50:c8:c0:0e:c9:15:53:26:80:aa:a5: 6f:c0:51:75:cb:3c:7f:6e:f9:45:44:b2:30:c5:d7:f6:25:aa: 20:13:59:25:c5:62:79:22:19:bb:79:f2:ab:89:b7:d2:4a:9e: 33:4b:a7:94:87:fd:46:80:61:ee:c5:85:d3:fd:6c:45:6a:56: f7:11:29:04:26:33:a7:72:1b:7a:be:66:89:cc:3a:7e:33:b4: 80:91:93:32:85:26:2c:00:bd:ef:15:ed:e6:fe:aa:21:b4:12: a8:e6:52:d7:2d:34:75:ac:5b:b8:cc:7a:19:2b:b5:38:c6:73: 63:ae:27:65:2b:b9:fc:9d:9a:85:8d:3e:28:bc:1d:52:1e:6d: 51:d3:8a:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTMSAI+dK5/z5CXzohZQ3e42uTYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5 RjBEREM5MTAeFw0yNjA3MjkxMTM5MTZaFw0yNjA3MzAxNDMzMTZaMDMxMTAvBgNV BAMTKDU5REI5RTU0NjE0MUE2MTQ5NjI2QUI4OEVEMTQ2MjQ0QzdDNUIxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94z598bE84LzRSrzVN9TJ7xmh o3IJbKsPDmQ8ctKGcQp3WMOu2OYQqT9CpxJpL7WaDWGbirk5jTA2LBPV65NkIYqI zdBkTluTayqUJJUIbLzeDeWb6UmNemrmEd0Z2NqXo2wk4lZE0iV102yfzV1vHPtb 7aB02OA7YYySFoWQ48Psi7g6cPh3fgSJymk02mOtFa126WgpqXLxfZodQdUZqn6I BnfaWYNkZnB2WqDubVy7Z4avEg3gj1puP42JG7ZU79xPGC3XHbkSGofGyaZXc1NI elTSkZm0WOCb2w6MD/UD4DaupRVvOcV3COs6Et07y4QEuXOjfTYs+pYdpD2pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWdueVGFBphSWJquI7RRiRMfFsWIwHwYDVR0j BBgwFoAUrnHfcALdrGnSZolRr4Wfu58N3JEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MzU2NjEyNDUyOTg3Njk5NS8wL0FFNzFERjcwMDJEREFDNjlEMjY2ODk1MUFGODU5 RkJCOUYwRERDOTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5RjBEREM5MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODM1NjYxMjQ1Mjk4NzY5OTUvMC9BRTcxREY3MDAyRERB QzY5RDI2Njg5NTFBRjg1OUZCQjlGMEREQzkxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZs6o1RJxrBsy TSVrqAuBor7LL7cIJnfOMDj7EY/VcmWvsHTKlh878yaio8sc9/JAqRolj+ZrVVOv L8jI+amozb5QQKjVf0GjAe+P1vzEB7bPPjuw/iBaP6tkCJylo4AD3huMWo9Cwkit z8q5MDcrJtR50FDIwA7JFVMmgKqlb8BRdcs8f275RUSyMMXX9iWqIBNZJcVieSIZ u3nyq4m30kqeM0unlIf9RoBh7sWF0/1sRWpW9xEpBCYzp3Iber5micw6fjO0gJGT MoUmLAC97xXt5v6qIbQSqOZS1y00daxbuMx6GSu1OMZzY64nZSu5/J2ahY0+KLwd Uh5tUdOK9w== -----END CERTIFICATE-----Generated at Wed Jul 29 23:01:04 2026 by rpki-client