$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft File: AEB6C1171350C22B2084932E16868862A537F167.mft (raw, json) Hash identifier: MdBxzDaVNDFZPDd3PYwo3rq0kfxS+1IdY9ESavUNd+Y= Subject key identifier: 97:F0:E6:98:C2:51:67:C1:07:0F:A3:C3:64:54:D7:AF:C0:FD:30:0F Authority key identifier: AE:B6:C1:17:13:50:C2:2B:20:84:93:2E:16:86:88:62:A5:37:F1:67 Certificate issuer: /CN=AEB6C1171350C22B2084932E16868862A537F167 Certificate serial: 2DE867A0375F8AFA4B4A647861A13DE69924290F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft Manifest number: D2 Signing time: Tue 13 Oct 2026 09:02:53 +0000 Manifest this update: Tue 13 Oct 2026 08:57:53 +0000 Manifest next update: Fri 16 Oct 2026 15:46:53 +0000 Files and hashes: 1: AEB6C1171350C22B2084932E16868862A537F167.crl (hash: /FSVuUqiIGOIEut1JNgzAea0cue2nPbKuaLWYlssYlU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.crl rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 15:46:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e8:67:a0:37:5f:8a:fa:4b:4a:64:78:61:a1:3d:e6:99:24:29:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB6C1171350C22B2084932E16868862A537F167 Validity Not Before: Oct 13 08:57:53 2026 GMT Not After : Oct 16 15:46:53 2026 GMT Subject: CN=97F0E698C25167C1070FA3C36454D7AFC0FD300F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:24:a1:02:4c:d9:83:0e:1c:b1:9d:44:be: f4:d0:18:5f:c9:e7:c7:f4:08:b1:94:95:0f:40:83: 7d:83:62:91:86:84:ba:f7:13:8a:fb:53:87:b0:a4: e4:1a:76:fd:c7:35:25:9c:5e:ec:7e:ae:70:44:71: 44:cf:42:2c:1f:d4:93:d0:c8:cd:65:ca:df:83:70: bb:c5:c9:6e:1e:5c:45:30:65:fa:2b:a5:23:8d:6d: a3:ce:be:1d:6e:6b:3d:3f:c0:2b:3e:98:13:44:d4: f8:b9:8d:72:9d:aa:32:78:c4:59:73:1c:4f:c2:8b: 5e:ac:0b:2a:23:09:b5:e7:4f:d9:0f:64:27:2a:4f: ca:c9:83:3d:37:6d:2c:95:40:46:6d:70:4e:e2:df: dc:5d:03:fa:7d:60:b1:5f:36:55:f8:ba:5a:47:9a: ee:db:9c:7c:ba:a1:bf:24:14:4b:64:8b:29:f2:87: db:67:9a:1d:a0:4a:0b:eb:69:b2:84:50:6c:2d:d7: b2:bd:0f:b5:ab:66:b0:49:46:55:dd:c5:07:3f:72: d5:ba:64:e9:60:85:17:96:04:74:20:f0:86:f7:d8: 45:24:3f:b0:b0:a6:f3:83:dd:fa:d8:8a:48:e3:a7: a3:b2:df:fa:27:c0:e0:90:89:ce:a8:15:99:77:24: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F0:E6:98:C2:51:67:C1:07:0F:A3:C3:64:54:D7:AF:C0:FD:30:0F X509v3 Authority Key Identifier: keyid:AE:B6:C1:17:13:50:C2:2B:20:84:93:2E:16:86:88:62:A5:37:F1:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:29:cc:e6:c5:96:67:bc:db:9f:fe:5d:f3:b7:5d:da:0f:a7: 51:0f:3c:38:c2:a1:2f:96:15:86:22:73:a4:ed:61:d1:e6:3e: 5c:44:0e:0c:49:5c:a2:fa:01:c1:73:63:b9:02:e7:da:a4:e6: 2a:67:33:27:72:6e:5a:9c:80:5a:1d:98:ae:87:f1:0b:34:a0: 49:c5:35:22:48:71:8b:cf:dc:6c:d9:43:ab:34:8f:b9:67:94: 26:9d:b2:cf:78:51:9b:ba:91:81:6e:fa:85:22:3e:92:1a:11: 14:f2:9b:16:6f:f3:3a:17:cd:c6:6e:1e:56:20:2b:a1:35:7e: fd:e2:e2:35:b0:9e:50:56:eb:65:38:60:ac:05:6a:59:c6:47: 56:c6:e6:d1:2c:b5:41:e3:e3:f4:df:3b:51:af:2b:54:28:2f: 2b:f0:09:db:4b:a6:bd:9c:c8:48:47:ed:b0:0d:b6:f1:b4:b8: 7a:6c:ba:38:e5:7e:aa:56:48:7e:33:c7:fe:c8:3a:db:bc:7f: 15:cb:c2:62:ff:b5:88:c2:7e:c4:46:17:0f:10:70:ff:55:20: d9:fc:44:e0:fe:79:ac:3d:a9:42:7c:63:60:30:db:1d:14:52: 82:a5:26:cc:ff:96:5f:3d:5c:70:74:08:9b:85:48:47:b3:e0: 2f:29:2e:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULehnoDdfivpLSmR4YaE95pkkKQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCNkMxMTcxMzUwQzIyQjIwODQ5MzJFMTY4Njg4NjJB NTM3RjE2NzAeFw0yNjEwMTMwODU3NTNaFw0yNjEwMTYxNTQ2NTNaMDMxMTAvBgNV BAMTKDk3RjBFNjk4QzI1MTY3QzEwNzBGQTNDMzY0NTREN0FGQzBGRDMwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBOSShAkzZgw4csZ1EvvTQGF/J 58f0CLGUlQ9Ag32DYpGGhLr3E4r7U4ewpOQadv3HNSWcXux+rnBEcUTPQiwf1JPQ yM1lyt+DcLvFyW4eXEUwZforpSONbaPOvh1uaz0/wCs+mBNE1Pi5jXKdqjJ4xFlz HE/Ci16sCyojCbXnT9kPZCcqT8rJgz03bSyVQEZtcE7i39xdA/p9YLFfNlX4ulpH mu7bnHy6ob8kFEtkiynyh9tnmh2gSgvrabKEUGwt17K9D7WrZrBJRlXdxQc/ctW6 ZOlghReWBHQg8Ib32EUkP7CwpvOD3frYikjjp6Oy3/onwOCQic6oFZl3JNvZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl/DmmMJRZ8EHD6PDZFTXr8D9MA8wHwYDVR0j BBgwFoAUrrbBFxNQwisghJMuFoaIYqU38WcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ2ODMxMDY5NjcyMjQzNS8wL0FFQjZDMTE3MTM1MEMyMkIyMDg0OTMyRTE2ODY4 ODYyQTUzN0YxNjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUVCNkMxMTcxMzUwQzIyQjIwODQ5MzJFMTY4Njg4NjJBNTM3RjE2Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0NjgzMTA2OTY3MjI0MzUvMC9BRUI2QzExNzEzNTBD MjJCMjA4NDkzMkUxNjg2ODg2MkE1MzdGMTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACnM5sWWZ7zb n/5d87dd2g+nUQ88OMKhL5YVhiJzpO1h0eY+XEQODElcovoBwXNjuQLn2qTmKmcz J3JuWpyAWh2YrofxCzSgScU1Ikhxi8/cbNlDqzSPuWeUJp2yz3hRm7qRgW76hSI+ khoRFPKbFm/zOhfNxm4eViAroTV+/eLiNbCeUFbrZThgrAVqWcZHVsbm0Sy1QePj 9N87Ua8rVCgvK/AJ20umvZzISEftsA228bS4emy6OOV+qlZIfjPH/sg627x/FcvC Yv+1iMJ+xEYXDxBw/1Ug2fxE4P55rD2pQnxjYDDbHRRSgqUmzP+WXz1ccHQIm4VI R7PgLykuMQ== -----END CERTIFICATE-----Generated at Thu Oct 15 13:50:10 2026 by rpki-client