$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft File: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft (raw, json) Hash identifier: I7T20zRmuWUVcgl4HuJOqL22T+xjASrcEHNBWm5V7fM= Subject key identifier: A0:62:1A:BD:31:8E:56:A9:81:5C:7B:CA:01:6A:A9:AE:A4:06:03:81 Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9 Certificate issuer: /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9 Certificate serial: 705FECBD00CBCC7C4E9623FA4BC5D9AEBB4121CF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft Manifest number: 0D Signing time: Fri 17 Apr 2026 06:34:40 +0000 Manifest this update: Fri 17 Apr 2026 06:29:40 +0000 Manifest next update: Sat 18 Apr 2026 07:59:40 +0000 Files and hashes: 1: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl (hash: bUCM15O8gqs58qQlrFNpGMGiJXZTDcGrxrxa/yEXltA=) 2: 3130332e3136332e34362e302f32332d3234203d3e203538353139.roa (hash: tnfkAsqQvcqpL20P+LPe4F4kwN7iekWJ1PPQsYyrYg8=) 3: 3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa (hash: /uXfkAccy3v3a9BHA09vw6dKcshdQs/6n+DUQ8IYKi8=) 4: 3130332e33362e3232302e302f32322d3234203d3e203538353139.roa (hash: cpYrgo4yAI6Z4974RFpP1Ve2Wg+ZBptUjAdisTeBGyw=) 5: 3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa (hash: iVNiE9bxsTL+DkppA0g1irY1nuYRs9Q3qr7qbEuyfxk=) 6: 34332e3234302e3232302e302f32322d3234203d3e203538353139.roa (hash: vSeQnc0mmTH3jj/CmKx/qvwuVCC4G3xToac39RSw2JM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:5f:ec:bd:00:cb:cc:7c:4e:96:23:fa:4b:c5:d9:ae:bb:41:21:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9 Validity Not Before: Apr 17 06:29:40 2026 GMT Not After : Apr 18 07:59:40 2026 GMT Subject: CN=A0621ABD318E56A9815C7BCA016AA9AEA4060381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:cd:97:ce:59:ff:d1:46:b5:4a:4f:52:43: 57:07:e1:1d:9f:10:cf:ed:4a:46:7d:a3:b7:81:de: 66:d9:4e:f7:06:bc:f3:e6:c0:c7:63:aa:ca:73:85: 5e:67:e3:a3:bd:8b:9b:ee:6f:0b:ed:3f:60:5e:aa: cb:cd:aa:a3:21:5d:d6:5e:e2:b1:b7:1e:19:1d:39: b0:af:75:4d:ea:3f:b4:a2:5d:9e:b6:f5:4e:df:52: 88:df:f7:7a:b6:05:4d:45:31:2b:06:08:92:89:7d: 39:19:f5:1f:0b:e2:1f:67:d5:a2:e5:7f:38:f5:42: 81:9e:13:95:b2:e7:01:ee:4f:2e:8b:8f:0c:b7:d4: 9e:01:07:3d:0b:09:a5:8e:ea:07:ef:48:c2:4a:d9: cc:5f:65:5b:16:59:18:01:b1:48:60:c3:9d:20:b5: b3:d7:06:e0:bb:bd:a6:f0:4b:54:86:63:45:1c:77: ed:b4:30:2f:43:1a:e0:88:2d:fb:45:7a:90:59:d8: 9d:ed:d7:88:3a:63:3e:e6:45:69:c3:39:9e:29:b8: 50:44:15:a8:05:e9:32:a1:98:3b:dd:35:05:50:f6: 15:c4:8b:80:cf:cf:e4:64:f9:dc:4d:6e:48:d9:96: cf:f7:ee:4e:1b:da:b2:20:21:e0:f1:13:d2:01:5c: f1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:62:1A:BD:31:8E:56:A9:81:5C:7B:CA:01:6A:A9:AE:A4:06:03:81 X509v3 Authority Key Identifier: keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:5c:a4:1b:14:dc:9d:09:54:82:52:e1:35:75:5f:6c:c7:24: 53:85:67:0f:e6:d9:8d:3b:58:ff:7b:d9:f2:56:6a:8b:da:7b: 30:76:18:a5:7f:fb:dc:39:08:fe:84:b4:00:2c:cc:95:ce:fd: 94:17:e6:c8:d5:ac:cc:85:5f:a0:07:ce:ea:41:d5:b7:9b:c9: de:24:0f:76:d2:c2:1b:b1:b6:c1:20:ad:66:72:a3:4a:de:5a: d3:b8:7b:b6:a1:3d:11:7f:b3:8e:1c:a3:6c:79:03:1e:c4:1c: 6a:00:fd:e6:a6:d9:87:78:b4:49:fd:d8:a7:f7:69:48:66:98: 34:15:d9:98:b9:f9:fa:1b:6a:4b:94:f5:00:1d:1e:6f:c6:c9: f0:6c:e6:a1:1c:f5:42:c5:dc:2c:72:38:4b:df:fd:5b:e8:13: 5d:2e:9e:b9:32:9c:5a:1c:92:49:96:38:f2:44:7a:5d:cb:a0: 53:42:02:8e:8f:73:0c:c7:26:67:d1:07:fb:50:29:16:1d:30: a9:19:c4:d0:ba:a2:33:d0:e7:43:b9:c7:c8:79:57:ea:1b:f1: 46:e5:62:c3:76:6c:f7:57:00:63:c9:26:21:b9:73:b9:3d:f6: 41:a5:bc:97:78:7f:97:47:7a:79:ed:c0:57:43:1f:c4:58:df: 9d:89:9b:53 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcF/svQDLzHxOliP6S8XZrrtBIc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4 MDkxRTlFOTAeFw0yNjA0MTcwNjI5NDBaFw0yNjA0MTgwNzU5NDBaMDMxMTAvBgNV BAMTKEEwNjIxQUJEMzE4RTU2QTk4MTVDN0JDQTAxNkFBOUFFQTQwNjAzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP8c2Xzln/0Ua1Sk9SQ1cH4R2f EM/tSkZ9o7eB3mbZTvcGvPPmwMdjqspzhV5n46O9i5vubwvtP2BeqsvNqqMhXdZe 4rG3HhkdObCvdU3qP7SiXZ629U7fUojf93q2BU1FMSsGCJKJfTkZ9R8L4h9n1aLl fzj1QoGeE5Wy5wHuTy6Ljwy31J4BBz0LCaWO6gfvSMJK2cxfZVsWWRgBsUhgw50g tbPXBuC7vabwS1SGY0Ucd+20MC9DGuCILftFepBZ2J3t14g6Yz7mRWnDOZ4puFBE FagF6TKhmDvdNQVQ9hXEi4DPz+Rk+dxNbkjZls/37k4b2rIgIeDxE9IBXPGZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoGIavTGOVqmBXHvKAWqprqQGA4EwHwYDVR0j BBgwFoAUrkrSfTP51kt/ohhMbAMKe4CR6ekwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ4ODgyMjY4NDU4MTg5MC8wL0FFNEFEMjdEMzNGOUQ2NEI3RkEyMTg0QzZDMDMw QTdCODA5MUU5RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4MDkxRTlFOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0ODg4MjI2ODQ1ODE4OTAvMC9BRTRBRDI3RDMzRjlE NjRCN0ZBMjE4NEM2QzAzMEE3QjgwOTFFOUU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVykGxTcnQlU glLhNXVfbMckU4VnD+bZjTtY/3vZ8lZqi9p7MHYYpX/73DkI/oS0ACzMlc79lBfm yNWszIVfoAfO6kHVt5vJ3iQPdtLCG7G2wSCtZnKjSt5a07h7tqE9EX+zjhyjbHkD HsQcagD95qbZh3i0Sf3Yp/dpSGaYNBXZmLn5+htqS5T1AB0eb8bJ8GzmoRz1QsXc LHI4S9/9W+gTXS6euTKcWhySSZY48kR6XcugU0ICjo9zDMcmZ9EH+1ApFh0wqRnE 0LqiM9DnQ7nHyHlX6hvxRuViw3Zs91cAY8kmIblzuT32QaW8l3h/l0d6ee3AV0Mf xFjfnYmbUw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:26:34 2026 by rpki-client