$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft File: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft (raw, json) Hash identifier: a6X10fi6+PYcDdBdDiKpadLoBfgBqGBQr7R2JyNp/0s= Subject key identifier: 22:5E:BC:4D:A3:0C:AC:E6:51:32:DD:47:93:BD:28:85:BC:EF:13:D7 Authority key identifier: AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B Certificate issuer: /CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Certificate serial: 08BF8B964DD7A6B2966ED1CB57E07C79877647F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft Manifest number: 53 Signing time: Sat 13 Jun 2026 22:37:22 +0000 Manifest this update: Sat 13 Jun 2026 22:32:22 +0000 Manifest next update: Mon 15 Jun 2026 01:06:22 +0000 Files and hashes: 1: 3130332e36392e31362e302f32322d3232203d3e20313531323836.roa (hash: pipFRX3g8zpKBxJfoHYgo/R05QsqXUeAMaREmbsYQc4=) 2: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl (hash: UV/a/UNtLhjhk7HlaNNI+nBml+7IExH2IHTQ+AyJKUs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:bf:8b:96:4d:d7:a6:b2:96:6e:d1:cb:57:e0:7c:79:87:76:47:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Validity Not Before: Jun 13 22:32:22 2026 GMT Not After : Jun 15 01:06:22 2026 GMT Subject: CN=225EBC4DA30CACE65132DD4793BD2885BCEF13D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:5b:3f:c8:8b:42:6c:f2:34:8c:6c:46:2f: 1e:d0:60:1c:7f:24:70:d0:8e:c9:6c:4b:8b:4a:91: 43:6e:b8:22:bf:c6:10:cc:cb:f1:75:13:80:c3:ff: 71:ee:bb:95:ac:95:9a:00:db:61:28:b3:64:d2:b2: 79:86:63:54:cd:af:9f:15:b7:61:76:17:48:a4:cb: 67:98:4d:7c:7e:47:a8:62:ff:27:4f:f1:23:bd:f5: e1:b1:14:b9:f2:77:f2:06:58:01:b0:d2:39:bf:fd: 37:c1:fb:6d:e8:15:93:13:3b:b3:8b:14:18:6a:17: 60:70:e4:56:c7:d8:fc:33:c5:c6:0a:7d:51:2f:d1: 4c:25:89:d9:42:2e:4e:67:f5:03:ba:a7:4d:55:d3: dc:bb:72:08:d7:70:91:47:9e:3b:9a:bc:90:e1:0b: f5:10:7b:fa:c3:ee:ae:1a:98:e2:95:9f:b9:57:16: 12:49:a2:0a:9e:b9:fd:fe:2b:de:c6:14:8e:25:de: bd:7a:b9:92:87:98:42:b6:5b:76:6b:b4:ef:15:70: af:20:15:92:1c:c8:f5:f4:df:fc:d5:b0:a5:ce:81: b1:b7:b4:1e:ce:fd:51:07:83:29:2e:b4:08:0e:cd: e5:48:78:95:81:af:3e:e3:07:3c:8b:57:f1:3c:6d: 0a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5E:BC:4D:A3:0C:AC:E6:51:32:DD:47:93:BD:28:85:BC:EF:13:D7 X509v3 Authority Key Identifier: keyid:AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b1:6c:fe:2a:60:7e:9f:ce:e4:15:f4:31:46:c4:18:7d:00: 79:18:c9:2c:07:c3:fb:76:ca:c7:08:84:f8:20:88:43:c2:44: 97:94:9a:26:26:3a:e6:3e:ab:ab:68:19:ef:07:43:23:5a:c0: 1f:d5:9f:78:56:41:e0:17:41:ad:a3:4d:86:16:8f:ef:c4:e8: 47:2f:b2:da:ca:de:79:f5:51:4c:f9:99:ec:4e:22:af:56:00: de:3d:21:40:07:99:08:b2:81:f4:6d:99:86:e7:03:3a:8d:9c: 1b:61:31:7c:68:56:80:38:5d:7f:a9:04:16:74:f0:81:19:a0: 0f:91:5e:40:8c:83:19:ae:de:fd:0a:e0:3b:1f:c6:31:90:48: 9a:27:f6:43:90:46:8d:2a:c9:95:80:d8:d8:83:9f:41:36:18: e8:c7:e3:26:5b:1b:cf:e5:31:ec:31:f5:b2:a5:a0:34:7f:da: 6e:b0:3a:71:ac:b4:24:c6:df:07:6b:b5:0d:3d:5f:c5:23:c6: 6b:5e:6e:f6:9a:f1:69:aa:c3:e9:80:46:71:b3:91:82:31:43: f6:2b:d5:61:ab:1c:39:50:21:e0:a2:ee:c9:96:bc:6d:46:91: ae:00:72:cc:c2:cd:73:8d:2d:17:6d:0f:72:99:7c:38:a5:da: df:74:25:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCL+Llk3XprKWbtHLV+B8eYd2R/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2 RDMzRTQ0QjAeFw0yNjA2MTMyMjMyMjJaFw0yNjA2MTUwMTA2MjJaMDMxMTAvBgNV BAMTKDIyNUVCQzREQTMwQ0FDRTY1MTMyREQ0NzkzQkQyODg1QkNFRjEzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC281s/yItCbPI0jGxGLx7QYBx/ JHDQjslsS4tKkUNuuCK/xhDMy/F1E4DD/3Huu5WslZoA22Eos2TSsnmGY1TNr58V t2F2F0iky2eYTXx+R6hi/ydP8SO99eGxFLnyd/IGWAGw0jm//TfB+23oFZMTO7OL FBhqF2Bw5FbH2PwzxcYKfVEv0UwlidlCLk5n9QO6p01V09y7cgjXcJFHnjuavJDh C/UQe/rD7q4amOKVn7lXFhJJogqeuf3+K97GFI4l3r16uZKHmEK2W3ZrtO8VcK8g FZIcyPX03/zVsKXOgbG3tB7O/VEHgykutAgOzeVIeJWBrz7jBzyLV/E8bQrfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIl68TaMMrOZRMt1Hk70ohbzvE9cwHwYDVR0j BBgwFoAUrnXiydhKGtkzrjUqXKqVvW0z5EswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwOTk5NjU5Mzc5MDk3OC8wL0FFNzVFMkM5RDg0QTFBRDkzM0FFMzUyQTVDQUE5 NUJENkQzM0U0NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2RDMzRTQ0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDk5OTY1OTM3OTA5NzgvMC9BRTc1RTJDOUQ4NEEx QUQ5MzNBRTM1MkE1Q0FBOTVCRDZEMzNFNDRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7Fs/ipgfp/O 5BX0MUbEGH0AeRjJLAfD+3bKxwiE+CCIQ8JEl5SaJiY65j6rq2gZ7wdDI1rAH9Wf eFZB4BdBraNNhhaP78ToRy+y2sreefVRTPmZ7E4ir1YA3j0hQAeZCLKB9G2ZhucD Oo2cG2ExfGhWgDhdf6kEFnTwgRmgD5FeQIyDGa7e/QrgOx/GMZBImif2Q5BGjSrJ lYDY2IOfQTYY6MfjJlsbz+Ux7DH1sqWgNH/abrA6cay0JMbfB2u1DT1fxSPGa15u 9prxaarD6YBGcbORgjFD9ivVYascOVAh4KLuyZa8bUaRrgByzMLNc40tF20Pcpl8 OKXa33Ql6g== -----END CERTIFICATE-----Generated at Sun Jun 14 07:12:04 2026 by rpki-client