$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft File: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft (raw, json) Hash identifier: Z5WdjM1J0F5fO/Q7AL8Xt9JQjKGADHy9v5xyHiuJZv4= Subject key identifier: 29:3D:07:CE:35:3C:51:37:6F:7D:DB:C6:39:AE:01:C7:5B:CB:C5:F8 Authority key identifier: AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B Certificate issuer: /CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Certificate serial: 22F0A60CE733A0A2E0863A7F83897A952755FC26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft Manifest number: 8F Signing time: Wed 29 Jul 2026 07:53:50 +0000 Manifest this update: Wed 29 Jul 2026 07:48:50 +0000 Manifest next update: Thu 30 Jul 2026 11:31:50 +0000 Files and hashes: 1: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl (hash: 3la0OqN/+65k7Y1Ou/LKCacq9dWDX16em/ESm6QTpAc=) 2: 3130332e36392e31362e302f32322d3232203d3e20313531323836.roa (hash: pipFRX3g8zpKBxJfoHYgo/R05QsqXUeAMaREmbsYQc4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f0:a6:0c:e7:33:a0:a2:e0:86:3a:7f:83:89:7a:95:27:55:fc:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Validity Not Before: Jul 29 07:48:50 2026 GMT Not After : Jul 30 11:31:50 2026 GMT Subject: CN=293D07CE353C51376F7DDBC639AE01C75BCBC5F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fb:85:c2:ba:ea:fd:38:14:8e:3f:bb:0c:83: 3b:f6:11:67:d5:ff:43:1c:ff:38:4d:73:6b:fc:76: 55:98:61:2b:67:3a:8f:83:1d:73:6a:07:a1:49:9e: 5d:cb:cb:5d:13:95:b5:31:3f:8a:6e:01:10:09:b4: 4a:2f:d3:5c:79:b2:e9:1d:c8:cd:fa:bc:53:b5:0f: e6:e7:cc:83:fd:75:e9:3d:27:5b:6d:99:a2:c5:c5: 4f:92:3f:e0:ca:57:39:0d:1d:0b:a0:d6:9f:7f:03: 6a:f2:e3:6b:b5:5f:a1:56:3b:bc:cc:ef:ae:84:13: f1:55:f4:5a:e6:fb:1c:8f:e2:3f:8c:8b:dd:a8:84: 1e:a6:3d:5b:c5:92:20:97:29:aa:0e:82:ea:23:c9: 24:7c:a4:3a:75:88:24:20:47:86:78:a5:e5:45:6b: ce:f5:d9:bd:e0:f2:41:64:32:eb:40:69:66:0d:5c: 98:e1:84:f1:72:71:7b:e6:72:e3:d8:29:31:43:dd: 9f:cc:e4:8b:81:29:1d:7e:ae:1b:02:2f:4c:c8:e3: 26:2a:83:02:23:fd:49:b3:85:8f:b5:40:32:1f:5f: d7:72:73:db:70:6e:7f:bb:e0:c3:c3:5c:10:94:df: 26:f9:ed:49:0d:1c:4f:c9:a3:ea:1a:3d:87:61:3d: dc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3D:07:CE:35:3C:51:37:6F:7D:DB:C6:39:AE:01:C7:5B:CB:C5:F8 X509v3 Authority Key Identifier: keyid:AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:34:11:a4:7d:6d:69:a1:85:15:bf:c6:40:87:06:c8:81:57: 60:56:4e:f5:47:fa:c9:00:5d:5b:4f:53:9f:db:76:1d:f4:f9: 5a:6d:a9:e1:d5:9c:71:95:11:16:00:91:1b:e0:7f:ba:4d:b3: a5:40:47:f9:a8:0a:10:2c:69:99:eb:69:e7:7e:c2:73:8b:4d: 31:7e:04:7f:70:53:99:62:e2:fc:37:1a:bb:2a:62:de:a5:15: 22:ec:55:a5:4b:7b:f0:ce:05:11:bc:75:31:d6:42:6b:55:59: bf:08:3f:e9:f2:f3:d7:9f:f7:70:cf:f3:80:14:b9:64:0a:c8: c7:e6:b1:6b:34:d8:77:3a:54:22:bb:65:e8:93:de:e6:3f:59: 3b:66:31:22:61:fe:33:7f:fa:ac:df:62:19:f1:35:06:15:af: 03:62:59:83:73:e3:ec:67:4f:69:96:27:aa:47:56:d1:e0:54: a1:2d:cb:c2:fc:8b:56:34:34:e7:78:11:c9:e8:e6:49:18:76: 78:9f:53:6d:c3:6c:7a:15:22:a4:9a:29:2c:0f:bf:bc:d6:99: 38:e9:a0:3b:79:9f:98:a1:0c:58:19:b8:e3:6f:20:c9:6b:37: e5:d0:3c:10:01:45:7d:40:43:8d:29:08:a5:9f:99:0c:a4:3f: 03:18:5a:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIvCmDOczoKLghjp/g4l6lSdV/CYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2 RDMzRTQ0QjAeFw0yNjA3MjkwNzQ4NTBaFw0yNjA3MzAxMTMxNTBaMDMxMTAvBgNV BAMTKDI5M0QwN0NFMzUzQzUxMzc2RjdEREJDNjM5QUUwMUM3NUJDQkM1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+4XCuur9OBSOP7sMgzv2EWfV /0Mc/zhNc2v8dlWYYStnOo+DHXNqB6FJnl3Ly10TlbUxP4puARAJtEov01x5sukd yM36vFO1D+bnzIP9dek9J1ttmaLFxU+SP+DKVzkNHQug1p9/A2ry42u1X6FWO7zM 766EE/FV9Frm+xyP4j+Mi92ohB6mPVvFkiCXKaoOguojySR8pDp1iCQgR4Z4peVF a8712b3g8kFkMutAaWYNXJjhhPFycXvmcuPYKTFD3Z/M5IuBKR1+rhsCL0zI4yYq gwIj/UmzhY+1QDIfX9dyc9twbn+74MPDXBCU3yb57UkNHE/Jo+oaPYdhPdx5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKT0HzjU8UTdvfdvGOa4Bx1vLxfgwHwYDVR0j BBgwFoAUrnXiydhKGtkzrjUqXKqVvW0z5EswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwOTk5NjU5Mzc5MDk3OC8wL0FFNzVFMkM5RDg0QTFBRDkzM0FFMzUyQTVDQUE5 NUJENkQzM0U0NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2RDMzRTQ0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDk5OTY1OTM3OTA5NzgvMC9BRTc1RTJDOUQ4NEEx QUQ5MzNBRTM1MkE1Q0FBOTVCRDZEMzNFNDRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDQRpH1taaGF Fb/GQIcGyIFXYFZO9Uf6yQBdW09Tn9t2HfT5Wm2p4dWccZURFgCRG+B/uk2zpUBH +agKECxpmetp537Cc4tNMX4Ef3BTmWLi/Dcauypi3qUVIuxVpUt78M4FEbx1MdZC a1VZvwg/6fLz15/3cM/zgBS5ZArIx+axazTYdzpUIrtl6JPe5j9ZO2YxImH+M3/6 rN9iGfE1BhWvA2JZg3Pj7GdPaZYnqkdW0eBUoS3LwvyLVjQ053gRyejmSRh2eJ9T bcNsehUipJopLA+/vNaZOOmgO3mfmKEMWBm4428gyWs35dA8EAFFfUBDjSkIpZ+Z DKQ/AxhaWA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:55 2026 by rpki-client