$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft File: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft (raw, json) Hash identifier: c/NsdjXTnoTkg4ksTyTyKm585hfspFQeQH5c67vEQNg= Subject key identifier: D3:10:3C:C5:A4:8D:51:45:7B:06:30:F5:78:B9:2B:6B:2C:9C:25:A5 Authority key identifier: AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B Certificate issuer: /CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Certificate serial: 6E9463E0D3BB29862D7EEA4B867246990350E704 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft Manifest number: CB Signing time: Sat 10 Oct 2026 04:54:14 +0000 Manifest this update: Sat 10 Oct 2026 04:49:14 +0000 Manifest next update: Tue 13 Oct 2026 07:36:14 +0000 Files and hashes: 1: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl (hash: fIiwwm888y80eD+czX/VojRvnzB3vaamDkBRCJuQjRo=) 2: 3130332e36392e31362e302f32322d3232203d3e203233363530.roa (hash: zekVrxkQVWd0PYgcYlPQAYGNufMyf7eBZZSKqJFe7WU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 07:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:94:63:e0:d3:bb:29:86:2d:7e:ea:4b:86:72:46:99:03:50:e7:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Validity Not Before: Oct 10 04:49:14 2026 GMT Not After : Oct 13 07:36:14 2026 GMT Subject: CN=D3103CC5A48D51457B0630F578B92B6B2C9C25A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d4:5f:4b:65:dd:c8:ac:95:d9:c8:2d:ff:3f: 4e:59:4f:b8:de:be:73:25:49:48:5c:db:f1:f7:3a: b9:c9:82:57:9a:ec:71:0e:00:08:b8:14:e3:58:16: 0f:08:d8:0e:9e:00:05:3d:ce:f9:ad:2a:5d:42:d6: df:53:d6:53:96:82:3e:3f:27:88:06:27:2e:a1:b9: ba:34:b0:f6:27:8b:13:83:0b:6a:cb:66:3a:4f:b2: 05:89:53:ed:88:e0:25:41:74:c6:88:1d:fa:d3:21: f5:a6:f8:32:75:32:86:1d:00:db:19:74:98:6f:91: 60:95:5a:43:2d:0e:60:a8:96:32:2a:00:e3:68:b9: 33:bb:4b:7c:4d:1a:82:d4:48:e8:82:1b:7d:2d:1e: ee:4a:1d:1b:3e:ef:80:30:ae:39:b9:c5:d5:a7:96: 52:72:6b:8d:5e:83:bd:20:a5:1f:e6:2c:7a:8d:13: 01:01:33:52:8c:bc:ae:77:13:46:3d:4b:82:cf:77: 2b:22:78:f7:62:4c:0e:73:27:3f:28:b5:40:e8:ce: 97:9d:bb:ea:71:53:c8:17:df:b3:fb:e4:b3:c0:6c: 21:7f:cc:19:3a:cc:8e:24:b7:d8:b0:6f:0f:a6:43: e2:eb:ba:f5:69:ef:58:3d:ef:58:f0:84:26:11:11: e0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:10:3C:C5:A4:8D:51:45:7B:06:30:F5:78:B9:2B:6B:2C:9C:25:A5 X509v3 Authority Key Identifier: keyid:AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4e:62:74:a9:d4:13:4a:e8:13:01:4c:7a:3b:66:ef:46:bc: ae:16:f8:77:b4:f5:45:ea:59:2d:9a:43:f7:30:00:1c:10:cf: 8b:89:8d:3e:ec:df:65:05:d6:0f:c7:ee:af:c8:04:4a:83:38: 6d:35:85:de:15:17:74:e5:f6:13:8b:a6:1f:4f:49:f0:2a:fb: 9d:8e:ce:06:1d:f6:40:a8:a8:45:f3:59:99:95:8e:c7:31:fa: 40:7c:71:39:40:5f:2d:0c:9a:9e:a7:51:c0:ee:af:a4:8a:ba: 6c:e7:37:57:ee:97:99:d8:32:d8:c3:bd:82:d2:3b:4a:c8:d1: 47:19:0f:37:4b:21:73:d7:d5:d3:60:9e:78:d6:b8:0a:3d:f2: 05:52:be:80:a0:fe:c1:3e:70:4d:f6:ab:c6:8d:7c:70:00:f9: 39:4b:7e:e5:51:d9:33:42:82:23:72:2f:3f:47:35:ea:f5:29: 2b:c6:8b:36:21:90:f1:ec:e0:52:58:97:cc:1c:c5:71:f8:06: ff:8a:4f:e6:06:a8:15:3a:b7:96:cb:35:88:f1:6c:b0:f6:fe: f1:55:a3:fa:f9:5c:80:6f:89:f9:4e:58:68:df:c6:35:24:8c: fc:c0:f9:63:b1:a3:2c:6c:da:b8:1c:a0:d9:75:9d:fa:07:7d: 11:15:42:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbpRj4NO7KYYtfupLhnJGmQNQ5wQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2 RDMzRTQ0QjAeFw0yNjEwMTAwNDQ5MTRaFw0yNjEwMTMwNzM2MTRaMDMxMTAvBgNV BAMTKEQzMTAzQ0M1QTQ4RDUxNDU3QjA2MzBGNTc4QjkyQjZCMkM5QzI1QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv1F9LZd3IrJXZyC3/P05ZT7je vnMlSUhc2/H3OrnJglea7HEOAAi4FONYFg8I2A6eAAU9zvmtKl1C1t9T1lOWgj4/ J4gGJy6hubo0sPYnixODC2rLZjpPsgWJU+2I4CVBdMaIHfrTIfWm+DJ1MoYdANsZ dJhvkWCVWkMtDmColjIqAONouTO7S3xNGoLUSOiCG30tHu5KHRs+74Awrjm5xdWn llJya41eg70gpR/mLHqNEwEBM1KMvK53E0Y9S4LPdysiePdiTA5zJz8otUDozped u+pxU8gX37P75LPAbCF/zBk6zI4kt9iwbw+mQ+LruvVp71g971jwhCYREeCxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0xA8xaSNUUV7BjD1eLkrayycJaUwHwYDVR0j BBgwFoAUrnXiydhKGtkzrjUqXKqVvW0z5EswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwOTk5NjU5Mzc5MDk3OC8wL0FFNzVFMkM5RDg0QTFBRDkzM0FFMzUyQTVDQUE5 NUJENkQzM0U0NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2RDMzRTQ0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDk5OTY1OTM3OTA5NzgvMC9BRTc1RTJDOUQ4NEEx QUQ5MzNBRTM1MkE1Q0FBOTVCRDZEMzNFNDRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAek5idKnUE0ro EwFMejtm70a8rhb4d7T1RepZLZpD9zAAHBDPi4mNPuzfZQXWD8fur8gESoM4bTWF 3hUXdOX2E4umH09J8Cr7nY7OBh32QKioRfNZmZWOxzH6QHxxOUBfLQyanqdRwO6v pIq6bOc3V+6Xmdgy2MO9gtI7SsjRRxkPN0shc9fV02CeeNa4Cj3yBVK+gKD+wT5w Tfarxo18cAD5OUt+5VHZM0KCI3IvP0c16vUpK8aLNiGQ8ezgUliXzBzFcfgG/4pP 5gaoFTq3lss1iPFssPb+8VWj+vlcgG+J+U5YaN/GNSSM/MD5Y7GjLGzauByg2XWd +gd9ERVCoA== -----END CERTIFICATE-----Generated at Sun Oct 11 23:56:52 2026 by rpki-client