$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft File: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft (raw, json) Hash identifier: gOqhbCiSApDzRU49s/wPNajPefzRm+mpdT997u4VEuM= Subject key identifier: 2F:BE:9E:4C:64:62:FF:F4:2C:83:2D:E6:BF:99:C3:9B:5A:43:2C:43 Authority key identifier: AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B Certificate issuer: /CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Certificate serial: 7F930F044CCB2DFA79F71B1C0C65AC1095177134 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft Manifest number: 08 Signing time: Fri 17 Apr 2026 21:14:48 +0000 Manifest this update: Fri 17 Apr 2026 21:09:48 +0000 Manifest next update: Sat 18 Apr 2026 23:10:48 +0000 Files and hashes: 1: 3130332e36392e31362e302f32322d3232203d3e20313531323836.roa (hash: pipFRX3g8zpKBxJfoHYgo/R05QsqXUeAMaREmbsYQc4=) 2: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl (hash: ht3Hz+dSfuYOd5YZ06JUmfyoBMoYkGLZt2TLDECdciM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:93:0f:04:4c:cb:2d:fa:79:f7:1b:1c:0c:65:ac:10:95:17:71:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Validity Not Before: Apr 17 21:09:48 2026 GMT Not After : Apr 18 23:10:48 2026 GMT Subject: CN=2FBE9E4C6462FFF42C832DE6BF99C39B5A432C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:df:bb:af:0f:d4:eb:da:62:63:65:8a:fc: 4b:5c:63:99:8c:fb:81:24:b4:1c:80:01:92:20:ba: 72:b8:9d:69:75:de:09:e9:72:81:5c:bb:70:31:13: 32:60:c8:6f:25:1d:29:06:84:f0:47:36:b4:31:2c: 6d:be:c1:ac:aa:26:98:40:ff:49:33:bf:b9:45:26: d5:22:a7:0c:05:78:c1:b1:35:f9:7c:cf:54:b6:8f: 20:f1:8c:1b:64:39:ad:e9:e4:6e:fe:64:5b:b8:a4: 48:8e:df:b8:73:a0:6b:26:89:75:e3:dd:2a:ec:b4: 41:83:de:65:9c:76:2b:0f:a2:1d:6c:4d:3f:68:02: 73:b6:17:04:71:15:22:87:e3:95:16:be:71:8a:bf: 38:81:b2:a3:f7:c4:7d:f7:e6:ec:6e:51:73:ca:72: 32:b0:cd:a7:16:84:1e:2e:76:a2:c0:19:d9:95:ee: 18:38:4a:22:5b:9d:89:27:b0:b2:2c:12:05:a1:91: e4:6a:68:d6:d2:ad:81:5e:5b:a7:af:5e:2e:ba:6c: 07:29:e1:11:cb:fe:be:85:b3:19:6f:ad:04:88:c7: 34:de:31:93:fb:a6:40:70:39:23:bf:8f:61:8e:b1: 11:fe:93:c0:31:df:e0:ed:ed:0b:eb:ad:a0:6a:94: 1c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BE:9E:4C:64:62:FF:F4:2C:83:2D:E6:BF:99:C3:9B:5A:43:2C:43 X509v3 Authority Key Identifier: keyid:AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8a:d4:7e:7f:d3:2f:d6:97:37:c9:d1:b7:19:4f:4a:00:41: 41:7d:10:02:7d:c0:99:1f:ec:74:47:c2:10:b1:ab:cd:60:84: c9:c8:00:79:7a:6e:26:12:38:1e:c2:7c:aa:5f:a5:87:8b:a7: 11:ac:33:62:9e:60:e9:b9:5c:13:63:23:c9:ab:d2:08:45:7f: 8d:e1:57:6c:2c:fd:fb:1b:6c:be:22:86:c8:10:92:1a:9f:bf: bb:c3:4c:86:64:16:b4:89:60:54:84:82:f6:c7:fb:5b:e2:e4: 1f:b7:4c:d4:15:bb:c5:a7:54:67:fa:b1:62:5e:d8:71:a4:73: 52:2b:cd:8f:da:86:33:6d:69:86:07:2b:98:a8:75:d6:f4:b6: 64:d5:c2:09:dd:2a:85:43:2e:0e:0e:68:18:7d:3e:ad:d7:74: 5e:43:cc:60:56:b3:df:7c:a7:87:95:45:7c:70:73:28:b9:7f: 60:8a:5f:00:8a:f8:84:d9:02:27:1d:98:b7:77:2b:95:49:6f: e3:e9:de:cd:51:ce:af:c5:3a:57:53:ee:fe:b9:7b:6c:bc:9c: 85:ad:bc:9e:18:b8:f3:d0:5a:1d:97:e7:38:38:4e:52:97:d5: 06:56:a1:d7:03:c5:bf:84:2c:1d:23:9c:5b:26:15:a1:5b:7d: e5:27:b3:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf5MPBEzLLfp59xscDGWsEJUXcTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2 RDMzRTQ0QjAeFw0yNjA0MTcyMTA5NDhaFw0yNjA0MTgyMzEwNDhaMDMxMTAvBgNV BAMTKDJGQkU5RTRDNjQ2MkZGRjQyQzgzMkRFNkJGOTlDMzlCNUE0MzJDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc+t+7rw/U69piY2WK/EtcY5mM +4EktByAAZIgunK4nWl13gnpcoFcu3AxEzJgyG8lHSkGhPBHNrQxLG2+wayqJphA /0kzv7lFJtUipwwFeMGxNfl8z1S2jyDxjBtkOa3p5G7+ZFu4pEiO37hzoGsmiXXj 3SrstEGD3mWcdisPoh1sTT9oAnO2FwRxFSKH45UWvnGKvziBsqP3xH335uxuUXPK cjKwzacWhB4udqLAGdmV7hg4SiJbnYknsLIsEgWhkeRqaNbSrYFeW6evXi66bAcp 4RHL/r6FsxlvrQSIxzTeMZP7pkBwOSO/j2GOsRH+k8Ax3+Dt7QvrraBqlBx7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUL76eTGRi//Qsgy3mv5nDm1pDLEMwHwYDVR0j BBgwFoAUrnXiydhKGtkzrjUqXKqVvW0z5EswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwOTk5NjU5Mzc5MDk3OC8wL0FFNzVFMkM5RDg0QTFBRDkzM0FFMzUyQTVDQUE5 NUJENkQzM0U0NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2RDMzRTQ0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDk5OTY1OTM3OTA5NzgvMC9BRTc1RTJDOUQ4NEEx QUQ5MzNBRTM1MkE1Q0FBOTVCRDZEMzNFNDRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYrUfn/TL9aX N8nRtxlPSgBBQX0QAn3AmR/sdEfCELGrzWCEycgAeXpuJhI4HsJ8ql+lh4unEawz Yp5g6blcE2MjyavSCEV/jeFXbCz9+xtsviKGyBCSGp+/u8NMhmQWtIlgVISC9sf7 W+LkH7dM1BW7xadUZ/qxYl7YcaRzUivNj9qGM21phgcrmKh11vS2ZNXCCd0qhUMu Dg5oGH0+rdd0XkPMYFaz33ynh5VFfHBzKLl/YIpfAIr4hNkCJx2Yt3crlUlv4+ne zVHOr8U6V1Pu/rl7bLycha28nhi489BaHZfnODhOUpfVBlah1wPFv4QsHSOcWyYV oVt95Sez0g== -----END CERTIFICATE-----Generated at Sat Apr 18 02:25:58 2026 by rpki-client