$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft File: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft (raw, json) Hash identifier: MeicYHXjomYZIQgEA4mKvwUEimrwHK8ZJeuOKg2Qyjc= Subject key identifier: AF:D5:1C:74:C2:7E:E0:FD:CC:18:89:B7:CF:F0:07:0B:BA:84:6E:F3 Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Certificate serial: 226C0B8B7698250C2F78E5139457781774C0D5F3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft Manifest number: CB Signing time: Sun 11 Oct 2026 19:05:51 +0000 Manifest this update: Sun 11 Oct 2026 19:00:51 +0000 Manifest next update: Thu 15 Oct 2026 01:06:51 +0000 Files and hashes: 1: 34332e3234302e3230332e302f32342d3234203d3e2030.roa (hash: B9336hSEDKsLNxqt5DYV9dkzCNCfuJLc50T2hGH9s08=) 2: 3130332e33362e3136322e302f32342d3234203d3e2030.roa (hash: 4zMQp6a1CixszbfIwzHf11h1LQph2hVfQjbrzDw2gew=) 3: 3130332e33362e3136302e302f32342d3234203d3e2030.roa (hash: Bldld99h3NZM1Qe5b+70bZMRgNDLPcMHp7Kj+aQCBwU=) 4: 34332e3234302e3230312e302f32342d3234203d3e2034383038.roa (hash: 4iUeVkG/jY1t+8WG/BciSvsYpoG5vX8uPqiNIUCf+TU=) 5: 34332e3234302e3230322e302f32342d3234203d3e2030.roa (hash: E/gjhJ9Hm91GpWCRMJAiLbm9DE3TG+yaRqQ1xloE1CU=) 6: 3130332e33362e3136312e302f32342d3234203d3e2030.roa (hash: rLUuT7j0BQQKXLH7blKy9zsxcJBl8lFXJTXeZAmoi04=) 7: 323430313a356338303a3a2f33322d3332203d3e2030.roa (hash: 1LDXyBKSFl2CziO/AAgiipLUXTwKWhQ9V+Y4/cF1F1s=) 8: 3130332e33362e3136332e302f32342d3234203d3e2030.roa (hash: XjFtjoTaXfVjDs7zv6u6xKOOqFMXKwT22E1RPXpJ/6U=) 9: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl (hash: lfz55mAypDc5dgYGHUXT+qziw7Nh3aYotv+xKgaHfEA=) 10: 34332e3234302e3230302e302f32342d3234203d3e2034383038.roa (hash: jH4oDmP6oaOM9gvOyE2Nx4TAC2Qkee39rebiB87cwyI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6c:0b:8b:76:98:25:0c:2f:78:e5:13:94:57:78:17:74:c0:d5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Validity Not Before: Oct 11 19:00:51 2026 GMT Not After : Oct 15 01:06:51 2026 GMT Subject: CN=AFD51C74C27EE0FDCC1889B7CFF0070BBA846EF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:47:26:9a:61:17:4d:21:23:d6:8b:02:89: d4:27:3a:ac:65:98:36:f0:c8:ab:1d:82:6a:f6:16: 54:d5:0a:ac:2c:c1:e9:3a:01:79:80:7f:25:3e:fa: 7b:7f:15:50:d4:7d:cb:c8:e6:53:83:0c:c0:42:8f: e0:01:68:26:55:df:a4:2f:31:cb:07:23:53:4e:b3: e8:d4:e1:ed:a1:32:74:af:c6:57:e3:cc:33:ff:e7: 72:32:65:85:43:39:8d:24:b2:32:0b:94:e8:f6:d3: 87:7a:f9:b6:12:46:02:6d:5b:8b:14:54:1b:96:39: 73:95:82:20:0d:9a:d1:7b:c1:b0:31:1f:1f:aa:3f: 59:0a:1f:03:f5:f5:ca:23:d2:02:1b:b2:e6:7f:eb: 07:0d:33:af:3b:50:d1:72:8a:32:2f:73:00:dc:63: 34:3c:74:6d:f5:47:fa:7e:d8:96:17:14:f1:0c:a5: ba:ec:91:28:a1:ea:a3:e4:e0:ee:94:df:0c:3a:57: a8:b7:af:19:2e:9a:fd:eb:67:9a:f1:37:5f:25:8d: 72:4b:76:1f:85:a6:be:a3:b1:24:d3:fb:b4:cc:b0: 2e:13:68:48:3b:fa:60:44:10:2f:bc:5b:de:94:26: 2d:ac:9d:5b:c9:7d:5b:dc:68:64:b5:7a:58:94:b1: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D5:1C:74:C2:7E:E0:FD:CC:18:89:B7:CF:F0:07:0B:BA:84:6E:F3 X509v3 Authority Key Identifier: keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b5:cd:ff:46:ac:2a:ab:f3:7d:c3:ec:b7:2d:a4:93:95:19: db:1d:83:f0:6a:71:b8:a0:e9:86:08:c6:a1:df:4d:a9:a0:f0: 55:07:1b:28:45:3b:d3:e6:9c:23:09:c7:b7:03:de:25:a2:4c: 4d:d9:5a:57:a0:a5:f2:e3:36:4d:6f:3d:39:17:1f:03:79:22: 33:2c:c9:e0:5a:c0:40:a4:5c:a8:9f:e5:e7:45:d2:3d:a6:b9: b1:d8:5e:1d:2d:21:73:e6:fc:6e:48:4b:60:1e:ab:01:c8:75: 4f:dc:5c:f2:cd:e8:b4:e9:da:c8:96:77:da:97:c2:a6:ea:e8: a8:45:17:99:59:b2:e5:03:69:1c:34:b2:c7:59:cf:b2:72:96: 37:0b:2f:c2:23:3f:eb:2c:df:50:07:5d:74:fb:cb:9f:fc:5d: f5:8a:1f:d8:97:65:55:94:96:c5:05:c3:fe:16:52:c3:db:c9: d9:10:cc:0a:42:ee:07:57:eb:97:d5:8a:4e:63:62:48:69:ac: 1a:44:b3:a4:73:bd:d4:54:ce:fb:dc:97:ff:fb:66:61:4d:9f: 38:09:c5:89:9e:86:50:c0:c2:4d:c9:2f:73:42:9f:2c:cc:b7: c0:d4:14:bd:77:0b:5b:f6:74:9f:4e:09:f5:2d:5e:bc:c1:5d: df:d5:1e:1f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUImwLi3aYJQwveOUTlFd4F3TA1fMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy Q0FBRjcyNzAeFw0yNjEwMTExOTAwNTFaFw0yNjEwMTUwMTA2NTFaMDMxMTAvBgNV BAMTKEFGRDUxQzc0QzI3RUUwRkRDQzE4ODlCN0NGRjAwNzBCQkE4NDZFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcEcmmmEXTSEj1osCidQnOqxl mDbwyKsdgmr2FlTVCqwswek6AXmAfyU++nt/FVDUfcvI5lODDMBCj+ABaCZV36Qv McsHI1NOs+jU4e2hMnSvxlfjzDP/53IyZYVDOY0ksjILlOj204d6+bYSRgJtW4sU VBuWOXOVgiANmtF7wbAxHx+qP1kKHwP19coj0gIbsuZ/6wcNM687UNFyijIvcwDc YzQ8dG31R/p+2JYXFPEMpbrskSih6qPk4O6U3ww6V6i3rxkumv3rZ5rxN18ljXJL dh+Fpr6jsSTT+7TMsC4TaEg7+mBEEC+8W96UJi2snVvJfVvcaGS1eliUsd/xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUr9UcdMJ+4P3MGIm3z/AHC7qEbvMwHwYDVR0j BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTA4ODYzODYwODk5ODcvMC9BRTA5REQwNTZCM0I1 RUE0QzQ4NzIyQzY3RjYzRjBBMTJDQUFGNzI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbXN/0asKqvz fcPsty2kk5UZ2x2D8GpxuKDphgjGod9NqaDwVQcbKEU70+acIwnHtwPeJaJMTdla V6Cl8uM2TW89ORcfA3kiMyzJ4FrAQKRcqJ/l50XSPaa5sdheHS0hc+b8bkhLYB6r Ach1T9xc8s3otOnayJZ32pfCpuroqEUXmVmy5QNpHDSyx1nPsnKWNwsvwiM/6yzf UAdddPvLn/xd9Yof2JdlVZSWxQXD/hZSw9vJ2RDMCkLuB1frl9WKTmNiSGmsGkSz pHO91FTO+9yX//tmYU2fOAnFiZ6GUMDCTckvc0KfLMy3wNQUvXcLW/Z0n04J9S1e vMFd39UeHw== -----END CERTIFICATE-----Generated at Tue Oct 13 19:11:22 2026 by rpki-client