$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft File: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft (raw, json) Hash identifier: 6ES+JAAoBkCKY9mEkA4PjPftjhhW4E9GVB52r9NwWmk= Subject key identifier: 0A:94:02:99:8C:63:89:4E:9E:E4:71:18:94:F8:B9:58:3F:85:D1:8D Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Certificate serial: 3E2D00C4FF6F1BCD8619EFF0CFB09CA8DC034A79 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft Manifest number: 8E Signing time: Wed 29 Jul 2026 03:13:16 +0000 Manifest this update: Wed 29 Jul 2026 03:08:16 +0000 Manifest next update: Thu 30 Jul 2026 03:15:16 +0000 Files and hashes: 1: 3130332e33362e3136302e302f32342d3234203d3e2030.roa (hash: Bldld99h3NZM1Qe5b+70bZMRgNDLPcMHp7Kj+aQCBwU=) 2: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl (hash: iHBRikdmeu7E3IZlIiMJwWvw1raIbgon4w2baaaSZIs=) 3: 34332e3234302e3230312e302f32342d3234203d3e2034383038.roa (hash: 4iUeVkG/jY1t+8WG/BciSvsYpoG5vX8uPqiNIUCf+TU=) 4: 34332e3234302e3230322e302f32342d3234203d3e2030.roa (hash: E/gjhJ9Hm91GpWCRMJAiLbm9DE3TG+yaRqQ1xloE1CU=) 5: 34332e3234302e3230332e302f32342d3234203d3e2030.roa (hash: B9336hSEDKsLNxqt5DYV9dkzCNCfuJLc50T2hGH9s08=) 6: 34332e3234302e3230302e302f32342d3234203d3e2034383038.roa (hash: jH4oDmP6oaOM9gvOyE2Nx4TAC2Qkee39rebiB87cwyI=) 7: 3130332e33362e3136312e302f32342d3234203d3e2030.roa (hash: rLUuT7j0BQQKXLH7blKy9zsxcJBl8lFXJTXeZAmoi04=) 8: 3130332e33362e3136322e302f32342d3234203d3e2030.roa (hash: 4zMQp6a1CixszbfIwzHf11h1LQph2hVfQjbrzDw2gew=) 9: 323430313a356338303a3a2f33322d3332203d3e2030.roa (hash: 1LDXyBKSFl2CziO/AAgiipLUXTwKWhQ9V+Y4/cF1F1s=) 10: 3130332e33362e3136332e302f32342d3234203d3e2030.roa (hash: XjFtjoTaXfVjDs7zv6u6xKOOqFMXKwT22E1RPXpJ/6U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:2d:00:c4:ff:6f:1b:cd:86:19:ef:f0:cf:b0:9c:a8:dc:03:4a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Validity Not Before: Jul 29 03:08:16 2026 GMT Not After : Jul 30 03:15:16 2026 GMT Subject: CN=0A9402998C63894E9EE4711894F8B9583F85D18D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:28:c1:6f:c7:c0:9c:53:26:d6:45:2d:49:34: 1f:e3:04:0c:4f:7a:20:82:8c:0e:bf:a6:55:b3:ec: 91:2a:89:8c:fb:bc:59:36:e7:7d:1d:fd:f7:2a:2c: 64:b1:72:46:a0:98:c2:86:70:e4:f1:19:20:16:d3: 30:72:15:5a:22:02:16:2b:bf:a0:77:aa:43:73:8e: a5:3e:e9:8a:b3:1f:68:2f:51:a9:1f:ed:98:23:72: 8f:bc:d2:18:fc:bc:3e:1f:9d:d7:85:eb:57:d0:cb: fd:08:0d:2f:9e:95:49:48:a7:90:83:2b:28:bb:69: 1b:f5:ad:6c:fa:6f:5f:5a:a8:be:f2:54:50:f1:44: bb:cc:a0:1e:11:d6:f9:15:50:6f:d0:4a:c4:d6:f2: 2b:7f:bc:8d:1a:d6:53:24:7f:72:2b:60:de:2b:e4: ca:63:37:76:f1:f2:fd:51:88:76:7c:7a:9f:67:6e: 52:c8:10:d0:f9:4e:2e:8a:1a:d1:95:c8:0a:80:52: b5:e3:41:89:f6:2c:fa:df:14:61:d3:5a:fe:3f:48: 37:2d:35:07:76:79:57:a8:e1:f7:d5:86:72:53:b0: 1f:e8:7a:df:d2:f5:9e:4d:ef:23:82:b0:c8:e7:f7: 50:85:b7:43:c9:d7:94:00:45:4a:1b:51:e2:d1:f3: b2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:94:02:99:8C:63:89:4E:9E:E4:71:18:94:F8:B9:58:3F:85:D1:8D X509v3 Authority Key Identifier: keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f6:38:92:00:7c:b0:28:a1:bb:b4:e5:94:f4:18:95:b6:1c: 9a:87:86:7c:f5:8f:5e:17:ed:dd:de:fe:76:bd:f7:ff:17:21: c7:75:c7:c3:5f:a7:01:79:bc:70:ed:26:8c:c7:42:a7:fb:9f: 95:5c:76:71:7e:25:df:0e:27:2f:08:06:4c:d2:62:c2:bf:65: 3d:45:99:38:38:00:3c:53:70:12:ad:b3:41:8b:93:de:36:9c: f7:1b:03:24:57:a0:d3:fa:87:d4:b5:fc:9c:92:35:dc:cc:89: 73:78:e7:98:a9:0a:e5:66:c1:63:ec:cb:6c:3e:16:b9:b5:60: 80:d4:cf:98:e7:44:00:81:38:42:96:3c:9c:ea:00:5d:6c:19: 4e:ec:5e:cc:25:2c:0d:a4:04:38:d9:6b:83:cb:9b:2c:ba:f5: 43:10:a9:9f:cf:20:56:66:88:9c:7a:3d:3a:63:7a:db:18:15: 13:83:d7:67:69:3a:53:ad:35:e8:39:c8:a3:a2:bb:f9:1a:e4: ae:4e:95:f8:87:94:f3:ba:6b:fa:35:8c:1a:ae:99:e4:38:2f: 29:40:cd:ec:96:40:63:df:95:b2:39:6c:cf:24:9c:7f:4e:44: 70:a4:d1:35:71:68:1f:33:0e:f5:3f:98:72:27:cc:4a:0a:d5: 72:b2:22:17 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPi0AxP9vG82GGe/wz7CcqNwDSnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy Q0FBRjcyNzAeFw0yNjA3MjkwMzA4MTZaFw0yNjA3MzAwMzE1MTZaMDMxMTAvBgNV BAMTKDBBOTQwMjk5OEM2Mzg5NEU5RUU0NzExODk0RjhCOTU4M0Y4NUQxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTKMFvx8CcUybWRS1JNB/jBAxP eiCCjA6/plWz7JEqiYz7vFk2530d/fcqLGSxckagmMKGcOTxGSAW0zByFVoiAhYr v6B3qkNzjqU+6YqzH2gvUakf7Zgjco+80hj8vD4fndeF61fQy/0IDS+elUlIp5CD Kyi7aRv1rWz6b19aqL7yVFDxRLvMoB4R1vkVUG/QSsTW8it/vI0a1lMkf3IrYN4r 5MpjN3bx8v1RiHZ8ep9nblLIEND5Ti6KGtGVyAqAUrXjQYn2LPrfFGHTWv4/SDct NQd2eVeo4ffVhnJTsB/oet/S9Z5N7yOCsMjn91CFt0PJ15QARUobUeLR87JhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCpQCmYxjiU6e5HEYlPi5WD+F0Y0wHwYDVR0j BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTA4ODYzODYwODk5ODcvMC9BRTA5REQwNTZCM0I1 RUE0QzQ4NzIyQzY3RjYzRjBBMTJDQUFGNzI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfY4kgB8sCih u7TllPQYlbYcmoeGfPWPXhft3d7+dr33/xchx3XHw1+nAXm8cO0mjMdCp/uflVx2 cX4l3w4nLwgGTNJiwr9lPUWZODgAPFNwEq2zQYuT3jac9xsDJFeg0/qH1LX8nJI1 3MyJc3jnmKkK5WbBY+zLbD4WubVggNTPmOdEAIE4QpY8nOoAXWwZTuxezCUsDaQE ONlrg8ubLLr1QxCpn88gVmaInHo9OmN62xgVE4PXZ2k6U6016DnIo6K7+Rrkrk6V +IeU87pr+jWMGq6Z5DgvKUDN7JZAY9+VsjlszyScf05EcKTRNXFoHzMO9T+YcifM SgrVcrIiFw== -----END CERTIFICATE-----Generated at Wed Jul 29 11:24:53 2026 by rpki-client