$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft File: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft (raw, json) Hash identifier: cyTJAAL8sJrqaSTPKD6IRoHTOwKCJGG6zxq5n7CvQ04= Subject key identifier: 50:F1:B0:A8:88:33:E7:A2:90:AE:CC:30:E8:F3:E7:82:23:88:B7:33 Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Certificate serial: 5C7A2F60AE81C5E485917621B86DAD3EAD526C5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft Manifest number: 05 Signing time: Fri 17 Apr 2026 03:19:39 +0000 Manifest this update: Fri 17 Apr 2026 03:14:39 +0000 Manifest next update: Sat 18 Apr 2026 05:46:39 +0000 Files and hashes: 1: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl (hash: NyBDQccJDq+9qBEfq4sZ9DOCSsUm2XrEtTWrUIeNDB4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:7a:2f:60:ae:81:c5:e4:85:91:76:21:b8:6d:ad:3e:ad:52:6c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Validity Not Before: Apr 17 03:14:39 2026 GMT Not After : Apr 18 05:46:39 2026 GMT Subject: CN=50F1B0A88833E7A290AECC30E8F3E7822388B733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c1:a2:9e:80:42:84:1f:7c:85:1a:32:83:b0: 9e:e7:0a:60:04:ee:a4:a6:bb:cc:e5:5d:b5:a3:38: 58:df:2b:3d:c3:11:f5:bb:71:2e:00:fa:03:69:21: ed:1b:51:2b:c9:30:ea:a4:15:c8:d0:e1:86:d9:d5: a0:bb:ba:1a:6e:ec:56:4b:24:ea:aa:d7:cd:40:49: c2:50:6b:bb:ae:63:ff:76:fa:4c:f6:26:c3:98:c1: d5:db:20:22:e7:2b:f2:9f:82:f1:4e:49:bb:e9:84: 76:00:2c:61:2f:fb:7a:67:f1:c9:b7:22:35:9c:4a: 73:ca:53:8a:65:a1:b9:93:dc:86:3b:85:6d:b2:03: 28:8b:89:17:5b:fd:63:64:e0:a0:75:88:c0:c9:fc: 97:08:ea:01:82:a0:23:dc:92:fc:5f:01:4c:09:f6: d3:9b:9f:66:6b:c6:fb:94:ba:67:66:df:29:9d:68: ee:d4:51:48:84:d8:79:b5:ae:24:6f:cc:31:27:47: 7c:ea:18:5c:da:28:64:b8:32:cb:dc:6a:f8:4b:e4: 59:ee:72:a7:82:ed:de:90:95:db:0c:d2:8f:d1:93: da:61:60:16:79:97:6f:3f:47:73:e9:33:c6:f8:5c: 34:d7:59:45:c0:6f:b3:49:7b:e9:2e:07:b5:06:d3: 6d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F1:B0:A8:88:33:E7:A2:90:AE:CC:30:E8:F3:E7:82:23:88:B7:33 X509v3 Authority Key Identifier: keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:bc:17:1f:3b:1c:67:90:e5:89:de:1d:d6:83:38:77:7b:e4: a8:1c:c0:c1:d9:54:84:0c:9d:17:16:fb:1d:9e:43:97:15:1f: 83:a1:53:59:19:be:84:34:ea:46:3d:fa:65:d6:84:8b:d2:16: 96:ac:8b:ff:52:e3:05:0f:24:4a:f9:8c:bf:bd:cc:21:cf:82: b7:1d:43:2f:00:7a:6d:5a:b9:0c:39:a3:aa:f7:ac:ab:21:88: 7c:93:7f:28:f0:45:ac:14:25:03:83:56:69:b7:dd:bd:01:74: 47:07:da:a6:56:f3:33:b1:20:29:f3:95:aa:87:f7:0a:af:ce: fd:60:9f:bc:67:99:13:b4:f5:89:2e:e6:47:f9:21:b6:d2:78: 8b:43:1d:a4:d4:b0:67:3c:86:85:6b:5b:82:0b:f4:4a:8e:51: 11:18:45:e9:68:55:be:55:7e:83:8a:e5:a1:da:38:e1:4c:2a: 9e:23:38:33:82:2e:b2:af:40:20:fc:63:b2:5b:64:44:c0:40: b0:96:7c:7d:92:f5:14:9d:f6:82:b9:ea:ba:9f:cd:15:af:07: e6:df:c6:db:51:ac:aa:28:b2:d6:5d:43:69:82:05:5f:c5:59: e1:c5:cc:da:63:6b:ee:d2:d7:36:3d:b5:a3:86:19:c0:9c:81: 03:fa:52:fd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXHovYK6BxeSFkXYhuG2tPq1SbF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy Q0FBRjcyNzAeFw0yNjA0MTcwMzE0MzlaFw0yNjA0MTgwNTQ2MzlaMDMxMTAvBgNV BAMTKDUwRjFCMEE4ODgzM0U3QTI5MEFFQ0MzMEU4RjNFNzgyMjM4OEI3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXwaKegEKEH3yFGjKDsJ7nCmAE 7qSmu8zlXbWjOFjfKz3DEfW7cS4A+gNpIe0bUSvJMOqkFcjQ4YbZ1aC7uhpu7FZL JOqq181AScJQa7uuY/92+kz2JsOYwdXbICLnK/KfgvFOSbvphHYALGEv+3pn8cm3 IjWcSnPKU4plobmT3IY7hW2yAyiLiRdb/WNk4KB1iMDJ/JcI6gGCoCPckvxfAUwJ 9tObn2ZrxvuUumdm3ymdaO7UUUiE2Hm1riRvzDEnR3zqGFzaKGS4MsvcavhL5Fnu cqeC7d6QldsM0o/Rk9phYBZ5l28/R3PpM8b4XDTXWUXAb7NJe+kuB7UG020RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUPGwqIgz56KQrsww6PPngiOItzMwHwYDVR0j BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTA4ODYzODYwODk5ODcvMC9BRTA5REQwNTZCM0I1 RUE0QzQ4NzIyQzY3RjYzRjBBMTJDQUFGNzI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvLwXHzscZ5Dl id4d1oM4d3vkqBzAwdlUhAydFxb7HZ5DlxUfg6FTWRm+hDTqRj36ZdaEi9IWlqyL /1LjBQ8kSvmMv73MIc+Ctx1DLwB6bVq5DDmjqvesqyGIfJN/KPBFrBQlA4NWabfd vQF0RwfaplbzM7EgKfOVqof3Cq/O/WCfvGeZE7T1iS7mR/khttJ4i0MdpNSwZzyG hWtbggv0So5RERhF6WhVvlV+g4rlodo44UwqniM4M4Iusq9AIPxjsltkRMBAsJZ8 fZL1FJ32grnqup/NFa8H5t/G21Gsqiiy1l1DaYIFX8VZ4cXM2mNr7tLXNj21o4YZ wJyBA/pS/Q== -----END CERTIFICATE-----Generated at Fri Apr 17 23:25:08 2026 by rpki-client