$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft File: AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft (raw, json) Hash identifier: 8nysTvk2viqFPoBeFUVPO0sydSohC/jRQlPM1op0Z28= Subject key identifier: AA:ED:BE:5E:35:27:8F:E1:BC:B9:67:9D:CB:29:55:40:5A:FE:46:0D Authority key identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3 Certificate issuer: /CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3 Certificate serial: 70AF5B026A154B82440685C721C996AC0A06CF38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft Manifest number: 61 Signing time: Tue 28 Jul 2026 10:31:42 +0000 Manifest this update: Tue 28 Jul 2026 10:26:42 +0000 Manifest next update: Wed 29 Jul 2026 10:52:42 +0000 Files and hashes: 1: AS0.roa (hash: Tnh8WMSLJSGCaAxb/VZeyXb0gUX1GKQVaIvE4qh0adg=) 2: AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl (hash: qTJu3URMxdBlEWroT4yYhyjLVoSmIE6o5zgsEpZbm4c=) 3: AS4847.roa (hash: x6CsxrXJP/tLvJGx1fHtjAL40INQgOCEUORhIbque/Q=) 4: AS4808.roa (hash: TPs4K1IwuFBCZlPJPwsrxBKlLQX+ki67IEXGfZAOXrc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 10:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:af:5b:02:6a:15:4b:82:44:06:85:c7:21:c9:96:ac:0a:06:cf:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3 Validity Not Before: Jul 28 10:26:42 2026 GMT Not After : Jul 29 10:52:42 2026 GMT Subject: CN=AAEDBE5E35278FE1BCB9679DCB2955405AFE460D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:04:97:22:8b:42:41:8b:4f:a4:8c:88:d8:2b: f5:8b:a9:9e:46:67:ce:f4:ff:23:a1:ce:d9:a8:84: 57:91:bb:5a:79:a4:00:0b:25:c8:f1:b7:b5:2a:0e: 42:b1:87:73:b4:3a:4b:77:8e:3b:96:c9:36:c5:f6: 69:4d:19:6f:a9:87:b2:de:dc:d0:e8:aa:81:43:ee: eb:14:46:b3:34:7b:cb:af:c4:34:bb:e3:67:b1:d4: 55:04:20:48:89:96:68:2c:c5:31:ee:eb:77:47:60: 95:62:6d:2d:68:40:07:ce:af:78:57:76:1a:dd:46: 34:45:d0:60:84:e2:9b:ee:6a:d8:97:2f:bf:be:97: d0:c0:6f:2e:88:e7:6c:f0:7e:75:0b:8f:95:a2:54: be:fe:fc:23:42:20:0c:7f:0f:58:82:35:aa:d7:b9: 96:6f:bd:b7:97:85:6f:8c:ff:1f:8f:f7:2a:18:c6: 53:98:19:58:96:06:42:7b:09:ae:2e:40:0c:c9:d3: f8:35:9f:b3:72:fe:48:fe:e7:6b:a7:af:43:ed:0a: d7:b1:89:3e:bf:ae:f7:89:aa:6b:8b:39:d7:b7:cf: 62:6f:54:83:d7:b5:db:cd:2c:b4:6a:aa:ae:d3:98: a1:0b:53:45:02:cc:f9:89:50:4d:a0:63:c0:c2:50: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:BE:5E:35:27:8F:E1:BC:B9:67:9D:CB:29:55:40:5A:FE:46:0D X509v3 Authority Key Identifier: keyid:AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:43:42:0e:a8:34:93:3a:1c:3b:1b:69:6b:6d:ff:fb:1a:84: eb:90:b1:f4:bc:4f:cf:1a:91:73:32:9b:b2:b4:a5:2a:75:7a: bb:55:93:26:de:41:7b:bf:6d:e5:1e:17:e3:f7:10:e3:7b:9e: 84:f3:ae:93:87:66:ca:05:71:65:c0:dc:ad:db:8d:bd:d4:21: 28:eb:28:7f:24:16:f5:91:5b:c9:bc:29:6e:7e:80:f5:d9:e7: b3:86:8e:24:56:2a:65:62:b5:86:f0:9f:43:a0:14:03:d0:19: 0e:6e:78:ce:c1:51:a0:15:4f:36:1a:08:4a:fc:5b:ab:5f:4a: 67:0c:98:64:db:7d:55:b8:61:24:90:01:6e:0c:f5:11:b0:cf: ea:5c:ca:ae:51:bc:b2:e6:44:7d:a1:7e:9e:6b:d1:f5:1b:2b: 2f:10:48:fd:f7:76:d8:17:d3:ea:60:ee:07:c3:4c:86:32:42: 2e:d3:40:e2:f4:2b:5a:86:97:3b:02:fc:b8:fd:da:7a:40:40: f1:52:5c:e6:ca:29:42:f6:30:87:78:5f:ff:b0:a9:7a:0f:92: 39:b7:ea:3b:79:28:41:67:b1:13:dd:20:fd:d2:da:5f:68:6b: ea:25:21:e7:fa:c0:29:a9:47:a8:e8:e5:83:c9:7e:e1:3c:a6: 67:57:0f:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcK9bAmoVS4JEBoXHIcmWrAoGzzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwNTNDMjQwMkNCNDdGQ0Y2RTg3NUMzMDc1NkUxNkM5 NzQyQkZFMzAeFw0yNjA3MjgxMDI2NDJaFw0yNjA3MjkxMDUyNDJaMDMxMTAvBgNV BAMTKEFBRURCRTVFMzUyNzhGRTFCQ0I5Njc5RENCMjk1NTQwNUFGRTQ2MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeBJcii0JBi0+kjIjYK/WLqZ5G Z870/yOhztmohFeRu1p5pAALJcjxt7UqDkKxh3O0Okt3jjuWyTbF9mlNGW+ph7Le 3NDoqoFD7usURrM0e8uvxDS742ex1FUEIEiJlmgsxTHu63dHYJVibS1oQAfOr3hX dhrdRjRF0GCE4pvuatiXL7++l9DAby6I52zwfnULj5WiVL7+/CNCIAx/D1iCNarX uZZvvbeXhW+M/x+P9yoYxlOYGViWBkJ7Ca4uQAzJ0/g1n7Ny/kj+52unr0PtCtex iT6/rveJqmuLOde3z2JvVIPXtdvNLLRqqq7TmKELU0UCzPmJUE2gY8DCUDoFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqu2+XjUnj+G8uWedyylVQFr+Rg0wHwYDVR0j BBgwFoAUrgU8JALLR/z26HXDB1bhbJdCv+MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDkzNDc2NDIxMjE5MTI1My8wL0FFMDUzQzI0MDJDQjQ3RkNGNkU4NzVDMzA3NTZF MTZDOTc0MkJGRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwNTNDMjQwMkNCNDdGQ0Y2RTg3NUMzMDc1NkUxNkM5NzQyQkZFMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTA5MzQ3NjQyMTIxOTEyNTMvMC9BRTA1M0MyNDAyQ0I0 N0ZDRjZFODc1QzMwNzU2RTE2Qzk3NDJCRkUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0NCDqg0kzoc Oxtpa23/+xqE65Cx9LxPzxqRczKbsrSlKnV6u1WTJt5Be79t5R4X4/cQ43uehPOu k4dmygVxZcDcrduNvdQhKOsofyQW9ZFbybwpbn6A9dnns4aOJFYqZWK1hvCfQ6AU A9AZDm54zsFRoBVPNhoISvxbq19KZwyYZNt9VbhhJJABbgz1EbDP6lzKrlG8suZE faF+nmvR9RsrLxBI/fd22BfT6mDuB8NMhjJCLtNA4vQrWoaXOwL8uP3aekBA8VJc 5sopQvYwh3hf/7Cpeg+SObfqO3koQWexE90g/dLaX2hr6iUh5/rAKalHqOjlg8l+ 4TymZ1cPQQ== -----END CERTIFICATE-----Generated at Wed Jul 29 03:03:13 2026 by rpki-client