$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft File: AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft (raw, json) Hash identifier: ruM1eqGH66q8ODh12ytvJv7jWkM60bvscDJVbm1R040= Subject key identifier: 07:19:FB:96:BD:CE:09:1E:76:3C:75:D6:BE:B7:07:46:09:C2:20:22 Authority key identifier: AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB Certificate issuer: /CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Certificate serial: 3DF76A1F934DE05C9E4BB57260E97C8E4A9AA953 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft Manifest number: 74 Signing time: Mon 19 Oct 2026 15:15:47 +0000 Manifest this update: Mon 19 Oct 2026 15:10:47 +0000 Manifest next update: Thu 22 Oct 2026 18:13:47 +0000 Files and hashes: 1: 34352e3235312e3132302e302f32322d3232203d3e203633363037.roa (hash: RZ39bL2boZr+mHG3dnSmDiIpsnz2ZL5lis9k+FJyFHk=) 2: 323430353a383238303a3a2f33322d3332203d3e203633363037.roa (hash: cJB8DZCXLquxtRMnpkPAwvXkTBKziNRs8S4iiXYlCJ8=) 3: AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl (hash: 9P7WvXY+tCULryCoM2yZeWtUlsBP2wv0/lVf/g4Xv1c=) 4: 3130332e3232302e39342e302f32342d3234203d3e203633363037.roa (hash: dF3MhDLHJCBnFN0dFuW4PMjSjk2cUkM6SlKWWnqD9rE=) 5: 3130332e3232302e39322e302f32342d3234203d3e203633363037.roa (hash: +z+ShcaikWqiaUZb2DYg9PBDgXCkLZavKqWFDF1Jkr8=) 6: 3130332e3232302e39332e302f32342d3234203d3e203633363037.roa (hash: 2YMQARwQQNx4TKKlA09Deyt0NiaWHSTvIp9ZwvRBmU0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 18:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f7:6a:1f:93:4d:e0:5c:9e:4b:b5:72:60:e9:7c:8e:4a:9a:a9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Validity Not Before: Oct 19 15:10:47 2026 GMT Not After : Oct 22 18:13:47 2026 GMT Subject: CN=0719FB96BDCE091E763C75D6BEB7074609C22022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:63:50:25:db:58:e1:32:5a:17:f5:93:be: 53:08:df:4c:b5:97:7a:04:66:5e:2c:e6:b5:16:2b: db:a6:e4:41:81:db:86:67:54:45:0d:00:24:2c:86: f8:bb:53:ae:3b:be:04:17:8e:cd:37:3e:2f:bf:ba: ad:2f:8c:e6:5b:11:f7:dc:05:27:52:86:9d:c2:d8: c7:d8:83:29:29:0e:f4:6b:84:29:84:c9:66:c3:e5: bb:14:4d:c6:fa:10:d8:29:39:62:c3:21:36:18:49: 57:25:fa:9e:0a:e4:f0:bc:45:3e:52:7c:71:d3:9c: 70:99:83:e9:f4:76:62:4f:f7:1f:94:86:32:3a:8d: 85:4b:0c:cf:08:2a:71:8c:89:a5:9d:76:14:4e:c3: da:05:d2:97:73:96:38:f3:0a:89:eb:8e:55:0e:17: f5:79:27:6e:53:20:02:35:75:16:2d:3e:10:4e:45: 2c:8a:b4:45:1c:a4:5f:7d:81:01:ad:48:0e:b7:55: 5b:ff:c0:c9:6b:03:8a:6c:18:32:9d:4e:22:dd:86: 4a:86:31:62:0d:d5:cb:92:c9:07:65:0e:f6:00:94: 54:5d:a0:64:31:35:11:f3:b5:03:20:23:ae:8b:cb: 47:93:1f:d1:82:b0:a7:98:6c:40:68:3c:2b:12:9b: 24:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:19:FB:96:BD:CE:09:1E:76:3C:75:D6:BE:B7:07:46:09:C2:20:22 X509v3 Authority Key Identifier: keyid:AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:46:41:f5:76:cd:c7:70:67:60:2e:44:41:92:53:a1:c5:19: 9b:53:88:d3:d9:0d:1e:0a:0d:41:cf:1d:3e:e7:a1:22:4b:fa: 85:e3:2c:c4:5f:4e:6e:52:ef:aa:e4:8d:b7:00:ce:c3:e4:b0: 26:92:8e:2f:21:47:71:a6:41:45:57:61:d2:f1:a1:ab:ef:02: c1:2f:47:3f:f3:c0:f5:44:ca:37:4c:ca:b0:b9:0c:ce:69:2c: f7:06:c6:db:4a:ff:12:b7:67:63:40:fe:fd:7f:db:00:0c:04: ed:b1:15:d3:b6:63:88:4e:a5:70:ce:eb:ec:6d:24:e1:20:6c: 65:54:06:04:0a:b3:0c:aa:c2:9a:79:59:3c:16:a0:71:46:2f: 49:de:aa:4f:97:58:13:fe:ea:78:d7:4e:ac:a8:de:1d:b4:ba: 7c:6b:3c:07:cb:61:1e:e6:cd:f6:be:41:49:75:4b:96:c1:4e: 93:3f:f6:a7:65:6f:60:02:cb:80:48:75:02:61:dd:bc:c3:e9: 48:99:8c:50:e6:6d:6f:47:7c:f4:ec:2f:3a:74:11:fe:1f:c3: 1a:a5:d2:69:1e:f9:97:ec:29:ae:ed:68:1f:0b:9a:9a:97:6d: bb:9c:88:ca:45:4c:fe:45:1d:3e:f2:4e:54:3f:51:3f:8b:82: 15:c9:b3:53 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPfdqH5NN4FyeS7VyYOl8jkqaqVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNC NDREQjlBQjAeFw0yNjEwMTkxNTEwNDdaFw0yNjEwMjIxODEzNDdaMDMxMTAvBgNV BAMTKDA3MTlGQjk2QkRDRTA5MUU3NjNDNzVENkJFQjcwNzQ2MDlDMjIwMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSpWNQJdtY4TJaF/WTvlMI30y1 l3oEZl4s5rUWK9um5EGB24ZnVEUNACQshvi7U647vgQXjs03Pi+/uq0vjOZbEffc BSdShp3C2MfYgykpDvRrhCmEyWbD5bsUTcb6ENgpOWLDITYYSVcl+p4K5PC8RT5S fHHTnHCZg+n0dmJP9x+UhjI6jYVLDM8IKnGMiaWddhROw9oF0pdzljjzConrjlUO F/V5J25TIAI1dRYtPhBORSyKtEUcpF99gQGtSA63VVv/wMlrA4psGDKdTiLdhkqG MWIN1cuSyQdlDvYAlFRdoGQxNRHztQMgI66Ly0eTH9GCsKeYbEBoPCsSmyQbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBxn7lr3OCR52PHXWvrcHRgnCICIwHwYDVR0j BBgwFoAUrjg6tLylo+Ed5Jr/cElNQ7RNuaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjcwOTM1MDkxMDAwMTE5MS8wL0FFMzgzQUI0QkNBNUEzRTExREU0OUFGRjcwNDk0 RDQzQjQ0REI5QUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNCNDREQjlBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI3MDkzNTA5MTAwMDExOTEvMC9BRTM4M0FCNEJDQTVB M0UxMURFNDlBRkY3MDQ5NEQ0M0I0NERCOUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUZB9XbNx3Bn YC5EQZJTocUZm1OI09kNHgoNQc8dPuehIkv6heMsxF9OblLvquSNtwDOw+SwJpKO LyFHcaZBRVdh0vGhq+8CwS9HP/PA9UTKN0zKsLkMzmks9wbG20r/ErdnY0D+/X/b AAwE7bEV07ZjiE6lcM7r7G0k4SBsZVQGBAqzDKrCmnlZPBagcUYvSd6qT5dYE/7q eNdOrKjeHbS6fGs8B8thHubN9r5BSXVLlsFOkz/2p2VvYALLgEh1AmHdvMPpSJmM UOZtb0d89OwvOnQR/h/DGqXSaR75l+wpru1oHwuampdtu5yIykVM/kUdPvJOVD9R P4uCFcmzUw== -----END CERTIFICATE-----Generated at Tue Oct 20 15:23:55 2026 by rpki-client