$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft File: AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft (raw, json) Hash identifier: Mq13yW0bn93Xtvfslc9j6XXZcGoqxGIDBFDINi2OSZY= Subject key identifier: C7:BA:D9:7B:68:43:86:7D:B5:1A:75:66:9C:87:EB:7F:A1:6A:6A:5F Authority key identifier: AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB Certificate issuer: /CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Certificate serial: 68E703FF61E29502D691E7A0774E1E53BA653AE1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft Manifest number: 35 Signing time: Wed 29 Jul 2026 20:00:07 +0000 Manifest this update: Wed 29 Jul 2026 19:55:07 +0000 Manifest next update: Thu 30 Jul 2026 23:57:07 +0000 Files and hashes: 1: 3130332e3232302e39322e302f32342d3234203d3e203633363037.roa (hash: +z+ShcaikWqiaUZb2DYg9PBDgXCkLZavKqWFDF1Jkr8=) 2: 3130332e3232302e39342e302f32342d3234203d3e203633363037.roa (hash: dF3MhDLHJCBnFN0dFuW4PMjSjk2cUkM6SlKWWnqD9rE=) 3: 3130332e3232302e39332e302f32342d3234203d3e203633363037.roa (hash: 2YMQARwQQNx4TKKlA09Deyt0NiaWHSTvIp9ZwvRBmU0=) 4: 323430353a383238303a3a2f33322d3332203d3e203633363037.roa (hash: cJB8DZCXLquxtRMnpkPAwvXkTBKziNRs8S4iiXYlCJ8=) 5: AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl (hash: s4T0Wtpik7Gn95xwk9RY/cFmT9NHhvn5Y2DSZRhV1MQ=) 6: 34352e3235312e3132302e302f32322d3232203d3e203633363037.roa (hash: RZ39bL2boZr+mHG3dnSmDiIpsnz2ZL5lis9k+FJyFHk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:e7:03:ff:61:e2:95:02:d6:91:e7:a0:77:4e:1e:53:ba:65:3a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Validity Not Before: Jul 29 19:55:07 2026 GMT Not After : Jul 30 23:57:07 2026 GMT Subject: CN=C7BAD97B6843867DB51A75669C87EB7FA16A6A5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:56:f3:81:a2:ad:e4:10:00:74:2f:d9:71: 5c:77:03:2b:2a:89:b9:4d:e0:80:0d:dc:41:31:6c: eb:e5:37:2d:5e:1f:9d:57:fa:65:74:41:ef:59:24: 6d:0c:21:a4:57:57:5e:1e:45:d6:86:cf:01:8c:92: 2a:05:9a:a3:a2:54:b9:69:69:93:9b:8a:1c:90:24: 65:a1:58:73:c8:1d:cb:5d:ba:9d:6b:d7:d7:e8:5f: 54:fc:26:b5:97:ef:fa:d9:fb:8f:c1:87:25:bf:de: d0:75:b0:00:85:16:d4:03:3d:57:2c:b9:7d:39:92: d0:47:0a:13:15:2b:05:63:e1:25:56:ec:b5:67:7e: ba:ea:07:53:c2:6c:54:a4:0d:64:4f:87:94:5c:db: 43:b2:f8:4b:b5:a7:99:0b:38:cc:00:03:2d:c6:2f: ca:86:c6:6d:cc:b4:55:a0:0b:2f:d8:64:d4:e8:29: 47:75:9c:70:8a:a7:e8:f2:47:91:ec:3a:4f:ce:4a: 1d:af:36:af:68:be:9e:62:0d:21:54:27:5c:d9:16: 33:a9:64:d1:80:f6:62:2b:40:16:8e:2c:78:0c:ef: dd:18:2d:28:d2:36:5d:9e:f7:2b:54:84:6d:3d:29: 07:43:6d:3b:db:36:7f:d7:d1:f0:ed:ea:88:1d:4a: 15:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BA:D9:7B:68:43:86:7D:B5:1A:75:66:9C:87:EB:7F:A1:6A:6A:5F X509v3 Authority Key Identifier: keyid:AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:be:cf:cc:02:d2:0b:9c:a2:12:f8:d3:cd:f4:c7:ae:b0:04: 82:fc:84:13:2b:90:5f:b6:43:e4:63:b6:29:f4:a9:32:1b:98: be:3f:4a:af:d4:c8:97:61:31:65:ba:61:1f:65:be:f8:36:48: c3:e7:ac:00:f3:fd:8c:63:75:87:9e:93:de:7c:a1:c1:d4:c6: 9c:46:35:17:73:9c:9f:31:28:3e:a5:8d:23:f8:53:4e:69:5f: 9e:91:21:fa:97:12:3d:bc:0b:cf:a0:fd:6f:36:8f:a6:27:0a: 27:72:48:97:a9:55:48:5f:39:11:de:2c:a9:5d:7b:3e:87:4e: b6:2e:2e:b7:e4:79:82:ea:66:3e:a9:03:e2:b9:f1:49:ab:2d: 09:82:68:9d:99:f0:21:be:11:0f:a3:c7:05:78:1d:ea:4b:a9: 6b:c6:73:2f:b9:07:24:29:c0:94:18:ef:23:e8:4a:83:2c:c9: 81:6e:9d:50:f3:ec:50:92:86:2b:f8:b5:a8:27:3d:eb:fc:9e: 3e:8b:e0:83:8f:70:5d:95:70:72:13:ab:c8:14:48:c1:56:5f: 33:19:d4:79:f8:53:88:7c:30:18:a8:8f:bc:16:4d:ec:eb:67: f6:ad:3a:6d:12:a6:f6:2a:48:d7:a4:d3:5b:80:75:e1:c8:2f: 04:e5:c3:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaOcD/2HilQLWkeegd04eU7plOuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNC NDREQjlBQjAeFw0yNjA3MjkxOTU1MDdaFw0yNjA3MzAyMzU3MDdaMDMxMTAvBgNV BAMTKEM3QkFEOTdCNjg0Mzg2N0RCNTFBNzU2NjlDODdFQjdGQTE2QTZBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhVbzgaKt5BAAdC/ZcVx3Aysq iblN4IAN3EExbOvlNy1eH51X+mV0Qe9ZJG0MIaRXV14eRdaGzwGMkioFmqOiVLlp aZObihyQJGWhWHPIHctdup1r19foX1T8JrWX7/rZ+4/BhyW/3tB1sACFFtQDPVcs uX05ktBHChMVKwVj4SVW7LVnfrrqB1PCbFSkDWRPh5Rc20Oy+Eu1p5kLOMwAAy3G L8qGxm3MtFWgCy/YZNToKUd1nHCKp+jyR5HsOk/OSh2vNq9ovp5iDSFUJ1zZFjOp ZNGA9mIrQBaOLHgM790YLSjSNl2e9ytUhG09KQdDbTvbNn/X0fDt6ogdShWzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUx7rZe2hDhn21GnVmnIfrf6Fqal8wHwYDVR0j BBgwFoAUrjg6tLylo+Ed5Jr/cElNQ7RNuaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjcwOTM1MDkxMDAwMTE5MS8wL0FFMzgzQUI0QkNBNUEzRTExREU0OUFGRjcwNDk0 RDQzQjQ0REI5QUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNCNDREQjlBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI3MDkzNTA5MTAwMDExOTEvMC9BRTM4M0FCNEJDQTVB M0UxMURFNDlBRkY3MDQ5NEQ0M0I0NERCOUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY77PzALSC5yi EvjTzfTHrrAEgvyEEyuQX7ZD5GO2KfSpMhuYvj9Kr9TIl2ExZbphH2W++DZIw+es APP9jGN1h56T3nyhwdTGnEY1F3OcnzEoPqWNI/hTTmlfnpEh+pcSPbwLz6D9bzaP picKJ3JIl6lVSF85Ed4sqV17PodOti4ut+R5gupmPqkD4rnxSastCYJonZnwIb4R D6PHBXgd6kupa8ZzL7kHJCnAlBjvI+hKgyzJgW6dUPPsUJKGK/i1qCc96/yePovg g49wXZVwchOryBRIwVZfMxnUefhTiHwwGKiPvBZN7Otn9q06bRKm9ipI16TTW4B1 4cgvBOXD5w== -----END CERTIFICATE-----Generated at Wed Jul 29 22:57:40 2026 by rpki-client