$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft File: AE487B72C4F38EA548F6721BB60B773705BD9515.mft (raw, json) Hash identifier: R9HRiYsEa4L/4eh98CeSgp+wLzMEl16thSNEgyfceQI= Subject key identifier: 7A:E4:F1:56:42:15:77:51:65:77:DB:B0:24:CF:CC:90:15:F3:17:AB Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 0577BCD37E1D0D61837E3F92CDD4C9876C8A1877 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 13:23:28 +0000 Manifest this update: Thu 26 Mar 2026 13:18:28 +0000 Manifest next update: Fri 27 Mar 2026 14:55:28 +0000 Files and hashes: 1: AE487B72C4F38EA548F6721BB60B773705BD9515.crl (hash: MB2B55w4TH7nHlTNAckjpDHDR0I7SiIKp0+pO5MBb7s=) 2: 323430333a383038303a3130313a3a2f34382d3438203d3e2034383437.roa (hash: kyxkLgkSkLdtiphgwfgYitM4gd3kF0CU9WboqJpH+Kg=) 3: 323430333a383038303a3a2f33322d3634203d3e203137393634.roa (hash: piQDqbo6ovz4X+QtGKO2nAVFYTFJJbefb5lvlP5mnSU=) 4: 323430333a383838303a3a2f33322d3634203d3e203137393634.roa (hash: +pvZ0/1DLgneMPaWbyvqBXYh1zOEumfoQPnHJUD/aYo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:77:bc:d3:7e:1d:0d:61:83:7e:3f:92:cd:d4:c9:87:6c:8a:18:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Mar 26 13:18:28 2026 GMT Not After : Mar 27 14:55:28 2026 GMT Subject: CN=7AE4F156421577516577DBB024CFCC9015F317AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:4a:f2:a2:d4:8d:8b:ec:90:fb:c5:88:65: 1b:2a:9d:38:28:f8:e9:c2:4a:72:7d:d0:60:25:92: 15:e5:74:11:67:80:85:e9:77:89:dc:c1:a2:49:a3: 26:41:f2:cf:8a:09:48:17:84:63:bf:4a:92:ea:1c: 26:0e:21:6c:8f:2d:05:01:f6:76:9b:cf:e9:64:f6: 6f:c4:fa:0a:9d:b8:43:00:50:1b:af:95:56:2b:ad: 26:1e:3d:5a:43:56:64:35:6a:03:cc:90:d7:47:4e: fe:d9:18:92:e9:ea:1f:90:15:81:87:3a:24:c6:f3: 0f:3f:db:0b:f2:6b:fd:f2:6b:48:a1:5b:09:02:99: 5b:c2:bc:e6:f0:90:87:53:0d:dc:00:8a:90:a3:60: d5:81:71:fa:33:63:34:4f:6a:e8:b0:4a:07:dc:79: fd:94:27:0d:a3:94:72:df:90:57:1f:bb:03:7d:75: 1e:de:71:24:69:a0:99:eb:5f:93:1b:46:2d:62:48: 84:82:b9:36:e2:9d:44:61:5d:40:35:b8:07:2a:23: 16:0a:22:f4:06:08:e7:e1:3e:30:14:42:9c:f7:f7: a0:cd:d4:d4:2b:51:29:a4:26:63:47:42:65:03:4c: 5e:13:2f:7c:dd:ad:56:04:5e:d5:95:99:15:21:88: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E4:F1:56:42:15:77:51:65:77:DB:B0:24:CF:CC:90:15:F3:17:AB X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:38:76:19:b5:d7:8e:26:36:80:c9:7a:6f:29:66:9b:82:9e: 55:cc:62:7b:f0:d1:d2:e2:22:d9:5c:be:45:10:1d:c5:5a:28: 48:e0:89:d5:76:79:36:83:1d:02:e2:c2:98:41:78:fd:de:4b: 1a:88:27:42:8e:cb:8c:9d:56:76:aa:8d:93:d1:bb:dd:3e:aa: eb:8d:7e:74:ec:77:0c:a8:06:be:a2:0e:5d:48:23:43:15:be: 37:35:e7:bf:23:8c:70:dd:8b:84:03:37:af:fa:92:3d:85:74: f4:75:b4:01:1d:16:6e:aa:a1:4f:d7:b4:a4:7c:f1:b1:7d:f1: a7:86:03:58:bc:33:65:b1:d0:74:d8:21:91:45:fb:99:7d:e0: b1:30:8e:4b:01:b0:ca:9f:77:d6:d9:3a:ce:1f:a4:2d:0a:48: 70:b4:ea:a2:d3:c4:ea:27:eb:17:96:f2:c0:ae:e9:94:df:a3: 87:da:6d:1f:37:0a:90:0c:d9:2a:6c:03:10:5b:07:b3:79:b3: 9e:36:83:9f:b9:42:9a:bb:4f:dc:76:61:4b:2f:a3:58:0c:db: f6:05:eb:57:82:1e:4a:4e:ed:73:ed:29:a6:e7:4b:11:77:f8: e4:0d:ea:9d:95:15:b8:02:60:09:5f:ce:2f:04:3e:eb:19:8f: de:13:80:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBXe8034dDWGDfj+SzdTJh2yKGHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjAzMjYxMzE4MjhaFw0yNjAzMjcxNDU1MjhaMDMxMTAvBgNV BAMTKDdBRTRGMTU2NDIxNTc3NTE2NTc3REJCMDI0Q0ZDQzkwMTVGMzE3QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2UryotSNi+yQ+8WIZRsqnTgo +OnCSnJ90GAlkhXldBFngIXpd4ncwaJJoyZB8s+KCUgXhGO/SpLqHCYOIWyPLQUB 9nabz+lk9m/E+gqduEMAUBuvlVYrrSYePVpDVmQ1agPMkNdHTv7ZGJLp6h+QFYGH OiTG8w8/2wvya/3ya0ihWwkCmVvCvObwkIdTDdwAipCjYNWBcfozYzRPauiwSgfc ef2UJw2jlHLfkFcfuwN9dR7ecSRpoJnrX5MbRi1iSISCuTbinURhXUA1uAcqIxYK IvQGCOfhPjAUQpz396DN1NQrUSmkJmNHQmUDTF4TL3zdrVYEXtWVmRUhiD4RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeuTxVkIVd1Fld9uwJM/MkBXzF6swHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc5NDM5MzkvMC9BRTQ4N0I3MkM0RjM4 RUE1NDhGNjcyMUJCNjBCNzczNzA1QkQ5NTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajh2GbXXjiY2 gMl6bylmm4KeVcxie/DR0uIi2Vy+RRAdxVooSOCJ1XZ5NoMdAuLCmEF4/d5LGogn Qo7LjJ1WdqqNk9G73T6q641+dOx3DKgGvqIOXUgjQxW+NzXnvyOMcN2LhAM3r/qS PYV09HW0AR0WbqqhT9e0pHzxsX3xp4YDWLwzZbHQdNghkUX7mX3gsTCOSwGwyp93 1tk6zh+kLQpIcLTqotPE6ifrF5bywK7plN+jh9ptHzcKkAzZKmwDEFsHs3mznjaD n7lCmrtP3HZhSy+jWAzb9gXrV4IeSk7tc+0ppudLEXf45A3qnZUVuAJgCV/OLwQ+ 6xmP3hOAAA== -----END CERTIFICATE-----Generated at Thu Mar 26 21:39:28 2026 by rpki-client