$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: QScqgfoeLhZgjBWkl1w06dU940/FkLPFzyAq/PEoq2Q= Subject key identifier: ED:72:CB:30:6B:CE:CA:A4:BD:AB:8B:4E:BA:73:4B:45:B1:F5:4D:1F Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 2F01C45976470B5B00276429EADFC65480EA7FB0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 13:23:28 +0000 Manifest this update: Thu 26 Mar 2026 13:18:28 +0000 Manifest next update: Fri 27 Mar 2026 16:29:28 +0000 Files and hashes: 1: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: um9rPBBLWpvoGuNLrJDqsMFlVJ31Wq7Jg0ddN+xhP/4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:01:c4:59:76:47:0b:5b:00:27:64:29:ea:df:c6:54:80:ea:7f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Mar 26 13:18:28 2026 GMT Not After : Mar 27 16:29:28 2026 GMT Subject: CN=ED72CB306BCECAA4BDAB8B4EBA734B45B1F54D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:c1:a1:af:e6:77:e3:4d:89:0e:7b:15:a5: 42:07:ca:11:86:25:7f:67:8f:9b:2b:9e:cb:8b:08: ea:e1:1f:2e:2f:e7:61:bb:98:3f:bd:8b:73:d9:8d: 29:89:4d:82:60:97:c0:2e:ed:ae:bc:7a:32:48:19: e7:f8:d0:ae:25:6d:5a:f8:14:2a:86:61:fb:73:4c: 4f:3a:c8:92:67:77:cf:c2:08:1a:1e:01:31:9a:05: ec:19:5f:f1:fb:16:4e:bb:58:13:8b:a3:e7:ed:b7: be:97:51:b9:d2:fa:be:a2:96:9c:75:0e:10:36:15: 7a:cf:29:a7:9d:58:2f:bb:57:2c:ac:55:8a:4e:b9: cd:a0:5f:05:2a:2a:56:6e:6a:69:61:79:fc:e3:c2: ba:be:e1:c9:f8:a9:55:fb:9e:06:5c:38:d8:ca:37: aa:03:71:91:83:10:6b:9e:9c:4e:62:8e:de:94:dd: ad:28:0e:19:5c:c2:f6:88:b0:a4:47:d9:ab:ee:c8: be:75:c9:2f:f0:9b:7b:36:ed:e2:1e:2f:ba:3f:03: 7b:4e:81:2c:7e:22:a6:46:ec:9a:53:70:9d:90:df: 29:04:b5:d3:8f:ec:b8:80:82:f4:ae:73:13:47:c8: 9d:7a:ea:58:49:11:e6:9d:27:86:4f:a8:98:9d:58: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:72:CB:30:6B:CE:CA:A4:BD:AB:8B:4E:BA:73:4B:45:B1:F5:4D:1F X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:83:e6:23:d1:6c:90:69:b5:ef:13:c6:ff:08:c8:53:62:04: c4:a0:82:80:ee:16:da:fc:17:45:19:8a:d2:52:93:82:fd:a2: a0:c4:f2:d0:63:56:76:91:e1:a6:31:16:a5:72:79:cb:b2:98: f4:6a:07:48:c3:3c:b4:70:a2:79:d7:68:57:8e:67:03:ad:ab: 95:43:2a:f8:5c:7e:c6:9f:c8:4a:c9:fc:c8:6e:ab:4b:ba:55: 78:c8:27:70:f9:a7:72:fe:95:04:4d:51:5b:37:e7:a2:fd:ff: 6a:21:2f:42:e1:2d:06:32:f2:dd:61:56:d1:43:72:39:7d:57: b2:80:4b:0d:6b:91:56:07:04:15:24:ac:0b:b1:2e:4e:32:8d: 67:ec:d8:f9:d6:c4:37:42:43:87:a7:1a:b1:3e:58:f2:bf:4c: 0c:6c:fc:33:c1:ff:8d:9e:14:16:48:8e:25:3e:de:79:d6:f6: f9:a0:c9:0b:44:a1:d6:81:d7:f0:b8:4e:d9:85:a6:dc:d9:e5: 36:eb:f9:be:6b:cc:95:53:44:ed:6b:8b:16:42:46:19:87:a5: a1:a1:77:69:3f:67:60:8e:6d:a4:70:e3:7d:65:94:3d:cf:32: 20:f9:9e:32:23:fe:ce:f3:ec:33:b8:99:d3:f8:ce:10:28:e7: 5e:d1:3d:04 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULwHEWXZHC1sAJ2Qp6t/GVIDqf7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjAzMjYxMzE4MjhaFw0yNjAzMjcxNjI5MjhaMDMxMTAvBgNV BAMTKEVENzJDQjMwNkJDRUNBQTRCREFCOEI0RUJBNzM0QjQ1QjFGNTREMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXsGhr+Z3402JDnsVpUIHyhGG JX9nj5srnsuLCOrhHy4v52G7mD+9i3PZjSmJTYJgl8Au7a68ejJIGef40K4lbVr4 FCqGYftzTE86yJJnd8/CCBoeATGaBewZX/H7Fk67WBOLo+ftt76XUbnS+r6ilpx1 DhA2FXrPKaedWC+7VyysVYpOuc2gXwUqKlZuamlhefzjwrq+4cn4qVX7ngZcONjK N6oDcZGDEGuenE5ijt6U3a0oDhlcwvaIsKRH2avuyL51yS/wm3s27eIeL7o/A3tO gSx+IqZG7JpTcJ2Q3ykEtdOP7LiAgvSucxNHyJ166lhJEeadJ4ZPqJidWGhfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7XLLMGvOyqS9q4tOunNLRbH1TR8wHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4PmI9FskGm1 7xPG/wjIU2IExKCCgO4W2vwXRRmK0lKTgv2ioMTy0GNWdpHhpjEWpXJ5y7KY9GoH SMM8tHCieddoV45nA62rlUMq+Fx+xp/ISsn8yG6rS7pVeMgncPmncv6VBE1RWzfn ov3/aiEvQuEtBjLy3WFW0UNyOX1XsoBLDWuRVgcEFSSsC7EuTjKNZ+zY+dbEN0JD h6casT5Y8r9MDGz8M8H/jZ4UFkiOJT7eedb2+aDJC0Sh1oHX8LhO2YWm3NnlNuv5 vmvMlVNE7WuLFkJGGYeloaF3aT9nYI5tpHDjfWWUPc8yIPmeMiP+zvPsM7iZ0/jO ECjnXtE9BA== -----END CERTIFICATE-----Generated at Fri Mar 27 04:09:37 2026 by rpki-client