$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: XXvSpQwysNNCIzSCicAnqN6wRSV/JegNsgbXzKsD/UY= Subject key identifier: 75:A1:4D:87:63:BD:BF:1C:BE:A2:B6:BC:1C:67:46:EF:EC:CC:CE:5C Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 66C253FFF7109FE5A65E50CC289CA7DA8AD690C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: FB Signing time: Fri 24 Jul 2026 01:19:59 +0000 Manifest this update: Fri 24 Jul 2026 01:14:59 +0000 Manifest next update: Sat 25 Jul 2026 04:13:59 +0000 Files and hashes: 1: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: vcfTNHvEhXfISRXlil9HsPeZA8pD4emBrJsBygIZUMw=) 2: 3134302e3230352e302e302f31362d3234203d3e203337393633.roa (hash: 4T+Ny17GQGa7oMvo1y349IVyjaqe3SnHiVL4XvhRzI8=) 3: 3134302e3230352e302e302f31362d3234203d3e203435313032.roa (hash: pQRnaurNhavozvk/Uf/xbHRB5WSXCOHAuz30poaAiH8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c2:53:ff:f7:10:9f:e5:a6:5e:50:cc:28:9c:a7:da:8a:d6:90:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Jul 24 01:14:59 2026 GMT Not After : Jul 25 04:13:59 2026 GMT Subject: CN=75A14D8763BDBF1CBEA2B6BC1C6746EFECCCCE5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9d:61:64:11:8c:44:07:48:f6:66:d4:72:90: 4d:fe:fe:61:fd:0f:e8:74:8f:6f:d0:b2:ab:21:e5: 51:f7:76:67:cf:4b:a7:3a:50:82:7b:48:bd:88:7c: 8f:20:02:4b:f3:8a:93:6a:3b:aa:47:1e:e4:95:3c: b8:e6:db:c3:45:6c:50:42:c4:d3:7e:75:50:c2:fc: b5:57:72:6d:58:ea:25:b3:98:16:ef:82:7c:8d:b9: cd:51:2a:81:83:e8:ca:43:01:90:95:95:df:21:7d: 40:f4:8e:9f:10:df:ab:82:63:e4:47:88:ac:11:d4: 38:89:cc:b1:05:b1:ec:ba:6a:5b:e8:d3:14:ec:a8: bd:8c:01:a5:1b:48:76:27:72:db:c2:10:0d:90:b9: 3b:9c:2c:e9:86:bf:6d:cc:d2:44:cc:5e:32:72:a7: a0:b7:77:53:8c:a4:69:f6:c2:74:0c:1d:6f:81:35: 30:c0:4a:35:ed:4d:95:35:72:ac:20:d0:3c:96:5d: a8:10:ce:cf:b3:d6:29:b7:ce:4b:30:10:c9:de:e6: e9:b1:73:55:b9:01:c8:f1:41:4b:e8:23:42:68:cd: 6e:6f:21:68:98:7c:1f:04:e7:e1:56:be:61:47:05: 02:96:0a:4a:39:27:20:47:42:59:e7:d0:c3:79:3d: 3b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A1:4D:87:63:BD:BF:1C:BE:A2:B6:BC:1C:67:46:EF:EC:CC:CE:5C X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:40:9b:95:c7:48:61:6f:80:d3:ab:84:c9:a4:ea:9a:5a:30: ac:f5:33:45:2a:ca:cc:c8:da:47:b1:60:81:2b:82:b7:a9:d7: ce:f6:b2:c7:c1:07:30:7f:6c:1b:62:9a:06:d6:40:50:03:42: d1:c9:bc:13:80:c5:62:fe:f7:d3:48:88:25:7b:8c:bc:fc:40: 06:b3:b3:f0:c6:ab:34:01:e3:3b:16:9d:6b:88:de:27:70:d5: 4c:64:35:2c:60:65:57:4f:bb:0b:3c:f1:d2:17:c5:7e:5a:89: 60:bd:aa:e1:08:7e:2e:cf:59:31:4d:72:15:c8:58:38:40:be: 66:62:8e:21:30:39:0d:5b:cf:b6:64:42:b2:59:97:2c:73:4b: 8f:67:82:7c:41:6b:71:b5:8f:f3:a2:7d:fa:77:7d:7e:fa:a3: 23:45:69:f4:49:a4:96:51:e1:2f:4c:e0:b1:9c:09:8a:8e:83: 51:48:59:84:be:c6:1c:c9:ef:60:65:91:dc:3c:7a:35:f4:2a: 2c:ab:8a:27:92:c0:79:22:43:a3:20:56:ba:c0:ba:51:f5:db: 5d:be:06:9c:6d:b0:00:cc:c3:d1:d7:b1:87:b9:cc:e4:9e:14: 3a:68:2d:26:59:b0:b2:6c:ed:93:d2:ee:a1:de:4e:be:53:bb: ec:c2:6f:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZsJT//cQn+WmXlDMKJyn2orWkMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjA3MjQwMTE0NTlaFw0yNjA3MjUwNDEzNTlaMDMxMTAvBgNV BAMTKDc1QTE0RDg3NjNCREJGMUNCRUEyQjZCQzFDNjc0NkVGRUNDQ0NFNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2nWFkEYxEB0j2ZtRykE3+/mH9 D+h0j2/Qsqsh5VH3dmfPS6c6UIJ7SL2IfI8gAkvzipNqO6pHHuSVPLjm28NFbFBC xNN+dVDC/LVXcm1Y6iWzmBbvgnyNuc1RKoGD6MpDAZCVld8hfUD0jp8Q36uCY+RH iKwR1DiJzLEFsey6alvo0xTsqL2MAaUbSHYnctvCEA2QuTucLOmGv23M0kTMXjJy p6C3d1OMpGn2wnQMHW+BNTDASjXtTZU1cqwg0DyWXagQzs+z1im3zkswEMne5umx c1W5AcjxQUvoI0JozW5vIWiYfB8E5+FWvmFHBQKWCko5JyBHQlnn0MN5PTsxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdaFNh2O9vxy+ora8HGdG7+zMzlwwHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkCblcdIYW+A 06uEyaTqmlowrPUzRSrKzMjaR7FggSuCt6nXzvayx8EHMH9sG2KaBtZAUANC0cm8 E4DFYv7300iIJXuMvPxABrOz8MarNAHjOxada4jeJ3DVTGQ1LGBlV0+7Czzx0hfF flqJYL2q4Qh+Ls9ZMU1yFchYOEC+ZmKOITA5DVvPtmRCslmXLHNLj2eCfEFrcbWP 86J9+nd9fvqjI0Vp9EmkllHhL0zgsZwJio6DUUhZhL7GHMnvYGWR3Dx6NfQqLKuK J5LAeSJDoyBWusC6UfXbXb4GnG2wAMzD0dexh7nM5J4UOmgtJlmwsmztk9Luod5O vlO77MJvqQ== -----END CERTIFICATE-----Generated at Fri Jul 24 19:09:16 2026 by rpki-client