$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: 6RVj5xp0w9DTGjc2msZGpe9R/dL1hoGxTPEAQAjDt2s= Subject key identifier: EB:C7:AF:76:C1:D2:37:A2:99:BD:23:51:54:E1:E4:A1:D7:56:BD:47 Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 100ABF8AFF99C9D7CA9389E6BBC78B7F74EA4B2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: 013B Signing time: Fri 02 Oct 2026 06:45:15 +0000 Manifest this update: Fri 02 Oct 2026 06:40:15 +0000 Manifest next update: Mon 05 Oct 2026 08:44:15 +0000 Files and hashes: 1: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: LUSrMxGN7LxZOzrEoQZLKVHzwl+8qbAUn31Mgp2C6Hw=) 2: 3134302e3230352e302e302f31362d3234203d3e203435313032.roa (hash: pQRnaurNhavozvk/Uf/xbHRB5WSXCOHAuz30poaAiH8=) 3: 3134302e3230352e302e302f31362d3234203d3e203337393633.roa (hash: 4T+Ny17GQGa7oMvo1y349IVyjaqe3SnHiVL4XvhRzI8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 06:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0a:bf:8a:ff:99:c9:d7:ca:93:89:e6:bb:c7:8b:7f:74:ea:4b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Oct 2 06:40:15 2026 GMT Not After : Oct 5 08:44:15 2026 GMT Subject: CN=EBC7AF76C1D237A299BD235154E1E4A1D756BD47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:89:92:07:02:00:22:c4:98:90:49:51:56:b6: 39:b2:a5:6e:15:ba:a9:e3:45:47:f3:ed:c5:40:8a: cf:22:7e:bd:f6:8c:64:94:ce:ca:d0:45:34:0c:6b: 2e:09:db:66:b5:50:ea:74:68:50:97:57:9c:6e:f7: 46:0b:bd:31:fc:af:cf:3d:84:d6:44:cd:60:a0:14: db:e5:03:6a:7a:79:c2:03:38:f5:e6:d9:56:13:c2: 6b:01:e9:60:a8:ea:e4:17:ce:20:16:b9:9a:ab:20: d9:e9:02:96:e8:c8:1b:e2:61:c1:ce:93:53:2a:b0: a2:4a:7c:e1:11:df:0d:a7:7e:5e:da:8f:e5:34:19: 1e:28:7e:1f:b3:e0:a3:b0:6c:6e:76:60:46:35:0a: 78:f7:ab:0c:df:02:7f:a6:79:dc:d7:c2:57:8a:d3: e9:77:57:42:4a:6f:fe:3c:c3:60:4b:4b:38:d5:1c: 6e:bb:a8:64:3b:8a:5c:af:0a:f5:74:db:25:a0:8d: 88:60:92:ba:7c:c7:72:d7:7f:9e:6a:c0:c0:cd:36: fb:17:37:ec:d4:fa:0a:c1:0f:fc:fd:06:dd:aa:1f: b2:02:bf:fb:f8:96:2e:92:bf:ea:98:71:b5:83:b7: ed:ca:40:aa:d1:44:ec:e4:a5:bc:ee:d7:35:1b:46: 85:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C7:AF:76:C1:D2:37:A2:99:BD:23:51:54:E1:E4:A1:D7:56:BD:47 X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:90:a8:1e:af:c5:01:2f:5c:c8:51:f9:b4:d5:51:0d:31:2c: 76:26:3b:0f:64:15:67:1c:21:d7:4a:79:99:4f:3d:fe:53:e6: 36:66:f9:eb:33:16:35:2f:1a:89:fe:91:e6:b1:fb:3a:0d:a0: 2c:ff:8e:73:7d:51:e3:24:0f:66:bf:1a:04:1a:f5:be:55:d7: 36:55:14:1f:ea:27:2d:72:fc:9d:2d:14:b8:19:ef:ea:17:05: e6:fd:f2:bb:8a:27:0c:3c:e9:d1:48:c5:55:a6:7f:a5:52:08: 76:4b:fc:e7:f0:6d:9d:d8:99:80:dd:9e:3c:2c:2d:81:0d:8e: 5d:e8:7c:86:d7:3e:af:05:28:3a:b8:c6:2b:8d:df:15:b5:a1: 3c:93:e2:99:c0:d0:52:1c:18:61:29:2f:a5:01:bd:14:20:45: 57:96:df:75:c3:02:04:3d:a9:20:ff:2c:ef:df:e3:39:12:89: e3:69:04:24:76:a6:34:43:16:53:14:a6:67:20:6c:dd:9b:43: f5:0f:cb:af:d7:de:34:fe:74:15:d2:3f:af:e4:73:97:37:2c: f6:72:bc:fd:fb:79:c9:66:e8:e2:1d:91:79:9d:86:88:98:da: ae:33:ae:73:d5:54:89:1d:c3:72:6b:d9:32:58:5f:6a:f6:9c: a1:b4:8f:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEAq/iv+ZydfKk4nmu8eLf3TqSy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjEwMDIwNjQwMTVaFw0yNjEwMDUwODQ0MTVaMDMxMTAvBgNV BAMTKEVCQzdBRjc2QzFEMjM3QTI5OUJEMjM1MTU0RTFFNEExRDc1NkJENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiZIHAgAixJiQSVFWtjmypW4V uqnjRUfz7cVAis8ifr32jGSUzsrQRTQMay4J22a1UOp0aFCXV5xu90YLvTH8r889 hNZEzWCgFNvlA2p6ecIDOPXm2VYTwmsB6WCo6uQXziAWuZqrINnpApboyBviYcHO k1MqsKJKfOER3w2nfl7aj+U0GR4ofh+z4KOwbG52YEY1Cnj3qwzfAn+medzXwleK 0+l3V0JKb/48w2BLSzjVHG67qGQ7ilyvCvV02yWgjYhgkrp8x3LXf55qwMDNNvsX N+zU+grBD/z9Bt2qH7ICv/v4li6Sv+qYcbWDt+3KQKrRROzkpbzu1zUbRoW/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU68evdsHSN6KZvSNRVOHkoddWvUcwHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZCoHq/FAS9c yFH5tNVRDTEsdiY7D2QVZxwh10p5mU89/lPmNmb56zMWNS8aif6R5rH7Og2gLP+O c31R4yQPZr8aBBr1vlXXNlUUH+onLXL8nS0UuBnv6hcF5v3yu4onDDzp0UjFVaZ/ pVIIdkv85/BtndiZgN2ePCwtgQ2OXeh8htc+rwUoOrjGK43fFbWhPJPimcDQUhwY YSkvpQG9FCBFV5bfdcMCBD2pIP8s79/jORKJ42kEJHamNEMWUxSmZyBs3ZtD9Q/L r9feNP50FdI/r+Rzlzcs9nK8/ft5yWbo4h2ReZ2GiJjarjOuc9VUiR3DcmvZMlhf avacobSPQQ== -----END CERTIFICATE-----Generated at Sat Oct 3 11:13:55 2026 by rpki-client