$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: iNGjTmVKTBn+W0otAzr7ELIuqP1OIMPhEmD2KQOGbXI= Subject key identifier: 6C:AA:BA:43:F4:5E:CB:E6:97:CF:BE:7B:33:C1:1D:87:BF:0E:BF:EB Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 4F91BED45FB577B4409611B3BB8890154B6E1094 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: 9A Signing time: Tue 12 May 2026 23:55:49 +0000 Manifest this update: Tue 12 May 2026 23:50:49 +0000 Manifest next update: Thu 14 May 2026 00:52:49 +0000 Files and hashes: 1: 3134302e3230352e302e302f31362d3234203d3e203435313032.roa (hash: pQRnaurNhavozvk/Uf/xbHRB5WSXCOHAuz30poaAiH8=) 2: 3134302e3230352e302e302f31362d3234203d3e203337393633.roa (hash: 4T+Ny17GQGa7oMvo1y349IVyjaqe3SnHiVL4XvhRzI8=) 3: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: XRvuM3fb5D8eOR5QURH9ldXjcCcYMGI8V7gyzJ6BeHM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:91:be:d4:5f:b5:77:b4:40:96:11:b3:bb:88:90:15:4b:6e:10:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: May 12 23:50:49 2026 GMT Not After : May 14 00:52:49 2026 GMT Subject: CN=6CAABA43F45ECBE697CFBE7B33C11D87BF0EBFEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5c:5e:35:bf:6b:cc:c0:9c:cc:42:7c:c3:f4: cf:1c:bc:b0:a7:86:61:f7:4e:aa:85:38:e2:ad:63: 5d:e1:51:7b:3a:75:d4:1c:0e:e5:49:b8:36:0a:3b: d6:d1:45:ae:56:32:a9:20:ce:20:eb:30:09:bf:11: 8e:a4:39:4c:77:43:ca:36:f4:bb:9b:a9:14:45:cf: 49:8c:42:be:90:c4:2e:1b:b2:45:47:39:9c:54:2d: f8:49:d4:79:ae:1b:06:ae:b3:e2:3f:a6:cb:82:7e: 90:58:26:b6:c9:a0:18:84:f5:c8:1f:15:d8:45:9b: 96:71:24:9b:8b:39:a2:e1:db:19:56:87:ec:49:ef: fc:51:30:9e:3c:8f:cb:e6:ab:a8:9a:b1:d1:5e:34: f5:45:4e:ea:22:69:a0:6d:2a:0a:d1:fb:3b:9c:0c: 88:a3:c5:57:d0:be:53:2b:26:9f:f5:78:bc:d7:25: 34:ef:4a:88:d8:bc:9f:7b:91:51:c5:ba:1f:7e:6b: 2a:63:43:99:61:bc:61:7d:7d:2b:ed:e8:86:cd:9b: 48:39:e0:58:f3:c7:56:7c:2a:10:41:80:c9:3d:10: 1a:11:81:b3:ee:b0:55:ec:98:3d:ee:83:52:56:db: 8b:1c:32:e6:f7:d0:6b:96:cc:1e:54:e5:5e:c4:a4: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AA:BA:43:F4:5E:CB:E6:97:CF:BE:7B:33:C1:1D:87:BF:0E:BF:EB X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a9:01:c9:78:1d:ab:0f:b4:2d:c3:f2:3f:76:76:c3:19:ef: 73:4e:a5:9f:da:aa:94:12:d0:ba:7f:81:9a:58:e2:d8:0c:2a: 73:c0:82:0e:02:4b:d7:0e:3e:57:c8:f8:dc:99:11:f0:e5:f7: 38:b1:36:c4:a2:c4:44:bc:f6:05:00:51:e1:16:81:10:fd:41: e7:91:87:ba:52:29:28:0e:14:3f:ca:81:8c:d3:fd:21:16:2c: b0:f3:ac:10:6f:05:48:cd:8f:03:91:eb:d4:a1:e1:8f:88:81: a2:a5:64:13:ef:ca:73:8c:fa:79:16:ef:c3:1e:94:6a:97:8a: 26:25:af:e0:7d:0b:56:87:f0:fb:e9:e0:8c:2b:7f:de:b1:5c: 08:cd:10:4f:86:bd:cb:15:57:e4:68:74:2c:c4:b4:eb:6a:4c: 46:87:68:b6:2f:61:b0:0b:0b:bb:d7:5c:a2:28:21:6c:e5:7d: 77:c4:bd:eb:c5:f4:55:1f:f7:6c:84:d0:c9:ec:a6:06:c8:d2: 47:73:23:17:8f:0d:eb:1f:f3:7d:4a:d0:68:d5:2f:10:0c:f4: 12:82:80:13:fc:83:b0:37:d7:c2:41:29:e9:18:c6:22:4a:b6: af:d5:48:96:13:75:6d:fb:e5:75:ff:78:cf:80:ab:d1:1f:c1: ca:d8:08:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT5G+1F+1d7RAlhGzu4iQFUtuEJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjA1MTIyMzUwNDlaFw0yNjA1MTQwMDUyNDlaMDMxMTAvBgNV BAMTKDZDQUFCQTQzRjQ1RUNCRTY5N0NGQkU3QjMzQzExRDg3QkYwRUJGRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuXF41v2vMwJzMQnzD9M8cvLCn hmH3TqqFOOKtY13hUXs6ddQcDuVJuDYKO9bRRa5WMqkgziDrMAm/EY6kOUx3Q8o2 9LubqRRFz0mMQr6QxC4bskVHOZxULfhJ1HmuGwaus+I/psuCfpBYJrbJoBiE9cgf FdhFm5ZxJJuLOaLh2xlWh+xJ7/xRMJ48j8vmq6iasdFeNPVFTuoiaaBtKgrR+zuc DIijxVfQvlMrJp/1eLzXJTTvSojYvJ97kVHFuh9+aypjQ5lhvGF9fSvt6IbNm0g5 4Fjzx1Z8KhBBgMk9EBoRgbPusFXsmD3ug1JW24scMub30GuWzB5U5V7EpNOVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbKq6Q/Rey+aXz757M8Edh78Ov+swHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqkByXgdqw+0 LcPyP3Z2wxnvc06ln9qqlBLQun+Bmlji2Awqc8CCDgJL1w4+V8j43JkR8OX3OLE2 xKLERLz2BQBR4RaBEP1B55GHulIpKA4UP8qBjNP9IRYssPOsEG8FSM2PA5Hr1KHh j4iBoqVkE+/Kc4z6eRbvwx6UapeKJiWv4H0LVofw++ngjCt/3rFcCM0QT4a9yxVX 5Gh0LMS062pMRodoti9hsAsLu9dcoighbOV9d8S968X0VR/3bITQyeymBsjSR3Mj F48N6x/zfUrQaNUvEAz0EoKAE/yDsDfXwkEp6RjGIkq2r9VIlhN1bfvldf94z4Cr 0R/BytgIkQ== -----END CERTIFICATE-----Generated at Wed May 13 12:28:01 2026 by rpki-client