$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft File: AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft (raw, json) Hash identifier: 66E6cWij43FIANjP+si52lNWfhzyrrV2EVmqNIr9iD8= Subject key identifier: 46:6E:A1:5F:C2:5F:59:AE:A8:E9:A5:C5:BA:9E:1E:A3:94:13:D9:15 Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 2F568B6A455F6F830B549AC418443AA7D40EB1FE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft Manifest number: 9E Signing time: Tue 12 May 2026 16:55:37 +0000 Manifest this update: Tue 12 May 2026 16:50:37 +0000 Manifest next update: Wed 13 May 2026 19:30:37 +0000 Files and hashes: 1: 3133392e392e39382e302f32342d3234203d3e203535393930.roa (hash: /IJlTWQZGnZ4U5xl7321ZidCdM7PTAGx3Acj6o0Y2UM=) 2: 3133392e392e39392e302f32342d3234203d3e20313336393037.roa (hash: dIhQmZptxW8DU3+OwJQTGx8lpEItTIFryKTB4UedByw=) 3: 3133392e392e39382e302f32342d3234203d3e20313336393037.roa (hash: lZaKhgGI3B+5kNzxcRuw4YEW8BfMtEAeUJ2JE/46huU=) 4: AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl (hash: Crfd4KGV1lPHpZmUiAsIJgoXhfGdicJJWQeLK+KzaCg=) 5: 3133392e392e39392e302f32342d3234203d3e203535393930.roa (hash: uxSQgRL3N6waphidCmEdw7Fzhu6iZ8Wq7e8/zIvLlJc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:56:8b:6a:45:5f:6f:83:0b:54:9a:c4:18:44:3a:a7:d4:0e:b1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: May 12 16:50:37 2026 GMT Not After : May 13 19:30:37 2026 GMT Subject: CN=466EA15FC25F59AEA8E9A5C5BA9E1EA39413D915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:34:de:1d:6a:df:55:d3:6b:82:23:5a:96: 58:76:cc:0f:6b:db:0d:61:ca:37:73:11:59:b7:4f: 9a:60:37:5e:a7:65:77:c0:7d:7d:18:fe:55:b9:dc: c1:98:39:9c:8f:00:2a:4a:04:72:b5:48:b9:57:2e: 6a:d0:0c:32:df:77:f3:81:e1:9f:53:91:da:a7:44: f7:cf:a4:a4:44:ab:72:ce:73:de:ee:2b:c7:9e:d3: f3:6d:2c:ff:e9:41:20:4e:74:ad:c0:8b:04:e0:7e: 04:f9:ab:d0:57:6c:28:1a:d9:e5:71:fb:1e:18:7f: 4e:b1:28:2b:4d:5d:b1:74:73:07:0d:0c:0b:9c:bc: b3:03:cc:a3:c5:8e:d6:e3:83:3d:ef:f2:10:fa:36: 79:36:32:57:12:92:d3:a9:7c:6b:15:3a:1c:b1:ac: 12:28:2c:16:76:c4:da:dc:fb:32:9c:f6:df:34:d5: b8:97:2f:6c:f8:ba:8a:49:ee:f8:e1:a5:1b:c5:ae: a0:f1:18:49:12:12:a9:80:bf:37:ed:63:eb:cb:16: 4e:42:c1:5f:c8:61:7f:16:20:5a:2e:cf:03:81:e6: b2:c1:20:ae:dc:cc:b7:df:eb:37:a4:91:89:06:1b: e4:02:35:ca:7c:9a:e9:3b:59:5b:76:d3:49:ed:24: 1b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6E:A1:5F:C2:5F:59:AE:A8:E9:A5:C5:BA:9E:1E:A3:94:13:D9:15 X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:8d:4c:8d:29:a0:90:83:0d:4a:83:a0:b3:dc:c0:ef:16:cd: 58:79:7b:f0:65:5e:e0:17:23:42:e4:39:fc:aa:a6:37:9e:3f: 84:0f:96:5b:b2:69:eb:1c:43:24:53:21:07:1b:ac:95:05:63: 27:08:8b:2f:6f:9b:3b:bb:47:ba:9c:17:c1:b4:34:1d:b2:0d: b1:67:8a:aa:d4:ae:d4:f5:7e:77:a6:c3:67:7c:94:7e:bd:0e: 85:b9:2d:90:fd:f9:5a:e8:da:b7:b5:6d:7e:45:3e:19:9e:4b: 2e:d1:8f:c9:bc:97:ee:c7:9e:00:8a:ad:e2:1d:99:20:24:68: c5:45:e1:38:80:e6:33:34:eb:be:8e:7c:c6:d9:2a:5a:61:02: df:84:9b:67:12:50:5a:f2:92:69:bb:82:63:8f:a5:3d:d3:06: 42:25:7f:d9:5b:71:c3:7a:39:eb:87:43:56:5c:8a:51:f5:63: 80:19:e2:21:33:ec:20:b9:7d:f8:da:88:24:d4:71:98:3b:3f: 07:11:7d:ba:9c:67:3e:b5:7e:0e:7b:dd:86:17:bf:f0:44:b6: 19:be:93:95:7c:e3:6e:09:8a:25:7b:49:27:f8:2c:33:42:11: b1:02:e7:1c:f1:65:51:24:26:a6:a1:29:3c:52:ca:04:1e:3c: 23:b2:53:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL1aLakVfb4MLVJrEGEQ6p9QOsf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjA1MTIxNjUwMzdaFw0yNjA1MTMxOTMwMzdaMDMxMTAvBgNV BAMTKDQ2NkVBMTVGQzI1RjU5QUVBOEU5QTVDNUJBOUUxRUEzOTQxM0Q5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrzTeHWrfVdNrgiNallh2zA9r 2w1hyjdzEVm3T5pgN16nZXfAfX0Y/lW53MGYOZyPACpKBHK1SLlXLmrQDDLfd/OB 4Z9TkdqnRPfPpKREq3LOc97uK8ee0/NtLP/pQSBOdK3AiwTgfgT5q9BXbCga2eVx +x4Yf06xKCtNXbF0cwcNDAucvLMDzKPFjtbjgz3v8hD6Nnk2MlcSktOpfGsVOhyx rBIoLBZ2xNrc+zKc9t801biXL2z4uopJ7vjhpRvFrqDxGEkSEqmAvzftY+vLFk5C wV/IYX8WIFouzwOB5rLBIK7czLff6zekkYkGG+QCNcp8muk7WVt200ntJBtBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURm6hX8JfWa6o6aXFup4eo5QT2RUwHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS9BRTE0MzFDRENBM0M1 MjQ1NkIwMTQ2QzQ5RDVFRUUzMjk2MUQ3OTNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGI1MjSmgkIMN SoOgs9zA7xbNWHl78GVe4BcjQuQ5/KqmN54/hA+WW7Jp6xxDJFMhBxuslQVjJwiL L2+bO7tHupwXwbQ0HbINsWeKqtSu1PV+d6bDZ3yUfr0OhbktkP35Wujat7VtfkU+ GZ5LLtGPybyX7seeAIqt4h2ZICRoxUXhOIDmMzTrvo58xtkqWmEC34SbZxJQWvKS abuCY4+lPdMGQiV/2Vtxw3o564dDVlyKUfVjgBniITPsILl9+NqIJNRxmDs/BxF9 upxnPrV+Dnvdhhe/8ES2Gb6TlXzjbgmKJXtJJ/gsM0IRsQLnHPFlUSQmpqEpPFLK BB48I7JTcw== -----END CERTIFICATE-----Generated at Wed May 13 13:58:54 2026 by rpki-client