$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft File: AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft (raw, json) Hash identifier: cukZKtP6wgZ1JptuVU4UpzmvdihnYEEC+/Xbl9tL+Ns= Subject key identifier: 43:4D:65:D5:17:41:F8:CE:C1:36:D4:00:4D:80:6F:9A:88:11:D1:DD Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 7C8758297DEE14D81E147ADC60A6A3C2756226B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft Manifest number: 5F Signing time: Thu 26 Mar 2026 12:08:28 +0000 Manifest this update: Thu 26 Mar 2026 12:03:28 +0000 Manifest next update: Fri 27 Mar 2026 14:56:28 +0000 Files and hashes: 1: 3133392e392e39392e302f32342d3234203d3e20313336393037.roa (hash: dIhQmZptxW8DU3+OwJQTGx8lpEItTIFryKTB4UedByw=) 2: AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl (hash: kLPkXiwpSNzCuV87wjEc+dYufZdbiGwRWD4qtv1J8cA=) 3: 3133392e392e39382e302f32342d3234203d3e20313336393037.roa (hash: lZaKhgGI3B+5kNzxcRuw4YEW8BfMtEAeUJ2JE/46huU=) 4: 3133392e392e39392e302f32342d3234203d3e203535393930.roa (hash: uxSQgRL3N6waphidCmEdw7Fzhu6iZ8Wq7e8/zIvLlJc=) 5: 3133392e392e39382e302f32342d3234203d3e203535393930.roa (hash: /IJlTWQZGnZ4U5xl7321ZidCdM7PTAGx3Acj6o0Y2UM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 04:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:87:58:29:7d:ee:14:d8:1e:14:7a:dc:60:a6:a3:c2:75:62:26:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Mar 26 12:03:28 2026 GMT Not After : Mar 27 14:56:28 2026 GMT Subject: CN=434D65D51741F8CEC136D4004D806F9A8811D1DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:39:90:57:b6:ed:0d:df:ec:9f:3e:6e:ab:63: 4b:a4:8c:f1:39:15:3a:ae:a2:14:cb:0c:fa:fd:98: 9b:39:a5:01:4d:9b:f8:a0:16:b3:38:d7:6d:a0:fc: 53:fc:25:54:98:43:de:15:52:0b:f7:6e:40:35:55: 6c:c0:4b:f7:bd:3c:93:e0:57:0a:71:e4:57:c1:be: 2d:be:16:23:8d:ce:e9:2d:3b:6f:d6:24:8f:84:ab: 1e:37:0e:cc:21:22:c7:8e:41:5e:09:59:25:ee:7d: 51:c6:34:65:d6:ee:2f:84:02:f4:10:9c:f9:30:85: ea:a5:2f:06:ba:94:22:52:04:e5:91:bf:0c:ee:09: 49:2b:a3:fc:d0:dc:56:e4:ba:7f:b6:73:cd:6a:35: 33:da:a2:e1:44:c8:89:83:1a:00:cb:62:3d:ff:c2: ce:1a:40:c0:09:80:da:49:dc:c8:b6:f3:a6:54:4a: e1:68:dc:9b:0b:23:08:63:0a:5d:b8:6e:15:99:2a: 4c:db:72:e4:f9:f2:24:bb:54:2f:b3:20:9c:4b:bb: d0:81:c1:7b:ad:67:c4:80:1e:7d:f2:f3:27:e9:69: d9:07:8f:7b:b4:98:3a:79:82:0c:05:80:86:8c:7a: 74:d8:5d:d5:a9:9f:64:5f:36:d4:2d:83:9d:53:aa: 56:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4D:65:D5:17:41:F8:CE:C1:36:D4:00:4D:80:6F:9A:88:11:D1:DD X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c2:b6:78:37:c1:02:8c:89:50:b6:a9:3d:22:ea:1c:19:7e: f4:0b:19:e8:b9:21:44:5e:e4:96:19:1a:9f:61:cb:64:92:d3: ed:34:96:23:eb:6e:69:29:ff:5c:ed:5d:42:5a:83:f0:4d:4f: 4a:41:3e:ce:7b:ac:8a:45:4e:89:93:9b:bd:8e:8c:25:a8:ea: 29:70:0d:d2:24:6c:c0:dc:b0:97:19:39:d3:37:0c:5e:18:35: 65:43:a3:89:88:6c:6d:cc:55:e9:2f:84:ce:b2:ee:4b:ab:01: f9:00:64:6f:8a:98:03:03:98:82:27:3b:ac:81:15:71:ac:3a: 4b:c7:44:40:c4:f0:07:8c:e4:1a:5f:20:0a:20:4c:00:19:f1: 78:c4:27:8d:27:33:3f:b5:46:a6:61:5e:9f:85:67:32:e7:5a: 5f:c4:e9:d1:4e:e1:64:54:24:f7:6c:3f:df:06:3a:54:c0:cf: e5:43:c9:f1:cf:d8:35:e4:a5:00:17:f1:64:1a:f1:78:8d:4b: 68:3f:fd:f0:08:47:f1:9e:e0:b4:c7:1b:7c:b1:82:c3:ca:67: ab:3d:71:f8:85:f6:31:8c:ed:81:48:9f:96:70:f2:db:68:71: 83:09:e2:1f:2d:1b:fa:f5:c7:bc:3a:ff:35:52:d2:63:98:6f: c5:05:25:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfIdYKX3uFNgeFHrcYKajwnViJrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjAzMjYxMjAzMjhaFw0yNjAzMjcxNDU2MjhaMDMxMTAvBgNV BAMTKDQzNEQ2NUQ1MTc0MUY4Q0VDMTM2RDQwMDREODA2RjlBODgxMUQxREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSOZBXtu0N3+yfPm6rY0ukjPE5 FTquohTLDPr9mJs5pQFNm/igFrM4122g/FP8JVSYQ94VUgv3bkA1VWzAS/e9PJPg Vwpx5FfBvi2+FiONzuktO2/WJI+Eqx43DswhIseOQV4JWSXufVHGNGXW7i+EAvQQ nPkwheqlLwa6lCJSBOWRvwzuCUkro/zQ3Fbkun+2c81qNTPaouFEyImDGgDLYj3/ ws4aQMAJgNpJ3Mi286ZUSuFo3JsLIwhjCl24bhWZKkzbcuT58iS7VC+zIJxLu9CB wXutZ8SAHn3y8yfpadkHj3u0mDp5ggwFgIaMenTYXdWpn2RfNtQtg51TqlYJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQ01l1RdB+M7BNtQATYBvmogR0d0wHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS9BRTE0MzFDRENBM0M1 MjQ1NkIwMTQ2QzQ5RDVFRUUzMjk2MUQ3OTNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsK2eDfBAoyJ ULapPSLqHBl+9AsZ6LkhRF7klhkan2HLZJLT7TSWI+tuaSn/XO1dQlqD8E1PSkE+ znusikVOiZObvY6MJajqKXAN0iRswNywlxk50zcMXhg1ZUOjiYhsbcxV6S+EzrLu S6sB+QBkb4qYAwOYgic7rIEVcaw6S8dEQMTwB4zkGl8gCiBMABnxeMQnjSczP7VG pmFen4VnMudaX8Tp0U7hZFQk92w/3wY6VMDP5UPJ8c/YNeSlABfxZBrxeI1LaD/9 8AhH8Z7gtMcbfLGCw8pnqz1x+IX2MYztgUiflnDy22hxgwniHy0b+vXHvDr/NVLS Y5hvxQUlrA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:59 2026 by rpki-client