$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft File: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft (raw, json) Hash identifier: Ke116Cqx4ggyQXFhugCZ/whcnz4QcgMIkInBP5vKIW4= Subject key identifier: 17:F7:DD:AC:9C:EE:C1:1E:42:D8:68:7D:2F:40:10:C2:2B:02:41:06 Authority key identifier: AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 Certificate issuer: /CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Certificate serial: 1CF33F8DD47C7C76A3909CA462FD433832D527EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft Manifest number: 013C Signing time: Tue 13 Oct 2026 04:37:43 +0000 Manifest this update: Tue 13 Oct 2026 04:32:43 +0000 Manifest next update: Fri 16 Oct 2026 16:18:43 +0000 Files and hashes: 1: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl (hash: nTg829E8jnv/hTl/wsf/gFlf6ypg/lGN40VYsKlT9u8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 10:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f3:3f:8d:d4:7c:7c:76:a3:90:9c:a4:62:fd:43:38:32:d5:27:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Validity Not Before: Oct 13 04:32:43 2026 GMT Not After : Oct 16 16:18:43 2026 GMT Subject: CN=17F7DDAC9CEEC11E42D8687D2F4010C22B024106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:2a:d6:f5:df:a1:2c:a9:fc:64:8f:9f:d1: 2b:0f:06:7d:cc:43:a1:8d:66:56:9f:9f:21:50:16: d9:63:d7:dd:87:df:88:36:b8:f4:73:5a:73:11:f2: 7b:86:a5:9f:95:d2:1c:fa:35:6c:ae:62:56:89:b2: dc:af:7e:f1:23:8e:c2:5b:e5:5b:5f:6a:fe:13:0b: 24:4a:c5:01:e0:56:d1:6f:a7:26:61:28:e2:71:40: fb:c7:56:8b:fe:02:37:d5:f9:ae:23:19:5e:88:17: db:ca:bd:03:75:c0:12:f7:9f:21:31:40:5c:9a:dc: 11:e6:a4:e9:6c:8e:7b:98:09:35:48:83:4b:14:a1: c9:a9:0f:d8:ee:68:23:0b:c2:fc:36:8d:7f:28:70: 22:de:c4:77:28:15:f8:3e:48:17:36:88:e4:56:31: 93:ff:a4:fc:a8:2e:8d:7c:3a:0e:f4:6b:0c:d6:b6: 26:69:ef:1e:eb:d2:fd:87:05:95:8d:dc:cb:16:10: ec:ef:28:34:92:c7:5f:08:e0:d7:78:bd:7a:7e:42: df:79:fd:a9:bd:ff:b7:aa:0c:a1:d8:06:3f:0e:9d: fc:df:cb:a1:51:0c:d4:2a:8d:3d:1a:45:65:5c:ff: 15:93:a5:0e:50:ca:a9:c4:16:de:98:cf:94:3b:9b: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F7:DD:AC:9C:EE:C1:1E:42:D8:68:7D:2F:40:10:C2:2B:02:41:06 X509v3 Authority Key Identifier: keyid:AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4d:6d:46:be:51:e2:80:61:13:1a:5f:50:21:9a:ed:ce:79: 41:b7:35:4e:13:c6:8f:b9:87:30:a9:19:19:41:bc:0a:86:d8: f9:75:a7:3e:48:9e:00:f8:a7:9f:20:ae:28:97:00:ca:79:7a: 65:f4:04:2c:4a:65:59:38:65:d1:0d:5d:31:d1:f4:2a:48:f6: 01:8e:7e:1e:4d:9a:f2:ff:4d:7a:70:e9:23:f5:44:ba:b2:f4: 5d:39:1e:a5:db:db:b9:9b:c8:be:41:84:99:8e:b3:bf:27:5a: 4d:c7:11:83:63:b3:d3:89:2f:ed:cf:0f:ea:54:65:a3:8f:f4: 8b:d8:04:88:47:61:68:b4:21:3b:8d:c7:c3:ea:79:d4:c6:2b: e9:3a:4b:53:e1:ae:00:5a:15:d3:55:64:7a:b8:5b:dd:34:99: 0b:8f:24:3a:e5:44:c6:39:0b:12:e6:17:3d:20:3e:aa:4e:ad: 62:58:84:87:fb:d8:9c:5c:46:d5:71:d5:f4:33:a6:18:7a:30: b1:79:50:5d:97:10:88:08:2f:7f:51:0b:7c:0d:6c:61:e1:25: d8:59:d2:65:7c:12:60:9d:0d:16:5f:12:55:30:8f:a6:5c:d7: ca:6d:26:6b:26:a2:d0:be:6d:ac:0c:f5:7b:c1:cf:a2:77:25: 88:1b:4e:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHPM/jdR8fHajkJykYv1DODLVJ+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYz QzFGNzNDNjAeFw0yNjEwMTMwNDMyNDNaFw0yNjEwMTYxNjE4NDNaMDMxMTAvBgNV BAMTKDE3RjdEREFDOUNFRUMxMUU0MkQ4Njg3RDJGNDAxMEMyMkIwMjQxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwiirW9d+hLKn8ZI+f0SsPBn3M Q6GNZlafnyFQFtlj192H34g2uPRzWnMR8nuGpZ+V0hz6NWyuYlaJstyvfvEjjsJb 5Vtfav4TCyRKxQHgVtFvpyZhKOJxQPvHVov+AjfV+a4jGV6IF9vKvQN1wBL3nyEx QFya3BHmpOlsjnuYCTVIg0sUocmpD9juaCMLwvw2jX8ocCLexHcoFfg+SBc2iORW MZP/pPyoLo18Og70awzWtiZp7x7r0v2HBZWN3MsWEOzvKDSSx18I4Nd4vXp+Qt95 /am9/7eqDKHYBj8Onfzfy6FRDNQqjT0aRWVc/xWTpQ5QyqnEFt6Yz5Q7m70LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUF/fdrJzuwR5C2Gh9L0AQwisCQQYwHwYDVR0j BBgwFoAUruGZHmaaawyX6KHcnJZXVjwfc8YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8xL0FFRTE5OTFFNjY5QTZCMEM5N0U4QTFEQzlDOTY1 NzU2M0MxRjczQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYzQzFGNzNDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMS9BRUUxOTkxRTY2OUE2 QjBDOTdFOEExREM5Qzk2NTc1NjNDMUY3M0M2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjU1tRr5R4oBh ExpfUCGa7c55Qbc1ThPGj7mHMKkZGUG8CobY+XWnPkieAPinnyCuKJcAynl6ZfQE LEplWThl0Q1dMdH0Kkj2AY5+Hk2a8v9NenDpI/VEurL0XTkepdvbuZvIvkGEmY6z vydaTccRg2Oz04kv7c8P6lRlo4/0i9gEiEdhaLQhO43Hw+p51MYr6TpLU+GuAFoV 01Vkerhb3TSZC48kOuVExjkLEuYXPSA+qk6tYliEh/vYnFxG1XHV9DOmGHowsXlQ XZcQiAgvf1ELfA1sYeEl2FnSZXwSYJ0NFl8SVTCPplzXym0mayai0L5trAz1e8HP oncliBtO8Q== -----END CERTIFICATE-----Generated at Wed Oct 14 13:17:12 2026 by rpki-client