$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft File: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft (raw, json) Hash identifier: GOAKy3BkCCgtOfXsedwcSRZ1giQgtuQEXUjnkhUztKI= Subject key identifier: DC:9B:F8:AD:76:A5:95:87:22:59:80:5E:91:16:9A:50:20:2F:6C:96 Authority key identifier: AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 Certificate issuer: /CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Certificate serial: 5716F1A57FBCF85D37B16F459CC80A3617BAD21B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft Manifest number: 51 Signing time: Thu 26 Mar 2026 03:08:28 +0000 Manifest this update: Thu 26 Mar 2026 03:03:28 +0000 Manifest next update: Fri 27 Mar 2026 05:04:28 +0000 Files and hashes: 1: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl (hash: eH5q7Q3Pu2YuIj20tIy7Z2BpWBkgXO8WIVisEN2PKes=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 04:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:16:f1:a5:7f:bc:f8:5d:37:b1:6f:45:9c:c8:0a:36:17:ba:d2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Validity Not Before: Mar 26 03:03:28 2026 GMT Not After : Mar 27 05:04:28 2026 GMT Subject: CN=DC9BF8AD76A595872259805E91169A50202F6C96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:cd:0e:fa:a6:bf:c1:27:ce:5a:63:c5:b0: 16:37:73:ad:36:90:ee:f7:fb:ab:e9:c5:e5:bb:ee: 7d:f4:24:ae:d7:23:c0:1e:ee:cf:68:d1:ef:89:2e: da:ef:fb:9b:9d:7c:67:f5:3c:94:1d:db:72:bc:a0: 90:1c:1f:29:4c:a3:c1:31:ee:f0:28:42:51:cc:ef: 96:3b:5d:a5:ea:78:fe:b4:ad:ab:4e:e4:28:c5:08: 26:84:e9:93:be:5c:86:22:e7:a2:cb:11:5a:10:ec: c5:44:07:02:a7:50:44:6e:69:d5:48:11:c8:5f:1c: c1:2e:ea:48:cb:af:ab:16:01:da:46:34:c2:41:4f: 54:ff:4b:2f:de:6c:16:fd:f2:2a:05:a0:64:06:42: b2:ac:52:36:03:ed:c2:1c:e7:f8:41:60:1a:cf:b3: 7e:1b:1d:8e:38:dd:51:fa:b2:3c:4b:42:58:73:14: ba:da:23:fa:af:ba:c2:30:00:80:bd:b9:16:b7:13: e0:62:d0:59:ab:61:83:e8:23:01:7e:0b:26:ad:52: 91:9b:d7:5d:69:ab:68:4a:f3:be:7d:9e:f6:fb:64: e4:94:bc:2b:79:2f:88:0d:29:e5:ef:9b:10:1f:40: 43:fc:b3:6b:ee:e1:aa:bf:68:05:42:88:b2:8a:df: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9B:F8:AD:76:A5:95:87:22:59:80:5E:91:16:9A:50:20:2F:6C:96 X509v3 Authority Key Identifier: keyid:AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ea:15:67:93:90:65:60:b3:0c:6a:76:a3:10:99:63:af:40: 86:36:07:10:ef:f6:d1:ae:74:ec:7c:8a:23:9f:8e:1c:c6:dd: dd:b3:48:d6:dd:5f:a7:89:27:80:bd:2f:0b:35:83:c9:c5:e3: e7:7c:8c:42:dc:f9:28:16:ef:d8:fa:aa:b8:bc:0f:1d:56:ec: 33:86:04:c2:b9:aa:3d:f7:2a:18:b6:4f:d1:60:31:55:07:e0: 78:8a:3f:9e:56:ec:aa:d8:30:23:d4:c2:39:f6:95:ed:04:79: 03:4b:e4:f0:41:d3:0c:fc:70:81:9f:cd:a5:5c:1f:0e:df:5b: 42:34:e6:aa:72:d3:20:b3:46:b3:43:16:0b:3c:f3:5f:e6:7b: 3b:50:d4:fb:47:d8:13:f8:ad:e2:17:32:a6:63:ed:7f:11:6a: 38:ba:16:ad:e9:5e:88:5b:77:52:29:3b:99:6a:20:b9:d3:e9: 9b:d3:b2:0f:6a:45:31:c5:78:3b:b3:32:7b:47:be:a0:66:f3: 68:7d:a7:c8:74:d7:63:b0:0b:a7:77:b6:3e:92:a9:64:c5:0a: c5:7f:c9:70:59:43:4f:76:af:ad:b6:ca:f4:13:61:e3:37:e1: 8c:2e:cd:3f:5f:44:e0:a4:56:d6:44:ae:47:11:76:ba:a1:16: bc:9b:dd:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVxbxpX+8+F03sW9FnMgKNhe60hswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYz QzFGNzNDNjAeFw0yNjAzMjYwMzAzMjhaFw0yNjAzMjcwNTA0MjhaMDMxMTAvBgNV BAMTKERDOUJGOEFENzZBNTk1ODcyMjU5ODA1RTkxMTY5QTUwMjAyRjZDOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQConM0O+qa/wSfOWmPFsBY3c602 kO73+6vpxeW77n30JK7XI8Ae7s9o0e+JLtrv+5udfGf1PJQd23K8oJAcHylMo8Ex 7vAoQlHM75Y7XaXqeP60ratO5CjFCCaE6ZO+XIYi56LLEVoQ7MVEBwKnUERuadVI EchfHMEu6kjLr6sWAdpGNMJBT1T/Sy/ebBb98ioFoGQGQrKsUjYD7cIc5/hBYBrP s34bHY443VH6sjxLQlhzFLraI/qvusIwAIC9uRa3E+Bi0FmrYYPoIwF+CyatUpGb 111pq2hK8759nvb7ZOSUvCt5L4gNKeXvmxAfQEP8s2vu4aq/aAVCiLKK377TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3Jv4rXallYciWYBekRaaUCAvbJYwHwYDVR0j BBgwFoAUruGZHmaaawyX6KHcnJZXVjwfc8YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8xL0FFRTE5OTFFNjY5QTZCMEM5N0U4QTFEQzlDOTY1 NzU2M0MxRjczQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYzQzFGNzNDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMS9BRUUxOTkxRTY2OUE2 QjBDOTdFOEExREM5Qzk2NTc1NjNDMUY3M0M2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOoVZ5OQZWCz DGp2oxCZY69AhjYHEO/20a507HyKI5+OHMbd3bNI1t1fp4kngL0vCzWDycXj53yM Qtz5KBbv2PqquLwPHVbsM4YEwrmqPfcqGLZP0WAxVQfgeIo/nlbsqtgwI9TCOfaV 7QR5A0vk8EHTDPxwgZ/NpVwfDt9bQjTmqnLTILNGs0MWCzzzX+Z7O1DU+0fYE/it 4hcypmPtfxFqOLoWreleiFt3Uik7mWogudPpm9OyD2pFMcV4O7Mye0e+oGbzaH2n yHTXY7ALp3e2PpKpZMUKxX/JcFlDT3avrbbK9BNh4zfhjC7NP19E4KRW1kSuRxF2 uqEWvJvd5w== -----END CERTIFICATE-----Generated at Thu Mar 26 22:53:36 2026 by rpki-client