$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft File: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft (raw, json) Hash identifier: 9Oo9WlZTnqPgEB/fVuZdLvUoxKqFl/nTVP/TiXkErC8= Subject key identifier: 25:C3:75:EA:0C:4C:08:FC:B5:D7:6E:70:BD:69:CF:7F:3A:63:C6:43 Authority key identifier: AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 Certificate issuer: /CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Certificate serial: 42977748071C9D55241AFB438B22559EA97460B9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft Manifest number: FB Signing time: Mon 12 Oct 2026 13:31:59 +0000 Manifest this update: Mon 12 Oct 2026 13:26:59 +0000 Manifest next update: Thu 15 Oct 2026 15:33:59 +0000 Files and hashes: 1: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl (hash: gVj020TlS+WHigPyx2EWTO+PT4vLIpRbgwgnTYcE5rU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:97:77:48:07:1c:9d:55:24:1a:fb:43:8b:22:55:9e:a9:74:60:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Validity Not Before: Oct 12 13:26:59 2026 GMT Not After : Oct 15 15:33:59 2026 GMT Subject: CN=25C375EA0C4C08FCB5D76E70BD69CF7F3A63C643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:33:33:4b:62:25:03:1d:d4:09:f1:31:72:a8: 75:1e:04:7f:c3:a1:41:b4:88:18:d9:75:59:c7:10: 99:5f:00:2f:15:03:1a:2c:f0:52:c1:67:19:99:21: c6:eb:ad:e4:a7:82:3c:f2:95:2f:4e:19:ff:ea:f7: dc:70:e9:96:cd:60:ae:bf:c7:f1:fb:39:0b:ca:c9: 68:f6:35:df:40:ed:86:1d:6e:44:73:d2:c1:67:78: 79:c7:a6:7c:3f:65:98:0e:90:b7:27:bd:e5:4e:ae: b0:59:94:0f:f3:55:67:d0:6c:9f:7e:15:31:4a:a5: f8:0d:37:3a:df:06:17:0d:0b:90:6a:5c:4f:8c:19: 39:3a:f0:bd:08:bd:98:0e:f5:52:19:cf:97:ea:24: 53:b9:37:79:eb:81:9a:0a:43:36:1f:54:16:d9:76: 0c:b8:ac:f1:6a:69:d1:97:73:d4:1f:79:87:d1:9b: de:4b:6f:cd:ca:6b:63:68:6c:72:bc:e6:eb:93:20: 9f:eb:36:0f:1c:ea:8f:62:cc:10:0d:1a:39:00:91: be:af:76:6e:33:5b:6b:22:48:40:c6:40:39:44:12: fd:b3:1a:6b:f7:9d:a9:65:5f:2e:44:2f:30:3a:e8: 7e:07:e3:ac:33:3f:6f:64:e4:c1:7e:38:83:1b:c5: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C3:75:EA:0C:4C:08:FC:B5:D7:6E:70:BD:69:CF:7F:3A:63:C6:43 X509v3 Authority Key Identifier: keyid:AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7a:6e:b5:7d:ab:b2:48:1e:00:f9:9d:c4:e5:5a:19:13:3d: 0f:59:f3:c5:dc:44:b1:4c:95:8d:91:38:64:93:31:46:1f:30: d9:25:8c:a0:5c:cf:b8:56:ba:21:0b:63:19:bc:24:45:02:ab: 62:8a:4d:15:1c:1b:b8:b2:50:5f:cd:0f:b3:16:8d:57:9d:33: 7d:c1:8f:bc:f2:c4:36:31:cd:00:98:c0:31:69:c5:21:73:31: 03:ac:ed:cf:18:4e:a6:d7:c1:2e:bf:f9:1e:73:c8:3a:b7:84: e6:e4:0e:a2:75:0d:2d:eb:10:db:4c:28:8a:6e:a4:89:50:16: b4:a4:d0:1a:1b:93:dc:4c:94:7f:dd:e1:80:2b:b4:ad:72:44: 86:9f:93:0d:80:03:3d:fd:21:f9:5c:8f:22:09:5f:af:a8:b2: 3d:9f:6c:5d:ef:2b:11:0b:d6:28:0d:14:e8:a2:ac:be:97:0a: 0b:82:c9:1e:fe:31:63:c9:c8:48:4f:c5:65:97:b4:4a:00:20: a6:27:12:d2:b2:47:47:39:79:d1:88:43:7f:b4:f7:41:97:99: 20:7c:90:ad:33:de:b9:83:43:6e:1d:c7:68:40:33:e4:76:25: 25:66:9d:ab:d1:12:62:13:34:a3:59:f1:a4:25:b7:23:ac:47: d6:29:9b:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQpd3SAccnVUkGvtDiyJVnql0YLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5 RjBEREM5MTAeFw0yNjEwMTIxMzI2NTlaFw0yNjEwMTUxNTMzNTlaMDMxMTAvBgNV BAMTKDI1QzM3NUVBMEM0QzA4RkNCNUQ3NkU3MEJENjlDRjdGM0E2M0M2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfMzNLYiUDHdQJ8TFyqHUeBH/D oUG0iBjZdVnHEJlfAC8VAxos8FLBZxmZIcbrreSngjzylS9OGf/q99xw6ZbNYK6/ x/H7OQvKyWj2Nd9A7YYdbkRz0sFneHnHpnw/ZZgOkLcnveVOrrBZlA/zVWfQbJ9+ FTFKpfgNNzrfBhcNC5BqXE+MGTk68L0IvZgO9VIZz5fqJFO5N3nrgZoKQzYfVBbZ dgy4rPFqadGXc9QfeYfRm95Lb83Ka2NobHK85uuTIJ/rNg8c6o9izBANGjkAkb6v dm4zW2siSEDGQDlEEv2zGmv3nallXy5ELzA66H4H46wzP29k5MF+OIMbxbdTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJcN16gxMCPy1125wvWnPfzpjxkMwHwYDVR0j BBgwFoAUrnHfcALdrGnSZolRr4Wfu58N3JEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MzU2NjEyNDUyOTg3Njk5NS8wL0FFNzFERjcwMDJEREFDNjlEMjY2ODk1MUFGODU5 RkJCOUYwRERDOTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5RjBEREM5MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODM1NjYxMjQ1Mjk4NzY5OTUvMC9BRTcxREY3MDAyRERB QzY5RDI2Njg5NTFBRjg1OUZCQjlGMEREQzkxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHputX2rskge APmdxOVaGRM9D1nzxdxEsUyVjZE4ZJMxRh8w2SWMoFzPuFa6IQtjGbwkRQKrYopN FRwbuLJQX80PsxaNV50zfcGPvPLENjHNAJjAMWnFIXMxA6ztzxhOptfBLr/5HnPI OreE5uQOonUNLesQ20woim6kiVAWtKTQGhuT3EyUf93hgCu0rXJEhp+TDYADPf0h +VyPIglfr6iyPZ9sXe8rEQvWKA0U6KKsvpcKC4LJHv4xY8nISE/FZZe0SgAgpicS 0rJHRzl50YhDf7T3QZeZIHyQrTPeuYNDbh3HaEAz5HYlJWadq9ESYhM0o1nxpCW3 I6xH1imb3w== -----END CERTIFICATE-----Generated at Mon Oct 12 16:48:30 2026 by rpki-client