$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft File: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft (raw, json) Hash identifier: ilAGRFrSqOiO76OcRAlKoXguEpxmPkAjyR5X8jovr8E= Subject key identifier: 7C:3C:AC:45:37:28:4B:89:6C:C3:CD:AD:F3:C0:E9:15:69:D5:EE:C5 Authority key identifier: AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 Certificate issuer: /CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Certificate serial: 031AD8FE1BDD9F7C1773AEB6B81D13E912E3AC1C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft Manifest number: 17 Signing time: Thu 26 Mar 2026 15:53:28 +0000 Manifest this update: Thu 26 Mar 2026 15:48:28 +0000 Manifest next update: Fri 27 Mar 2026 16:31:28 +0000 Files and hashes: 1: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl (hash: 6T1y1feXNDqF/hH2+DtxnT67NyjoWJtIyZt8w0w96KY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:1a:d8:fe:1b:dd:9f:7c:17:73:ae:b6:b8:1d:13:e9:12:e3:ac:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Validity Not Before: Mar 26 15:48:28 2026 GMT Not After : Mar 27 16:31:28 2026 GMT Subject: CN=7C3CAC4537284B896CC3CDADF3C0E91569D5EEC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:22:f4:dc:a4:c8:6b:32:c8:8c:db:4d:ef:2a: dc:b3:af:d7:c3:bd:62:b0:90:4c:23:38:d8:37:0f: bc:a2:ff:52:09:fd:6c:8d:b9:20:c1:be:61:fb:e5: d7:26:73:f6:72:b5:5b:15:58:40:62:ca:4c:6d:68: ba:05:3e:af:0d:2a:8d:43:e4:88:b0:fc:45:d8:70: a5:ca:d6:c0:1b:ad:8f:04:73:d3:01:d9:aa:ba:60: 6d:5d:a8:4a:74:bb:ec:6f:b6:f4:3f:71:d6:2e:aa: 2a:98:17:b0:1b:8c:8d:be:40:2e:a9:4f:5b:e4:40: 98:ea:b2:7c:53:6d:79:2e:bb:4c:58:45:9f:7f:e8: a8:30:14:78:58:fd:90:e8:6e:8b:1c:78:26:e7:18: ef:43:be:d8:1f:05:ed:45:3d:c0:ee:f0:49:74:3d: e7:27:8d:7f:c3:1e:8f:fc:91:ec:ec:a6:8a:6d:bb: c9:c4:60:af:af:f4:74:3b:41:6f:38:32:7b:a0:f7: 49:01:ff:6c:27:bd:13:28:81:0c:f0:ce:38:f4:e2: 63:3a:1b:0d:80:7a:66:f3:4b:bf:28:8d:32:db:95: 9c:df:75:25:fa:87:a0:fa:8b:3d:8d:b3:69:37:8e: 44:ae:87:3a:f3:77:3d:31:34:a1:69:30:4c:59:b2: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3C:AC:45:37:28:4B:89:6C:C3:CD:AD:F3:C0:E9:15:69:D5:EE:C5 X509v3 Authority Key Identifier: keyid:AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:dc:21:a4:a0:f8:cf:a2:f8:8c:80:ac:81:48:7b:44:df:22: e7:88:24:d1:27:96:c2:99:da:50:44:ec:d6:bf:2f:f9:02:9a: 10:2d:c1:dd:3e:b0:93:d1:b1:71:61:51:81:36:b0:cb:a8:0b: 68:36:61:8f:36:21:e8:31:17:8f:f7:34:6e:1a:19:a2:d8:9a: a4:68:5c:ab:69:be:8b:48:df:9f:ce:4c:f2:53:20:3d:fe:48: c6:00:be:dd:89:13:33:51:a5:e3:64:e7:af:b4:26:0f:32:68: 52:65:2e:fb:5d:a7:bb:3b:15:de:0e:f9:82:45:50:92:df:be: 0b:30:28:44:fe:fc:60:35:96:0f:c1:0a:d8:89:5b:52:9d:77: e9:1a:0c:bc:f3:51:df:71:c3:37:11:e2:a4:90:a3:7b:66:66: e6:cc:22:dd:b6:3d:8e:09:76:79:b9:bc:ba:94:c6:58:b2:8d: 36:51:c6:3b:d6:11:cf:a6:47:69:4b:9b:f4:fe:d2:74:08:1f: c8:57:3d:bb:ae:08:7b:83:d6:14:76:79:94:7b:3d:09:a7:d3: 51:ad:af:76:21:49:2d:a7:bf:47:8b:eb:1e:84:d2:68:40:82: 7a:e3:01:68:58:f3:5e:fa:0a:1a:0d:15:b0:cd:89:a1:5e:ed: 4f:67:b8:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAxrY/hvdn3wXc662uB0T6RLjrBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5 RjBEREM5MTAeFw0yNjAzMjYxNTQ4MjhaFw0yNjAzMjcxNjMxMjhaMDMxMTAvBgNV BAMTKDdDM0NBQzQ1MzcyODRCODk2Q0MzQ0RBREYzQzBFOTE1NjlENUVFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3IvTcpMhrMsiM203vKtyzr9fD vWKwkEwjONg3D7yi/1IJ/WyNuSDBvmH75dcmc/ZytVsVWEBiykxtaLoFPq8NKo1D 5Iiw/EXYcKXK1sAbrY8Ec9MB2aq6YG1dqEp0u+xvtvQ/cdYuqiqYF7AbjI2+QC6p T1vkQJjqsnxTbXkuu0xYRZ9/6KgwFHhY/ZDobosceCbnGO9DvtgfBe1FPcDu8El0 PecnjX/DHo/8kezspoptu8nEYK+v9HQ7QW84Mnug90kB/2wnvRMogQzwzjj04mM6 Gw2AembzS78ojTLblZzfdSX6h6D6iz2Ns2k3jkSuhzrzdz0xNKFpMExZsjF/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfDysRTcoS4lsw82t88DpFWnV7sUwHwYDVR0j BBgwFoAUrnHfcALdrGnSZolRr4Wfu58N3JEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MzU2NjEyNDUyOTg3Njk5NS8wL0FFNzFERjcwMDJEREFDNjlEMjY2ODk1MUFGODU5 RkJCOUYwRERDOTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5RjBEREM5MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODM1NjYxMjQ1Mjk4NzY5OTUvMC9BRTcxREY3MDAyRERB QzY5RDI2Njg5NTFBRjg1OUZCQjlGMEREQzkxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9whpKD4z6L4 jICsgUh7RN8i54gk0SeWwpnaUETs1r8v+QKaEC3B3T6wk9GxcWFRgTawy6gLaDZh jzYh6DEXj/c0bhoZotiapGhcq2m+i0jfn85M8lMgPf5IxgC+3YkTM1Gl42Tnr7Qm DzJoUmUu+12nuzsV3g75gkVQkt++CzAoRP78YDWWD8EK2IlbUp136RoMvPNR33HD NxHipJCje2Zm5swi3bY9jgl2ebm8upTGWLKNNlHGO9YRz6ZHaUub9P7SdAgfyFc9 u64Ie4PWFHZ5lHs9CafTUa2vdiFJLae/R4vrHoTSaECCeuMBaFjzXvoKGg0VsM2J oV7tT2e49Q== -----END CERTIFICATE-----Generated at Fri Mar 27 00:25:24 2026 by rpki-client