$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft File: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft (raw, json) Hash identifier: yO6ihNltBnjVREVo6aBzr1ePnFoFsevPTUaXXNhsQYM= Subject key identifier: 12:E2:43:86:5F:A6:D6:DE:AE:9E:E9:CF:62:2E:A5:21:B1:A3:05:65 Authority key identifier: AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 Certificate issuer: /CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Certificate serial: 2072A2BCCF19F53148910B43565B29BB740EEE8A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft Manifest number: B7 Signing time: Fri 24 Jul 2026 06:30:33 +0000 Manifest this update: Fri 24 Jul 2026 06:25:33 +0000 Manifest next update: Sat 25 Jul 2026 10:20:33 +0000 Files and hashes: 1: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl (hash: LCMHE+ojZPpGYSctRAub3VwiwXeasBaOAlha0FM2/TY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:72:a2:bc:cf:19:f5:31:48:91:0b:43:56:5b:29:bb:74:0e:ee:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Validity Not Before: Jul 24 06:25:33 2026 GMT Not After : Jul 25 10:20:33 2026 GMT Subject: CN=12E243865FA6D6DEAE9EE9CF622EA521B1A30565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:87:13:64:40:ae:a2:78:2a:d0:b0:f2:84: 50:66:ed:46:1b:74:5c:72:98:68:6c:6e:69:b4:0b: 4c:29:46:a7:f6:5f:57:fd:ea:14:78:d8:ae:08:09: 12:29:09:04:c5:14:cf:ea:3e:72:42:f8:90:37:8e: e3:e5:2f:11:ea:92:c1:ba:7f:35:73:3d:07:26:23: cb:5f:a0:f3:f9:dd:ca:17:3d:be:7b:62:67:56:d2: c6:6b:d0:b9:ad:ef:99:6a:ba:35:ce:e7:ab:fc:41: f6:2d:4e:8d:b6:ef:99:62:24:8b:48:f2:76:88:fa: d0:6e:6d:e1:df:4d:56:28:98:19:1f:c2:03:3d:9a: 6b:7c:46:67:07:16:cf:cf:b1:16:22:54:17:f8:6d: b7:e4:c3:f3:cc:fb:6b:33:1f:e9:3d:ab:7d:d3:bb: b4:c0:92:ff:cd:60:cc:0f:05:e0:1f:6d:c6:f5:40: d0:f0:f3:69:5d:cb:f2:41:27:10:79:34:46:8b:47: 67:d0:35:11:51:c0:ba:e3:16:e4:e2:d0:0e:0d:e1: 11:16:42:3e:a0:6d:ad:5b:2a:30:b9:ee:d1:f3:3f: c5:53:d4:30:7a:57:01:81:29:bf:af:09:48:11:18: 6c:53:41:20:ee:22:ee:b8:ad:05:9c:9c:18:f5:fb: 79:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E2:43:86:5F:A6:D6:DE:AE:9E:E9:CF:62:2E:A5:21:B1:A3:05:65 X509v3 Authority Key Identifier: keyid:AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5d:57:1e:81:f5:24:5c:21:f8:7d:62:d0:21:6f:a8:9f:b4: 34:41:f0:0b:2a:3f:9c:57:0b:4b:c0:0e:66:a1:76:8d:e5:c6: 1d:33:9c:36:99:e6:8d:9a:58:b4:61:e6:0b:23:69:7a:ef:1f: 6f:30:bc:15:b5:e5:26:9b:d0:87:ae:f4:05:c9:f3:f2:79:c2: 33:25:f3:86:fb:2a:75:41:2d:ae:af:9f:6c:1d:fa:a9:2e:19: 36:a3:35:dc:97:9d:f4:86:cf:cb:3d:8b:ff:2a:79:8a:2d:2f: b5:a2:8b:e4:84:bb:14:5c:11:bf:4b:e3:23:6b:9d:18:b9:82: 38:35:a7:c2:d5:73:d6:f3:f7:2d:0c:3e:bf:a1:5c:b0:02:e6: 50:9e:87:1b:b2:d4:ca:1b:df:a3:e0:c2:85:f0:a7:c4:df:d2: 6a:55:68:6f:71:36:b0:c2:6b:a9:85:1d:d9:a6:b1:f6:41:3a: 0e:2d:05:ee:6f:cc:13:ea:5c:3a:da:8e:92:93:f6:6c:b2:3b: 73:73:dd:0a:99:ec:56:14:c9:bd:00:aa:6b:89:52:dc:9f:14: 68:b1:46:c3:a6:3f:0c:3a:9e:e4:24:01:f1:6c:8a:01:d4:60: d0:2b:d6:f0:24:33:16:e9:f9:27:09:5c:c3:9c:3e:13:6d:c1: b4:02:89:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIHKivM8Z9TFIkQtDVlspu3QO7oowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5 RjBEREM5MTAeFw0yNjA3MjQwNjI1MzNaFw0yNjA3MjUxMDIwMzNaMDMxMTAvBgNV BAMTKDEyRTI0Mzg2NUZBNkQ2REVBRTlFRTlDRjYyMkVBNTIxQjFBMzA1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/sIcTZECuongq0LDyhFBm7UYb dFxymGhsbmm0C0wpRqf2X1f96hR42K4ICRIpCQTFFM/qPnJC+JA3juPlLxHqksG6 fzVzPQcmI8tfoPP53coXPb57YmdW0sZr0Lmt75lqujXO56v8QfYtTo2275liJItI 8naI+tBubeHfTVYomBkfwgM9mmt8RmcHFs/PsRYiVBf4bbfkw/PM+2szH+k9q33T u7TAkv/NYMwPBeAfbcb1QNDw82ldy/JBJxB5NEaLR2fQNRFRwLrjFuTi0A4N4REW Qj6gba1bKjC57tHzP8VT1DB6VwGBKb+vCUgRGGxTQSDuIu64rQWcnBj1+3nlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEuJDhl+m1t6ununPYi6lIbGjBWUwHwYDVR0j BBgwFoAUrnHfcALdrGnSZolRr4Wfu58N3JEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MzU2NjEyNDUyOTg3Njk5NS8wL0FFNzFERjcwMDJEREFDNjlEMjY2ODk1MUFGODU5 RkJCOUYwRERDOTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5RjBEREM5MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODM1NjYxMjQ1Mjk4NzY5OTUvMC9BRTcxREY3MDAyRERB QzY5RDI2Njg5NTFBRjg1OUZCQjlGMEREQzkxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAml1XHoH1JFwh +H1i0CFvqJ+0NEHwCyo/nFcLS8AOZqF2jeXGHTOcNpnmjZpYtGHmCyNpeu8fbzC8 FbXlJpvQh670Bcnz8nnCMyXzhvsqdUEtrq+fbB36qS4ZNqM13Jed9IbPyz2L/yp5 ii0vtaKL5IS7FFwRv0vjI2udGLmCODWnwtVz1vP3LQw+v6FcsALmUJ6HG7LUyhvf o+DChfCnxN/SalVob3E2sMJrqYUd2aax9kE6Di0F7m/ME+pcOtqOkpP2bLI7c3Pd CpnsVhTJvQCqa4lS3J8UaLFGw6Y/DDqe5CQB8WyKAdRg0CvW8CQzFun5Jwlcw5w+ E23BtAKJlw== -----END CERTIFICATE-----Generated at Fri Jul 24 18:32:55 2026 by rpki-client