$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft File: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft (raw, json) Hash identifier: cizu0Kma3OcYzqzpY5NmqGGy6XosVqKAkn2BijSHKZQ= Subject key identifier: EB:61:22:C5:B7:32:B4:26:31:3E:6F:60:20:09:C0:1C:F2:91:F3:58 Authority key identifier: AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 Certificate issuer: /CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Certificate serial: 7BF129D762C9EBD4F2B2A97041D40A714D42BA46 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft Manifest number: 58 Signing time: Wed 13 May 2026 15:36:05 +0000 Manifest this update: Wed 13 May 2026 15:31:05 +0000 Manifest next update: Thu 14 May 2026 16:57:05 +0000 Files and hashes: 1: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl (hash: CXsRCzMxvJeaZTOOkYGilGtuFIy2aUvA/sFpTslLyNo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f1:29:d7:62:c9:eb:d4:f2:b2:a9:70:41:d4:0a:71:4d:42:ba:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Validity Not Before: May 13 15:31:05 2026 GMT Not After : May 14 16:57:05 2026 GMT Subject: CN=EB6122C5B732B426313E6F602009C01CF291F358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:c6:0c:4c:de:51:98:13:40:5a:47:06:52: e2:05:cf:eb:24:f6:68:d6:05:92:4b:69:0d:5c:b4: 8b:f6:88:13:80:f5:3f:4c:b9:b8:c9:66:c0:13:46: 98:ae:8a:7f:5d:50:c4:74:0a:4d:f8:f0:fd:cb:f6: 5b:2a:50:0c:9b:a4:f2:b7:ba:31:f7:91:47:6d:c8: 7c:da:ae:ee:00:ce:16:34:bd:7c:cf:72:d2:c7:76: 69:45:bd:d0:7f:27:c1:23:ba:3f:9c:1d:5b:d5:9b: f4:d5:34:13:9a:7b:02:0a:c7:d7:a1:5a:14:1d:1b: c2:52:35:bc:63:5d:e5:fd:b3:3f:ad:83:38:8b:19: 3f:e9:bc:6f:25:35:f7:89:bf:75:11:ce:38:eb:7d: 9a:e0:b4:81:e5:94:b0:8d:6d:a3:19:f2:23:9b:31: 96:bf:fe:b0:01:87:25:28:60:33:65:58:12:4a:ad: 55:b6:31:2f:9b:3a:fa:c4:1b:83:a2:94:b6:82:e8: 5f:34:89:1d:bd:16:58:54:67:57:38:e3:f6:bf:96: 48:3f:ff:8a:fa:06:81:41:e8:27:3b:06:46:73:43: 46:11:3f:3e:51:9d:c2:66:7e:73:7d:c6:46:01:b9: 6d:fc:18:95:76:d2:72:c9:22:6e:cd:09:44:00:44: f4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:61:22:C5:B7:32:B4:26:31:3E:6F:60:20:09:C0:1C:F2:91:F3:58 X509v3 Authority Key Identifier: keyid:AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:f3:e2:4c:e2:d1:b0:ec:d1:a4:9a:41:b5:f8:87:f6:63:1a: da:49:df:d8:60:ad:90:58:9b:59:fd:d6:9d:ff:4b:b2:9c:b3: de:47:d0:2b:d5:1c:05:a3:0d:58:be:65:e5:44:68:b2:13:58: cc:45:dd:77:3f:6b:17:f9:9e:60:2a:5e:f6:8d:cd:48:dc:ad: bd:dc:58:16:14:18:0b:24:cc:5a:ad:8a:68:da:8d:95:87:d2: a9:14:74:20:4b:8f:e7:91:ab:33:a6:48:1b:92:a1:2b:25:e7: 28:48:34:6a:60:cb:cc:77:e5:b5:fe:25:bf:da:ab:7d:18:3f: 2d:93:38:6b:a6:6f:e0:59:98:6f:5b:5c:23:a7:bd:cd:ba:24: 13:1a:ac:a4:41:b4:80:b4:4c:8b:19:80:84:a6:6a:26:75:b1: 87:ca:2b:f7:fa:3a:ca:6d:2d:14:f6:d8:2a:37:31:6f:11:8f: 47:7c:b5:a1:6e:2c:8a:f1:46:69:5e:97:fd:22:2f:a3:28:9d: 3b:d4:c7:72:7d:d2:45:ea:3f:9d:46:69:27:9f:67:4f:9c:ef: c0:80:3a:42:3f:3e:93:7d:b4:53:f3:3b:89:69:21:19:9c:e4: 96:e2:0e:ba:45:de:6f:42:cc:7f:ea:31:8e:6c:ee:45:36:71: 13:db:07:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe/Ep12LJ69TysqlwQdQKcU1CukYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5 RjBEREM5MTAeFw0yNjA1MTMxNTMxMDVaFw0yNjA1MTQxNjU3MDVaMDMxMTAvBgNV BAMTKEVCNjEyMkM1QjczMkI0MjYzMTNFNkY2MDIwMDlDMDFDRjI5MUYzNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7lsYMTN5RmBNAWkcGUuIFz+sk 9mjWBZJLaQ1ctIv2iBOA9T9MubjJZsATRpiuin9dUMR0Ck348P3L9lsqUAybpPK3 ujH3kUdtyHzaru4AzhY0vXzPctLHdmlFvdB/J8Ejuj+cHVvVm/TVNBOaewIKx9eh WhQdG8JSNbxjXeX9sz+tgziLGT/pvG8lNfeJv3URzjjrfZrgtIHllLCNbaMZ8iOb MZa//rABhyUoYDNlWBJKrVW2MS+bOvrEG4OilLaC6F80iR29FlhUZ1c44/a/lkg/ /4r6BoFB6Cc7BkZzQ0YRPz5RncJmfnN9xkYBuW38GJV20nLJIm7NCUQARPTHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU62EixbcytCYxPm9gIAnAHPKR81gwHwYDVR0j BBgwFoAUrnHfcALdrGnSZolRr4Wfu58N3JEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MzU2NjEyNDUyOTg3Njk5NS8wL0FFNzFERjcwMDJEREFDNjlEMjY2ODk1MUFGODU5 RkJCOUYwRERDOTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5RjBEREM5MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODM1NjYxMjQ1Mjk4NzY5OTUvMC9BRTcxREY3MDAyRERB QzY5RDI2Njg5NTFBRjg1OUZCQjlGMEREQzkxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuvPiTOLRsOzR pJpBtfiH9mMa2knf2GCtkFibWf3Wnf9Lspyz3kfQK9UcBaMNWL5l5URoshNYzEXd dz9rF/meYCpe9o3NSNytvdxYFhQYCyTMWq2KaNqNlYfSqRR0IEuP55GrM6ZIG5Kh KyXnKEg0amDLzHfltf4lv9qrfRg/LZM4a6Zv4FmYb1tcI6e9zbokExqspEG0gLRM ixmAhKZqJnWxh8or9/o6ym0tFPbYKjcxbxGPR3y1oW4sivFGaV6X/SIvoyidO9TH cn3SReo/nUZpJ59nT5zvwIA6Qj8+k320U/M7iWkhGZzkluIOukXeb0LMf+oxjmzu RTZxE9sHoQ== -----END CERTIFICATE-----Generated at Wed May 13 19:42:35 2026 by rpki-client