$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft File: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft (raw, json) Hash identifier: OEjaLIXg0VD7usD6CdxZZTe+iQWF2fxcI9+2s3zw8LE= Subject key identifier: 76:FD:CA:2F:2E:CD:AD:14:46:C5:F3:57:53:43:E5:A9:35:D0:EE:FB Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9 Certificate issuer: /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9 Certificate serial: 4B079366589C5ECC2186E14D3F1FF5788AE92AB8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft Manifest number: CF Signing time: Fri 02 Oct 2026 18:00:41 +0000 Manifest this update: Fri 02 Oct 2026 17:55:41 +0000 Manifest next update: Tue 06 Oct 2026 02:21:41 +0000 Files and hashes: 1: 3130332e3136332e34362e302f32332d3234203d3e203538353139.roa (hash: tnfkAsqQvcqpL20P+LPe4F4kwN7iekWJ1PPQsYyrYg8=) 2: 3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa (hash: iVNiE9bxsTL+DkppA0g1irY1nuYRs9Q3qr7qbEuyfxk=) 3: 3130332e33362e3232302e302f32322d3234203d3e203538353139.roa (hash: cpYrgo4yAI6Z4974RFpP1Ve2Wg+ZBptUjAdisTeBGyw=) 4: 3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa (hash: /uXfkAccy3v3a9BHA09vw6dKcshdQs/6n+DUQ8IYKi8=) 5: 34332e3234302e3232302e302f32322d3234203d3e203538353139.roa (hash: vSeQnc0mmTH3jj/CmKx/qvwuVCC4G3xToac39RSw2JM=) 6: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl (hash: fWOnpklb71oA6EGvQ0OEYi0csrriHXDcA71c0JUFbWk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 09:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:07:93:66:58:9c:5e:cc:21:86:e1:4d:3f:1f:f5:78:8a:e9:2a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9 Validity Not Before: Oct 2 17:55:41 2026 GMT Not After : Oct 6 02:21:41 2026 GMT Subject: CN=76FDCA2F2ECDAD1446C5F3575343E5A935D0EEFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:30:bb:96:56:45:00:b7:c9:3a:03:e0:9b: 41:a9:50:72:cd:cc:5a:49:3e:5a:f7:80:5d:e8:5b: 96:4f:b9:1f:d2:e3:24:71:69:a4:a1:75:4a:f8:77: ed:af:34:d8:e6:5b:83:92:49:95:a0:d2:29:d7:cc: 00:b3:66:ff:4a:7d:2e:61:d1:68:b4:2a:f2:fe:24: 9c:24:a4:35:47:87:ed:f8:75:1b:bb:eb:4e:42:7d: 5f:61:6f:42:99:cb:ec:08:37:6e:da:98:db:2c:ab: a9:5d:0c:d4:14:fb:2a:e4:8e:33:1a:db:7c:80:35: ed:01:e4:f6:e4:79:72:9d:75:16:53:e6:e5:1f:ae: 15:5d:37:08:cf:6c:ea:e0:57:29:0b:d0:04:24:57: f3:3b:0a:bd:50:4e:7e:c1:13:ac:63:8a:a3:44:45: cb:48:f9:ad:a1:3f:ce:87:90:a4:47:1b:76:a6:15: bd:77:2d:4f:f1:d1:d9:e1:fa:e1:3a:98:f7:95:bb: d0:25:da:dc:6b:66:cc:f0:4e:5b:39:da:59:54:e4: 7d:7b:06:12:29:cd:17:cf:8f:72:53:a1:f8:13:76: 01:94:71:3d:61:2e:d9:79:38:d9:7c:62:d9:83:da: 48:6c:b2:c7:05:7e:ad:40:68:47:d4:5f:27:c4:38: 46:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FD:CA:2F:2E:CD:AD:14:46:C5:F3:57:53:43:E5:A9:35:D0:EE:FB X509v3 Authority Key Identifier: keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:51:e7:74:c7:10:0b:5f:47:3a:1e:a4:c7:a0:cf:7e:dd:b8: 34:1f:3c:fb:ce:ff:8d:27:e0:0b:96:01:78:fd:6e:b5:4f:75: bf:ab:e8:30:6d:fc:df:d4:2b:7a:6d:98:ae:e0:05:dc:b3:16: 15:d9:69:67:37:bf:4b:a2:21:0f:0c:4c:88:d4:ff:3f:01:b4: 7e:e4:7c:98:39:14:35:3b:34:21:04:e5:d5:04:09:a2:51:76: 34:96:de:1c:42:61:00:2a:8a:cb:c8:bb:13:f1:e9:90:68:e3: a3:16:ae:63:fa:83:f2:bd:91:89:3e:4a:c1:88:53:be:6b:b0: 85:08:2a:ee:f7:2d:26:68:0f:64:62:56:fa:0c:ac:04:61:1b: 2d:60:59:48:b1:06:d0:16:f0:74:23:cd:d6:4f:0c:5b:f8:e1: 21:f0:da:b9:ee:81:00:b3:ff:7d:48:b3:9d:b0:61:cd:4b:8f: 3e:89:64:be:96:86:44:89:ea:87:f1:c3:c0:a4:97:57:8f:39: 7f:50:c0:8e:bb:6b:4f:ce:88:b4:10:1a:4b:a6:b3:11:3a:bd: 98:da:b9:d3:ac:01:60:fc:e7:d5:f5:b9:95:3f:b9:d1:58:58: 28:f8:06:36:06:2d:36:da:4b:c1:02:a3:53:f3:3b:bd:62:50: 91:d8:4d:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSweTZlicXswhhuFNPx/1eIrpKrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4 MDkxRTlFOTAeFw0yNjEwMDIxNzU1NDFaFw0yNjEwMDYwMjIxNDFaMDMxMTAvBgNV BAMTKDc2RkRDQTJGMkVDREFEMTQ0NkM1RjM1NzUzNDNFNUE5MzVEMEVFRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8GTC7llZFALfJOgPgm0GpUHLN zFpJPlr3gF3oW5ZPuR/S4yRxaaShdUr4d+2vNNjmW4OSSZWg0inXzACzZv9KfS5h 0Wi0KvL+JJwkpDVHh+34dRu7605CfV9hb0KZy+wIN27amNssq6ldDNQU+yrkjjMa 23yANe0B5PbkeXKddRZT5uUfrhVdNwjPbOrgVykL0AQkV/M7Cr1QTn7BE6xjiqNE RctI+a2hP86HkKRHG3amFb13LU/x0dnh+uE6mPeVu9Al2txrZszwTls52llU5H17 BhIpzRfPj3JTofgTdgGUcT1hLtl5ONl8YtmD2khssscFfq1AaEfUXyfEOEalAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdv3KLy7NrRRGxfNXU0PlqTXQ7vswHwYDVR0j BBgwFoAUrkrSfTP51kt/ohhMbAMKe4CR6ekwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ4ODgyMjY4NDU4MTg5MC8wL0FFNEFEMjdEMzNGOUQ2NEI3RkEyMTg0QzZDMDMw QTdCODA5MUU5RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4MDkxRTlFOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0ODg4MjI2ODQ1ODE4OTAvMC9BRTRBRDI3RDMzRjlE NjRCN0ZBMjE4NEM2QzAzMEE3QjgwOTFFOUU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlHndMcQC19H Oh6kx6DPft24NB88+87/jSfgC5YBeP1utU91v6voMG3839Qrem2YruAF3LMWFdlp Zze/S6IhDwxMiNT/PwG0fuR8mDkUNTs0IQTl1QQJolF2NJbeHEJhACqKy8i7E/Hp kGjjoxauY/qD8r2RiT5KwYhTvmuwhQgq7vctJmgPZGJW+gysBGEbLWBZSLEG0Bbw dCPN1k8MW/jhIfDaue6BALP/fUiznbBhzUuPPolkvpaGRInqh/HDwKSXV485f1DA jrtrT86ItBAaS6azETq9mNq506wBYPzn1fW5lT+50VhYKPgGNgYtNtpLwQKjU/M7 vWJQkdhNvA== -----END CERTIFICATE-----Generated at Sun Oct 4 07:12:59 2026 by rpki-client