$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft File: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft (raw, json) Hash identifier: lctdRzb9k6zo4R9zj7TjIuv/np0JwdSKJ1run71G/2s= Subject key identifier: 1E:4D:83:C1:2C:5E:25:24:77:F7:8B:CD:CD:93:5F:A9:37:8D:EB:45 Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9 Certificate issuer: /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9 Certificate serial: 6AFB256DDFFD01B80E24AE2183E8E7570EBB94A7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft Manifest number: 30 Signing time: Wed 13 May 2026 11:11:04 +0000 Manifest this update: Wed 13 May 2026 11:06:04 +0000 Manifest next update: Thu 14 May 2026 11:59:04 +0000 Files and hashes: 1: 3130332e3136332e34362e302f32332d3234203d3e203538353139.roa (hash: tnfkAsqQvcqpL20P+LPe4F4kwN7iekWJ1PPQsYyrYg8=) 2: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl (hash: MxgeUs5XqCTXGRMEiG6Tn0ebS+VlvAne2MVeiBjsmOw=) 3: 3130332e33362e3232302e302f32322d3234203d3e203538353139.roa (hash: cpYrgo4yAI6Z4974RFpP1Ve2Wg+ZBptUjAdisTeBGyw=) 4: 3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa (hash: iVNiE9bxsTL+DkppA0g1irY1nuYRs9Q3qr7qbEuyfxk=) 5: 3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa (hash: /uXfkAccy3v3a9BHA09vw6dKcshdQs/6n+DUQ8IYKi8=) 6: 34332e3234302e3232302e302f32322d3234203d3e203538353139.roa (hash: vSeQnc0mmTH3jj/CmKx/qvwuVCC4G3xToac39RSw2JM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:fb:25:6d:df:fd:01:b8:0e:24:ae:21:83:e8:e7:57:0e:bb:94:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9 Validity Not Before: May 13 11:06:04 2026 GMT Not After : May 14 11:59:04 2026 GMT Subject: CN=1E4D83C12C5E252477F78BCDCD935FA9378DEB45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:8d:d5:58:97:97:2e:af:6d:13:1d:77:00: 20:98:66:a1:80:79:04:df:10:ae:f5:fd:e8:66:c3: 35:e4:e0:95:8a:36:cb:ed:37:88:32:19:3d:de:f3: 24:b4:bc:7f:f0:ab:15:9f:16:76:24:0a:72:74:60: d6:53:0a:3c:4c:2a:12:33:35:46:5d:0b:6a:00:48: 5c:27:81:71:60:be:c2:47:cb:7e:67:96:bc:fe:d1: e7:4e:40:62:5a:68:c2:cd:74:0c:82:27:96:53:08: 6b:0e:0f:2a:03:b4:d2:73:11:9a:17:5d:f2:39:1a: 7c:cd:dd:1f:88:a1:dd:f8:ac:b2:70:d0:78:16:8c: 9e:17:dd:01:a6:4b:ab:e9:e7:dd:2a:54:12:c2:7d: 82:a0:83:f4:c3:00:43:27:53:9a:5e:90:a1:1d:b8: 11:cd:6b:e1:73:7e:f8:6d:76:7e:41:85:d4:f2:54: 98:b1:d8:a9:23:41:fb:40:e5:64:39:f1:5e:70:ee: 87:c8:cd:d5:59:f7:d6:15:54:2a:01:5d:87:89:58: 51:b8:d7:33:79:e1:ad:ed:4a:23:69:9d:cc:a4:0f: 9d:7e:15:c8:a1:66:25:7d:7f:f6:16:ec:64:66:a0: 2d:4b:f5:38:65:f4:42:3e:8e:ed:04:e8:41:60:d6: 81:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4D:83:C1:2C:5E:25:24:77:F7:8B:CD:CD:93:5F:A9:37:8D:EB:45 X509v3 Authority Key Identifier: keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2a:ce:13:8f:f0:f0:9a:85:ae:e6:2a:7c:ae:1d:fc:42:d9: fb:8e:74:e4:96:d3:af:96:2e:ff:d1:40:31:b9:11:31:d4:80: 74:5d:19:f3:61:46:d2:0b:ec:4d:d9:3a:64:0b:6f:2f:81:d7: 3a:27:f7:15:c5:c5:71:c1:07:07:ad:b9:88:ff:b2:63:a4:eb: 05:25:2f:cd:52:77:96:83:e7:f3:a7:1a:57:27:b8:a4:79:b4: be:0a:6e:38:e9:9d:77:f3:d4:6d:16:09:0b:ed:26:3f:fc:84: 55:d2:46:04:a3:c8:8b:75:4d:56:3b:2e:84:3d:2d:05:f9:92: db:fe:38:d3:79:a7:d9:de:7a:08:34:60:ed:f8:bb:ec:f8:cb: 10:f6:d8:ef:d1:c9:4e:b5:e0:35:0f:5e:30:ee:dd:7d:3e:0d: 03:0e:b7:66:7a:25:7f:8d:28:56:fa:b4:3d:df:95:1f:08:1b: aa:ba:16:1d:9c:a8:4f:fb:83:91:ae:c8:d6:e6:5f:d4:cb:b2: 16:cf:23:e4:46:ae:8a:69:8a:bf:c8:98:af:5d:8d:0a:9b:11: 2a:51:d7:84:0e:5e:14:eb:00:25:5c:03:ff:e0:7f:e9:5c:5f: f5:29:f5:40:da:08:11:f8:bf:f2:0b:74:54:3e:2a:b6:e6:d3: 1a:ed:81:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUavslbd/9AbgOJK4hg+jnVw67lKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4 MDkxRTlFOTAeFw0yNjA1MTMxMTA2MDRaFw0yNjA1MTQxMTU5MDRaMDMxMTAvBgNV BAMTKDFFNEQ4M0MxMkM1RTI1MjQ3N0Y3OEJDRENEOTM1RkE5Mzc4REVCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgyo3VWJeXLq9tEx13ACCYZqGA eQTfEK71/ehmwzXk4JWKNsvtN4gyGT3e8yS0vH/wqxWfFnYkCnJ0YNZTCjxMKhIz NUZdC2oASFwngXFgvsJHy35nlrz+0edOQGJaaMLNdAyCJ5ZTCGsODyoDtNJzEZoX XfI5GnzN3R+Iod34rLJw0HgWjJ4X3QGmS6vp590qVBLCfYKgg/TDAEMnU5pekKEd uBHNa+Fzfvhtdn5BhdTyVJix2KkjQftA5WQ58V5w7ofIzdVZ99YVVCoBXYeJWFG4 1zN54a3tSiNpncykD51+FcihZiV9f/YW7GRmoC1L9Thl9EI+ju0E6EFg1oGfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHk2DwSxeJSR394vNzZNfqTeN60UwHwYDVR0j BBgwFoAUrkrSfTP51kt/ohhMbAMKe4CR6ekwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ4ODgyMjY4NDU4MTg5MC8wL0FFNEFEMjdEMzNGOUQ2NEI3RkEyMTg0QzZDMDMw QTdCODA5MUU5RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4MDkxRTlFOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0ODg4MjI2ODQ1ODE4OTAvMC9BRTRBRDI3RDMzRjlE NjRCN0ZBMjE4NEM2QzAzMEE3QjgwOTFFOUU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACirOE4/w8JqF ruYqfK4d/ELZ+4505JbTr5Yu/9FAMbkRMdSAdF0Z82FG0gvsTdk6ZAtvL4HXOif3 FcXFccEHB625iP+yY6TrBSUvzVJ3loPn86caVye4pHm0vgpuOOmdd/PUbRYJC+0m P/yEVdJGBKPIi3VNVjsuhD0tBfmS2/4403mn2d56CDRg7fi77PjLEPbY79HJTrXg NQ9eMO7dfT4NAw63Znolf40oVvq0Pd+VHwgbqroWHZyoT/uDka7I1uZf1MuyFs8j 5EauimmKv8iYr12NCpsRKlHXhA5eFOsAJVwD/+B/6Vxf9Sn1QNoIEfi/8gt0VD4q tubTGu2BWw== -----END CERTIFICATE-----Generated at Wed May 13 14:09:18 2026 by rpki-client