$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft File: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft (raw, json) Hash identifier: bGCMsKKQH0lkbOwMHC1+qrguJHzCmgSbO0mkycpcWPI= Subject key identifier: D4:FE:A1:06:4E:DD:18:DC:E3:69:92:79:25:55:01:B0:F8:2A:24:A2 Authority key identifier: AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B Certificate issuer: /CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Certificate serial: 2E7F10456C5BA6AB8DF5D6BD42BD01EB6B28E84F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft Manifest number: 29 Signing time: Wed 13 May 2026 04:45:57 +0000 Manifest this update: Wed 13 May 2026 04:40:57 +0000 Manifest next update: Thu 14 May 2026 05:28:57 +0000 Files and hashes: 1: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl (hash: ABYhkBPcxLi/glXb85pJhH5TW5sQfclvm59RXA9WJrQ=) 2: 3130332e36392e31362e302f32322d3232203d3e20313531323836.roa (hash: pipFRX3g8zpKBxJfoHYgo/R05QsqXUeAMaREmbsYQc4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:7f:10:45:6c:5b:a6:ab:8d:f5:d6:bd:42:bd:01:eb:6b:28:e8:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Validity Not Before: May 13 04:40:57 2026 GMT Not After : May 14 05:28:57 2026 GMT Subject: CN=D4FEA1064EDD18DCE3699279255501B0F82A24A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:69:8a:6e:88:a7:b7:08:6a:70:10:c4:af: 54:81:9d:94:a6:7b:f8:2d:9e:98:1f:c1:7f:cc:ad: 8f:5b:e1:04:7b:4e:c8:21:d5:13:a5:61:fd:66:30: cc:a1:13:0c:1b:ce:79:63:83:cf:f9:5c:53:83:44: d4:25:ec:38:7d:d5:ec:2b:e8:c6:60:58:e5:9f:5c: 55:52:7b:a6:72:8e:bc:6c:fd:ac:28:f8:42:df:14: cf:43:00:7a:ea:00:fc:1f:ed:1e:51:65:14:de:a0: e0:18:70:b3:16:cd:6b:c0:45:35:d6:74:2a:4e:d5: f8:9c:d0:78:de:c4:88:b3:27:d6:99:94:02:ff:64: 4a:c5:10:47:6b:80:e6:51:4d:bb:66:ad:4a:79:65: f5:82:52:05:0d:0d:6f:92:91:f8:e1:f4:95:24:4a: 86:07:bb:87:35:53:b9:d7:e6:f9:b3:cf:85:3f:37: c0:77:f1:b0:93:9a:69:01:8a:53:ae:4d:50:1a:a3: 6f:a7:a9:ed:95:74:6b:0c:bc:9d:74:89:e1:b9:39: 1d:8b:85:3c:81:a8:70:7a:6b:05:19:0f:4d:28:56: d1:64:2c:06:c7:90:04:c8:ee:64:1e:11:55:7b:ea: f9:fd:4d:de:39:58:c6:12:ef:55:3c:88:49:0d:55: da:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FE:A1:06:4E:DD:18:DC:E3:69:92:79:25:55:01:B0:F8:2A:24:A2 X509v3 Authority Key Identifier: keyid:AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b2:3d:a4:74:4e:73:6a:4e:a8:bf:45:b0:f1:f6:d5:1d:a2: 0e:66:2c:31:78:a8:e9:3a:d3:77:f5:28:40:03:f1:22:07:7f: ca:56:93:cc:fa:e4:33:13:41:43:9f:92:87:ac:e6:ab:a8:17: b4:d2:2b:6d:83:75:e6:d1:b1:0d:03:2f:7f:a2:24:b2:55:67: 7f:bc:6d:1b:0d:f4:b4:89:94:3c:11:bd:8c:fd:b6:8d:93:3f: 82:15:e2:cc:e7:2a:2e:89:36:22:54:9d:79:55:02:38:90:cd: af:fb:09:f9:ec:d2:75:12:b2:86:1c:b1:69:a6:50:2c:4e:31: 1c:f4:33:64:b2:a2:b6:b7:48:98:ba:50:d6:e8:bd:7e:80:06: 33:bb:e1:f7:d1:af:07:96:1d:33:2e:fe:63:30:24:28:fa:80: 0d:e1:1f:35:2e:13:94:1e:a0:0d:38:26:ca:f3:0f:41:96:de: 00:03:83:41:61:3b:4d:a3:a4:76:ff:26:30:91:e7:ba:b8:fa: 5a:c2:52:16:3b:64:d4:fd:26:29:64:a1:33:6e:bb:21:ab:57: 17:d0:74:35:85:0f:f0:01:b3:02:60:ff:2f:79:23:02:54:79: a8:b2:4a:31:f4:d3:90:90:a2:db:46:7f:ba:ec:ad:fa:ed:cf: cc:ce:18:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULn8QRWxbpquN9da9Qr0B62so6E8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2 RDMzRTQ0QjAeFw0yNjA1MTMwNDQwNTdaFw0yNjA1MTQwNTI4NTdaMDMxMTAvBgNV BAMTKEQ0RkVBMTA2NEVERDE4RENFMzY5OTI3OTI1NTUwMUIwRjgyQTI0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKWmKbointwhqcBDEr1SBnZSm e/gtnpgfwX/MrY9b4QR7Tsgh1ROlYf1mMMyhEwwbznljg8/5XFODRNQl7Dh91ewr 6MZgWOWfXFVSe6Zyjrxs/awo+ELfFM9DAHrqAPwf7R5RZRTeoOAYcLMWzWvARTXW dCpO1fic0HjexIizJ9aZlAL/ZErFEEdrgOZRTbtmrUp5ZfWCUgUNDW+Skfjh9JUk SoYHu4c1U7nX5vmzz4U/N8B38bCTmmkBilOuTVAao2+nqe2VdGsMvJ10ieG5OR2L hTyBqHB6awUZD00oVtFkLAbHkATI7mQeEVV76vn9Td45WMYS71U8iEkNVdpdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1P6hBk7dGNzjaZJ5JVUBsPgqJKIwHwYDVR0j BBgwFoAUrnXiydhKGtkzrjUqXKqVvW0z5EswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwOTk5NjU5Mzc5MDk3OC8wL0FFNzVFMkM5RDg0QTFBRDkzM0FFMzUyQTVDQUE5 NUJENkQzM0U0NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2RDMzRTQ0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDk5OTY1OTM3OTA5NzgvMC9BRTc1RTJDOUQ4NEEx QUQ5MzNBRTM1MkE1Q0FBOTVCRDZEMzNFNDRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7I9pHROc2pO qL9FsPH21R2iDmYsMXio6TrTd/UoQAPxIgd/ylaTzPrkMxNBQ5+Sh6zmq6gXtNIr bYN15tGxDQMvf6IkslVnf7xtGw30tImUPBG9jP22jZM/ghXizOcqLok2IlSdeVUC OJDNr/sJ+ezSdRKyhhyxaaZQLE4xHPQzZLKitrdImLpQ1ui9foAGM7vh99GvB5Yd My7+YzAkKPqADeEfNS4TlB6gDTgmyvMPQZbeAAODQWE7TaOkdv8mMJHnurj6WsJS Fjtk1P0mKWShM267IatXF9B0NYUP8AGzAmD/L3kjAlR5qLJKMfTTkJCi20Z/uuyt +u3PzM4YHg== -----END CERTIFICATE-----Generated at Wed May 13 20:55:30 2026 by rpki-client