$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft File: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft (raw, json) Hash identifier: lNrrx/RZUIfNf+wMCQcoz5rn02nYWcOyOryqshavC80= Subject key identifier: 68:3A:01:A6:20:ED:C0:35:45:00:B1:36:4C:66:F9:A5:ED:F2:F4:E1 Authority key identifier: AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B Certificate issuer: /CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Certificate serial: 23DD4007277986A1FC6DF9BF7AC2C54ED68E22B2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft Manifest number: 89 Signing time: Fri 24 Jul 2026 21:07:08 +0000 Manifest this update: Fri 24 Jul 2026 21:02:08 +0000 Manifest next update: Sun 26 Jul 2026 00:54:08 +0000 Files and hashes: 1: 3130332e36392e31362e302f32322d3232203d3e20313531323836.roa (hash: pipFRX3g8zpKBxJfoHYgo/R05QsqXUeAMaREmbsYQc4=) 2: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl (hash: HXUZn+IO+inOOLVQLAzZjqMWZaXF67DUbGZlFEvDmDE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 22:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:dd:40:07:27:79:86:a1:fc:6d:f9:bf:7a:c2:c5:4e:d6:8e:22:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Validity Not Before: Jul 24 21:02:08 2026 GMT Not After : Jul 26 00:54:08 2026 GMT Subject: CN=683A01A620EDC0354500B1364C66F9A5EDF2F4E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ed:8e:4d:56:5f:6a:a8:da:23:4f:6d:2f:ca: c5:af:4c:f9:bc:43:5f:e2:cd:16:33:c4:3a:33:4d: 48:e8:43:c4:02:82:84:e3:a3:49:05:c3:a4:77:ea: e8:72:5c:92:b2:f0:8c:34:29:04:0e:df:f5:4b:ee: 39:16:8c:96:7e:97:bd:7a:8f:0d:f2:8d:a8:9b:80: 73:c6:69:b3:08:ba:68:4c:a9:7b:2b:b9:af:12:77: aa:ad:4d:44:db:c7:68:7f:2f:55:8e:35:c3:af:e1: c0:b6:58:be:ce:36:2f:4b:94:72:85:2f:a8:c9:c6: a3:72:6f:3d:ec:c4:61:d6:6f:5a:b9:75:2a:b4:a9: c6:56:cc:ed:55:5c:48:19:ae:70:c1:e0:02:c3:b7: c3:a3:54:74:b0:48:2a:48:ad:34:df:d5:85:79:27: e1:74:1b:b1:af:f9:5a:8b:e2:74:5e:cd:90:89:17: dd:8c:5f:f4:d0:46:e7:3d:ab:0b:97:f5:ab:cf:b4: c7:dc:58:c2:da:97:b3:87:3c:28:a3:6b:71:8a:11: 75:5e:85:ec:c4:66:e8:b1:e2:99:52:d8:f2:bc:02: 2e:f7:7f:40:25:a7:c6:12:f1:91:d3:91:bd:97:73: ef:b8:b0:eb:5e:36:f2:1b:21:5e:82:84:d4:e7:b8: bf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3A:01:A6:20:ED:C0:35:45:00:B1:36:4C:66:F9:A5:ED:F2:F4:E1 X509v3 Authority Key Identifier: keyid:AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:40:72:aa:af:0b:6c:dd:04:69:8d:69:2b:19:bb:de:c3:4c: 58:81:04:22:74:7e:75:3a:8b:0f:47:b0:6e:e7:1e:9d:8d:d5: 82:e8:d6:59:6b:d2:6c:16:0e:57:9d:bc:8d:00:64:9a:fa:77: 4a:71:e5:e6:fc:45:6c:e8:be:c5:56:66:34:74:cc:c1:e2:31: 9c:28:bf:4f:fe:84:9e:2d:93:f9:9c:4e:83:69:84:74:15:7d: f3:8b:56:a6:7a:4b:2e:84:98:e5:69:59:87:ac:87:50:b4:af: f7:1e:37:3c:e8:67:81:22:fa:fa:20:a7:a4:65:10:8e:4e:28: a1:ef:35:81:bf:37:a6:10:73:7a:4d:f7:af:ab:4b:f0:83:28: 7e:1f:0e:46:b2:ab:d4:a5:12:c8:91:aa:1b:28:2c:61:2d:cc: bc:1b:b3:70:a6:a4:ff:70:a9:8d:71:70:09:18:c8:59:de:71: 4f:38:86:0a:94:c4:82:e0:fd:76:67:2d:78:3f:41:65:ed:0a: 7a:5d:c4:0f:72:15:5b:a4:8d:ea:1d:25:91:62:ca:30:58:50: b0:89:33:52:6c:c8:38:43:9d:88:11:d6:97:6b:93:29:83:3b: ea:72:bb:8e:fe:0f:de:03:46:6b:41:7a:87:30:d9:e8:be:04: 6f:5d:d3:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI91AByd5hqH8bfm/esLFTtaOIrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2 RDMzRTQ0QjAeFw0yNjA3MjQyMTAyMDhaFw0yNjA3MjYwMDU0MDhaMDMxMTAvBgNV BAMTKDY4M0EwMUE2MjBFREMwMzU0NTAwQjEzNjRDNjZGOUE1RURGMkY0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7Y5NVl9qqNojT20vysWvTPm8 Q1/izRYzxDozTUjoQ8QCgoTjo0kFw6R36uhyXJKy8Iw0KQQO3/VL7jkWjJZ+l716 jw3yjaibgHPGabMIumhMqXsrua8Sd6qtTUTbx2h/L1WONcOv4cC2WL7ONi9LlHKF L6jJxqNybz3sxGHWb1q5dSq0qcZWzO1VXEgZrnDB4ALDt8OjVHSwSCpIrTTf1YV5 J+F0G7Gv+VqL4nRezZCJF92MX/TQRuc9qwuX9avPtMfcWMLal7OHPCija3GKEXVe hezEZuix4plS2PK8Ai73f0Alp8YS8ZHTkb2Xc++4sOteNvIbIV6ChNTnuL/XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaDoBpiDtwDVFALE2TGb5pe3y9OEwHwYDVR0j BBgwFoAUrnXiydhKGtkzrjUqXKqVvW0z5EswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwOTk5NjU5Mzc5MDk3OC8wL0FFNzVFMkM5RDg0QTFBRDkzM0FFMzUyQTVDQUE5 NUJENkQzM0U0NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2RDMzRTQ0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDk5OTY1OTM3OTA5NzgvMC9BRTc1RTJDOUQ4NEEx QUQ5MzNBRTM1MkE1Q0FBOTVCRDZEMzNFNDRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAskByqq8LbN0E aY1pKxm73sNMWIEEInR+dTqLD0ewbucenY3VgujWWWvSbBYOV528jQBkmvp3SnHl 5vxFbOi+xVZmNHTMweIxnCi/T/6Eni2T+ZxOg2mEdBV984tWpnpLLoSY5WlZh6yH ULSv9x43POhngSL6+iCnpGUQjk4ooe81gb83phBzek33r6tL8IMofh8ORrKr1KUS yJGqGygsYS3MvBuzcKak/3CpjXFwCRjIWd5xTziGCpTEguD9dmcteD9BZe0Kel3E D3IVW6SN6h0lkWLKMFhQsIkzUmzIOEOdiBHWl2uTKYM76nK7jv4P3gNGa0F6hzDZ 6L4Eb13TEg== -----END CERTIFICATE-----Generated at Sat Jul 25 01:03:02 2026 by rpki-client