$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft File: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft (raw, json) Hash identifier: cPkAf8pZlPGwdIjmJJ4+T4VUwLXT/OcpLOQLlpbNM7s= Subject key identifier: CE:24:C3:63:59:86:08:2E:FB:49:74:B9:4B:45:14:84:7B:AD:98:22 Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Certificate serial: 7D766F52598567D404EEB890B832173661DD031E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft Manifest number: 87 Signing time: Thu 23 Jul 2026 19:09:22 +0000 Manifest this update: Thu 23 Jul 2026 19:04:22 +0000 Manifest next update: Fri 24 Jul 2026 23:01:22 +0000 Files and hashes: 1: 3130332e33362e3136312e302f32342d3234203d3e2030.roa (hash: rLUuT7j0BQQKXLH7blKy9zsxcJBl8lFXJTXeZAmoi04=) 2: 34332e3234302e3230332e302f32342d3234203d3e2030.roa (hash: B9336hSEDKsLNxqt5DYV9dkzCNCfuJLc50T2hGH9s08=) 3: 323430313a356338303a3a2f33322d3332203d3e2030.roa (hash: 1LDXyBKSFl2CziO/AAgiipLUXTwKWhQ9V+Y4/cF1F1s=) 4: 3130332e33362e3136302e302f32342d3234203d3e2030.roa (hash: Bldld99h3NZM1Qe5b+70bZMRgNDLPcMHp7Kj+aQCBwU=) 5: 3130332e33362e3136332e302f32342d3234203d3e2030.roa (hash: XjFtjoTaXfVjDs7zv6u6xKOOqFMXKwT22E1RPXpJ/6U=) 6: 34332e3234302e3230312e302f32342d3234203d3e2034383038.roa (hash: 4iUeVkG/jY1t+8WG/BciSvsYpoG5vX8uPqiNIUCf+TU=) 7: 3130332e33362e3136322e302f32342d3234203d3e2030.roa (hash: 4zMQp6a1CixszbfIwzHf11h1LQph2hVfQjbrzDw2gew=) 8: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl (hash: U6LpX0cod0zyM4COQeQhUUyTYUPDkfdPUnhya88DsWM=) 9: 34332e3234302e3230322e302f32342d3234203d3e2030.roa (hash: E/gjhJ9Hm91GpWCRMJAiLbm9DE3TG+yaRqQ1xloE1CU=) 10: 34332e3234302e3230302e302f32342d3234203d3e2034383038.roa (hash: jH4oDmP6oaOM9gvOyE2Nx4TAC2Qkee39rebiB87cwyI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:76:6f:52:59:85:67:d4:04:ee:b8:90:b8:32:17:36:61:dd:03:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Validity Not Before: Jul 23 19:04:22 2026 GMT Not After : Jul 24 23:01:22 2026 GMT Subject: CN=CE24C3635986082EFB4974B94B4514847BAD9822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:74:6b:e6:99:7c:77:2c:45:0f:23:13:cb:ea: 42:fa:3d:64:24:31:ad:74:45:6d:a1:dd:e8:d3:21: f8:02:6f:e8:39:05:68:7d:95:56:cb:d0:4e:81:fe: 44:a7:70:ee:c9:80:20:15:09:3e:96:3e:e6:a5:57: 1c:40:d8:e5:cd:13:0b:5c:fc:ec:1d:0c:59:8e:0d: 9e:40:44:4d:0f:41:a7:6e:d0:93:d2:26:91:05:cd: c0:b7:e5:9f:46:85:a6:14:a8:0f:dc:67:24:1a:07: fa:e6:5f:5e:d6:ec:55:33:d6:aa:a3:b5:fa:aa:d7: 98:85:95:1a:98:db:76:5d:a2:d9:14:60:09:5e:ec: 6c:16:db:fe:92:21:85:54:25:94:00:31:e9:66:b3: a9:54:09:ca:3f:16:f3:c2:90:48:18:9a:45:49:ba: 2a:f3:82:d8:ac:39:b6:46:3f:5b:93:f4:24:3e:b6: 38:2e:3c:2e:42:9a:93:f0:9e:cf:8f:63:5c:50:24: 7d:7c:01:43:27:03:d3:a1:50:d2:61:cb:45:67:4c: 5c:d1:b1:69:d6:96:4f:74:ed:8a:99:51:28:d4:8c: bc:ca:c2:12:46:3a:7d:ed:d6:6a:0a:67:be:e6:9d: 28:0e:04:68:19:08:78:d1:9d:41:2d:8f:9c:77:54: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:24:C3:63:59:86:08:2E:FB:49:74:B9:4B:45:14:84:7B:AD:98:22 X509v3 Authority Key Identifier: keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d5:b2:60:fc:6d:20:83:19:79:9b:4a:b1:b1:8d:69:92:7b: 6b:fa:6a:5a:28:3d:3b:36:4d:f2:af:2e:51:d3:95:04:1d:03: f0:26:39:43:bf:94:64:d3:c1:58:53:f6:6d:12:9c:98:c5:46: 94:56:d0:1e:7d:30:7d:4a:9f:0b:58:a2:d7:84:63:6c:78:7e: 87:f9:1a:0d:3a:91:5a:dc:6d:57:d9:0b:72:84:b3:6a:6c:69: 9c:11:2b:d4:92:62:de:a2:b8:9c:2f:fb:8b:36:2a:6b:ec:3a: 52:53:4f:34:42:44:23:d8:3c:b6:d3:23:e5:2a:59:74:16:32: 7a:07:05:5b:e7:73:53:8b:44:a6:93:ce:48:c4:76:11:b0:75: c1:88:fb:cb:0f:ba:4b:de:12:34:3f:8b:cb:f8:53:09:ca:fa: 0f:ff:55:1d:e7:57:88:cc:91:e5:35:ad:91:1e:d5:8e:5e:3a: 7d:95:bd:88:de:ac:5f:95:b3:46:78:e5:e6:ae:e3:b0:94:bd: 03:cf:df:96:42:10:67:66:10:d0:7e:34:da:d3:2f:59:a5:9e: 67:1f:3f:aa:d7:74:e8:c1:eb:2d:5c:37:78:da:49:40:a5:98: 65:23:60:85:99:d8:92:e8:3a:5a:a7:e8:9b:07:d0:4d:86:2f: 50:51:52:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfXZvUlmFZ9QE7riQuDIXNmHdAx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy Q0FBRjcyNzAeFw0yNjA3MjMxOTA0MjJaFw0yNjA3MjQyMzAxMjJaMDMxMTAvBgNV BAMTKENFMjRDMzYzNTk4NjA4MkVGQjQ5NzRCOTRCNDUxNDg0N0JBRDk4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCadGvmmXx3LEUPIxPL6kL6PWQk Ma10RW2h3ejTIfgCb+g5BWh9lVbL0E6B/kSncO7JgCAVCT6WPualVxxA2OXNEwtc /OwdDFmODZ5ARE0PQadu0JPSJpEFzcC35Z9GhaYUqA/cZyQaB/rmX17W7FUz1qqj tfqq15iFlRqY23ZdotkUYAle7GwW2/6SIYVUJZQAMelms6lUCco/FvPCkEgYmkVJ uirzgtisObZGP1uT9CQ+tjguPC5CmpPwns+PY1xQJH18AUMnA9OhUNJhy0VnTFzR sWnWlk907YqZUSjUjLzKwhJGOn3t1moKZ77mnSgOBGgZCHjRnUEtj5x3VMfRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUziTDY1mGCC77SXS5S0UUhHutmCIwHwYDVR0j BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTA4ODYzODYwODk5ODcvMC9BRTA5REQwNTZCM0I1 RUE0QzQ4NzIyQzY3RjYzRjBBMTJDQUFGNzI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNWyYPxtIIMZ eZtKsbGNaZJ7a/pqWig9OzZN8q8uUdOVBB0D8CY5Q7+UZNPBWFP2bRKcmMVGlFbQ Hn0wfUqfC1ii14RjbHh+h/kaDTqRWtxtV9kLcoSzamxpnBEr1JJi3qK4nC/7izYq a+w6UlNPNEJEI9g8ttMj5SpZdBYyegcFW+dzU4tEppPOSMR2EbB1wYj7yw+6S94S ND+Ly/hTCcr6D/9VHedXiMyR5TWtkR7Vjl46fZW9iN6sX5WzRnjl5q7jsJS9A8/f lkIQZ2YQ0H402tMvWaWeZx8/qtd06MHrLVw3eNpJQKWYZSNghZnYkug6WqfomwfQ TYYvUFFSww== -----END CERTIFICATE-----Generated at Fri Jul 24 15:16:58 2026 by rpki-client