$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft File: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft (raw, json) Hash identifier: cghuWbuZurkUABuZa3nB+akaHHWDC88ysZuX+dEOItI= Subject key identifier: D2:94:23:36:8B:62:8D:CE:9D:0D:05:F5:FF:B7:DC:CF:99:4F:76:67 Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Certificate serial: 10FFA16390AA7868545AEB18C56EBBD5A54ADEF8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft Manifest number: 28 Signing time: Tue 12 May 2026 21:10:47 +0000 Manifest this update: Tue 12 May 2026 21:05:47 +0000 Manifest next update: Wed 13 May 2026 23:51:47 +0000 Files and hashes: 1: 34332e3234302e3230322e302f32342d3234203d3e2030.roa (hash: E/gjhJ9Hm91GpWCRMJAiLbm9DE3TG+yaRqQ1xloE1CU=) 2: 323430313a356338303a3a2f33322d3332203d3e2030.roa (hash: 1LDXyBKSFl2CziO/AAgiipLUXTwKWhQ9V+Y4/cF1F1s=) 3: 34332e3234302e3230312e302f32342d3234203d3e2034383038.roa (hash: 4iUeVkG/jY1t+8WG/BciSvsYpoG5vX8uPqiNIUCf+TU=) 4: 3130332e33362e3136302e302f32342d3234203d3e2030.roa (hash: Bldld99h3NZM1Qe5b+70bZMRgNDLPcMHp7Kj+aQCBwU=) 5: 34332e3234302e3230302e302f32342d3234203d3e2034383038.roa (hash: jH4oDmP6oaOM9gvOyE2Nx4TAC2Qkee39rebiB87cwyI=) 6: 3130332e33362e3136312e302f32342d3234203d3e2030.roa (hash: rLUuT7j0BQQKXLH7blKy9zsxcJBl8lFXJTXeZAmoi04=) 7: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl (hash: ccaw0SipHxJLuJdMZsuTJYK3gpOc5QggMPBXHW2T3+Q=) 8: 3130332e33362e3136332e302f32342d3234203d3e2030.roa (hash: XjFtjoTaXfVjDs7zv6u6xKOOqFMXKwT22E1RPXpJ/6U=) 9: 3130332e33362e3136322e302f32342d3234203d3e2030.roa (hash: 4zMQp6a1CixszbfIwzHf11h1LQph2hVfQjbrzDw2gew=) 10: 34332e3234302e3230332e302f32342d3234203d3e2030.roa (hash: B9336hSEDKsLNxqt5DYV9dkzCNCfuJLc50T2hGH9s08=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ff:a1:63:90:aa:78:68:54:5a:eb:18:c5:6e:bb:d5:a5:4a:de:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Validity Not Before: May 12 21:05:47 2026 GMT Not After : May 13 23:51:47 2026 GMT Subject: CN=D29423368B628DCE9D0D05F5FFB7DCCF994F7667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:f8:8f:18:71:72:f1:45:cf:5a:b1:3e:50: 9f:ad:0b:b4:43:44:e1:fb:e9:fe:38:68:32:01:6d: 96:ca:5e:42:c4:be:dc:ea:db:69:1a:de:8f:bd:d1: 30:fd:60:bf:75:83:7f:be:be:3f:9e:ec:ed:57:61: e1:36:d2:45:19:7c:d0:8a:a4:f9:4b:97:0f:36:b3: 60:69:a7:0b:fb:ae:51:52:f1:83:4b:70:2a:d5:c6: 51:c0:c8:a1:47:d8:e9:60:9b:58:50:d1:aa:c6:cb: 83:79:18:be:e1:23:f7:04:78:41:72:df:43:1d:c9: 5d:b5:57:03:15:f1:8c:ea:27:ad:88:d2:51:1b:60: 37:54:69:e3:e1:b4:b9:38:24:8f:03:89:62:ec:ea: bf:25:66:64:90:bd:72:e8:2f:19:8b:42:a9:c2:91: bf:d8:62:48:28:21:50:cc:e5:b1:b3:2b:f4:52:57: 49:6c:2c:8b:85:5f:ee:d4:35:ea:cd:87:79:a5:e7: cb:a8:66:a4:c6:59:fa:1b:3a:7b:2e:c6:b6:26:d8: e6:10:26:9b:98:bb:ef:28:71:88:db:3f:06:f8:1d: 00:f0:cb:6c:5c:0d:fd:b7:ac:2e:56:e5:9d:40:ef: 4b:9a:97:ce:17:d2:e7:ef:31:2c:cd:d8:c2:78:f3: 59:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:94:23:36:8B:62:8D:CE:9D:0D:05:F5:FF:B7:DC:CF:99:4F:76:67 X509v3 Authority Key Identifier: keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:35:f5:95:0d:9b:3e:f1:8f:19:5d:18:54:91:7a:07:85:b4: ab:61:71:b2:fc:ee:55:0f:53:90:c9:46:fd:a5:19:4b:d0:22: 76:a3:b1:17:a7:84:69:96:03:a9:08:a2:4f:c4:2e:57:8a:e0: ef:84:78:4c:38:92:18:46:81:82:71:3b:94:de:26:7b:c6:87: 3d:a0:02:a6:b1:28:b7:c8:b2:c0:77:2c:c0:cb:3d:75:f8:c1: ac:d8:bd:b7:e1:f6:f6:53:6d:01:47:b4:34:fc:7c:5c:14:69: 06:a0:8c:f7:6f:13:cd:a3:b1:e4:fe:d3:93:d8:18:34:cb:40: 1b:7b:49:33:2b:20:ba:a5:81:81:33:8f:35:3a:29:99:d8:6d: 84:0f:89:1f:56:e3:51:99:88:90:6f:20:a2:5e:a4:19:46:9d: 63:f9:9a:a4:8b:1a:09:4d:e5:08:ca:98:2b:93:c9:f8:49:d1: f8:24:b8:2c:51:b9:43:64:e4:cf:e8:86:d0:33:2e:b3:62:62: cb:ed:58:55:e2:52:a3:03:91:a6:27:7c:f8:60:fc:d8:71:38: 6f:8e:b0:2d:89:51:ab:2e:7e:30:c4:df:df:d8:22:9f:9f:41: 75:72:32:d5:50:17:94:0b:db:94:a5:e1:62:c0:9e:b8:8e:ca: 49:ec:b8:3a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEP+hY5CqeGhUWusYxW671aVK3vgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy Q0FBRjcyNzAeFw0yNjA1MTIyMTA1NDdaFw0yNjA1MTMyMzUxNDdaMDMxMTAvBgNV BAMTKEQyOTQyMzM2OEI2MjhEQ0U5RDBEMDVGNUZGQjdEQ0NGOTk0Rjc2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7UviPGHFy8UXPWrE+UJ+tC7RD ROH76f44aDIBbZbKXkLEvtzq22ka3o+90TD9YL91g3++vj+e7O1XYeE20kUZfNCK pPlLlw82s2Bppwv7rlFS8YNLcCrVxlHAyKFH2Olgm1hQ0arGy4N5GL7hI/cEeEFy 30MdyV21VwMV8YzqJ62I0lEbYDdUaePhtLk4JI8DiWLs6r8lZmSQvXLoLxmLQqnC kb/YYkgoIVDM5bGzK/RSV0lsLIuFX+7UNerNh3ml58uoZqTGWfobOnsuxrYm2OYQ JpuYu+8ocYjbPwb4HQDwy2xcDf23rC5W5Z1A70ual84X0ufvMSzN2MJ481k/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0pQjNotijc6dDQX1/7fcz5lPdmcwHwYDVR0j BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTA4ODYzODYwODk5ODcvMC9BRTA5REQwNTZCM0I1 RUE0QzQ4NzIyQzY3RjYzRjBBMTJDQUFGNzI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtzX1lQ2bPvGP GV0YVJF6B4W0q2FxsvzuVQ9TkMlG/aUZS9AidqOxF6eEaZYDqQiiT8QuV4rg74R4 TDiSGEaBgnE7lN4me8aHPaACprEot8iywHcswMs9dfjBrNi9t+H29lNtAUe0NPx8 XBRpBqCM928TzaOx5P7Tk9gYNMtAG3tJMysguqWBgTOPNTopmdhthA+JH1bjUZmI kG8gol6kGUadY/mapIsaCU3lCMqYK5PJ+EnR+CS4LFG5Q2Tkz+iG0DMus2Jiy+1Y VeJSowORpid8+GD82HE4b46wLYlRqy5+MMTf39gin59BdXIy1VAXlAvblKXhYsCe uI7KSey4Og== -----END CERTIFICATE-----Generated at Wed May 13 14:09:10 2026 by rpki-client