$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft File: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft (raw, json) Hash identifier: vZTSuN3MJ5gcgAK9LShUVJFeSJLOAod6QAA5mWc4qUY= Subject key identifier: 90:EC:62:45:DA:8A:3B:AA:89:1D:81:2A:13:7C:F4:A0:38:13:21:90 Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Certificate serial: 237C056C5EF1CCDAF5CC8FE4ED65F3C0AD2A8FA8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft Manifest number: C7 Signing time: Sat 03 Oct 2026 04:01:21 +0000 Manifest this update: Sat 03 Oct 2026 03:56:21 +0000 Manifest next update: Tue 06 Oct 2026 06:24:21 +0000 Files and hashes: 1: 3130332e33362e3136312e302f32342d3234203d3e2030.roa (hash: rLUuT7j0BQQKXLH7blKy9zsxcJBl8lFXJTXeZAmoi04=) 2: 3130332e33362e3136302e302f32342d3234203d3e2030.roa (hash: Bldld99h3NZM1Qe5b+70bZMRgNDLPcMHp7Kj+aQCBwU=) 3: 34332e3234302e3230322e302f32342d3234203d3e2030.roa (hash: E/gjhJ9Hm91GpWCRMJAiLbm9DE3TG+yaRqQ1xloE1CU=) 4: 34332e3234302e3230332e302f32342d3234203d3e2030.roa (hash: B9336hSEDKsLNxqt5DYV9dkzCNCfuJLc50T2hGH9s08=) 5: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl (hash: rWJad/ef7s3uom+Bs+u8iUkaBoEHfTNBCjyotG8IoS8=) 6: 3130332e33362e3136332e302f32342d3234203d3e2030.roa (hash: XjFtjoTaXfVjDs7zv6u6xKOOqFMXKwT22E1RPXpJ/6U=) 7: 323430313a356338303a3a2f33322d3332203d3e2030.roa (hash: 1LDXyBKSFl2CziO/AAgiipLUXTwKWhQ9V+Y4/cF1F1s=) 8: 3130332e33362e3136322e302f32342d3234203d3e2030.roa (hash: 4zMQp6a1CixszbfIwzHf11h1LQph2hVfQjbrzDw2gew=) 9: 34332e3234302e3230312e302f32342d3234203d3e2034383038.roa (hash: 4iUeVkG/jY1t+8WG/BciSvsYpoG5vX8uPqiNIUCf+TU=) 10: 34332e3234302e3230302e302f32342d3234203d3e2034383038.roa (hash: jH4oDmP6oaOM9gvOyE2Nx4TAC2Qkee39rebiB87cwyI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 09:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7c:05:6c:5e:f1:cc:da:f5:cc:8f:e4:ed:65:f3:c0:ad:2a:8f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Validity Not Before: Oct 3 03:56:21 2026 GMT Not After : Oct 6 06:24:21 2026 GMT Subject: CN=90EC6245DA8A3BAA891D812A137CF4A038132190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:ce:93:c7:1f:7f:2b:39:69:bb:52:d8:fb: bd:f0:29:c1:bd:bf:47:f0:e9:ce:d3:6b:26:cf:7e: fb:cd:90:a5:9b:04:a9:a6:f9:08:c8:cd:88:0c:3f: e2:96:50:80:a8:6c:5f:10:98:76:d9:97:61:98:d2: 97:c9:b2:77:8d:86:cc:1d:bc:15:e4:d5:88:68:7f: 5b:62:53:ee:f2:fa:04:7e:39:84:b3:6f:82:00:98: f8:c4:e5:b6:1e:a8:e8:44:ca:96:dc:e4:9b:b1:e7: 3a:0e:57:63:fc:74:27:6b:00:81:c3:21:9c:6c:66: 86:71:36:78:7a:47:7d:8e:49:c6:10:b6:94:fe:3b: 65:89:87:97:60:15:2d:0e:f8:87:c7:74:5f:90:30: 9b:b3:71:00:67:99:e9:cc:01:3e:8d:c6:37:64:d4: 10:5a:83:c5:c9:6f:3b:66:8a:97:20:cb:9f:c8:49: 5a:7e:1f:a3:a8:d1:11:84:90:d2:11:c3:f0:24:60: 14:c0:36:00:da:a7:ce:3f:3c:fa:76:30:9f:b1:cd: 25:37:72:a7:f0:5a:17:15:4c:cc:75:bf:22:97:d1: 7b:2d:f4:44:38:7d:dc:36:24:77:85:10:9b:cc:28: eb:30:1d:63:1b:d6:9c:52:b2:e7:24:76:f8:42:2b: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EC:62:45:DA:8A:3B:AA:89:1D:81:2A:13:7C:F4:A0:38:13:21:90 X509v3 Authority Key Identifier: keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:df:7f:60:e6:fb:b6:9b:b7:18:e3:ff:43:75:32:db:d3:f8: 5b:13:83:39:fe:20:d6:74:a3:9f:87:c1:c8:46:7e:57:38:e4: 07:40:da:e8:35:a6:5a:6f:88:a5:98:fe:eb:54:e7:97:c1:4c: d7:77:34:25:d4:99:a6:40:a0:57:b7:4b:64:65:13:8d:0f:b1: ad:ed:f3:75:e9:1a:54:e6:7d:e4:f3:5b:f7:3a:38:82:91:3a: b2:8b:5f:42:37:44:19:b2:17:82:bd:71:66:c1:95:ad:15:85: 4a:cf:93:e2:58:3c:2e:75:ab:8d:db:65:1a:7d:64:2e:1b:4d: 72:a3:28:2b:64:3a:6f:7b:a1:26:77:9e:15:97:7e:18:3f:ba: e9:50:30:20:8d:bc:ca:71:63:c1:3d:49:b2:09:67:b7:6e:a7: aa:08:28:b5:88:cc:a4:6b:b1:9a:33:c0:e0:9c:af:e1:69:02: b9:b6:14:50:c2:89:0b:9a:52:6b:73:ee:4f:a5:f0:70:f1:0f: 82:0b:f0:a3:6e:03:9c:fd:04:6a:f0:1a:17:2c:1f:30:a6:79: 3d:75:77:fc:af:7c:97:92:f5:f9:71:42:35:2e:59:52:2b:18: 55:d1:e9:13:db:cb:3a:b3:43:26:98:10:48:d2:6a:88:96:54: 68:89:c6:53 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI3wFbF7xzNr1zI/k7WXzwK0qj6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy Q0FBRjcyNzAeFw0yNjEwMDMwMzU2MjFaFw0yNjEwMDYwNjI0MjFaMDMxMTAvBgNV BAMTKDkwRUM2MjQ1REE4QTNCQUE4OTFEODEyQTEzN0NGNEEwMzgxMzIxOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPc6Txx9/Kzlpu1LY+73wKcG9 v0fw6c7TaybPfvvNkKWbBKmm+QjIzYgMP+KWUICobF8QmHbZl2GY0pfJsneNhswd vBXk1Yhof1tiU+7y+gR+OYSzb4IAmPjE5bYeqOhEypbc5Jux5zoOV2P8dCdrAIHD IZxsZoZxNnh6R32OScYQtpT+O2WJh5dgFS0O+IfHdF+QMJuzcQBnmenMAT6Nxjdk 1BBag8XJbztmipcgy5/ISVp+H6Oo0RGEkNIRw/AkYBTANgDap84/PPp2MJ+xzSU3 cqfwWhcVTMx1vyKX0Xst9EQ4fdw2JHeFEJvMKOswHWMb1pxSsuckdvhCK9p/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkOxiRdqKO6qJHYEqE3z0oDgTIZAwHwYDVR0j BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTA4ODYzODYwODk5ODcvMC9BRTA5REQwNTZCM0I1 RUE0QzQ4NzIyQzY3RjYzRjBBMTJDQUFGNzI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqt9/YOb7tpu3 GOP/Q3Uy29P4WxODOf4g1nSjn4fByEZ+VzjkB0Da6DWmWm+IpZj+61Tnl8FM13c0 JdSZpkCgV7dLZGUTjQ+xre3zdekaVOZ95PNb9zo4gpE6sotfQjdEGbIXgr1xZsGV rRWFSs+T4lg8LnWrjdtlGn1kLhtNcqMoK2Q6b3uhJneeFZd+GD+66VAwII28ynFj wT1Jsglnt26nqggotYjMpGuxmjPA4Jyv4WkCubYUUMKJC5pSa3PuT6XwcPEPggvw o24DnP0EavAaFywfMKZ5PXV3/K98l5L1+XFCNS5ZUisYVdHpE9vLOrNDJpgQSNJq iJZUaInGUw== -----END CERTIFICATE-----Generated at Sun Oct 4 11:14:40 2026 by rpki-client