$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft File: AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft (raw, json) Hash identifier: dEPb7qn4SttNeVrs6/gR4KcnwNQphvAYn1xQ3zbD05o= Subject key identifier: 18:69:A2:F3:C5:3B:0A:DC:20:D7:28:95:D5:0A:A9:B0:DE:2B:B0:38 Authority key identifier: AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB Certificate issuer: /CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Certificate serial: 734C121709816288B7CB6D0B4480550B9ECD4315 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft Manifest number: 72 Signing time: Thu 15 Oct 2026 05:06:20 +0000 Manifest this update: Thu 15 Oct 2026 05:01:20 +0000 Manifest next update: Sun 18 Oct 2026 11:39:20 +0000 Files and hashes: 1: 3130332e3232302e39332e302f32342d3234203d3e203633363037.roa (hash: 2YMQARwQQNx4TKKlA09Deyt0NiaWHSTvIp9ZwvRBmU0=) 2: AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl (hash: rGfQIYgtV7LjbWEQc1RBVlRtKT/hi3hqbccht6GcF+c=) 3: 323430353a383238303a3a2f33322d3332203d3e203633363037.roa (hash: cJB8DZCXLquxtRMnpkPAwvXkTBKziNRs8S4iiXYlCJ8=) 4: 34352e3235312e3132302e302f32322d3232203d3e203633363037.roa (hash: RZ39bL2boZr+mHG3dnSmDiIpsnz2ZL5lis9k+FJyFHk=) 5: 3130332e3232302e39322e302f32342d3234203d3e203633363037.roa (hash: +z+ShcaikWqiaUZb2DYg9PBDgXCkLZavKqWFDF1Jkr8=) 6: 3130332e3232302e39342e302f32342d3234203d3e203633363037.roa (hash: dF3MhDLHJCBnFN0dFuW4PMjSjk2cUkM6SlKWWnqD9rE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4c:12:17:09:81:62:88:b7:cb:6d:0b:44:80:55:0b:9e:cd:43:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Validity Not Before: Oct 15 05:01:20 2026 GMT Not After : Oct 18 11:39:20 2026 GMT Subject: CN=1869A2F3C53B0ADC20D72895D50AA9B0DE2BB038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:97:76:7c:22:f7:33:4e:19:2b:8e:cb:28: 03:3b:4b:08:73:6d:86:fb:99:95:ec:a1:63:f0:8f: 08:a1:4b:2e:ee:e1:d0:ec:a9:9c:95:b1:59:bd:5d: be:30:a4:ce:89:28:1a:1b:b6:66:58:2a:ef:42:f4: 19:bf:70:a0:36:dc:64:02:f9:a4:08:f2:d4:fa:5d: 5f:4f:31:24:50:02:07:f2:5d:0f:8c:4f:c0:df:16: e2:af:18:77:07:a2:b8:d1:0a:b3:c8:35:68:d1:3e: 38:78:0b:0b:a4:8a:f7:be:1b:52:74:13:f7:23:30: 3e:3c:48:60:9d:bb:08:76:7f:f1:97:00:07:1b:5e: f2:c5:58:0e:6e:c4:26:dd:47:2c:1f:eb:56:5f:c7: da:c3:d6:3d:10:a1:4b:dc:8c:ee:82:de:62:69:4e: 35:27:0e:f0:ba:8f:a0:de:d9:e3:a3:0f:9c:b9:7f: d6:a5:04:cf:61:78:70:6f:d2:74:1f:a6:e4:46:e4: 44:94:c1:fe:ae:59:1c:70:e2:b7:13:37:a7:db:fc: b6:de:d2:a5:20:0c:1e:ba:77:a5:17:5f:94:1a:f6: fe:02:84:17:f1:f1:85:35:61:e7:e4:1c:37:e8:72: ad:65:63:ad:07:9f:01:6b:79:63:a2:68:74:cb:e1: 46:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:69:A2:F3:C5:3B:0A:DC:20:D7:28:95:D5:0A:A9:B0:DE:2B:B0:38 X509v3 Authority Key Identifier: keyid:AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d9:fc:e4:54:91:2d:01:b2:07:6d:f1:86:2c:0a:c5:f8:80: b4:c0:28:55:78:4b:20:bd:e1:5f:6c:3c:85:2a:71:6c:d0:64: 0f:de:a2:7f:b1:0e:ad:cf:ea:f2:24:1d:a0:f3:ef:ee:e6:b3: 85:36:6d:43:ee:78:89:37:bf:70:a5:62:99:74:e3:36:58:3c: 49:3e:69:35:5f:23:60:af:8d:9d:5c:0c:43:b0:69:49:ab:58: 11:76:37:f7:52:3e:9c:3f:8a:4c:ff:30:77:fc:24:81:1f:8d: cb:ed:fd:f4:47:0b:98:01:d4:80:56:53:5d:ec:23:68:69:94: 1f:1a:4d:35:90:2f:8a:c1:92:fe:e3:31:5d:57:50:bc:d3:19: f3:64:4b:2a:a7:7f:ef:a4:d1:0d:cb:04:91:02:9e:3d:ba:51: 11:4d:55:ba:fd:c0:3b:25:ef:1b:fa:28:6d:76:94:8a:81:53: 41:1c:b0:b0:0a:70:4a:3b:f0:c7:5c:69:d9:e6:1f:a3:a0:50: ba:5f:38:b3:3c:af:3e:25:f3:75:46:94:6d:aa:6a:7e:d9:e1: f5:5d:f7:89:74:b0:df:80:66:2f:8f:ba:bd:d2:5a:19:98:8c: 35:9b:58:8e:e2:98:d0:32:77:73:51:39:d1:c1:32:ea:b3:12: ad:00:b2:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc0wSFwmBYoi3y20LRIBVC57NQxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNC NDREQjlBQjAeFw0yNjEwMTUwNTAxMjBaFw0yNjEwMTgxMTM5MjBaMDMxMTAvBgNV BAMTKDE4NjlBMkYzQzUzQjBBREMyMEQ3Mjg5NUQ1MEFBOUIwREUyQkIwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7Jd2fCL3M04ZK47LKAM7Swhz bYb7mZXsoWPwjwihSy7u4dDsqZyVsVm9Xb4wpM6JKBobtmZYKu9C9Bm/cKA23GQC +aQI8tT6XV9PMSRQAgfyXQ+MT8DfFuKvGHcHorjRCrPINWjRPjh4Cwukive+G1J0 E/cjMD48SGCduwh2f/GXAAcbXvLFWA5uxCbdRywf61Zfx9rD1j0QoUvcjO6C3mJp TjUnDvC6j6De2eOjD5y5f9alBM9heHBv0nQfpuRG5ESUwf6uWRxw4rcTN6fb/Lbe 0qUgDB66d6UXX5Qa9v4ChBfx8YU1YefkHDfocq1lY60HnwFreWOiaHTL4Ua3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGGmi88U7Ctwg1yiV1QqpsN4rsDgwHwYDVR0j BBgwFoAUrjg6tLylo+Ed5Jr/cElNQ7RNuaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjcwOTM1MDkxMDAwMTE5MS8wL0FFMzgzQUI0QkNBNUEzRTExREU0OUFGRjcwNDk0 RDQzQjQ0REI5QUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNCNDREQjlBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI3MDkzNTA5MTAwMDExOTEvMC9BRTM4M0FCNEJDQTVB M0UxMURFNDlBRkY3MDQ5NEQ0M0I0NERCOUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNn85FSRLQGy B23xhiwKxfiAtMAoVXhLIL3hX2w8hSpxbNBkD96if7EOrc/q8iQdoPPv7uazhTZt Q+54iTe/cKVimXTjNlg8ST5pNV8jYK+NnVwMQ7BpSatYEXY391I+nD+KTP8wd/wk gR+Ny+399EcLmAHUgFZTXewjaGmUHxpNNZAvisGS/uMxXVdQvNMZ82RLKqd/76TR DcsEkQKePbpREU1Vuv3AOyXvG/oobXaUioFTQRywsApwSjvwx1xp2eYfo6BQul84 szyvPiXzdUaUbapqftnh9V33iXSw34BmL4+6vdJaGZiMNZtYjuKY0DJ3c1E50cEy 6rMSrQCymA== -----END CERTIFICATE-----Generated at Thu Oct 15 08:20:54 2026 by rpki-client