$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: BnmcIjDQNhwnNov0a+McQaMG/Q7zORM7ul9DYSXBHMA= Subject key identifier: 13:9B:0F:18:FA:F5:8F:1B:29:68:E4:7B:7F:F9:2D:B5:FC:D6:74:50 Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 140302DD86C68F0BE94C187CD616099BA8F94B5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: F8 Signing time: Tue 21 Jul 2026 17:34:11 +0000 Manifest this update: Tue 21 Jul 2026 17:29:11 +0000 Manifest next update: Wed 22 Jul 2026 21:12:11 +0000 Files and hashes: 1: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: QTTzR8nJCwVQzJqkWIRYzW6ODJGjWpPikKzNVbLHGMA=) 2: 3134302e3230352e302e302f31362d3234203d3e203435313032.roa (hash: pQRnaurNhavozvk/Uf/xbHRB5WSXCOHAuz30poaAiH8=) 3: 3134302e3230352e302e302f31362d3234203d3e203337393633.roa (hash: 4T+Ny17GQGa7oMvo1y349IVyjaqe3SnHiVL4XvhRzI8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:03:02:dd:86:c6:8f:0b:e9:4c:18:7c:d6:16:09:9b:a8:f9:4b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Jul 21 17:29:11 2026 GMT Not After : Jul 22 21:12:11 2026 GMT Subject: CN=139B0F18FAF58F1B2968E47B7FF92DB5FCD67450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5c:3c:63:37:b8:f1:9d:ef:c0:fa:85:fc:4f: 9f:15:3a:7e:0a:ef:30:cd:de:cd:ee:4b:eb:1f:a6: 72:43:07:ba:b8:45:30:da:db:07:83:d0:24:26:3b: 48:d8:8b:61:63:89:e7:11:05:35:2a:03:45:13:d4: 0a:95:5e:68:b7:7a:c6:d3:8d:d6:48:c5:35:64:9a: ca:a8:6a:2a:50:43:f2:7c:50:75:eb:0e:9f:d2:44: 6f:29:b6:4a:72:13:5d:0f:6c:c0:7f:1f:84:53:f3: 89:18:21:ea:bb:91:e8:0b:76:8b:15:28:4f:3b:f1: 7a:ce:d5:f4:8e:64:a4:21:60:23:de:76:3d:eb:ce: cf:46:d6:6d:db:e6:93:c7:6a:28:5c:88:78:3c:a6: ea:92:22:f3:fa:66:bb:2f:cc:2c:ac:47:fb:ee:49: 10:39:35:8f:7c:98:ed:f3:22:f0:ec:de:18:ad:f3: ff:33:ac:ff:89:c9:6f:d1:fa:ef:c5:df:03:3d:82: 6a:23:3f:0b:18:89:8e:3c:41:a0:03:dc:96:9a:f3: ff:b9:5b:e9:9a:2e:3c:34:ce:de:14:0e:17:75:7d: c9:74:f4:ba:db:2f:46:73:1e:d3:17:b6:99:1b:42: 6c:c1:2c:87:e8:51:19:66:ed:d6:54:0e:ec:21:71: c3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9B:0F:18:FA:F5:8F:1B:29:68:E4:7B:7F:F9:2D:B5:FC:D6:74:50 X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:2c:1a:b0:da:de:f7:f1:7e:7f:29:58:e6:60:32:43:49:f7: bc:a8:5e:cf:ce:93:51:0e:29:0e:a7:43:d0:c7:58:0f:2e:24: ea:28:07:43:f8:96:b8:19:02:b3:59:1a:12:af:6c:1b:80:75: c3:72:48:1e:c9:db:8d:ea:cc:27:19:23:fd:35:fb:ea:de:17: 7b:41:a0:d2:a8:64:2c:b0:3e:93:56:30:d1:92:9b:48:8d:81: 7b:00:d2:5c:1b:ec:bf:ad:d3:4d:f1:63:05:c7:0b:48:38:e8: ff:f1:9a:6a:dc:dd:a2:47:7d:eb:5e:da:b1:48:16:b8:2d:d8: 5c:47:60:5f:ba:a4:1d:3b:27:57:7a:e6:05:a2:bb:4b:c6:bb: 0e:74:af:bd:30:20:3b:5e:4e:2a:41:de:cc:33:34:c0:22:22: ce:f9:13:97:df:c2:38:37:9a:4d:e2:7a:5a:ab:29:15:6f:5a: 5a:f1:46:83:8e:11:5c:ba:b2:9e:5a:34:bb:8b:84:4c:2a:77: 08:cd:90:a8:89:cc:f8:ca:76:18:fb:1a:9a:09:1f:84:1f:db: d3:78:d5:65:aa:f9:fe:a7:01:e2:3c:47:e8:02:9c:29:63:63: 62:35:41:b8:9e:19:a8:fb:b4:76:b4:ca:11:4b:c7:e1:27:83: c8:bd:83:9e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFAMC3YbGjwvpTBh81hYJm6j5S14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjA3MjExNzI5MTFaFw0yNjA3MjIyMTEyMTFaMDMxMTAvBgNV BAMTKDEzOUIwRjE4RkFGNThGMUIyOTY4RTQ3QjdGRjkyREI1RkNENjc0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVXDxjN7jxne/A+oX8T58VOn4K 7zDN3s3uS+sfpnJDB7q4RTDa2weD0CQmO0jYi2FjiecRBTUqA0UT1AqVXmi3esbT jdZIxTVkmsqoaipQQ/J8UHXrDp/SRG8ptkpyE10PbMB/H4RT84kYIeq7kegLdosV KE878XrO1fSOZKQhYCPedj3rzs9G1m3b5pPHaihciHg8puqSIvP6ZrsvzCysR/vu SRA5NY98mO3zIvDs3hit8/8zrP+JyW/R+u/F3wM9gmojPwsYiY48QaAD3Jaa8/+5 W+maLjw0zt4UDhd1fcl09LrbL0ZzHtMXtpkbQmzBLIfoURlm7dZUDuwhccMvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUE5sPGPr1jxspaOR7f/kttfzWdFAwHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCwasNre9/F+ fylY5mAyQ0n3vKhez86TUQ4pDqdD0MdYDy4k6igHQ/iWuBkCs1kaEq9sG4B1w3JI HsnbjerMJxkj/TX76t4Xe0Gg0qhkLLA+k1Yw0ZKbSI2BewDSXBvsv63TTfFjBccL SDjo//Gaatzdokd9617asUgWuC3YXEdgX7qkHTsnV3rmBaK7S8a7DnSvvTAgO15O KkHezDM0wCIizvkTl9/CODeaTeJ6WqspFW9aWvFGg44RXLqynlo0u4uETCp3CM2Q qInM+Mp2GPsamgkfhB/b03jVZar5/qcB4jxH6AKcKWNjYjVBuJ4ZqPu0drTKEUvH 4SeDyL2Dng== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:55 2026 by rpki-client