$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft File: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft (raw, json) Hash identifier: FqQQR3SRU4S/Mqlo403fFL5uVdDr7c8X4IAK++7YOXc= Subject key identifier: C1:07:EC:4C:4C:F7:5B:E3:85:E8:B5:F5:F0:21:F3:8E:72:7A:42:08 Authority key identifier: AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 Certificate issuer: /CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Certificate serial: 0549F015D76DE526F3D72634699F6F40310B450E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft Manifest number: F5 Signing time: Tue 21 Jul 2026 20:49:37 +0000 Manifest this update: Tue 21 Jul 2026 20:44:37 +0000 Manifest next update: Wed 22 Jul 2026 22:34:37 +0000 Files and hashes: 1: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl (hash: eE2eW8aCvN6d/ZF3zDRA8QNkBWAFNqHZQcYetwOeFGE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:49:f0:15:d7:6d:e5:26:f3:d7:26:34:69:9f:6f:40:31:0b:45:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Validity Not Before: Jul 21 20:44:37 2026 GMT Not After : Jul 22 22:34:37 2026 GMT Subject: CN=C107EC4C4CF75BE385E8B5F5F021F38E727A4208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:75:f0:e7:3f:09:a8:95:9b:03:3f:63:b8:01: ef:5e:54:ad:ea:ee:5a:7f:10:cf:c5:8a:09:bf:a9: cc:88:f3:d0:f3:05:83:28:1f:6c:b2:90:db:93:c1: 15:7e:08:f7:11:99:e0:22:c5:22:56:86:19:45:07: d0:af:89:08:18:98:4f:fe:80:7e:47:0f:e7:82:c1: 99:5d:3d:7a:7f:0c:91:6d:78:9d:dc:39:d6:47:6f: e7:a2:7c:43:76:15:05:6c:ac:f9:1d:6c:c2:e6:cb: 92:f6:8e:2e:ad:5a:eb:4e:bf:63:2f:d4:09:43:08: 7b:cd:81:9a:eb:e5:2b:04:e0:f7:6d:62:01:97:5e: d9:24:ec:77:dc:35:51:b1:e3:ed:fa:10:c5:5b:38: 98:de:8d:b6:74:72:9b:d0:54:f3:35:c0:94:25:6f: 55:db:0d:6e:82:55:fb:07:32:a5:2b:ae:f3:69:e6: 38:42:6a:1f:2d:c0:96:a4:39:a6:fd:3c:94:01:6d: 96:67:9d:70:86:6d:19:dc:00:f0:c7:a7:5f:83:37: 77:35:96:6f:e6:e4:5e:9f:10:31:fa:af:c8:ff:e4: 3d:6c:48:38:33:73:a9:b1:de:73:1c:e1:51:b2:cd: b3:19:c0:25:bd:f1:8f:d7:11:76:f5:92:42:64:a7: f2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:07:EC:4C:4C:F7:5B:E3:85:E8:B5:F5:F0:21:F3:8E:72:7A:42:08 X509v3 Authority Key Identifier: keyid:AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ff:0a:d2:d4:79:a0:7b:b3:0e:d7:e6:d3:0f:52:bb:7c:b0: 55:7c:6b:a5:3b:be:23:a2:54:63:46:f4:d2:d1:b9:d6:e2:ab: eb:ba:f3:61:28:bf:31:c8:69:c4:5c:29:fd:d1:6f:b5:19:7c: 7f:fe:0f:fa:1c:47:1b:78:8c:84:0c:d7:a6:53:c5:3b:ba:43: e0:5a:01:69:09:1f:28:c3:88:2f:fe:5f:7b:80:fb:ad:18:0e: 1f:70:0a:f8:30:72:cc:19:ee:0b:fc:df:8d:7c:12:13:64:b8: bf:a9:a6:03:9e:d9:c9:29:c7:42:c5:1c:62:e2:44:ed:b5:ad: ff:be:ce:c7:ab:ab:b2:c3:77:19:eb:4b:ea:02:10:53:23:b7: 80:c6:9a:09:64:de:dd:ff:1d:0b:19:8e:8f:41:6a:0a:c5:38: 35:31:06:e2:b7:bb:f2:d0:1e:2c:94:20:94:2b:a4:46:75:81: a9:66:b4:0f:cd:73:75:c2:23:47:28:88:81:a4:01:f4:f9:a1: 3e:ff:79:f8:2d:69:6e:ba:93:67:27:1e:63:f8:54:ea:01:d7: 0c:1d:ab:7e:42:35:e3:10:bc:1d:fb:1e:4a:2a:eb:d5:d9:03: 8d:54:6c:e5:01:3f:ff:39:9a:bd:70:23:cd:74:aa:83:27:64: 2c:d1:80:e1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBUnwFddt5Sbz1yY0aZ9vQDELRQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYz QzFGNzNDNjAeFw0yNjA3MjEyMDQ0MzdaFw0yNjA3MjIyMjM0MzdaMDMxMTAvBgNV BAMTKEMxMDdFQzRDNENGNzVCRTM4NUU4QjVGNUYwMjFGMzhFNzI3QTQyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZdfDnPwmolZsDP2O4Ae9eVK3q 7lp/EM/Figm/qcyI89DzBYMoH2yykNuTwRV+CPcRmeAixSJWhhlFB9CviQgYmE/+ gH5HD+eCwZldPXp/DJFteJ3cOdZHb+eifEN2FQVsrPkdbMLmy5L2ji6tWutOv2Mv 1AlDCHvNgZrr5SsE4PdtYgGXXtkk7HfcNVGx4+36EMVbOJjejbZ0cpvQVPM1wJQl b1XbDW6CVfsHMqUrrvNp5jhCah8twJakOab9PJQBbZZnnXCGbRncAPDHp1+DN3c1 lm/m5F6fEDH6r8j/5D1sSDgzc6mx3nMc4VGyzbMZwCW98Y/XEXb1kkJkp/JlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwQfsTEz3W+OF6LX18CHzjnJ6QggwHwYDVR0j BBgwFoAUruGZHmaaawyX6KHcnJZXVjwfc8YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8xL0FFRTE5OTFFNjY5QTZCMEM5N0U4QTFEQzlDOTY1 NzU2M0MxRjczQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYzQzFGNzNDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMS9BRUUxOTkxRTY2OUE2 QjBDOTdFOEExREM5Qzk2NTc1NjNDMUY3M0M2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkv8K0tR5oHuz Dtfm0w9Su3ywVXxrpTu+I6JUY0b00tG51uKr67rzYSi/MchpxFwp/dFvtRl8f/4P +hxHG3iMhAzXplPFO7pD4FoBaQkfKMOIL/5fe4D7rRgOH3AK+DByzBnuC/zfjXwS E2S4v6mmA57ZySnHQsUcYuJE7bWt/77Ox6urssN3GetL6gIQUyO3gMaaCWTe3f8d CxmOj0FqCsU4NTEG4re78tAeLJQglCukRnWBqWa0D81zdcIjRyiIgaQB9PmhPv95 +C1pbrqTZyceY/hU6gHXDB2rfkI14xC8HfseSirr1dkDjVRs5QE//zmavXAjzXSq gydkLNGA4Q== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:57 2026 by rpki-client