$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft File: AE487B72C4F38EA548F6721BB60B773705BD9515.mft (raw, json) Hash identifier: XiIeDQQgyXk7wtp2ANCaiQvqrqCBdBwFgAHFN+MQ/PM= Subject key identifier: 7F:59:17:8F:AA:E7:D8:C8:CA:C0:71:60:47:EE:88:C9:CA:F6:7D:F8 Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 1ACD486EA860096CC271C0B18D68277793F638EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft Manifest number: 47 Signing time: Thu 12 Mar 2026 19:28:39 +0000 Manifest this update: Thu 12 Mar 2026 19:23:39 +0000 Manifest next update: Fri 13 Mar 2026 21:07:39 +0000 Files and hashes: 1: AE487B72C4F38EA548F6721BB60B773705BD9515.crl (hash: zge6f340IHGqxD+fhwCphseX1kxB1PcmgeO6ROTl9zk=) 2: 323430333a383038303a3130313a3a2f34382d3438203d3e2034383437.roa (hash: kyxkLgkSkLdtiphgwfgYitM4gd3kF0CU9WboqJpH+Kg=) 3: 323430333a383038303a3a2f33322d3634203d3e203137393634.roa (hash: piQDqbo6ovz4X+QtGKO2nAVFYTFJJbefb5lvlP5mnSU=) 4: 323430333a383838303a3a2f33322d3634203d3e203137393634.roa (hash: +pvZ0/1DLgneMPaWbyvqBXYh1zOEumfoQPnHJUD/aYo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:cd:48:6e:a8:60:09:6c:c2:71:c0:b1:8d:68:27:77:93:f6:38:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Mar 12 19:23:39 2026 GMT Not After : Mar 13 21:07:39 2026 GMT Subject: CN=7F59178FAAE7D8C8CAC0716047EE88C9CAF67DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:dc:90:d6:61:7d:60:cd:ec:5b:ec:af:81: b2:10:89:dc:c8:33:02:fc:3e:6c:a7:02:fc:a1:ce: ae:ee:b6:e2:48:07:0e:eb:4b:ef:a9:a9:2a:a8:f7: 2f:7b:85:d4:0e:5d:2e:35:b2:58:38:94:63:b3:b8: 7c:da:a1:0f:75:b7:74:33:7e:5a:58:81:63:6c:97: 4a:33:77:c5:48:a4:9b:12:d7:62:4c:ad:dd:72:8a: 2d:62:5d:52:17:aa:bf:72:39:14:75:d6:6f:18:f0: dc:7a:99:e8:35:35:4d:b1:78:be:42:d1:3c:25:dc: 50:df:6a:fc:b5:cb:ce:50:f4:d3:0f:2d:b9:ef:fa: ad:e2:82:2c:83:93:a0:bb:1a:90:22:55:75:c4:b0: b1:a7:bb:2d:e8:a4:bc:ad:60:da:57:63:73:2c:7b: 6b:c0:38:b3:42:b0:9f:ca:32:b4:cc:25:8f:56:f7: 9e:40:76:62:02:6b:b7:ba:42:8e:9f:9d:27:57:67: d1:45:6a:86:19:86:7e:85:a5:42:d9:e5:4e:b9:a2: 03:e5:9c:22:c6:b0:ba:15:bd:91:0e:07:24:82:e3: c9:fe:75:20:f2:75:42:e7:dd:94:67:df:c8:13:19: b3:58:a6:8e:e7:3f:dc:e9:2f:2f:e8:ed:d9:cc:d9: 49:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:59:17:8F:AA:E7:D8:C8:CA:C0:71:60:47:EE:88:C9:CA:F6:7D:F8 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:df:91:f1:be:9d:f2:d7:4e:90:7b:a4:fd:28:68:39:05:f1: f0:4b:2b:76:dd:6d:6d:f2:ab:87:dc:13:69:e1:c9:1d:85:bb: d5:23:ac:c2:21:ab:b3:f8:60:18:13:4a:0b:9d:02:62:e9:3a: 04:59:32:47:5c:64:cb:6a:3d:92:f0:1e:e2:a9:05:e6:d2:d4: e8:c9:4f:71:68:6b:15:87:6c:64:38:0d:04:03:0c:25:7a:5b: 93:88:20:b2:ae:3f:c2:99:1e:97:82:6b:b0:0c:6f:bc:5d:b5: 6a:b2:f8:c2:a7:fd:f1:28:fe:5f:b9:f0:4e:c2:51:7f:32:df: c2:82:b7:61:65:94:91:68:fa:6e:fd:21:23:35:8d:4b:3c:b4: dc:46:00:8a:be:a4:3d:d2:44:7b:5b:6a:d8:83:f0:fc:cd:dc: 07:8f:72:b3:15:c0:34:e1:b2:1d:97:3a:a8:55:bc:d6:85:b9: 5e:53:5e:95:e6:ea:4b:3e:44:f0:65:bf:f5:6d:2a:0e:f3:aa: 53:92:68:46:9f:24:90:72:56:06:8f:39:d7:25:2e:ed:f2:31: 51:c4:36:39:40:09:ad:0d:4f:0d:f1:95:45:6a:c0:a6:6d:95: 5a:ce:4b:52:13:da:5c:3a:35:15:af:6d:af:c9:f3:25:52:f8: 52:70:0f:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGs1IbqhgCWzCccCxjWgnd5P2OOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjAzMTIxOTIzMzlaFw0yNjAzMTMyMTA3MzlaMDMxMTAvBgNV BAMTKDdGNTkxNzhGQUFFN0Q4QzhDQUMwNzE2MDQ3RUU4OEM5Q0FGNjdERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4idyQ1mF9YM3sW+yvgbIQidzI MwL8PmynAvyhzq7utuJIBw7rS++pqSqo9y97hdQOXS41slg4lGOzuHzaoQ91t3Qz flpYgWNsl0ozd8VIpJsS12JMrd1yii1iXVIXqr9yORR11m8Y8Nx6meg1NU2xeL5C 0Twl3FDfavy1y85Q9NMPLbnv+q3igiyDk6C7GpAiVXXEsLGnuy3opLytYNpXY3Ms e2vAOLNCsJ/KMrTMJY9W955AdmICa7e6Qo6fnSdXZ9FFaoYZhn6FpULZ5U65ogPl nCLGsLoVvZEOBySC48n+dSDydULn3ZRn38gTGbNYpo7nP9zpLy/o7dnM2UlhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf1kXj6rn2MjKwHFgR+6Iycr2ffgwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc5NDM5MzkvMC9BRTQ4N0I3MkM0RjM4 RUE1NDhGNjcyMUJCNjBCNzczNzA1QkQ5NTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPt+R8b6d8tdO kHuk/ShoOQXx8Esrdt1tbfKrh9wTaeHJHYW71SOswiGrs/hgGBNKC50CYuk6BFky R1xky2o9kvAe4qkF5tLU6MlPcWhrFYdsZDgNBAMMJXpbk4ggsq4/wpkel4JrsAxv vF21arL4wqf98Sj+X7nwTsJRfzLfwoK3YWWUkWj6bv0hIzWNSzy03EYAir6kPdJE e1tq2IPw/M3cB49ysxXANOGyHZc6qFW81oW5XlNelebqSz5E8GW/9W0qDvOqU5Jo Rp8kkHJWBo851yUu7fIxUcQ2OUAJrQ1PDfGVRWrApm2VWs5LUhPaXDo1Fa9tr8nz JVL4UnAPjQ== -----END CERTIFICATE-----Generated at Fri Mar 13 02:42:44 2026 by rpki-client