$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft File: AE487B72C4F38EA548F6721BB60B773705BD9515.mft (raw, json) Hash identifier: t84vvUPitcp2rdOXDQTaoPpOVv39HrwGyUYskkfmT4I= Subject key identifier: 35:22:28:92:86:22:EC:74:FE:90:66:37:CE:21:21:33:DA:C5:31:EF Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 14E8F31BA1E4D79AD9CDA6D080BFDB9B4B4A4119 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft Manifest number: D9 Signing time: Sun 26 Apr 2026 21:58:33 +0000 Manifest this update: Sun 26 Apr 2026 21:53:33 +0000 Manifest next update: Tue 28 Apr 2026 00:03:33 +0000 Files and hashes: 1: 3231382e3234392e3135382e302f32332d3233203d3e2034383038.roa (hash: 3ceKRIJp9hPJsGZQR1PKEyjoGLwpUcexCGKSojmT1GE=) 2: 3231382e3234392e3139322e302f31382d3138203d3e2034383038.roa (hash: s7HovHLc58VDjoBm7UvlnPEJOYb3tCL66aPOYWl3Lvc=) 3: 323430333a383838303a3a2f33322d3634203d3e203137393634.roa (hash: +pvZ0/1DLgneMPaWbyvqBXYh1zOEumfoQPnHJUD/aYo=) 4: 3231382e3234392e3134342e302f32312d3231203d3e2034383038.roa (hash: 9efa0FfQVbswqYv6PbvoQbeLjxREFtG+cBI3w5yTTL8=) 5: 3231382e3234392e3135372e302f32342d3234203d3e2034383038.roa (hash: ULiXq0P4h50y3yyc1tfBQzR6eeZAy2XuiYT7gOcjO/I=) 6: 3231382e3234392e3135322e302f32322d3232203d3e2034383038.roa (hash: ABVWx1ZWx2cOGLy5P9P4e92AKVazzYyi2hr+XLM1sic=) 7: 323430333a383038303a3a2f33322d3634203d3e203137393634.roa (hash: piQDqbo6ovz4X+QtGKO2nAVFYTFJJbefb5lvlP5mnSU=) 8: 3231382e3234392e3136302e302f31392d3139203d3e2034383038.roa (hash: gyEdFIZpUT6YwR3UqVvBGol3c/R688wZ35Fk2RFc6h8=) 9: AE487B72C4F38EA548F6721BB60B773705BD9515.crl (hash: FczOkztRAjqR5BDE71+0Ej2T2jNCocu74aoUfwVAH2M=) 10: 3231382e3234392e33322e302f32302d3230203d3e2034383038.roa (hash: cc7kf9qDupM23cLt5EgLWk2Eg3H8o36FO0b5rLsqISw=) 11: 323430333a383038303a3130313a3a2f34382d3438203d3e2034383437.roa (hash: kyxkLgkSkLdtiphgwfgYitM4gd3kF0CU9WboqJpH+Kg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 00:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e8:f3:1b:a1:e4:d7:9a:d9:cd:a6:d0:80:bf:db:9b:4b:4a:41:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Apr 26 21:53:33 2026 GMT Not After : Apr 28 00:03:33 2026 GMT Subject: CN=352228928622EC74FE906637CE212133DAC531EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0e:2b:b1:50:c4:3a:ca:18:4f:3e:8a:d6:78: 71:fc:95:6f:3a:e4:a8:82:34:00:4c:7f:0a:02:c5: ee:5f:3c:c3:48:f0:cf:8c:9b:93:5d:fe:11:e9:70: fa:b7:e4:02:97:fd:2b:b5:fb:38:51:ea:d5:c0:43: dd:00:15:9d:cd:c9:a2:ac:cc:8d:0b:c6:0d:19:b5: d4:e2:ba:b5:38:05:9b:2a:75:d2:bd:f6:16:6b:1c: f9:e4:15:c6:2e:e8:45:79:75:45:9d:68:85:85:81: 0b:15:28:26:48:fa:1e:32:d5:73:39:38:d1:4d:e8: 50:f7:f9:02:ba:e2:b4:ff:83:6f:e1:15:b3:90:71: 4f:7a:a8:0d:74:c1:36:8d:fa:d7:06:c5:19:05:be: 81:d9:58:48:84:0c:7e:e2:0f:6f:fa:06:12:cf:f4: db:d1:fd:e6:28:fb:9a:9e:04:59:48:d0:2a:2f:9c: 40:2d:9e:2a:a3:f1:c4:94:64:b3:2d:22:5d:0a:31: 6c:69:83:50:86:af:05:76:93:38:3a:20:35:0b:dd: d4:c4:b7:94:1f:9a:92:74:fb:2b:6d:4f:a7:a3:38: 1c:37:e8:1a:d0:49:75:ab:1d:98:da:3f:8f:ca:16: 5d:79:0b:41:ac:cb:00:d8:15:b3:30:5e:0b:79:09: c0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:22:28:92:86:22:EC:74:FE:90:66:37:CE:21:21:33:DA:C5:31:EF X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:39:72:27:fa:4d:20:b0:6d:82:c0:c1:50:74:0a:d1:d2:c0: 0d:91:84:8a:6f:d3:68:d5:cd:35:0b:53:a3:6f:5b:84:ef:9b: 32:3e:d8:aa:e6:ad:8d:fb:1a:d6:19:4a:a5:8f:87:37:6e:73: ba:f5:ad:b9:8d:25:88:f0:b0:10:4e:4c:8f:2e:88:05:c4:70: 75:20:9a:d6:5e:02:26:61:91:39:1b:1f:1c:7a:bd:9a:64:67: a0:e0:42:a2:3a:1d:ba:71:06:fd:db:ea:08:b0:f0:b3:1c:a8: dc:7c:b0:ce:30:f3:33:eb:93:5d:b7:38:3f:45:fd:fc:88:8b: 44:ef:70:9e:fc:6b:49:f8:f7:ac:9a:b2:ea:e4:f2:85:68:f2: 2d:56:d1:89:c3:68:6c:62:17:fa:d8:21:1b:75:e6:85:48:5a: 3b:c4:63:83:e4:8c:eb:50:4f:41:3c:9e:0c:7d:90:82:f1:42: eb:66:20:92:e2:10:48:e5:32:27:2c:f2:35:62:7a:f9:91:e4: a7:75:0e:b1:39:96:74:8b:6f:0f:6b:1c:60:b5:f8:96:0a:3f: 9b:73:20:7d:ee:62:de:5a:22:e9:51:90:27:68:d5:45:79:4a: 8c:45:9c:db:12:d3:12:95:c4:a2:36:4d:ed:7e:56:7f:ee:94: 51:43:ec:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFOjzG6Hk15rZzabQgL/bm0tKQRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA0MjYyMTUzMzNaFw0yNjA0MjgwMDAzMzNaMDMxMTAvBgNV BAMTKDM1MjIyODkyODYyMkVDNzRGRTkwNjYzN0NFMjEyMTMzREFDNTMxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDiuxUMQ6yhhPPorWeHH8lW86 5KiCNABMfwoCxe5fPMNI8M+Mm5Nd/hHpcPq35AKX/Su1+zhR6tXAQ90AFZ3NyaKs zI0Lxg0ZtdTiurU4BZsqddK99hZrHPnkFcYu6EV5dUWdaIWFgQsVKCZI+h4y1XM5 ONFN6FD3+QK64rT/g2/hFbOQcU96qA10wTaN+tcGxRkFvoHZWEiEDH7iD2/6BhLP 9NvR/eYo+5qeBFlI0CovnEAtniqj8cSUZLMtIl0KMWxpg1CGrwV2kzg6IDUL3dTE t5QfmpJ0+yttT6ejOBw36BrQSXWrHZjaP4/KFl15C0GsywDYFbMwXgt5CcB3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNSIokoYi7HT+kGY3ziEhM9rFMe8wHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDc5NDM5MzkvMC9BRTQ4N0I3MkM0RjM4 RUE1NDhGNjcyMUJCNjBCNzczNzA1QkQ5NTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzlyJ/pNILBt gsDBUHQK0dLADZGEim/TaNXNNQtTo29bhO+bMj7Yquatjfsa1hlKpY+HN25zuvWt uY0liPCwEE5Mjy6IBcRwdSCa1l4CJmGRORsfHHq9mmRnoOBCojodunEG/dvqCLDw sxyo3HywzjDzM+uTXbc4P0X9/IiLRO9wnvxrSfj3rJqy6uTyhWjyLVbRicNobGIX +tghG3XmhUhaO8Rjg+SM61BPQTyeDH2QgvFC62YgkuIQSOUyJyzyNWJ6+ZHkp3UO sTmWdItvD2scYLX4lgo/m3Mgfe5i3loi6VGQJ2jVRXlKjEWc2xLTEpXEojZN7X5W f+6UUUPssA== -----END CERTIFICATE-----Generated at Mon Apr 27 15:34:47 2026 by rpki-client