$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: NuySUQB26AEX7VsrJyF/MQm/ZKcBZm0GolpI5WHTvOU= Subject key identifier: A7:43:18:D3:E0:BC:99:9A:F6:19:D5:DA:E9:FC:78:60:0B:94:D6:1B Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 5F8A5162D19676F5B3269C3B368E0918ADBD1DB6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: 0146 Signing time: Tue 27 Oct 2026 07:14:27 +0000 Manifest this update: Tue 27 Oct 2026 07:09:27 +0000 Manifest next update: Fri 30 Oct 2026 10:21:27 +0000 Files and hashes: 1: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: 82Cj+bV6yQF80i3YtdjaN1LFh1dGxubWByqMarWEu+c=) 2: 3134302e3230352e302e302f31362d3234203d3e203435313032.roa (hash: pQRnaurNhavozvk/Uf/xbHRB5WSXCOHAuz30poaAiH8=) 3: 3134302e3230352e302e302f31362d3234203d3e203337393633.roa (hash: 4T+Ny17GQGa7oMvo1y349IVyjaqe3SnHiVL4XvhRzI8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 10:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:8a:51:62:d1:96:76:f5:b3:26:9c:3b:36:8e:09:18:ad:bd:1d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Oct 27 07:09:27 2026 GMT Not After : Oct 30 10:21:27 2026 GMT Subject: CN=A74318D3E0BC999AF619D5DAE9FC78600B94D61B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:67:c6:d4:63:0a:4c:0d:6b:c0:14:fa:17: b4:55:dc:19:d2:1f:cd:78:9c:66:74:fb:46:93:d8: eb:e1:4e:5e:46:5d:c7:19:7e:7c:d1:7b:b4:0b:ad: d1:70:e5:8f:84:81:01:43:ea:e6:0e:35:0f:12:c0: de:15:96:54:81:76:53:40:46:4d:ff:c8:a1:15:2a: 65:db:d6:a2:08:68:1c:1c:73:f3:83:85:ea:95:03: bb:48:a0:36:a2:df:03:16:19:41:07:29:9a:6d:01: b2:40:07:d6:df:3e:b4:4f:25:f0:21:70:98:5f:a1: ca:ee:28:9b:66:be:21:63:0a:6f:4b:5f:f2:8b:08: a3:05:9f:e4:00:1c:48:f4:c2:b5:f9:52:14:d7:ca: 6d:f9:f7:4b:92:67:a1:4e:ff:6a:e4:dd:c3:92:fd: 6c:7a:b3:df:9f:90:1b:b7:12:2d:71:92:65:00:c5: 82:cc:42:48:33:c3:d9:88:7e:cf:72:80:d7:ca:7e: d8:13:7e:32:99:fb:a2:ff:56:c4:b1:cd:47:af:ac: 41:ea:3c:d2:5e:6c:74:7d:20:65:04:96:26:57:47: f0:ef:0b:ad:de:f2:b5:cf:af:4d:a4:3c:0e:d8:3b: df:23:c7:27:4b:b2:2d:33:42:16:82:cf:54:9a:ee: 3c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:43:18:D3:E0:BC:99:9A:F6:19:D5:DA:E9:FC:78:60:0B:94:D6:1B X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ff:1c:ff:59:61:37:a8:c0:ce:e7:e3:5f:e0:72:96:76:e3: 90:fb:e5:72:6f:cd:41:ce:a2:f4:37:78:c1:ab:4b:a7:b6:2b: 88:b7:39:50:07:1c:be:29:e6:44:81:ec:60:03:43:5b:de:10: 63:c0:8a:28:db:1d:e0:f6:4e:61:db:35:e1:2a:bb:e0:ce:01: a4:66:8b:63:8e:10:36:32:b7:d2:31:25:b1:59:34:e7:0f:97: 49:30:78:d9:e2:dd:6a:26:85:e4:6f:64:1d:2e:a3:ff:04:fb: f7:36:a4:7e:4d:b0:9f:10:84:36:fd:91:ff:d0:29:35:71:dd: a4:3c:12:b6:d0:c9:d2:f6:4c:2b:87:bd:90:aa:79:15:de:e2: 05:88:92:0f:64:7e:49:38:26:1a:7e:04:68:39:1d:56:77:de: 1f:b7:fe:15:73:c2:f2:41:ae:25:99:dd:b6:9d:14:ed:27:97: 84:88:53:67:e8:18:f9:e1:9e:f4:26:2c:f6:e4:6c:67:35:76: 4b:d9:58:e0:f2:bb:e9:eb:12:f5:0e:24:77:2c:6e:3e:06:9f: 84:c5:b9:fe:cb:66:f9:70:ad:1a:97:3a:40:ca:e0:b1:15:25: 4c:bf:f1:f9:23:02:9f:4e:6a:8c:57:ed:4b:35:8c:c9:d6:8e: 88:c1:a5:fe -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX4pRYtGWdvWzJpw7No4JGK29HbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjEwMjcwNzA5MjdaFw0yNjEwMzAxMDIxMjdaMDMxMTAvBgNV BAMTKEE3NDMxOEQzRTBCQzk5OUFGNjE5RDVEQUU5RkM3ODYwMEI5NEQ2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxmfG1GMKTA1rwBT6F7RV3BnS H814nGZ0+0aT2OvhTl5GXccZfnzRe7QLrdFw5Y+EgQFD6uYONQ8SwN4VllSBdlNA Rk3/yKEVKmXb1qIIaBwcc/ODheqVA7tIoDai3wMWGUEHKZptAbJAB9bfPrRPJfAh cJhfocruKJtmviFjCm9LX/KLCKMFn+QAHEj0wrX5UhTXym3590uSZ6FO/2rk3cOS /Wx6s9+fkBu3Ei1xkmUAxYLMQkgzw9mIfs9ygNfKftgTfjKZ+6L/VsSxzUevrEHq PNJebHR9IGUEliZXR/DvC63e8rXPr02kPA7YO98jxydLsi0zQhaCz1Sa7jwtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUp0MY0+C8mZr2GdXa6fx4YAuU1hswHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYv8c/1lhN6jA zufjX+BylnbjkPvlcm/NQc6i9Dd4watLp7YriLc5UAccvinmRIHsYANDW94QY8CK KNsd4PZOYds14Sq74M4BpGaLY44QNjK30jElsVk05w+XSTB42eLdaiaF5G9kHS6j /wT79zakfk2wnxCENv2R/9ApNXHdpDwSttDJ0vZMK4e9kKp5Fd7iBYiSD2R+STgm Gn4EaDkdVnfeH7f+FXPC8kGuJZndtp0U7SeXhIhTZ+gY+eGe9CYs9uRsZzV2S9lY 4PK76esS9Q4kdyxuPgafhMW5/stm+XCtGpc6QMrgsRUlTL/x+SMCn05qjFftSzWM ydaOiMGl/g== -----END CERTIFICATE-----Generated at Wed Oct 28 11:43:41 2026 by rpki-client