$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: 5Z4G+qX6J92qKXkWcuFN1CmWWFY8jPlP504nsiOtuss= Subject key identifier: B0:64:4D:0F:A3:69:8A:D0:58:2B:6F:D7:88:64:CC:A9:3C:B2:75:E1 Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 3F290D5EAD530C74A2F8BC3672EA41B99D1A863F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: 012E Signing time: Thu 03 Sep 2026 16:23:40 +0000 Manifest this update: Thu 03 Sep 2026 16:18:40 +0000 Manifest next update: Mon 07 Sep 2026 00:03:40 +0000 Files and hashes: 1: 3134302e3230352e302e302f31362d3234203d3e203337393633.roa (hash: 4T+Ny17GQGa7oMvo1y349IVyjaqe3SnHiVL4XvhRzI8=) 2: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: Mt5s1rIcB80Fbtdwum+Mr4hGIboyxs9/P1wX07nJM2U=) 3: 3134302e3230352e302e302f31362d3234203d3e203435313032.roa (hash: pQRnaurNhavozvk/Uf/xbHRB5WSXCOHAuz30poaAiH8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:29:0d:5e:ad:53:0c:74:a2:f8:bc:36:72:ea:41:b9:9d:1a:86:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Sep 3 16:18:40 2026 GMT Not After : Sep 7 00:03:40 2026 GMT Subject: CN=B0644D0FA3698AD0582B6FD78864CCA93CB275E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:3e:76:38:b0:ce:7b:7d:a9:fb:8e:4e:20: 9d:45:f3:6b:10:59:5e:0e:f7:af:42:08:c0:22:83: d2:06:87:d6:f6:a9:f1:22:f1:32:c5:86:a1:65:6c: ac:b7:21:ee:2c:53:a4:27:4a:94:65:da:b4:a5:c1: de:b3:40:55:7b:e5:4c:12:0e:cc:c8:cb:58:79:7c: 9f:68:f5:0c:a1:8c:52:2d:c7:92:8d:8a:bc:79:f1: 05:26:d6:2d:e1:ef:12:cd:f2:73:ae:f1:eb:a9:dd: 40:86:97:ee:c5:b1:b6:0e:b3:44:ef:92:b9:f2:c8: dc:76:09:0f:ef:1e:38:ba:57:18:4d:74:c1:d1:d9: 85:20:28:fa:c9:bc:a7:33:13:cf:4d:62:20:f0:43: 83:08:2c:d4:92:d7:26:37:18:44:06:f0:25:46:0f: 6b:f9:4f:98:f9:2c:1b:ac:53:a5:0a:81:48:5c:f7: a1:e0:12:42:38:6b:fe:19:17:c3:33:ad:f2:d4:a2: 56:93:62:0f:b6:51:07:a9:b7:33:b4:c2:9a:18:5f: 99:8a:9e:68:f3:91:46:24:b5:bb:b0:38:c9:11:04: de:51:51:15:1a:05:26:75:3b:5b:b1:b0:0b:98:b2: c5:d9:4c:6c:46:4a:9f:a3:a9:3b:aa:ae:e3:4c:15: 2e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:64:4D:0F:A3:69:8A:D0:58:2B:6F:D7:88:64:CC:A9:3C:B2:75:E1 X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6f:ba:dd:34:c9:1a:35:e5:73:f6:76:91:52:ac:a2:fb:0a: f7:2a:c8:9e:09:e6:9a:a8:39:ab:ff:2c:1e:9c:11:d9:05:4b: a8:79:d1:f1:ae:20:fe:51:3f:3c:f0:99:68:54:99:3a:2d:41: a4:8f:13:5b:11:5a:60:89:73:b7:7c:f8:3f:55:c9:0f:a6:9e: 99:32:45:bf:cb:af:f1:8b:31:80:0b:52:cd:d6:66:97:50:4c: 26:4c:39:ed:c3:56:9d:ee:90:de:28:41:fe:57:2b:1b:e3:ed: 9d:fb:01:c2:50:e7:3d:ec:38:80:9e:ef:8b:46:62:e5:99:07: c5:20:d8:5a:b3:8c:07:74:9d:95:a5:e4:23:c3:ee:a9:0e:fa: 09:62:9f:4b:9b:c5:24:fc:fd:84:62:47:3a:3a:2f:19:2c:e5: e2:2e:74:cd:15:7b:24:1f:82:de:50:ff:9b:2f:88:e1:44:e8: a9:a0:81:99:0d:28:43:43:3b:a0:64:49:ef:58:dc:77:29:5f: 5f:95:48:1a:26:3d:3f:a3:15:e7:79:09:01:68:3c:ae:75:5a: 0b:54:96:0e:d7:5b:dc:84:c6:5e:3a:3c:9f:2e:6c:5b:d8:08: c8:ae:43:6e:1c:bd:b5:de:08:9a:f1:43:6b:9d:23:21:7e:6c: 2e:4b:25:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPykNXq1TDHSi+Lw2cupBuZ0ahj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjA5MDMxNjE4NDBaFw0yNjA5MDcwMDAzNDBaMDMxMTAvBgNV BAMTKEIwNjQ0RDBGQTM2OThBRDA1ODJCNkZENzg4NjRDQ0E5M0NCMjc1RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3j52OLDOe32p+45OIJ1F82sQ WV4O969CCMAig9IGh9b2qfEi8TLFhqFlbKy3Ie4sU6QnSpRl2rSlwd6zQFV75UwS DszIy1h5fJ9o9QyhjFItx5KNirx58QUm1i3h7xLN8nOu8eup3UCGl+7FsbYOs0Tv krnyyNx2CQ/vHji6VxhNdMHR2YUgKPrJvKczE89NYiDwQ4MILNSS1yY3GEQG8CVG D2v5T5j5LBusU6UKgUhc96HgEkI4a/4ZF8MzrfLUolaTYg+2UQeptzO0wpoYX5mK nmjzkUYktbuwOMkRBN5RURUaBSZ1O1uxsAuYssXZTGxGSp+jqTuqruNMFS7DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsGRND6NpitBYK2/XiGTMqTyydeEwHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2+63TTJGjXl c/Z2kVKsovsK9yrIngnmmqg5q/8sHpwR2QVLqHnR8a4g/lE/PPCZaFSZOi1BpI8T WxFaYIlzt3z4P1XJD6aemTJFv8uv8YsxgAtSzdZml1BMJkw57cNWne6Q3ihB/lcr G+PtnfsBwlDnPew4gJ7vi0Zi5ZkHxSDYWrOMB3SdlaXkI8PuqQ76CWKfS5vFJPz9 hGJHOjovGSzl4i50zRV7JB+C3lD/my+I4UToqaCBmQ0oQ0M7oGRJ71jcdylfX5VI GiY9P6MV53kJAWg8rnVaC1SWDtdb3ITGXjo8ny5sW9gIyK5Dbhy9td4ImvFDa50j IX5sLkslhA== -----END CERTIFICATE-----Generated at Sat Sep 5 06:48:43 2026 by rpki-client