$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: iPF9m7ruvkzGOMIA5BzvfiYGg2sHrWmbaczYoOW30AM= Subject key identifier: 7A:BD:AF:5D:04:2A:53:38:CF:36:94:4B:DC:13:82:EF:AD:FB:FF:C2 Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 3F9F1FBE00B88CE01005D6A226B234BB21612AE5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: B8 Signing time: Thu 04 Jun 2026 07:49:21 +0000 Manifest this update: Thu 04 Jun 2026 07:44:21 +0000 Manifest next update: Fri 05 Jun 2026 08:12:21 +0000 Files and hashes: 1: 3134302e3230352e302e302f31362d3234203d3e203337393633.roa (hash: 4T+Ny17GQGa7oMvo1y349IVyjaqe3SnHiVL4XvhRzI8=) 2: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: YGpGONF2WVQiS24d6RyXpebA+ezOsYBb6yRS+Z6QTd8=) 3: 3134302e3230352e302e302f31362d3234203d3e203435313032.roa (hash: pQRnaurNhavozvk/Uf/xbHRB5WSXCOHAuz30poaAiH8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 08:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:9f:1f:be:00:b8:8c:e0:10:05:d6:a2:26:b2:34:bb:21:61:2a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Jun 4 07:44:21 2026 GMT Not After : Jun 5 08:12:21 2026 GMT Subject: CN=7ABDAF5D042A5338CF36944BDC1382EFADFBFFC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:16:24:c3:70:e5:96:38:1f:89:bc:07:b3:ce: 00:34:1d:61:9b:b3:12:27:95:3f:08:4e:9d:ab:c8: 32:88:c3:bf:05:4b:7b:26:81:ef:db:dc:76:0a:e3: e1:40:7d:b0:f6:03:99:e4:b4:2e:64:51:87:49:e3: ad:4b:81:35:35:7f:d8:63:ec:f1:f5:68:ae:e5:b7: d4:fb:6a:4a:a2:79:5e:00:c8:dc:ba:72:90:09:69: bc:60:24:bf:e2:1d:1f:28:a8:ec:11:ce:2c:2d:75: 43:06:66:1f:4f:5f:51:ee:c8:ea:3e:68:65:97:96: d2:7e:65:18:a0:bd:09:b7:a1:d5:09:bb:db:cf:27: 32:f8:8d:0b:ca:c0:c5:89:8f:55:3e:1b:68:6b:a6: 70:11:88:2b:19:50:57:d8:b0:95:5b:5e:2c:ed:f3: d2:63:ff:35:7a:c6:71:93:3e:31:42:21:72:b7:38: 86:34:71:f0:9b:6b:83:16:88:17:b4:28:71:0c:1c: 48:b8:6a:38:3b:ed:17:d8:16:13:ff:32:45:22:78: 96:c6:0d:fa:fc:70:00:a3:f6:91:e6:34:02:bf:a3: d5:1d:d7:f2:f2:67:aa:34:7c:e5:ea:5a:cf:79:23: 4e:e0:dc:58:93:38:ff:0b:fc:58:cb:83:4b:c5:01: f4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BD:AF:5D:04:2A:53:38:CF:36:94:4B:DC:13:82:EF:AD:FB:FF:C2 X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:88:a6:4c:cf:64:ec:de:8a:a6:96:1e:18:7e:08:27:28:50: b4:47:98:31:d1:b1:ec:24:ec:cc:ae:cd:8a:f7:54:d6:a3:a8: 1a:32:0b:6f:2a:86:f6:a7:1c:78:c5:0d:d1:1c:67:be:6e:78: de:8b:63:90:4a:1a:b6:09:b6:84:56:4f:76:61:40:82:6e:c5: e3:55:a0:c7:72:90:32:30:90:6d:e6:a5:26:92:58:af:8c:3e: fb:b3:38:a6:a2:93:80:32:d6:ca:8d:55:48:4b:f2:9e:fa:e0: 8d:d4:73:9b:23:ed:16:46:6f:f4:ce:37:7e:ca:6e:70:d6:5e: 17:b8:fa:55:9d:6a:15:78:1b:44:de:b7:39:31:53:d5:02:93: aa:2e:1d:6c:85:4b:8a:e3:9f:64:54:ab:50:f0:e8:59:94:a7: da:d6:40:ec:60:f7:42:65:8e:50:6a:99:52:fd:e6:91:cf:57: a3:15:25:79:8e:15:e6:20:a1:23:b8:36:09:fc:78:33:fd:5a: e5:f8:09:b7:df:3f:74:c8:bb:87:18:f7:fc:a6:01:3d:f6:79: c6:d2:64:fe:b2:b8:d4:ff:bc:dd:65:53:f4:03:e2:0d:63:54: d3:59:a9:be:d5:31:68:87:07:c7:b1:a9:1e:34:6b:2e:c0:69: f5:3d:db:88 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP58fvgC4jOAQBdaiJrI0uyFhKuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjA2MDQwNzQ0MjFaFw0yNjA2MDUwODEyMjFaMDMxMTAvBgNV BAMTKDdBQkRBRjVEMDQyQTUzMzhDRjM2OTQ0QkRDMTM4MkVGQURGQkZGQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFiTDcOWWOB+JvAezzgA0HWGb sxInlT8ITp2ryDKIw78FS3smge/b3HYK4+FAfbD2A5nktC5kUYdJ461LgTU1f9hj 7PH1aK7lt9T7akqieV4AyNy6cpAJabxgJL/iHR8oqOwRziwtdUMGZh9PX1HuyOo+ aGWXltJ+ZRigvQm3odUJu9vPJzL4jQvKwMWJj1U+G2hrpnARiCsZUFfYsJVbXizt 89Jj/zV6xnGTPjFCIXK3OIY0cfCba4MWiBe0KHEMHEi4ajg77RfYFhP/MkUieJbG Dfr8cACj9pHmNAK/o9Ud1/LyZ6o0fOXqWs95I07g3FiTOP8L/FjLg0vFAfSNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUer2vXQQqUzjPNpRL3BOC7637/8IwHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4imTM9k7N6K ppYeGH4IJyhQtEeYMdGx7CTszK7NivdU1qOoGjILbyqG9qcceMUN0Rxnvm543otj kEoatgm2hFZPdmFAgm7F41Wgx3KQMjCQbealJpJYr4w++7M4pqKTgDLWyo1VSEvy nvrgjdRzmyPtFkZv9M43fspucNZeF7j6VZ1qFXgbRN63OTFT1QKTqi4dbIVLiuOf ZFSrUPDoWZSn2tZA7GD3QmWOUGqZUv3mkc9XoxUleY4V5iChI7g2Cfx4M/1a5fgJ t98/dMi7hxj3/KYBPfZ5xtJk/rK41P+83WVT9APiDWNU01mpvtUxaIcHx7GpHjRr LsBp9T3biA== -----END CERTIFICATE-----Generated at Thu Jun 4 15:17:25 2026 by rpki-client