$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: ZjRqqBPMYoSttpQgFTToFQBCGx8WS5BEkxM+JnZ1zqA= Subject key identifier: 23:7B:10:1D:50:11:C8:E1:54:DB:D7:23:98:88:F1:7B:B8:1E:45:9C Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 70048E667182FFC5FD846CE346735B90E9869F91 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: 3B Signing time: Tue 03 Mar 2026 23:33:20 +0000 Manifest this update: Tue 03 Mar 2026 23:28:20 +0000 Manifest next update: Thu 05 Mar 2026 01:19:20 +0000 Files and hashes: 1: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: XHXYljcGCNwRzNi4SukzYhuyXtzRfRcz56PzM0rlfuk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:04:8e:66:71:82:ff:c5:fd:84:6c:e3:46:73:5b:90:e9:86:9f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Mar 3 23:28:20 2026 GMT Not After : Mar 5 01:19:20 2026 GMT Subject: CN=237B101D5011C8E154DBD7239888F17BB81E459C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c3:2c:f6:ad:28:f4:01:52:0b:1f:16:7f:3e: 36:9b:20:67:f6:2a:19:3c:2b:e6:7e:69:83:d1:3c: 2e:c8:40:36:99:33:04:7b:2a:d9:08:81:29:b3:73: 94:4b:60:b8:1b:db:88:f4:ff:a3:f4:a2:ea:b7:97: 76:1b:fc:32:50:00:c5:3e:86:c6:19:96:e6:10:7c: 36:cf:05:ca:f3:17:7b:dc:19:b2:38:e2:c6:aa:fb: 91:0f:8a:a7:0b:54:3e:48:53:3b:d5:97:42:59:95: 7b:c1:7f:22:fa:12:49:33:cf:6c:9c:a0:6b:23:2b: dc:53:fa:5c:5a:4c:d1:4e:75:3c:e8:aa:22:5d:29: 30:d4:ee:97:50:33:34:77:eb:b5:ac:ac:8e:ea:2e: 96:58:aa:62:4a:b3:91:3e:67:1d:52:21:2e:7b:09: a4:d2:80:6f:b0:55:af:ac:f5:f4:ef:23:ff:b8:7d: 60:31:eb:9d:33:6c:7f:42:91:ba:78:c4:d9:7b:78: af:a7:cd:20:cf:4a:42:68:1f:2d:c5:dc:e6:67:d1: 63:be:cc:1d:ae:90:30:b6:a7:1b:2d:e9:ca:4a:23: a5:b5:dd:16:15:7e:65:8e:51:c9:2e:d9:2f:44:ee: d5:fe:18:06:f3:32:9d:3f:a8:1d:9a:bb:31:e4:36: d1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7B:10:1D:50:11:C8:E1:54:DB:D7:23:98:88:F1:7B:B8:1E:45:9C X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4c:ef:a7:9a:ad:d5:cb:a9:6a:74:c4:cd:47:25:99:7e:bf: f0:67:5b:b1:e4:66:01:12:5b:29:e1:58:f4:99:88:41:da:e2: 44:e9:65:c6:d6:d4:32:e3:45:78:fa:1a:da:4e:e0:36:40:e4: c9:40:a9:ea:e0:68:50:9e:73:cd:c8:e7:10:30:9a:36:e3:d6: ff:42:0f:4e:d1:a8:26:52:b1:99:dc:44:ab:79:64:f0:71:43: 01:81:64:c7:48:1c:ce:03:c2:cc:e1:08:fe:2c:fa:f9:f9:9b: 40:72:1e:cd:8c:35:67:b1:f7:24:42:10:2e:a4:27:37:71:9f: 91:f4:6b:44:41:1a:28:c5:58:06:cb:3f:7b:ee:f0:80:97:53: 4a:2c:90:bb:6e:62:04:98:a9:4d:27:42:29:0e:5a:50:3a:c6: c0:8f:f3:26:ca:d5:83:f9:19:c9:01:8f:f1:ab:35:df:46:37: b1:d4:ac:be:60:93:f0:4b:2a:c8:2b:b8:a8:e8:8b:36:a4:99: d6:91:c1:a3:ef:a1:19:6e:ac:73:19:6a:f4:84:71:e4:e9:32: 33:83:4c:3b:55:21:df:4d:97:58:0a:33:b0:fc:d5:d8:4f:52: 25:4a:88:4a:f1:7d:d6:ad:92:df:66:7a:8e:9c:0a:f2:fd:fc: 31:49:d7:79 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcASOZnGC/8X9hGzjRnNbkOmGn5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjAzMDMyMzI4MjBaFw0yNjAzMDUwMTE5MjBaMDMxMTAvBgNV BAMTKDIzN0IxMDFENTAxMUM4RTE1NERCRDcyMzk4ODhGMTdCQjgxRTQ1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqwyz2rSj0AVILHxZ/PjabIGf2 Khk8K+Z+aYPRPC7IQDaZMwR7KtkIgSmzc5RLYLgb24j0/6P0ouq3l3Yb/DJQAMU+ hsYZluYQfDbPBcrzF3vcGbI44saq+5EPiqcLVD5IUzvVl0JZlXvBfyL6Ekkzz2yc oGsjK9xT+lxaTNFOdTzoqiJdKTDU7pdQMzR367WsrI7qLpZYqmJKs5E+Zx1SIS57 CaTSgG+wVa+s9fTvI/+4fWAx650zbH9Ckbp4xNl7eK+nzSDPSkJoHy3F3OZn0WO+ zB2ukDC2pxst6cpKI6W13RYVfmWOUcku2S9E7tX+GAbzMp0/qB2auzHkNtGdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUI3sQHVARyOFU29cjmIjxe7geRZwwHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUzvp5qt1cup anTEzUclmX6/8GdbseRmARJbKeFY9JmIQdriROllxtbUMuNFePoa2k7gNkDkyUCp 6uBoUJ5zzcjnEDCaNuPW/0IPTtGoJlKxmdxEq3lk8HFDAYFkx0gczgPCzOEI/iz6 +fmbQHIezYw1Z7H3JEIQLqQnN3GfkfRrREEaKMVYBss/e+7wgJdTSiyQu25iBJip TSdCKQ5aUDrGwI/zJsrVg/kZyQGP8as130Y3sdSsvmCT8EsqyCu4qOiLNqSZ1pHB o++hGW6scxlq9IRx5OkyM4NMO1Uh302XWAozsPzV2E9SJUqISvF91q2S32Z6jpwK 8v38MUnXeQ== -----END CERTIFICATE-----Generated at Wed Mar 4 13:09:30 2026 by rpki-client