$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft File: AE296545389D949B88D36F0642F93E9C8AD9E79B.mft (raw, json) Hash identifier: qhUYWJSPfpA9ZQ/3efIOWRGWsCmN0tHWmHYWGXyOZ5s= Subject key identifier: 34:50:BB:C7:28:B4:18:1B:7E:9C:51:6E:A6:5C:50:5D:3E:3F:C0:B1 Authority key identifier: AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B Certificate issuer: /CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Certificate serial: 093B0E974312116DC3738C9059978EE60E4F505B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft Manifest number: 78 Signing time: Sat 18 Apr 2026 14:14:55 +0000 Manifest this update: Sat 18 Apr 2026 14:09:55 +0000 Manifest next update: Sun 19 Apr 2026 18:05:55 +0000 Files and hashes: 1: AE296545389D949B88D36F0642F93E9C8AD9E79B.crl (hash: mboAXpWr3G+OJpLUjdts0rFe5eakLJYcMfHROrTY0ew=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3b:0e:97:43:12:11:6d:c3:73:8c:90:59:97:8e:e6:0e:4f:50:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE296545389D949B88D36F0642F93E9C8AD9E79B Validity Not Before: Apr 18 14:09:55 2026 GMT Not After : Apr 19 18:05:55 2026 GMT Subject: CN=3450BBC728B4181B7E9C516EA65C505D3E3FC0B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:ba:70:bd:ee:03:24:4c:dc:e6:6d:fb:42: 9c:34:26:48:93:ea:ef:ce:17:17:50:72:c8:18:0f: 97:fc:49:18:67:1c:fe:79:7b:d5:99:0e:14:15:b7: 37:05:66:5e:f4:ed:d3:22:20:d9:af:03:9d:46:85: 60:6d:57:cf:fe:64:01:15:80:85:10:4f:26:1f:fe: 16:09:2c:fd:18:ad:87:18:82:d5:7a:c1:b6:b7:0f: 7a:b4:0a:b7:c7:7b:bd:63:58:2d:6e:ba:6a:06:76: 08:29:94:42:04:59:0b:ae:2d:d7:af:35:a9:47:fb: e4:9d:57:57:b4:2b:2c:23:b7:db:89:b8:40:0b:b6: 66:4c:97:2e:25:37:e9:e9:57:aa:df:b0:56:a8:b1: a1:4b:4a:dc:ef:e8:f6:ac:b2:ce:fe:c0:a0:d9:a5: 27:2c:04:0a:c7:84:0a:44:2e:05:8b:47:c1:16:4f: ed:d6:02:05:13:25:b1:e1:0a:15:64:39:03:6d:86: d7:40:f7:d7:3a:3b:40:4b:e1:4b:d3:f5:45:9f:ba: 1e:60:96:93:de:fd:82:2a:a2:62:0d:83:ac:c7:e6: 07:6f:0a:37:fe:88:f3:27:cb:6d:43:5f:eb:bb:1a: 8e:62:ab:f6:6d:60:b4:92:8b:b9:3e:70:48:16:d7: e9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:50:BB:C7:28:B4:18:1B:7E:9C:51:6E:A6:5C:50:5D:3E:3F:C0:B1 X509v3 Authority Key Identifier: keyid:AE:29:65:45:38:9D:94:9B:88:D3:6F:06:42:F9:3E:9C:8A:D9:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE296545389D949B88D36F0642F93E9C8AD9E79B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948402691/1/AE296545389D949B88D36F0642F93E9C8AD9E79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:60:58:ae:e7:da:8a:d8:37:24:29:34:7c:38:75:b7:c3:86: ce:aa:fb:0f:f5:9f:17:55:f0:bc:7c:cd:e3:45:c9:87:b7:62: a8:19:9d:ac:26:1b:fa:3e:74:34:3e:c9:26:f0:96:20:fd:0f: 8e:9d:7b:87:0c:8b:b3:41:ee:4d:57:fc:d7:c9:e3:07:31:ca: 3a:8a:4b:63:bf:e5:46:3a:73:48:81:0f:4f:65:9a:fa:20:ae: f2:e1:09:0f:9e:55:91:68:cc:0c:0e:4c:ae:8c:dc:df:92:69: 9d:51:8b:7c:c1:60:83:88:02:b4:8f:8e:ca:90:12:57:bb:86: ee:89:84:c9:6c:cd:cf:5d:5e:34:94:4d:c0:02:31:bd:11:cb: 73:38:80:96:0e:61:14:78:ed:ff:de:cd:a5:d7:2c:5e:bc:6e: 08:03:aa:4d:08:55:ff:53:7a:4b:3c:d9:30:b8:bc:fb:38:db: fd:07:43:26:d8:0c:6b:16:79:e5:d1:75:ab:c3:45:6f:04:f1: b8:56:c6:5e:fa:00:65:09:48:72:18:8c:ea:1e:1d:f3:1f:c6: 4f:a7:e4:ca:f6:10:f5:80:af:0e:67:97:3b:6f:28:f8:ac:3e: 37:60:ea:c6:f9:3c:ae:36:19:db:d1:3c:f9:8b:76:da:0d:10: 2c:f4:e3:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCTsOl0MSEW3Dc4yQWZeO5g5PUFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4 QUQ5RTc5QjAeFw0yNjA0MTgxNDA5NTVaFw0yNjA0MTkxODA1NTVaMDMxMTAvBgNV BAMTKDM0NTBCQkM3MjhCNDE4MUI3RTlDNTE2RUE2NUM1MDVEM0UzRkMwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIvbpwve4DJEzc5m37Qpw0JkiT 6u/OFxdQcsgYD5f8SRhnHP55e9WZDhQVtzcFZl707dMiINmvA51GhWBtV8/+ZAEV gIUQTyYf/hYJLP0YrYcYgtV6wba3D3q0CrfHe71jWC1uumoGdggplEIEWQuuLdev NalH++SdV1e0Kywjt9uJuEALtmZMly4lN+npV6rfsFaosaFLStzv6Passs7+wKDZ pScsBArHhApELgWLR8EWT+3WAgUTJbHhChVkOQNthtdA99c6O0BL4UvT9UWfuh5g lpPe/YIqomINg6zH5gdvCjf+iPMny21DX+u7Go5iq/ZtYLSSi7k+cEgW1+mZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNFC7xyi0GBt+nFFuplxQXT4/wLEwHwYDVR0j BBgwFoAUrillRTidlJuI028GQvk+nIrZ55swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQwMjY5MS8xL0FFMjk2NTQ1Mzg5RDk0OUI4OEQzNkYwNjQyRjkz RTlDOEFEOUU3OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUyOTY1NDUzODlEOTQ5Qjg4RDM2RjA2NDJGOTNFOUM4QUQ5RTc5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0MDI2OTEvMS9BRTI5NjU0NTM4OUQ5 NDlCODhEMzZGMDY0MkY5M0U5QzhBRDlFNzlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv2BYrufaitg3 JCk0fDh1t8OGzqr7D/WfF1XwvHzN40XJh7diqBmdrCYb+j50ND7JJvCWIP0Pjp17 hwyLs0HuTVf818njBzHKOopLY7/lRjpzSIEPT2Wa+iCu8uEJD55VkWjMDA5Mrozc 35JpnVGLfMFgg4gCtI+OypASV7uG7omEyWzNz11eNJRNwAIxvRHLcziAlg5hFHjt /97NpdcsXrxuCAOqTQhV/1N6SzzZMLi8+zjb/QdDJtgMaxZ55dF1q8NFbwTxuFbG XvoAZQlIchiM6h4d8x/GT6fkyvYQ9YCvDmeXO28o+Kw+N2Dqxvk8rjYZ29E8+Yt2 2g0QLPTjJQ== -----END CERTIFICATE-----Generated at Sun Apr 19 01:16:50 2026 by rpki-client