$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft File: AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft (raw, json) Hash identifier: DtwpmeUj8T8iLPYWYROoBlRd7Uu/rSdT1vRGO8hAgzc= Subject key identifier: FD:D4:54:6D:E8:14:F4:E6:E1:D7:01:8A:BA:11:87:E4:93:60:91:B9 Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 338307163285E9C78425F6C2328BCBCC7E24E275 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft Manifest number: 89 Signing time: Mon 27 Apr 2026 03:28:40 +0000 Manifest this update: Mon 27 Apr 2026 03:23:40 +0000 Manifest next update: Tue 28 Apr 2026 06:45:40 +0000 Files and hashes: 1: AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl (hash: x1SeOMEV+fahAPlSoBGjGIN9AdUgjEzEBBlLvd11828=) 2: 3133392e392e39382e302f32342d3234203d3e20313336393037.roa (hash: lZaKhgGI3B+5kNzxcRuw4YEW8BfMtEAeUJ2JE/46huU=) 3: 3133392e392e39392e302f32342d3234203d3e20313336393037.roa (hash: dIhQmZptxW8DU3+OwJQTGx8lpEItTIFryKTB4UedByw=) 4: 3133392e392e39392e302f32342d3234203d3e203535393930.roa (hash: uxSQgRL3N6waphidCmEdw7Fzhu6iZ8Wq7e8/zIvLlJc=) 5: 3133392e392e39382e302f32342d3234203d3e203535393930.roa (hash: /IJlTWQZGnZ4U5xl7321ZidCdM7PTAGx3Acj6o0Y2UM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:83:07:16:32:85:e9:c7:84:25:f6:c2:32:8b:cb:cc:7e:24:e2:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Apr 27 03:23:40 2026 GMT Not After : Apr 28 06:45:40 2026 GMT Subject: CN=FDD4546DE814F4E6E1D7018ABA1187E4936091B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:4d:28:e7:ee:a1:db:f3:52:f3:95:f1:5f: 9d:af:85:e2:63:37:44:da:23:c6:8d:6a:4f:db:52: 95:78:a0:eb:dc:23:61:1f:c3:15:27:ab:22:09:54: 7d:dc:0e:99:a0:ff:48:e9:03:b7:74:34:ea:c0:de: d8:eb:ef:fc:29:64:91:36:45:8d:6b:de:b0:49:dd: b4:4c:22:91:fe:b9:61:e8:c6:73:21:bf:09:f5:c4: 43:f3:b3:28:9f:2b:ca:0c:a8:29:bd:ee:3c:62:57: 7c:f6:2b:75:8b:93:bb:0a:4a:2a:71:44:76:9a:d8: fc:e2:8a:62:58:bd:e1:9e:ff:f7:89:c0:fa:a7:df: 65:7a:46:49:4c:f7:18:fa:02:51:0d:e8:f4:35:7a: 33:16:48:26:6b:8c:84:f7:bf:78:92:42:c0:1e:cd: 99:95:c6:fd:7f:26:ac:b0:31:e5:93:6a:a9:ec:3c: b3:e2:59:e2:5c:57:39:7b:96:38:93:76:5d:19:ef: 7e:1b:fa:c0:28:91:34:86:61:d2:de:58:cf:78:70: 5b:b4:58:8c:6d:af:f1:47:c4:3f:4f:e2:99:72:a7: 83:82:5c:5b:2d:16:7f:fc:d9:ca:fc:d6:bd:3f:bc: c6:1a:b5:63:1b:41:56:8f:2a:b2:d6:55:06:e9:b7: 4d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D4:54:6D:E8:14:F4:E6:E1:D7:01:8A:BA:11:87:E4:93:60:91:B9 X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:05:e4:77:91:48:3c:5b:ec:e2:63:45:bc:6a:39:d1:68:70: 92:5a:e7:44:b1:02:32:7b:8d:12:64:26:74:a6:c5:a8:b7:89: 9d:a6:e8:3c:19:f2:a1:0f:fd:ed:b1:58:a9:37:2e:21:96:46: 8b:0f:12:e2:33:0f:de:ea:4d:c3:e8:d3:11:90:2e:fc:07:24: 39:87:de:8c:c2:cb:6c:13:9a:b4:f8:fc:e0:94:c6:c3:35:c7: 78:cd:ac:c7:75:bc:20:21:7e:8a:f6:cf:0a:6c:30:3c:5b:8f: 6d:0c:4b:5f:53:3f:a6:3a:14:df:4c:0a:18:72:ba:66:8a:a8: f0:65:7a:04:b0:36:2c:72:4e:aa:15:e2:63:ac:0c:19:49:92: 2a:c8:76:5b:80:ec:6b:40:b6:53:ef:56:ae:e5:40:60:0a:b5: e5:c4:46:63:41:d7:14:d5:ef:92:37:02:8b:d0:b6:b6:78:af: d4:0a:f1:f2:5f:ff:cb:f8:be:ba:ff:08:4e:81:b2:8d:68:52: 4c:b1:b9:6d:78:57:ca:36:e6:76:e4:6e:6d:22:61:5a:91:f4: 52:21:c9:b8:a2:47:a1:51:4d:27:89:13:8c:83:ce:ae:f1:f3: 6a:b5:d3:c7:ee:fd:62:32:e5:fa:fb:f2:60:ef:3e:6a:79:78: 53:93:be:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM4MHFjKF6ceEJfbCMovLzH4k4nUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjA0MjcwMzIzNDBaFw0yNjA0MjgwNjQ1NDBaMDMxMTAvBgNV BAMTKEZERDQ1NDZERTgxNEY0RTZFMUQ3MDE4QUJBMTE4N0U0OTM2MDkxQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8900o5+6h2/NS85XxX52vheJj N0TaI8aNak/bUpV4oOvcI2EfwxUnqyIJVH3cDpmg/0jpA7d0NOrA3tjr7/wpZJE2 RY1r3rBJ3bRMIpH+uWHoxnMhvwn1xEPzsyifK8oMqCm97jxiV3z2K3WLk7sKSipx RHaa2PziimJYveGe//eJwPqn32V6RklM9xj6AlEN6PQ1ejMWSCZrjIT3v3iSQsAe zZmVxv1/JqywMeWTaqnsPLPiWeJcVzl7ljiTdl0Z734b+sAokTSGYdLeWM94cFu0 WIxtr/FHxD9P4plyp4OCXFstFn/82cr81r0/vMYatWMbQVaPKrLWVQbpt03RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/dRUbegU9Obh1wGKuhGH5JNgkbkwHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS9BRTE0MzFDRENBM0M1 MjQ1NkIwMTQ2QzQ5RDVFRUUzMjk2MUQ3OTNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwXkd5FIPFvs 4mNFvGo50WhwklrnRLECMnuNEmQmdKbFqLeJnaboPBnyoQ/97bFYqTcuIZZGiw8S 4jMP3upNw+jTEZAu/AckOYfejMLLbBOatPj84JTGwzXHeM2sx3W8ICF+ivbPCmww PFuPbQxLX1M/pjoU30wKGHK6Zoqo8GV6BLA2LHJOqhXiY6wMGUmSKsh2W4Dsa0C2 U+9WruVAYAq15cRGY0HXFNXvkjcCi9C2tniv1Arx8l//y/i+uv8IToGyjWhSTLG5 bXhXyjbmduRubSJhWpH0UiHJuKJHoVFNJ4kTjIPOrvHzarXTx+79YjLl+vvyYO8+ anl4U5O+lw== -----END CERTIFICATE-----Generated at Mon Apr 27 23:45:10 2026 by rpki-client