$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft File: AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft (raw, json) Hash identifier: t9Dfb+SkYmlBASjO2/K0kyT2Vc8A1vBWNrlsM/8RbbI= Subject key identifier: 8F:73:E4:C7:FB:85:A1:85:6E:18:8E:61:78:52:C5:1E:5F:1C:49:D0 Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Certificate serial: 51EA85240D6DF3493DF07591FC50A8ECB25F88BA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft Manifest number: 4D Signing time: Fri 13 Mar 2026 10:13:39 +0000 Manifest this update: Fri 13 Mar 2026 10:08:39 +0000 Manifest next update: Sat 14 Mar 2026 13:22:39 +0000 Files and hashes: 1: AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl (hash: dGf8/AX5jkDwjckoOrVWQuH18n5ucCenKcgJd+lr0JU=) 2: 3133392e392e39392e302f32342d3234203d3e20313336393037.roa (hash: dIhQmZptxW8DU3+OwJQTGx8lpEItTIFryKTB4UedByw=) 3: 3133392e392e39382e302f32342d3234203d3e20313336393037.roa (hash: lZaKhgGI3B+5kNzxcRuw4YEW8BfMtEAeUJ2JE/46huU=) 4: 3133392e392e39392e302f32342d3234203d3e203535393930.roa (hash: uxSQgRL3N6waphidCmEdw7Fzhu6iZ8Wq7e8/zIvLlJc=) 5: 3133392e392e39382e302f32342d3234203d3e203535393930.roa (hash: /IJlTWQZGnZ4U5xl7321ZidCdM7PTAGx3Acj6o0Y2UM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 05:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ea:85:24:0d:6d:f3:49:3d:f0:75:91:fc:50:a8:ec:b2:5f:88:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D Validity Not Before: Mar 13 10:08:39 2026 GMT Not After : Mar 14 13:22:39 2026 GMT Subject: CN=8F73E4C7FB85A1856E188E617852C51E5F1C49D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:d9:ae:b3:e6:f0:75:cc:92:67:db:b9:11: 89:73:10:c2:15:72:14:01:8e:85:b5:d0:7b:be:f8: 73:56:65:92:06:3a:80:91:b2:69:34:26:7f:23:2f: fd:84:49:78:f4:60:82:58:46:1d:3e:a2:62:53:47: c3:f0:d2:01:12:58:6d:b6:70:f0:e0:8c:39:06:f2: 9d:36:3f:d6:e4:7e:94:4b:67:41:df:0a:98:4a:16: a1:c7:b2:c6:a3:7d:4a:42:98:43:c2:40:d8:28:0f: a2:f1:66:c6:b7:c0:73:65:c7:9f:91:1c:8d:40:23: cf:24:fc:d9:1b:27:b7:37:01:35:08:bc:8e:d6:9a: 64:d3:ee:f8:c8:81:b4:d4:43:4c:7b:7e:2e:b2:e1: 1e:a4:6d:9e:97:e1:a1:24:ec:8c:56:0c:8d:71:ed: 50:33:7a:e4:a4:11:9b:f4:6f:5e:34:66:9f:fb:c5: fb:7f:6f:b9:4d:59:08:ac:bf:c5:3b:cf:ae:16:f8: c8:e0:89:43:88:09:99:ac:01:41:ae:b3:c9:58:0a: fb:a1:60:21:6b:5a:7a:a2:db:dd:6f:44:d7:cf:5f: 8c:00:59:9d:75:1d:8c:1f:7a:fd:20:63:84:62:f4: 09:06:b1:3a:43:1e:09:66:0b:fb:52:5d:93:b6:ec: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:73:E4:C7:FB:85:A1:85:6E:18:8E:61:78:52:C5:1E:5F:1C:49:D0 X509v3 Authority Key Identifier: keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:4f:89:81:91:06:5b:44:19:b9:e6:53:43:b7:8b:92:59:6f: b9:9a:ea:f3:16:a4:c5:d4:89:23:e5:05:f1:28:a9:cf:88:d0: d7:f8:da:71:42:73:01:e6:4a:6d:78:c5:3d:e7:43:a4:3f:ad: e4:07:56:0a:a9:c9:ce:89:22:69:de:0b:34:dd:b9:f1:48:de: 67:32:e5:f6:f6:bf:21:e1:c2:29:d4:be:d2:22:ea:b6:c1:48: 3f:48:71:5f:2b:69:d0:f0:3b:60:77:42:ed:a1:4f:50:03:39: c2:22:74:4c:42:51:0f:7c:ae:14:de:da:b4:3a:bb:47:52:f7: 7c:1a:37:04:98:ec:45:fe:e6:bb:a1:e8:61:77:9e:3e:07:a6: 07:da:b4:dc:f4:b8:d9:9f:f9:e4:ad:ac:98:60:0e:a8:ba:1d: ae:e4:20:43:f4:15:42:34:14:9d:1c:89:78:52:bb:06:ea:f7: 91:e9:85:2c:38:6d:ed:ec:a6:d7:e9:04:58:4c:12:0c:94:31: 7a:3f:97:3e:3c:e5:34:c8:69:60:c0:56:61:fe:aa:77:69:72: 09:7d:b9:e4:70:8c:57:b6:a4:fc:25:89:c7:7b:3a:38:d4:a4: 8c:04:63:da:f9:5e:7e:64:b3:f7:4c:ba:60:c4:cd:2e:cd:6a: 38:3c:45:64 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUeqFJA1t80k98HWR/FCo7LJfiLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5 NjFENzkzRDAeFw0yNjAzMTMxMDA4MzlaFw0yNjAzMTQxMzIyMzlaMDMxMTAvBgNV BAMTKDhGNzNFNEM3RkI4NUExODU2RTE4OEU2MTc4NTJDNTFFNUYxQzQ5RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgC9mus+bwdcySZ9u5EYlzEMIV chQBjoW10Hu++HNWZZIGOoCRsmk0Jn8jL/2ESXj0YIJYRh0+omJTR8Pw0gESWG22 cPDgjDkG8p02P9bkfpRLZ0HfCphKFqHHssajfUpCmEPCQNgoD6LxZsa3wHNlx5+R HI1AI88k/NkbJ7c3ATUIvI7WmmTT7vjIgbTUQ0x7fi6y4R6kbZ6X4aEk7IxWDI1x 7VAzeuSkEZv0b140Zp/7xft/b7lNWQisv8U7z64W+MjgiUOICZmsAUGus8lYCvuh YCFrWnqi291vRNfPX4wAWZ11HYwfev0gY4Ri9AkGsTpDHglmC/tSXZO27JwfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUj3Pkx/uFoYVuGI5heFLFHl8cSdAwHwYDVR0j BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS9BRTE0MzFDRENBM0M1 MjQ1NkIwMTQ2QzQ5RDVFRUUzMjk2MUQ3OTNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw0+JgZEGW0QZ ueZTQ7eLkllvuZrq8xakxdSJI+UF8Sipz4jQ1/jacUJzAeZKbXjFPedDpD+t5AdW CqnJzokiad4LNN258UjeZzLl9va/IeHCKdS+0iLqtsFIP0hxXytp0PA7YHdC7aFP UAM5wiJ0TEJRD3yuFN7atDq7R1L3fBo3BJjsRf7mu6HoYXeePgemB9q03PS42Z/5 5K2smGAOqLodruQgQ/QVQjQUnRyJeFK7Bur3kemFLDht7eym1+kEWEwSDJQxej+X PjzlNMhpYMBWYf6qd2lyCX255HCMV7ak/CWJx3s6ONSkjARj2vlefmSz90y6YMTN Ls1qODxFZA== -----END CERTIFICATE-----Generated at Fri Mar 13 18:57:36 2026 by rpki-client