$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft File: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft (raw, json) Hash identifier: ABlk4eV6crjK5nkx7/fKGm+IoNmzbQdjCP2KRPuiydM= Subject key identifier: C4:8C:9F:BF:58:E8:43:3A:86:F2:1B:1C:93:94:F3:10:CB:CB:F7:6C Authority key identifier: AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 Certificate issuer: /CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Certificate serial: 5CEDAC23D936D17226A92E48B1DDBACAE53CF288 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft Manifest number: 71 Signing time: Sat 18 Apr 2026 21:39:58 +0000 Manifest this update: Sat 18 Apr 2026 21:34:58 +0000 Manifest next update: Sun 19 Apr 2026 21:46:58 +0000 Files and hashes: 1: AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl (hash: Ua8pJ58clK14tgs9YYWWjCkbg3ZumTQrJSIO+XLjRkE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 10:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ed:ac:23:d9:36:d1:72:26:a9:2e:48:b1:dd:ba:ca:e5:3c:f2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6 Validity Not Before: Apr 18 21:34:58 2026 GMT Not After : Apr 19 21:46:58 2026 GMT Subject: CN=C48C9FBF58E8433A86F21B1C9394F310CBCBF76C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ff:7a:a5:e2:e9:08:a3:3e:73:4a:e8:b1:6a: f7:02:7d:3f:b1:0f:7d:3b:c4:68:51:84:c4:ee:d4: 3a:13:72:d5:67:99:ac:31:2a:2e:28:46:52:fb:9a: 51:ad:ac:c5:a2:ab:13:e2:d5:c9:0e:0a:d6:c2:3f: 19:10:97:82:ca:19:0e:f7:bc:02:57:a4:69:36:53: 9c:71:10:5c:7d:c1:59:21:a4:3b:07:c3:f1:77:80: c2:3b:a2:95:20:63:1d:ae:f6:31:4a:db:20:08:40: 38:cb:ab:ea:92:22:0c:50:6a:dc:c1:3d:ca:1c:0c: b0:46:e6:95:ba:3e:44:74:1e:ff:dc:cb:1b:75:83: 7a:f7:d8:12:4d:4f:51:0e:b9:8c:8a:30:fc:7d:00: 8f:cc:fa:19:d4:ca:86:df:03:62:34:95:4f:3d:8d: 2d:84:5c:e3:77:83:bb:9d:cd:55:f2:68:d4:8f:2a: ca:11:33:a3:09:a1:58:9b:48:10:07:9e:e4:cd:b8: 28:4a:61:04:5e:f5:c3:08:c3:69:dc:85:48:d1:ed: 11:a0:8a:db:e7:52:75:36:d3:91:ef:34:1a:d6:28: 7d:c0:5f:c6:c0:e3:96:dd:e1:83:17:2d:99:a4:e5: bc:f5:0a:61:61:c9:46:96:5e:66:ef:08:f6:04:2f: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8C:9F:BF:58:E8:43:3A:86:F2:1B:1C:93:94:F3:10:CB:CB:F7:6C X509v3 Authority Key Identifier: keyid:AE:E1:99:1E:66:9A:6B:0C:97:E8:A1:DC:9C:96:57:56:3C:1F:73:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/1/AEE1991E669A6B0C97E8A1DC9C9657563C1F73C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:58:a5:59:dc:48:a2:eb:bc:37:1d:38:ba:af:2a:60:27:63: e6:52:a7:6d:56:41:b7:30:c2:a6:99:12:66:bc:36:99:27:b7: aa:57:f3:b1:6d:4f:8e:ad:41:bd:fd:f5:95:54:6e:7f:48:85: aa:ec:75:4f:bb:6a:7e:d0:d5:7f:f0:83:b6:4d:5c:74:33:47: ba:bf:8b:d7:67:29:cf:f1:94:54:e2:fb:f6:09:c6:19:2e:38: ec:a3:86:d1:f0:9c:04:d4:7d:8d:03:c1:25:18:12:d8:e8:39: 9e:7c:c0:65:f1:0c:59:e9:e1:c6:70:17:37:f6:78:94:33:8a: ab:da:eb:07:83:b0:15:2f:00:88:8e:17:5b:d4:d5:60:5e:d0: 61:6c:46:f6:68:b6:dd:02:18:5f:ef:af:08:43:be:99:0f:c9: 0f:ac:e0:3a:a6:47:d4:83:fe:1c:2f:75:68:43:a4:7a:b8:45: 6a:e5:c3:14:f9:79:b3:10:80:97:45:b4:78:4e:0f:e9:65:d4: 74:7d:65:3f:e2:57:90:a5:ba:c2:66:a7:06:bc:2d:55:d1:54: 32:e9:2e:24:84:43:a9:e4:2e:37:3f:7d:22:ec:f5:3d:09:a2: f7:bd:f7:6a:8c:3b:5d:2d:04:1d:62:95:f2:49:11:e6:c1:ca: 7a:da:27:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXO2sI9k20XImqS5Isd26yuU88ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYz QzFGNzNDNjAeFw0yNjA0MTgyMTM0NThaFw0yNjA0MTkyMTQ2NThaMDMxMTAvBgNV BAMTKEM0OEM5RkJGNThFODQzM0E4NkYyMUIxQzkzOTRGMzEwQ0JDQkY3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh/3ql4ukIoz5zSuixavcCfT+x D307xGhRhMTu1DoTctVnmawxKi4oRlL7mlGtrMWiqxPi1ckOCtbCPxkQl4LKGQ73 vAJXpGk2U5xxEFx9wVkhpDsHw/F3gMI7opUgYx2u9jFK2yAIQDjLq+qSIgxQatzB PcocDLBG5pW6PkR0Hv/cyxt1g3r32BJNT1EOuYyKMPx9AI/M+hnUyobfA2I0lU89 jS2EXON3g7udzVXyaNSPKsoRM6MJoVibSBAHnuTNuChKYQRe9cMIw2nchUjR7RGg itvnUnU205HvNBrWKH3AX8bA45bd4YMXLZmk5bz1CmFhyUaWXmbvCPYELybtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxIyfv1joQzqG8hsck5TzEMvL92wwHwYDVR0j BBgwFoAUruGZHmaaawyX6KHcnJZXVjwfc8YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODYxNTY4Mi8xL0FFRTE5OTFFNjY5QTZCMEM5N0U4QTFEQzlDOTY1 NzU2M0MxRjczQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUVFMTk5MUU2NjlBNkIwQzk3RThBMURDOUM5NjU3NTYzQzFGNzNDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg2MTU2ODIvMS9BRUUxOTkxRTY2OUE2 QjBDOTdFOEExREM5Qzk2NTc1NjNDMUY3M0M2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1ilWdxIouu8 Nx04uq8qYCdj5lKnbVZBtzDCppkSZrw2mSe3qlfzsW1Pjq1Bvf31lVRuf0iFqux1 T7tqftDVf/CDtk1cdDNHur+L12cpz/GUVOL79gnGGS447KOG0fCcBNR9jQPBJRgS 2Og5nnzAZfEMWenhxnAXN/Z4lDOKq9rrB4OwFS8AiI4XW9TVYF7QYWxG9mi23QIY X++vCEO+mQ/JD6zgOqZH1IP+HC91aEOkerhFauXDFPl5sxCAl0W0eE4P6WXUdH1l P+JXkKW6wmanBrwtVdFUMukuJIRDqeQuNz99Iuz1PQmi9733aow7XS0EHWKV8kkR 5sHKetonWw== -----END CERTIFICATE-----Generated at Sun Apr 19 01:16:03 2026 by rpki-client