$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft File: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft (raw, json) Hash identifier: eY5XTiaSVc8GXJjf26E1eD3SfnAzloVYajgzl6Frmmg= Subject key identifier: 9F:74:36:0C:12:4F:10:10:A8:03:5E:D8:AC:C7:05:E6:73:72:39:88 Authority key identifier: AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 Certificate issuer: /CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Certificate serial: 380A120620EAB3F55C8AAE088F3F6395FD6757F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft Manifest number: 6D Signing time: Fri 29 May 2026 12:27:49 +0000 Manifest this update: Fri 29 May 2026 12:22:49 +0000 Manifest next update: Sat 30 May 2026 13:36:49 +0000 Files and hashes: 1: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl (hash: 0PkJmGKY9ZsW0tqWQ/EAwhkayuHhNoUEKh9FVCZz/dk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:0a:12:06:20:ea:b3:f5:5c:8a:ae:08:8f:3f:63:95:fd:67:57:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Validity Not Before: May 29 12:22:49 2026 GMT Not After : May 30 13:36:49 2026 GMT Subject: CN=9F74360C124F1010A8035ED8ACC705E673723988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:10:2b:8e:36:72:93:89:ee:e5:84:ad:bc: 8a:88:cd:52:f8:e0:7a:9b:77:61:7b:08:a0:f0:56: 1f:6b:82:f1:6c:80:f4:c0:41:7a:5a:f9:10:f5:36: 19:40:e3:95:34:ab:4a:35:d0:8a:75:bc:a0:c8:4f: 1a:e8:96:2b:a5:1b:ba:a6:2a:6e:18:76:29:eb:fd: 08:c1:39:6a:c8:bb:6f:3f:a5:9e:6c:a4:64:1e:99: 88:83:08:bc:e6:41:b6:ce:34:7b:a1:2f:1b:4a:b6: 51:4a:d9:d8:9f:3a:e7:00:d8:bc:76:a2:40:99:00: 98:12:aa:86:af:c5:5d:5a:5d:25:89:36:18:b9:cc: cc:51:e5:08:f5:3f:59:88:11:e3:86:f3:34:ba:c8: c5:4e:c9:f8:5c:1a:c5:0f:b7:d7:a4:75:9d:da:de: ad:f5:ec:79:b0:fe:ab:1f:38:88:31:f1:aa:12:f7: b2:76:82:35:d9:54:ed:36:df:be:ac:9d:2d:60:87: 73:db:d0:20:e9:b9:5e:07:6f:ec:86:6e:97:b9:7d: 28:55:b7:13:b8:75:88:26:12:5f:f5:3b:99:20:05: ee:59:e4:e7:ca:ac:b0:74:e1:1f:83:6c:53:20:39: 8a:b8:9c:bf:35:0e:ef:7a:8f:d8:87:14:80:09:6e: 4a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:74:36:0C:12:4F:10:10:A8:03:5E:D8:AC:C7:05:E6:73:72:39:88 X509v3 Authority Key Identifier: keyid:AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:59:17:ec:2d:1b:c7:63:08:25:ad:3e:38:8f:0c:f1:15:cc: 2c:13:e7:7a:77:ce:f6:63:02:61:4b:2b:cd:28:e7:8b:7c:23: 69:e5:9e:c8:0d:98:55:24:54:f4:88:1c:b5:2b:4f:31:ac:9d: 46:72:a3:63:2f:7b:d9:cd:f4:8e:8e:11:63:dc:92:0f:fb:f6: ff:8a:c7:da:01:da:bf:6f:38:66:63:09:c6:b8:b7:ac:5a:b6: e6:f3:1e:b4:7e:15:70:ee:31:02:da:db:db:f8:d8:a9:4b:97: a3:6d:18:b1:74:2e:f5:a7:fc:cb:b6:5a:91:6d:1c:62:2b:a7: ba:12:fa:a3:54:72:ec:33:55:92:b8:14:97:fc:ab:7e:1b:19: ae:ba:fc:b6:f3:58:cb:59:99:e7:f5:c7:27:9a:55:aa:67:10: 68:47:d9:13:76:ae:85:4a:c3:2c:6c:a7:b2:a0:fd:b6:b8:05: 9d:3a:da:52:ab:d8:93:2e:ff:0f:61:8d:27:1d:4d:f7:b6:3c: c9:89:19:02:83:63:07:83:13:57:99:62:0a:8a:bf:91:a0:f8: 87:13:3f:b2:3f:62:5a:c6:be:79:73:5a:6e:b2:20:6d:6e:37: 7c:08:fa:a6:98:3b:57:58:79:34:a2:02:5b:8d:0e:bb:42:3b: d8:8c:92:67 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOAoSBiDqs/Vciq4Ijz9jlf1nV/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5 RjBEREM5MTAeFw0yNjA1MjkxMjIyNDlaFw0yNjA1MzAxMzM2NDlaMDMxMTAvBgNV BAMTKDlGNzQzNjBDMTI0RjEwMTBBODAzNUVEOEFDQzcwNUU2NzM3MjM5ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALRArjjZyk4nu5YStvIqIzVL4 4Hqbd2F7CKDwVh9rgvFsgPTAQXpa+RD1NhlA45U0q0o10Ip1vKDITxroliulG7qm Km4Ydinr/QjBOWrIu28/pZ5spGQemYiDCLzmQbbONHuhLxtKtlFK2difOucA2Lx2 okCZAJgSqoavxV1aXSWJNhi5zMxR5Qj1P1mIEeOG8zS6yMVOyfhcGsUPt9ekdZ3a 3q317Hmw/qsfOIgx8aoS97J2gjXZVO02376snS1gh3Pb0CDpuV4Hb+yGbpe5fShV txO4dYgmEl/1O5kgBe5Z5OfKrLB04R+DbFMgOYq4nL81Du96j9iHFIAJbkqfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUn3Q2DBJPEBCoA17YrMcF5nNyOYgwHwYDVR0j BBgwFoAUrnHfcALdrGnSZolRr4Wfu58N3JEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MzU2NjEyNDUyOTg3Njk5NS8wL0FFNzFERjcwMDJEREFDNjlEMjY2ODk1MUFGODU5 RkJCOUYwRERDOTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5RjBEREM5MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODM1NjYxMjQ1Mjk4NzY5OTUvMC9BRTcxREY3MDAyRERB QzY5RDI2Njg5NTFBRjg1OUZCQjlGMEREQzkxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFkX7C0bx2MI Ja0+OI8M8RXMLBPnenfO9mMCYUsrzSjni3wjaeWeyA2YVSRU9IgctStPMaydRnKj Yy972c30jo4RY9ySD/v2/4rH2gHav284ZmMJxri3rFq25vMetH4VcO4xAtrb2/jY qUuXo20YsXQu9af8y7ZakW0cYiunuhL6o1Ry7DNVkrgUl/yrfhsZrrr8tvNYy1mZ 5/XHJ5pVqmcQaEfZE3auhUrDLGynsqD9trgFnTraUqvYky7/D2GNJx1N97Y8yYkZ AoNjB4MTV5liCoq/kaD4hxM/sj9iWsa+eXNabrIgbW43fAj6ppg7V1h5NKICW40O u0I72IySZw== -----END CERTIFICATE-----Generated at Fri May 29 22:05:08 2026 by rpki-client