$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft File: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft (raw, json) Hash identifier: jx3hXnwzm6deIGqq/LqgStJxHsumr1vmlwf6EggRwzw= Subject key identifier: E9:EB:24:15:8A:14:C2:9F:CD:DF:24:FC:B9:92:95:F8:11:78:B3:AA Authority key identifier: AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 Certificate issuer: /CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Certificate serial: 4296813A3E7496F37B21B61B340DDB470113F78D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft Manifest number: AA Signing time: Tue 14 Jul 2026 10:41:05 +0000 Manifest this update: Tue 14 Jul 2026 10:36:05 +0000 Manifest next update: Wed 15 Jul 2026 14:11:05 +0000 Files and hashes: 1: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl (hash: bBmcJkEUd5Kwu7pCc5UCKVFdQrsZXOuxn5mASnVlOv4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 14:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:96:81:3a:3e:74:96:f3:7b:21:b6:1b:34:0d:db:47:01:13:f7:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Validity Not Before: Jul 14 10:36:05 2026 GMT Not After : Jul 15 14:11:05 2026 GMT Subject: CN=E9EB24158A14C29FCDDF24FCB99295F81178B3AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d7:a9:46:0e:53:f4:e1:36:eb:6e:d5:b1:d6: c7:01:ae:1e:cb:0a:73:36:76:9c:22:5b:85:2f:9a: 01:15:ba:1e:98:73:7c:f0:0f:f2:f8:20:32:19:81: c7:5e:41:fd:f8:a1:b6:f1:e2:e1:16:ba:53:14:65: ce:a7:2d:a9:00:d0:19:a9:01:98:70:ec:1d:fd:6b: 27:d8:e7:9a:dc:0f:83:b6:5d:24:e6:27:e4:ae:aa: 11:31:c5:ea:13:a4:68:ec:c8:bf:bf:12:b9:25:77: 07:03:3b:fc:7f:1a:35:2f:cf:ed:b8:85:24:84:6a: ba:33:b0:35:75:4b:16:46:c0:0f:63:27:b1:92:c4: 6b:ae:f3:23:70:a6:42:93:54:1d:d7:54:d4:19:30: d1:04:01:09:bf:48:43:17:21:0a:2d:b2:07:e3:82: a2:3d:fb:ab:e1:59:a8:fc:da:7c:87:cc:cb:5a:21: ad:ed:53:25:89:76:18:64:fa:85:61:43:f2:6f:ce: 4a:98:e6:e1:60:27:1c:6a:7d:91:84:b3:7b:97:5c: ae:31:f2:de:48:9a:ad:f6:60:26:8e:a3:fe:22:fd: 86:28:19:d9:62:8f:b8:c5:9e:cb:a6:77:9e:87:7e: cf:ad:7f:17:86:5e:5f:0b:a9:81:a9:19:d7:af:e4: d5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EB:24:15:8A:14:C2:9F:CD:DF:24:FC:B9:92:95:F8:11:78:B3:AA X509v3 Authority Key Identifier: keyid:AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:21:7e:d7:f3:7c:e8:eb:2a:4a:11:ae:96:2f:77:fe:18:26: 06:0b:31:1c:01:9a:45:8e:de:d8:19:2b:3a:e7:a3:4f:9c:6e: 13:d6:d6:c2:9e:fa:ae:42:9e:65:3a:6f:4d:94:5f:f4:89:ae: 27:a0:4f:ad:45:ca:45:7a:d3:94:48:25:c6:4e:18:01:12:72: 29:1a:47:3e:2a:9e:b0:39:9d:55:93:86:a7:83:7d:17:33:f5: 24:cb:68:da:24:91:a8:81:09:2c:c7:c6:8d:e0:cd:ba:55:16: f1:7c:2e:62:da:ca:e4:f3:f8:dd:2d:97:53:2a:e7:ad:62:77: c8:01:a2:f1:a1:51:f6:64:21:47:e4:32:ae:8d:14:06:9f:c9: 91:84:8f:a7:d8:ce:61:15:ca:7c:1a:9c:ba:86:4c:67:b2:4d: 1a:bf:4e:ff:d0:36:3a:48:65:86:b5:cb:8a:7e:91:17:d8:01: e5:f1:59:5c:b3:2c:36:9b:ee:ba:6c:79:99:85:a9:80:57:60: 95:00:ad:27:40:4a:20:60:3b:40:a2:13:7d:32:ab:dc:55:05: b0:d0:71:c5:f5:2d:cc:15:3d:11:34:51:a7:55:de:2c:40:68: 4e:79:99:42:60:0d:ee:b8:e8:ca:bd:c1:7d:c7:54:58:86:af: 2b:3e:c7:3c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQpaBOj50lvN7IbYbNA3bRwET940wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5 RjBEREM5MTAeFw0yNjA3MTQxMDM2MDVaFw0yNjA3MTUxNDExMDVaMDMxMTAvBgNV BAMTKEU5RUIyNDE1OEExNEMyOUZDRERGMjRGQ0I5OTI5NUY4MTE3OEIzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf16lGDlP04TbrbtWx1scBrh7L CnM2dpwiW4UvmgEVuh6Yc3zwD/L4IDIZgcdeQf34obbx4uEWulMUZc6nLakA0Bmp AZhw7B39ayfY55rcD4O2XSTmJ+SuqhExxeoTpGjsyL+/ErkldwcDO/x/GjUvz+24 hSSEarozsDV1SxZGwA9jJ7GSxGuu8yNwpkKTVB3XVNQZMNEEAQm/SEMXIQotsgfj gqI9+6vhWaj82nyHzMtaIa3tUyWJdhhk+oVhQ/JvzkqY5uFgJxxqfZGEs3uXXK4x 8t5Imq32YCaOo/4i/YYoGdlij7jFnsumd56Hfs+tfxeGXl8LqYGpGdev5NX9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6eskFYoUwp/N3yT8uZKV+BF4s6owHwYDVR0j BBgwFoAUrnHfcALdrGnSZolRr4Wfu58N3JEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MzU2NjEyNDUyOTg3Njk5NS8wL0FFNzFERjcwMDJEREFDNjlEMjY2ODk1MUFGODU5 RkJCOUYwRERDOTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5RjBEREM5MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODM1NjYxMjQ1Mjk4NzY5OTUvMC9BRTcxREY3MDAyRERB QzY5RDI2Njg5NTFBRjg1OUZCQjlGMEREQzkxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiF+1/N86Osq ShGuli93/hgmBgsxHAGaRY7e2BkrOuejT5xuE9bWwp76rkKeZTpvTZRf9ImuJ6BP rUXKRXrTlEglxk4YARJyKRpHPiqesDmdVZOGp4N9FzP1JMto2iSRqIEJLMfGjeDN ulUW8XwuYtrK5PP43S2XUyrnrWJ3yAGi8aFR9mQhR+Qyro0UBp/JkYSPp9jOYRXK fBqcuoZMZ7JNGr9O/9A2OkhlhrXLin6RF9gB5fFZXLMsNpvuumx5mYWpgFdglQCt J0BKIGA7QKITfTKr3FUFsNBxxfUtzBU9ETRRp1XeLEBoTnmZQmAN7rjoyr3BfcdU WIavKz7HPA== -----END CERTIFICATE-----Generated at Tue Jul 14 19:58:17 2026 by rpki-client