$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft File: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft (raw, json) Hash identifier: 5HmpYZycggMDVqMR17eD+2q3mSkS46b8V05l0TUAqD4= Subject key identifier: 0B:D9:FF:A8:D0:CE:D6:6E:F2:60:57:05:EF:E3:09:1F:DC:0A:03:65 Authority key identifier: AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 Certificate issuer: /CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Certificate serial: 0AFAD169E0847FBA87CA8540E57747DF024535A5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft Manifest number: E7 Signing time: Fri 28 Aug 2026 09:33:40 +0000 Manifest this update: Fri 28 Aug 2026 09:28:40 +0000 Manifest next update: Mon 31 Aug 2026 20:10:40 +0000 Files and hashes: 1: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl (hash: eeCk6R14drstA2IHC9c1yw0ZvDf4B2sMKN1wXqJtMrI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:fa:d1:69:e0:84:7f:ba:87:ca:85:40:e5:77:47:df:02:45:35:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Validity Not Before: Aug 28 09:28:40 2026 GMT Not After : Aug 31 20:10:40 2026 GMT Subject: CN=0BD9FFA8D0CED66EF2605705EFE3091FDC0A0365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:10:a7:cb:77:b8:bc:0f:c8:21:7e:c9:45:9c: dd:a2:50:fe:e8:15:b4:3b:b5:69:34:74:5a:59:af: 0e:ef:b9:49:80:21:2c:59:76:c7:69:ab:5d:3e:c3: b6:a7:c3:9b:95:1c:7b:55:64:e0:6c:e4:e1:9d:bd: ac:c6:24:bb:64:d5:c4:4d:71:d8:4c:6a:d0:b7:3b: 47:84:4c:30:09:49:c5:32:a6:8b:b9:46:33:b8:aa: db:56:bb:d3:76:f1:be:9d:da:97:76:f9:cc:40:6e: b2:f2:ba:13:cf:e5:18:fc:50:e4:04:65:5b:51:28: 85:24:5e:86:9f:7c:43:cf:8d:ac:b3:94:05:db:53: 2e:50:27:d9:52:fa:bc:2a:db:9a:55:de:64:c4:77: dc:4e:be:5d:58:fc:62:58:5f:a1:a7:c9:ec:bd:2e: cf:a4:41:46:b6:84:ae:d8:ca:13:64:d5:c4:15:7f: ac:71:d9:66:85:52:e6:ab:d1:fb:86:4e:49:7b:1f: 80:eb:d4:4b:70:0a:71:48:ff:5e:f3:5b:12:a9:48: ee:0e:c7:91:3d:1e:59:57:e6:23:fa:ed:c1:b7:fb: 4e:40:67:69:e2:6a:48:30:64:a6:5e:89:13:bf:ff: 16:09:bf:14:1f:24:af:8b:f1:97:b0:ce:8f:d6:d1: 0d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D9:FF:A8:D0:CE:D6:6E:F2:60:57:05:EF:E3:09:1F:DC:0A:03:65 X509v3 Authority Key Identifier: keyid:AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:28:98:cd:f1:11:4c:c4:25:55:c8:c9:66:1a:3e:10:45:f4: e9:e3:56:ff:0c:cf:6a:ea:f7:0a:c0:5a:ee:c0:e4:c3:3c:3e: 24:b9:57:8f:09:a5:bd:9a:3e:71:3d:dc:01:68:38:77:22:d6: 77:eb:98:11:03:d4:a2:b8:57:d0:94:c3:ad:9b:78:f3:85:f3: 35:d0:61:02:6d:6e:64:f2:d1:1f:a3:9c:9f:b1:bb:4c:d7:6f: 5f:c8:f1:36:47:95:94:f7:c4:55:62:07:31:5b:19:02:f2:ec: 32:5d:58:f0:3a:8b:11:eb:5b:e0:ee:39:c3:b4:99:4c:b7:4f: eb:2a:b2:85:4a:48:e3:52:87:69:40:62:c0:d0:37:6e:d2:d6: e8:82:b4:80:23:cc:93:71:53:e3:ae:0f:c5:55:27:43:ad:cb: 68:91:f0:05:51:2c:38:c7:57:39:00:92:10:fc:79:19:7c:cb: f7:68:4b:3b:2a:1e:94:c8:fc:97:a0:4f:65:a5:13:ab:af:e1: 59:80:df:cc:59:88:e1:bf:85:17:0c:94:ae:ae:cc:3b:2e:16: 7e:0a:cb:fc:43:1d:f5:89:40:c1:cb:15:7e:5a:12:e3:41:ba: a3:c1:42:ef:95:df:ad:b1:f7:e9:02:16:71:cf:1d:ec:73:18: c8:10:23:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCvrRaeCEf7qHyoVA5XdH3wJFNaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5 RjBEREM5MTAeFw0yNjA4MjgwOTI4NDBaFw0yNjA4MzEyMDEwNDBaMDMxMTAvBgNV BAMTKDBCRDlGRkE4RDBDRUQ2NkVGMjYwNTcwNUVGRTMwOTFGREMwQTAzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWEKfLd7i8D8ghfslFnN2iUP7o FbQ7tWk0dFpZrw7vuUmAISxZdsdpq10+w7anw5uVHHtVZOBs5OGdvazGJLtk1cRN cdhMatC3O0eETDAJScUypou5RjO4qttWu9N28b6d2pd2+cxAbrLyuhPP5Rj8UOQE ZVtRKIUkXoaffEPPjayzlAXbUy5QJ9lS+rwq25pV3mTEd9xOvl1Y/GJYX6Gnyey9 Ls+kQUa2hK7YyhNk1cQVf6xx2WaFUuar0fuGTkl7H4Dr1EtwCnFI/17zWxKpSO4O x5E9HllX5iP67cG3+05AZ2niakgwZKZeiRO//xYJvxQfJK+L8Zewzo/W0Q01AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC9n/qNDO1m7yYFcF7+MJH9wKA2UwHwYDVR0j BBgwFoAUrnHfcALdrGnSZolRr4Wfu58N3JEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MzU2NjEyNDUyOTg3Njk5NS8wL0FFNzFERjcwMDJEREFDNjlEMjY2ODk1MUFGODU5 RkJCOUYwRERDOTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5RjBEREM5MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODM1NjYxMjQ1Mjk4NzY5OTUvMC9BRTcxREY3MDAyRERB QzY5RDI2Njg5NTFBRjg1OUZCQjlGMEREQzkxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJSiYzfERTMQl VcjJZho+EEX06eNW/wzPaur3CsBa7sDkwzw+JLlXjwmlvZo+cT3cAWg4dyLWd+uY EQPUorhX0JTDrZt484XzNdBhAm1uZPLRH6Ocn7G7TNdvX8jxNkeVlPfEVWIHMVsZ AvLsMl1Y8DqLEetb4O45w7SZTLdP6yqyhUpI41KHaUBiwNA3btLW6IK0gCPMk3FT 464PxVUnQ63LaJHwBVEsOMdXOQCSEPx5GXzL92hLOyoelMj8l6BPZaUTq6/hWYDf zFmI4b+FFwyUrq7MOy4WfgrL/EMd9YlAwcsVfloS40G6o8FC75XfrbH36QIWcc8d 7HMYyBAjYA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:58:13 2026 by rpki-client