$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft File: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft (raw, json) Hash identifier: 3CzcDELkJJxNbWI3dYy2Mjy5FWZ3wrN9z+dHR+d0nkI= Subject key identifier: C6:7B:90:69:D2:18:7A:02:8D:43:D7:53:61:6D:09:58:C0:5D:31:2F Authority key identifier: AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 Certificate issuer: /CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Certificate serial: 6C774824C62ECE1BB39E11E00EA08AD1349D5A3E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft Manifest number: 2F Signing time: Mon 13 Apr 2026 06:19:17 +0000 Manifest this update: Mon 13 Apr 2026 06:14:17 +0000 Manifest next update: Tue 14 Apr 2026 06:30:17 +0000 Files and hashes: 1: AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl (hash: lXLMU6dYzk8WOftEuSiKeyfEE389CNG5RRSne8siNX8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:77:48:24:c6:2e:ce:1b:b3:9e:11:e0:0e:a0:8a:d1:34:9d:5a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE71DF7002DDAC69D2668951AF859FBB9F0DDC91 Validity Not Before: Apr 13 06:14:17 2026 GMT Not After : Apr 14 06:30:17 2026 GMT Subject: CN=C67B9069D2187A028D43D753616D0958C05D312F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:48:99:0b:8b:f5:b2:c0:32:54:d5:96:f2: d3:0c:74:a5:40:fc:80:d0:28:49:13:69:34:43:10: 55:54:ac:99:4a:5b:43:b8:ab:30:f1:eb:fa:fd:a3: 2c:bf:0f:ef:61:43:0a:ff:0a:57:87:20:70:1f:e7: 3b:fd:f3:50:50:a2:44:72:a9:94:6e:6c:0d:ea:9b: 6c:f7:1a:f5:83:11:49:02:02:cb:6d:67:12:da:33: 0b:ee:16:cb:e7:76:5c:64:36:e8:b3:e5:eb:26:dc: 4d:fc:42:2b:1f:44:b1:b1:71:4e:83:21:4f:97:7d: 47:39:37:a1:ff:d0:87:7b:7c:0f:1e:2e:26:ac:ae: 81:eb:69:e5:e4:9b:85:e1:4a:f5:80:3c:f3:64:99: e9:66:e4:2e:c3:9f:d4:3d:f4:b0:20:dc:2a:62:42: 35:7d:4d:4f:59:f6:fb:82:ee:14:3e:b5:16:fe:78: bb:9e:94:17:ff:d3:08:d2:fa:d0:86:4d:1d:8a:8d: ec:64:24:02:54:54:b9:39:af:0a:8c:7e:08:ff:68: 3c:ca:df:dd:f0:71:be:dc:09:02:2d:25:9c:90:3e: 74:a7:95:a2:e7:a5:51:23:d8:57:69:c9:d5:dc:11: 2c:22:bb:fc:6f:fa:37:68:4b:f6:d1:c7:b3:22:dc: ea:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7B:90:69:D2:18:7A:02:8D:43:D7:53:61:6D:09:58:C0:5D:31:2F X509v3 Authority Key Identifier: keyid:AE:71:DF:70:02:DD:AC:69:D2:66:89:51:AF:85:9F:BB:9F:0D:DC:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1083566124529876995/0/AE71DF7002DDAC69D2668951AF859FBB9F0DDC91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:bb:98:23:f8:dc:ce:d6:da:8f:7c:2f:5a:e3:67:52:5a:a3: 12:8c:50:40:0c:9f:5b:7f:c7:46:7a:d7:e3:bb:3a:a3:e7:23: 6f:12:db:61:c8:1b:6d:0b:61:88:b9:a7:24:80:42:f7:78:74: d3:5a:6e:cf:93:11:15:7f:4c:b3:2c:6e:d6:db:db:e9:20:0f: bb:3a:a6:72:b4:68:93:08:a4:e1:c9:78:a5:7a:93:34:b9:ed: 76:02:c7:4b:60:48:92:ed:db:4d:c1:39:fd:14:da:b1:7c:63: 05:1d:75:ee:fa:63:42:1f:45:34:35:84:48:84:ab:83:3c:08: 3c:84:1e:14:42:53:5b:29:a9:ec:30:7f:b9:ce:03:9a:0b:7d: 50:dc:e8:07:e0:0e:a3:c7:51:b8:04:6c:30:64:52:5d:c6:43: 8f:b8:56:58:f5:91:5f:b2:19:4d:61:bf:e7:e9:8f:a1:62:76: 3e:aa:31:de:25:7f:38:aa:3e:8c:47:c2:76:ae:84:ae:ab:3d: fb:e5:50:ca:d2:16:fe:d8:20:87:3b:c4:03:9b:15:72:85:b8: 02:73:11:de:07:43:0a:16:d2:fe:8a:a5:6e:7f:9c:a2:e6:01: 71:54:71:57:80:49:ce:58:06:8f:c7:53:fb:8b:b8:03:41:2e: ad:2e:df:8f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbHdIJMYuzhuznhHgDqCK0TSdWj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5 RjBEREM5MTAeFw0yNjA0MTMwNjE0MTdaFw0yNjA0MTQwNjMwMTdaMDMxMTAvBgNV BAMTKEM2N0I5MDY5RDIxODdBMDI4RDQzRDc1MzYxNkQwOTU4QzA1RDMxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxp0iZC4v1ssAyVNWW8tMMdKVA /IDQKEkTaTRDEFVUrJlKW0O4qzDx6/r9oyy/D+9hQwr/CleHIHAf5zv981BQokRy qZRubA3qm2z3GvWDEUkCAsttZxLaMwvuFsvndlxkNuiz5esm3E38QisfRLGxcU6D IU+XfUc5N6H/0Id7fA8eLiasroHraeXkm4XhSvWAPPNkmelm5C7Dn9Q99LAg3Cpi QjV9TU9Z9vuC7hQ+tRb+eLuelBf/0wjS+tCGTR2KjexkJAJUVLk5rwqMfgj/aDzK 393wcb7cCQItJZyQPnSnlaLnpVEj2FdpydXcESwiu/xv+jdoS/bRx7Mi3OoPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxnuQadIYegKNQ9dTYW0JWMBdMS8wHwYDVR0j BBgwFoAUrnHfcALdrGnSZolRr4Wfu58N3JEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 MzU2NjEyNDUyOTg3Njk5NS8wL0FFNzFERjcwMDJEREFDNjlEMjY2ODk1MUFGODU5 RkJCOUYwRERDOTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3MURGNzAwMkREQUM2OUQyNjY4OTUxQUY4NTlGQkI5RjBEREM5MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODM1NjYxMjQ1Mjk4NzY5OTUvMC9BRTcxREY3MDAyRERB QzY5RDI2Njg5NTFBRjg1OUZCQjlGMEREQzkxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArruYI/jcztba j3wvWuNnUlqjEoxQQAyfW3/HRnrX47s6o+cjbxLbYcgbbQthiLmnJIBC93h001pu z5MRFX9Msyxu1tvb6SAPuzqmcrRokwik4cl4pXqTNLntdgLHS2BIku3bTcE5/RTa sXxjBR117vpjQh9FNDWESISrgzwIPIQeFEJTWymp7DB/uc4Dmgt9UNzoB+AOo8dR uARsMGRSXcZDj7hWWPWRX7IZTWG/5+mPoWJ2Pqox3iV/OKo+jEfCdq6Erqs9++VQ ytIW/tgghzvEA5sVcoW4AnMR3gdDChbS/oqlbn+couYBcVRxV4BJzlgGj8dT+4u4 A0EurS7fjw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:05:54 2026 by rpki-client