$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft File: AEB6C1171350C22B2084932E16868862A537F167.mft (raw, json) Hash identifier: g0/T0pqjLUw27mJDmjE8r8uYsBvx8KWzBqGMSnGDicE= Subject key identifier: 15:48:64:0B:C0:81:61:B0:1D:36:3D:97:79:05:1B:F2:AF:EE:F3:C9 Authority key identifier: AE:B6:C1:17:13:50:C2:2B:20:84:93:2E:16:86:88:62:A5:37:F1:67 Certificate issuer: /CN=AEB6C1171350C22B2084932E16868862A537F167 Certificate serial: 1DFDD24886AA195A0ECBE7066AA8BD7ECE0F3136 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft Manifest number: D9 Signing time: Thu 29 Oct 2026 09:42:04 +0000 Manifest this update: Thu 29 Oct 2026 09:37:04 +0000 Manifest next update: Sun 01 Nov 2026 09:49:04 +0000 Files and hashes: 1: AEB6C1171350C22B2084932E16868862A537F167.crl (hash: tkdDrs1Y8j/QNn5J5BMJurH8t3Ljo2nf0XvS4SaNKUo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.crl rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 09:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fd:d2:48:86:aa:19:5a:0e:cb:e7:06:6a:a8:bd:7e:ce:0f:31:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB6C1171350C22B2084932E16868862A537F167 Validity Not Before: Oct 29 09:37:04 2026 GMT Not After : Nov 1 09:49:04 2026 GMT Subject: CN=1548640BC08161B01D363D9779051BF2AFEEF3C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:76:a7:20:81:5e:06:8e:3c:a1:72:80:2c: eb:c8:68:f3:c6:5f:1a:6b:23:75:a7:c5:b1:06:d3: 8a:cd:89:7c:26:ba:a0:b0:ac:7d:d2:43:32:7d:fb: f6:86:6f:da:20:09:cd:11:ca:1d:95:44:2f:eb:5c: 59:16:d7:1d:b7:4e:37:88:c5:a7:1e:af:26:1e:7f: 4b:f3:cc:76:49:a4:25:2a:02:3a:ec:d4:8b:df:46: 66:31:40:79:ed:68:4f:1a:d0:1a:7c:0d:36:fe:2f: 0d:09:fd:f7:09:9a:b0:84:cb:6e:07:1f:8d:e0:85: ec:30:80:88:36:92:76:89:d4:c3:5e:bc:d1:cc:2a: 14:32:b3:df:ed:73:a0:f8:71:30:9d:b6:68:62:d4: 2f:6f:dc:56:88:de:20:5a:4a:fa:83:c2:93:8a:a2: 66:ea:2a:34:7b:6b:e8:16:b3:a7:ed:77:df:e0:86: 55:ac:ce:c4:a5:28:1e:ab:40:30:06:29:ef:a4:c1: d9:65:60:4d:02:07:74:22:f7:16:26:44:05:35:a2: 2f:89:c7:bb:5c:76:41:b0:f8:e6:18:14:16:64:2c: 11:d6:3f:6f:f3:30:22:9d:24:d7:1f:22:19:1e:df: 94:f3:89:0d:95:df:9a:cd:0b:59:74:04:0b:b3:60: c1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:48:64:0B:C0:81:61:B0:1D:36:3D:97:79:05:1B:F2:AF:EE:F3:C9 X509v3 Authority Key Identifier: keyid:AE:B6:C1:17:13:50:C2:2B:20:84:93:2E:16:86:88:62:A5:37:F1:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:c0:16:d0:85:b1:35:e8:e4:55:00:fe:c9:2f:f3:cf:b9:2f: 1f:f9:f8:40:59:fb:ce:2c:7e:c1:f1:79:05:c3:18:ac:1b:13: d9:90:ca:1e:8a:52:07:02:c3:92:32:88:a6:f5:84:93:3b:1f: 80:79:2d:e2:35:bf:1f:90:54:44:78:33:81:21:80:42:0a:d2: 5a:7d:d7:36:42:a3:1f:81:b5:10:4d:59:f2:20:15:f8:d4:ba: 54:9a:4a:16:50:fc:fb:2a:9b:1d:c9:0a:f7:79:22:d0:36:44: d6:4a:80:74:9c:32:8f:1c:98:cf:14:f4:48:e7:76:9a:d2:af: 9f:f5:4b:b7:ea:89:0c:ce:a9:dc:1b:a8:49:47:3a:c3:6a:aa: 8d:a8:66:7e:a7:a3:35:39:f1:a0:00:5f:ec:7c:59:12:db:a5: 7b:49:b5:10:fe:9e:43:9c:6f:4c:2b:ce:55:a8:8b:7c:60:7e: 4b:d9:0d:fa:0c:83:7a:bd:67:2a:b2:3f:ac:16:45:a1:f8:74: 6f:46:2e:af:f1:35:20:d0:16:89:30:23:e0:b7:4e:d3:2c:e2: d7:7d:e3:10:cb:f5:44:d1:92:e9:1a:d6:97:1f:2d:8a:fe:9e: 8b:de:0c:bc:37:6c:54:de:51:d9:98:95:70:77:0e:eb:a2:fc: f4:29:bb:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHf3SSIaqGVoOy+cGaqi9fs4PMTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCNkMxMTcxMzUwQzIyQjIwODQ5MzJFMTY4Njg4NjJB NTM3RjE2NzAeFw0yNjEwMjkwOTM3MDRaFw0yNjExMDEwOTQ5MDRaMDMxMTAvBgNV BAMTKDE1NDg2NDBCQzA4MTYxQjAxRDM2M0Q5Nzc5MDUxQkYyQUZFRUYzQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRnanIIFeBo48oXKALOvIaPPG XxprI3WnxbEG04rNiXwmuqCwrH3SQzJ9+/aGb9ogCc0Ryh2VRC/rXFkW1x23TjeI xaceryYef0vzzHZJpCUqAjrs1IvfRmYxQHntaE8a0Bp8DTb+Lw0J/fcJmrCEy24H H43ghewwgIg2knaJ1MNevNHMKhQys9/tc6D4cTCdtmhi1C9v3FaI3iBaSvqDwpOK ombqKjR7a+gWs6ftd9/ghlWszsSlKB6rQDAGKe+kwdllYE0CB3Qi9xYmRAU1oi+J x7tcdkGw+OYYFBZkLBHWP2/zMCKdJNcfIhke35TziQ2V35rNC1l0BAuzYMFLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFUhkC8CBYbAdNj2XeQUb8q/u88kwHwYDVR0j BBgwFoAUrrbBFxNQwisghJMuFoaIYqU38WcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ2ODMxMDY5NjcyMjQzNS8wL0FFQjZDMTE3MTM1MEMyMkIyMDg0OTMyRTE2ODY4 ODYyQTUzN0YxNjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUVCNkMxMTcxMzUwQzIyQjIwODQ5MzJFMTY4Njg4NjJBNTM3RjE2Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0NjgzMTA2OTY3MjI0MzUvMC9BRUI2QzExNzEzNTBD MjJCMjA4NDkzMkUxNjg2ODg2MkE1MzdGMTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA68AW0IWxNejk VQD+yS/zz7kvH/n4QFn7zix+wfF5BcMYrBsT2ZDKHopSBwLDkjKIpvWEkzsfgHkt 4jW/H5BURHgzgSGAQgrSWn3XNkKjH4G1EE1Z8iAV+NS6VJpKFlD8+yqbHckK93ki 0DZE1kqAdJwyjxyYzxT0SOd2mtKvn/VLt+qJDM6p3BuoSUc6w2qqjahmfqejNTnx oABf7HxZEtule0m1EP6eQ5xvTCvOVaiLfGB+S9kN+gyDer1nKrI/rBZFofh0b0Yu r/E1INAWiTAj4LdO0yzi133jEMv1RNGS6RrWlx8tiv6ei94MvDdsVN5R2ZiVcHcO 66L89Cm7GA== -----END CERTIFICATE-----Generated at Thu Oct 29 23:04:44 2026 by rpki-client