$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft File: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft (raw, json) Hash identifier: L1fc57x035gHQNrkuE+f9cvfjzxdL1h3P1BgbtetLOU= Subject key identifier: 5F:3C:98:8A:C0:AF:3C:E1:A2:1A:3A:6D:69:F8:08:B6:78:DC:87:B2 Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9 Certificate issuer: /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9 Certificate serial: 2E322D5E06CEC37AD90E8BB0367CB571662C7994 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft Manifest number: BF Signing time: Fri 28 Aug 2026 06:48:00 +0000 Manifest this update: Fri 28 Aug 2026 06:43:00 +0000 Manifest next update: Mon 31 Aug 2026 12:09:00 +0000 Files and hashes: 1: 3130332e3136332e34362e302f32332d3234203d3e203538353139.roa (hash: tnfkAsqQvcqpL20P+LPe4F4kwN7iekWJ1PPQsYyrYg8=) 2: 3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa (hash: /uXfkAccy3v3a9BHA09vw6dKcshdQs/6n+DUQ8IYKi8=) 3: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl (hash: Y0FYQ9Lbxm3xNQ1PanKhQqPPS2ub3D1GDwXcNhQEG2k=) 4: 3130332e33362e3232302e302f32322d3234203d3e203538353139.roa (hash: cpYrgo4yAI6Z4974RFpP1Ve2Wg+ZBptUjAdisTeBGyw=) 5: 34332e3234302e3232302e302f32322d3234203d3e203538353139.roa (hash: vSeQnc0mmTH3jj/CmKx/qvwuVCC4G3xToac39RSw2JM=) 6: 3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa (hash: iVNiE9bxsTL+DkppA0g1irY1nuYRs9Q3qr7qbEuyfxk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:32:2d:5e:06:ce:c3:7a:d9:0e:8b:b0:36:7c:b5:71:66:2c:79:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9 Validity Not Before: Aug 28 06:43:00 2026 GMT Not After : Aug 31 12:09:00 2026 GMT Subject: CN=5F3C988AC0AF3CE1A21A3A6D69F808B678DC87B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:02:b2:a4:06:50:80:15:ae:09:23:6c:ee: c0:46:a0:61:f6:b1:f9:82:98:83:5a:a6:ac:f1:32: cf:85:3d:4d:9f:da:1a:e2:b3:d7:da:cd:96:0c:ab: 31:fa:55:5e:83:44:f1:23:8b:c4:4e:dd:92:34:68: a8:61:47:d0:82:93:c9:af:f9:b1:77:f5:ac:3e:53: c6:b5:09:61:0d:3a:4b:57:80:66:15:0f:33:7d:93: 49:4e:63:e8:d9:f5:96:cd:53:bc:b8:ac:e6:a0:34: 6d:5c:27:64:77:09:35:63:f6:e9:6d:60:43:1b:c9: ac:18:ea:86:be:00:fd:6b:32:33:42:4d:c5:d7:c6: bd:aa:df:a4:5f:ec:2b:52:4f:d2:96:29:7e:be:fc: f2:68:fd:72:c6:fc:1a:65:f1:d2:b7:b3:b4:be:9e: 34:3b:b0:26:73:b1:c0:b9:72:9e:1f:d1:45:1b:d8: 86:87:0b:dc:95:37:19:b8:34:cc:5c:0e:37:d1:17: cb:a1:80:67:3c:b3:0b:7a:79:fe:e0:8a:b5:42:7b: ca:8d:33:3f:d3:d0:1b:6a:96:0a:50:cc:e4:42:e4: b0:ef:4f:ac:ae:40:36:bd:43:59:4b:8b:3b:ce:0a: 81:b0:72:bb:d0:60:2b:1e:a4:8c:c6:21:ea:20:f2: 8d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3C:98:8A:C0:AF:3C:E1:A2:1A:3A:6D:69:F8:08:B6:78:DC:87:B2 X509v3 Authority Key Identifier: keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c7:ef:e0:b3:a6:3a:07:84:fc:ff:53:8a:bb:54:10:88:33: 66:f2:14:72:b7:df:67:fb:d0:1a:d9:ec:22:c4:1c:94:a2:09: 8e:fc:c3:21:56:80:f0:78:96:d6:65:c2:3b:20:04:ed:52:bd: ee:c5:de:6b:e1:6a:95:d8:d2:11:65:42:3b:c9:26:8a:71:ff: c4:60:7b:f1:06:95:ab:26:5b:69:ce:73:27:fb:a3:05:56:cc: 65:b3:e2:ea:b0:95:6a:1d:5a:ae:13:57:be:d8:32:af:d9:f5: fb:bf:f8:2d:70:d5:da:b1:c5:15:96:c8:bc:df:da:5f:c3:c0: 9c:fc:26:e0:94:6c:f9:0f:ea:d2:74:cf:c6:b9:80:a5:0a:45: e3:6e:9e:f6:e4:74:39:fd:41:81:83:11:7b:b2:32:75:72:3b: 64:56:f0:57:c7:c0:04:1b:b9:66:f5:a4:98:9b:4f:18:43:3c: a8:e5:fb:72:d2:8a:89:72:33:b2:99:2d:3d:49:4d:91:6f:3d: 21:c4:f1:39:4f:0c:8d:90:bc:bf:34:99:1f:a5:96:9c:8b:f4: 96:33:3c:a1:ba:fd:9d:6c:1f:51:11:e0:db:76:48:7c:7c:f7: 38:59:e4:c8:93:7e:e2:c5:31:59:7b:6b:8d:d1:f4:07:f5:f1: 40:91:54:24 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULjItXgbOw3rZDouwNny1cWYseZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4 MDkxRTlFOTAeFw0yNjA4MjgwNjQzMDBaFw0yNjA4MzExMjA5MDBaMDMxMTAvBgNV BAMTKDVGM0M5ODhBQzBBRjNDRTFBMjFBM0E2RDY5RjgwOEI2NzhEQzg3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mgKypAZQgBWuCSNs7sBGoGH2 sfmCmINapqzxMs+FPU2f2hris9fazZYMqzH6VV6DRPEji8RO3ZI0aKhhR9CCk8mv +bF39aw+U8a1CWENOktXgGYVDzN9k0lOY+jZ9ZbNU7y4rOagNG1cJ2R3CTVj9ult YEMbyawY6oa+AP1rMjNCTcXXxr2q36Rf7CtST9KWKX6+/PJo/XLG/Bpl8dK3s7S+ njQ7sCZzscC5cp4f0UUb2IaHC9yVNxm4NMxcDjfRF8uhgGc8swt6ef7girVCe8qN Mz/T0BtqlgpQzORC5LDvT6yuQDa9Q1lLizvOCoGwcrvQYCsepIzGIeog8o3hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXzyYisCvPOGiGjptafgItnjch7IwHwYDVR0j BBgwFoAUrkrSfTP51kt/ohhMbAMKe4CR6ekwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ4ODgyMjY4NDU4MTg5MC8wL0FFNEFEMjdEMzNGOUQ2NEI3RkEyMTg0QzZDMDMw QTdCODA5MUU5RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4MDkxRTlFOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0ODg4MjI2ODQ1ODE4OTAvMC9BRTRBRDI3RDMzRjlE NjRCN0ZBMjE4NEM2QzAzMEE3QjgwOTFFOUU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMfv4LOmOgeE /P9TirtUEIgzZvIUcrffZ/vQGtnsIsQclKIJjvzDIVaA8HiW1mXCOyAE7VK97sXe a+FqldjSEWVCO8kminH/xGB78QaVqyZbac5zJ/ujBVbMZbPi6rCVah1arhNXvtgy r9n1+7/4LXDV2rHFFZbIvN/aX8PAnPwm4JRs+Q/q0nTPxrmApQpF426e9uR0Of1B gYMRe7IydXI7ZFbwV8fABBu5ZvWkmJtPGEM8qOX7ctKKiXIzspktPUlNkW89IcTx OU8MjZC8vzSZH6WWnIv0ljM8obr9nWwfURHg23ZIfHz3OFnkyJN+4sUxWXtrjdH0 B/XxQJFUJA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:39 2026 by rpki-client