$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft File: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft (raw, json) Hash identifier: Y4KLHiZFTSCVoO/CRbWUOZSA1jwK7VqHyPgab76lUg4= Subject key identifier: 03:BA:3B:AD:66:34:5A:13:F0:52:31:A6:B5:16:83:51:E6:EF:8C:2F Authority key identifier: AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9 Certificate issuer: /CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9 Certificate serial: 7523495D58D02C3646F97588F8BDA2B7E1C48C60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft Manifest number: 07 Signing time: Sun 12 Apr 2026 22:39:17 +0000 Manifest this update: Sun 12 Apr 2026 22:34:17 +0000 Manifest next update: Mon 13 Apr 2026 22:46:17 +0000 Files and hashes: 1: 3231312e3130312e3234342e302f32322d3234203d3e203538353139.roa (hash: /uXfkAccy3v3a9BHA09vw6dKcshdQs/6n+DUQ8IYKi8=) 2: AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl (hash: PXud5je4OZDU6PUwnmdYEaQE581VhFsmtDBkma0I66A=) 3: 3231312e3130312e3233322e302f32312d3234203d3e203538353139.roa (hash: iVNiE9bxsTL+DkppA0g1irY1nuYRs9Q3qr7qbEuyfxk=) 4: 34332e3234302e3232302e302f32322d3234203d3e203538353139.roa (hash: vSeQnc0mmTH3jj/CmKx/qvwuVCC4G3xToac39RSw2JM=) 5: 3130332e33362e3232302e302f32322d3234203d3e203538353139.roa (hash: cpYrgo4yAI6Z4974RFpP1Ve2Wg+ZBptUjAdisTeBGyw=) 6: 3130332e3136332e34362e302f32332d3234203d3e203538353139.roa (hash: tnfkAsqQvcqpL20P+LPe4F4kwN7iekWJ1PPQsYyrYg8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 22:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:23:49:5d:58:d0:2c:36:46:f9:75:88:f8:bd:a2:b7:e1:c4:8c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9 Validity Not Before: Apr 12 22:34:17 2026 GMT Not After : Apr 13 22:46:17 2026 GMT Subject: CN=03BA3BAD66345A13F05231A6B5168351E6EF8C2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:2c:c6:07:9c:a6:52:32:da:9b:03:1d:7f: 86:2d:a7:7c:c3:35:6e:74:55:e4:fb:da:b9:47:ee: 73:10:87:5d:8a:2e:cf:7e:8d:d5:fd:a6:c5:25:39: 9c:77:43:80:0d:19:15:10:0d:6f:db:f5:35:d8:57: 8a:c0:db:bd:f8:9a:95:68:25:3a:05:ae:e4:fb:47: 4e:39:28:2a:bd:15:87:94:39:df:d7:fa:de:11:a5: 2d:ec:2c:a9:90:5e:89:48:d7:90:76:9b:fd:f3:5a: cc:a0:1b:c0:fb:aa:83:a8:ce:2d:f4:b3:8f:d9:4c: 97:6d:90:47:73:00:f5:bc:00:e8:cb:19:24:47:62: 37:c7:04:0f:39:35:f2:ec:93:0d:34:57:18:94:42: b1:21:5d:5e:09:b0:4c:97:e5:b8:6e:88:37:08:83: 5b:3f:7d:26:22:57:26:05:43:40:12:d5:bd:bb:7e: 62:0c:95:66:08:2b:f3:b9:4c:5f:0a:f1:04:e5:ce: 1d:27:c7:d1:07:0c:91:dd:c0:45:07:98:8d:29:12: e8:32:51:01:ee:c7:96:40:ba:8a:64:be:d6:62:37: ef:b2:bd:4f:16:d4:94:fe:54:49:19:91:36:4b:47: 84:ea:af:bd:6b:bc:89:4c:80:e4:ef:98:00:61:e0: 1b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BA:3B:AD:66:34:5A:13:F0:52:31:A6:B5:16:83:51:E6:EF:8C:2F X509v3 Authority Key Identifier: keyid:AE:4A:D2:7D:33:F9:D6:4B:7F:A2:18:4C:6C:03:0A:7B:80:91:E9:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488822684581890/0/AE4AD27D33F9D64B7FA2184C6C030A7B8091E9E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:45:14:95:39:39:3b:e0:1e:c9:df:6a:88:9c:09:56:6b:8c: f1:dc:bf:6f:77:2a:be:15:ca:37:e4:69:f4:db:14:56:10:de: b6:43:f3:c9:44:e0:2c:3f:61:46:53:e2:d7:27:0e:ef:e0:4c: df:8f:1e:98:c4:de:0f:67:03:35:92:82:8e:4e:ca:57:fd:93: bd:1f:d7:c9:07:c0:8d:28:18:9a:46:0b:d0:a4:a2:24:ee:98: 87:73:5b:ac:21:29:b3:1a:3a:8f:ca:69:54:63:59:8d:80:98: da:e6:a2:11:84:bb:20:85:8a:92:10:87:2c:f1:ca:fd:41:cc: 3f:40:bd:c6:4a:95:62:4a:dd:5f:19:27:f4:7d:30:12:a6:6b: 63:9a:4b:7e:6d:7c:84:0a:5f:ee:df:e7:85:0e:5e:af:90:79: d1:7f:2a:79:4a:7a:df:0e:b7:bf:17:5b:3b:b3:9e:38:76:21: 26:b7:5a:de:d1:d0:18:ff:00:78:af:9f:53:a1:2f:d0:12:9a: 6e:86:12:0b:9e:88:ba:2b:d8:28:8c:4e:55:0e:a8:d6:51:c1: 04:7b:2e:70:48:7b:3f:e9:47:10:93:35:b3:08:7b:cc:16:5a: a7:bc:a0:2c:5d:6d:57:ce:a3:9d:d0:e6:78:2f:32:71:ea:fa: cd:4e:fe:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdSNJXVjQLDZG+XWI+L2it+HEjGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4 MDkxRTlFOTAeFw0yNjA0MTIyMjM0MTdaFw0yNjA0MTMyMjQ2MTdaMDMxMTAvBgNV BAMTKDAzQkEzQkFENjYzNDVBMTNGMDUyMzFBNkI1MTY4MzUxRTZFRjhDMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTSzGB5ymUjLamwMdf4Ytp3zD NW50VeT72rlH7nMQh12KLs9+jdX9psUlOZx3Q4ANGRUQDW/b9TXYV4rA2734mpVo JToFruT7R045KCq9FYeUOd/X+t4RpS3sLKmQXolI15B2m/3zWsygG8D7qoOozi30 s4/ZTJdtkEdzAPW8AOjLGSRHYjfHBA85NfLskw00VxiUQrEhXV4JsEyX5bhuiDcI g1s/fSYiVyYFQ0AS1b27fmIMlWYIK/O5TF8K8QTlzh0nx9EHDJHdwEUHmI0pEugy UQHux5ZAuopkvtZiN++yvU8W1JT+VEkZkTZLR4Tqr71rvIlMgOTvmABh4BuDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUA7o7rWY0WhPwUjGmtRaDUebvjC8wHwYDVR0j BBgwFoAUrkrSfTP51kt/ohhMbAMKe4CR6ekwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ4ODgyMjY4NDU4MTg5MC8wL0FFNEFEMjdEMzNGOUQ2NEI3RkEyMTg0QzZDMDMw QTdCODA5MUU5RTkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0QUQyN0QzM0Y5RDY0QjdGQTIxODRDNkMwMzBBN0I4MDkxRTlFOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0ODg4MjI2ODQ1ODE4OTAvMC9BRTRBRDI3RDMzRjlE NjRCN0ZBMjE4NEM2QzAzMEE3QjgwOTFFOUU5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkUUlTk5O+Ae yd9qiJwJVmuM8dy/b3cqvhXKN+Rp9NsUVhDetkPzyUTgLD9hRlPi1ycO7+BM348e mMTeD2cDNZKCjk7KV/2TvR/XyQfAjSgYmkYL0KSiJO6Yh3NbrCEpsxo6j8ppVGNZ jYCY2uaiEYS7IIWKkhCHLPHK/UHMP0C9xkqVYkrdXxkn9H0wEqZrY5pLfm18hApf 7t/nhQ5er5B50X8qeUp63w63vxdbO7OeOHYhJrda3tHQGP8AeK+fU6Ev0BKaboYS C56IuivYKIxOVQ6o1lHBBHsucEh7P+lHEJM1swh7zBZap7ygLF1tV86jndDmeC8y cer6zU7+XQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:06:15 2026 by rpki-client