$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft File: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft (raw, json) Hash identifier: AVxF/R3OVRVa4IOJyNINUYNp8qH0wE56FvQQaEbPwdI= Subject key identifier: F6:76:97:9A:02:DD:81:4E:42:C5:01:7A:F2:9B:22:4E:BF:79:86:99 Authority key identifier: AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B Certificate issuer: /CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Certificate serial: 0A35DA1610E883F1D8C21178C788CC4999645CCA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft Manifest number: CC Signing time: Mon 12 Oct 2026 07:36:46 +0000 Manifest this update: Mon 12 Oct 2026 07:31:46 +0000 Manifest next update: Thu 15 Oct 2026 16:42:46 +0000 Files and hashes: 1: 3130332e36392e31362e302f32322d3232203d3e203233363530.roa (hash: zekVrxkQVWd0PYgcYlPQAYGNufMyf7eBZZSKqJFe7WU=) 2: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl (hash: GQZ3HndHKS1Nm9lN4RDgJL1HoNFq8xj3U9+Bo7+CLLw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:35:da:16:10:e8:83:f1:d8:c2:11:78:c7:88:cc:49:99:64:5c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Validity Not Before: Oct 12 07:31:46 2026 GMT Not After : Oct 15 16:42:46 2026 GMT Subject: CN=F676979A02DD814E42C5017AF29B224EBF798699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:e0:ac:7a:33:d8:8c:3d:e1:45:74:e7:ac: 20:72:7a:04:61:15:7d:b8:67:7f:de:2a:0c:cb:c5: d4:07:67:ec:7e:40:eb:2a:c9:44:1b:ba:c8:ca:07: 0a:ee:7f:43:d8:fe:77:43:6b:59:47:aa:6e:90:8d: 00:71:0e:49:5e:51:ef:fe:77:5f:69:f6:a6:4d:16: 44:1b:3e:cb:26:57:3b:a7:cd:87:3e:0f:b0:1c:63: ae:a3:c6:a9:fe:57:9e:b7:dc:3d:8c:8b:b9:6e:ba: ea:16:c2:b4:c3:7a:74:36:23:cf:43:bb:9f:32:f7: 76:af:bf:f7:66:c4:44:52:43:0b:34:3f:40:a8:42: 09:af:cb:69:3a:00:62:6c:8e:43:a2:98:da:9d:aa: 27:8b:6f:4b:bf:83:02:c8:b5:bf:29:c8:08:dc:35: db:f9:3a:59:37:2d:bc:79:4e:31:e5:e9:dd:86:f5: af:c6:77:f1:f3:5e:f6:99:20:57:d3:e2:0e:a9:41: 12:44:34:ce:15:c6:9e:6b:83:b7:ce:07:8b:56:0b: 7d:43:1a:25:70:c2:dc:86:88:0e:d6:38:d0:7a:fd: c0:5b:8d:2f:c4:20:02:a1:5c:58:89:db:6c:48:a8: a6:a4:0c:fa:0d:3e:9e:3d:36:de:ef:61:99:fd:19: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:76:97:9A:02:DD:81:4E:42:C5:01:7A:F2:9B:22:4E:BF:79:86:99 X509v3 Authority Key Identifier: keyid:AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4d:d6:a7:3e:1e:a2:b0:fa:42:b2:41:75:24:7b:96:5a:de: da:49:92:f7:64:1f:3e:3a:eb:cf:35:39:b6:6a:8f:e8:83:b8: 46:04:7b:5b:e1:a9:63:55:8b:f5:72:69:3b:c2:b3:e8:a3:03: 35:e5:97:ed:bc:af:6a:23:ff:79:d4:8b:50:f4:c5:de:ea:11: ab:d8:40:f8:ca:0b:6b:0b:4f:c9:30:ea:88:85:7a:f9:6f:33: 19:b1:92:d0:da:48:ae:e7:fd:c2:cb:bc:7c:a5:71:bd:db:69: 11:e9:e3:bf:fd:da:25:a9:62:9d:27:f8:61:6d:1b:17:07:9d: c0:d6:46:d3:fb:43:72:42:18:39:39:26:5a:01:70:0a:14:6f: c2:b6:34:ad:10:ca:4f:ab:d4:89:7d:9a:26:91:f5:26:fa:4c: 6a:07:f5:88:ff:0a:ba:15:2e:85:eb:5a:3a:98:32:26:04:2e: 4e:7c:07:b3:c3:29:57:72:06:33:57:f9:47:67:7e:90:32:27: 11:af:f2:d1:ac:14:b7:17:5a:25:a3:91:e2:f8:5f:0b:53:21: 5e:fd:b6:f0:92:b4:90:c4:d1:98:95:d9:e8:55:89:2a:15:44: 79:70:de:83:e7:50:67:af:67:65:a3:12:2e:4e:b9:89:11:b7: 0c:af:c3:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCjXaFhDog/HYwhF4x4jMSZlkXMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2 RDMzRTQ0QjAeFw0yNjEwMTIwNzMxNDZaFw0yNjEwMTUxNjQyNDZaMDMxMTAvBgNV BAMTKEY2NzY5NzlBMDJERDgxNEU0MkM1MDE3QUYyOUIyMjRFQkY3OTg2OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4VeCsejPYjD3hRXTnrCByegRh FX24Z3/eKgzLxdQHZ+x+QOsqyUQbusjKBwruf0PY/ndDa1lHqm6QjQBxDkleUe/+ d19p9qZNFkQbPssmVzunzYc+D7AcY66jxqn+V5633D2Mi7luuuoWwrTDenQ2I89D u58y93avv/dmxERSQws0P0CoQgmvy2k6AGJsjkOimNqdqieLb0u/gwLItb8pyAjc Ndv5Olk3Lbx5TjHl6d2G9a/Gd/HzXvaZIFfT4g6pQRJENM4Vxp5rg7fOB4tWC31D GiVwwtyGiA7WONB6/cBbjS/EIAKhXFiJ22xIqKakDPoNPp49Nt7vYZn9GTi7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9naXmgLdgU5CxQF68psiTr95hpkwHwYDVR0j BBgwFoAUrnXiydhKGtkzrjUqXKqVvW0z5EswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwOTk5NjU5Mzc5MDk3OC8wL0FFNzVFMkM5RDg0QTFBRDkzM0FFMzUyQTVDQUE5 NUJENkQzM0U0NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2RDMzRTQ0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDk5OTY1OTM3OTA5NzgvMC9BRTc1RTJDOUQ4NEEx QUQ5MzNBRTM1MkE1Q0FBOTVCRDZEMzNFNDRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm03Wpz4eorD6 QrJBdSR7llre2kmS92QfPjrrzzU5tmqP6IO4RgR7W+GpY1WL9XJpO8Kz6KMDNeWX 7byvaiP/edSLUPTF3uoRq9hA+MoLawtPyTDqiIV6+W8zGbGS0NpIruf9wsu8fKVx vdtpEenjv/3aJalinSf4YW0bFwedwNZG0/tDckIYOTkmWgFwChRvwrY0rRDKT6vU iX2aJpH1JvpMagf1iP8KuhUuhetaOpgyJgQuTnwHs8MpV3IGM1f5R2d+kDInEa/y 0awUtxdaJaOR4vhfC1MhXv228JK0kMTRmJXZ6FWJKhVEeXDeg+dQZ69nZaMSLk65 iRG3DK/DzA== -----END CERTIFICATE-----Generated at Wed Oct 14 15:35:46 2026 by rpki-client