$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft File: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft (raw, json) Hash identifier: GLuPBv4FjU18K5xCZXYGSiL8Ofc2d/GClDazJNykVY4= Subject key identifier: C4:76:DC:3E:30:BE:78:86:EE:1C:9B:6A:ED:38:07:11:42:DC:B9:DA Authority key identifier: AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B Certificate issuer: /CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Certificate serial: 616CDA50E089507B54D177EADC9291F8760C3130 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft Manifest number: 3E Signing time: Fri 29 May 2026 08:57:46 +0000 Manifest this update: Fri 29 May 2026 08:52:46 +0000 Manifest next update: Sat 30 May 2026 10:57:46 +0000 Files and hashes: 1: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl (hash: 5RoydTbk6oEW/O3ukLsdfOQzObrWUVFE4o+v6XSi4/M=) 2: 3130332e36392e31362e302f32322d3232203d3e20313531323836.roa (hash: pipFRX3g8zpKBxJfoHYgo/R05QsqXUeAMaREmbsYQc4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6c:da:50:e0:89:50:7b:54:d1:77:ea:dc:92:91:f8:76:0c:31:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Validity Not Before: May 29 08:52:46 2026 GMT Not After : May 30 10:57:46 2026 GMT Subject: CN=C476DC3E30BE7886EE1C9B6AED38071142DCB9DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e9:df:61:c2:46:70:4a:30:1a:3c:77:74:43: 75:24:2c:cd:65:86:c4:83:dd:2c:74:03:8e:a4:a9: a6:3b:3d:0e:b4:b2:68:52:50:2e:dc:e5:a0:50:d7: 26:e1:31:a3:e2:76:6e:af:d2:9e:96:70:62:07:17: 3d:40:89:bd:6f:97:72:bb:7a:41:e2:5f:86:78:df: 37:02:c1:8b:18:0d:9c:42:78:99:04:14:a4:b9:fc: cf:35:4e:0e:24:24:e9:a7:f9:af:d5:83:49:6d:7a: 70:19:83:b3:18:99:ef:f9:38:94:c9:96:bd:5a:f3: 6d:b8:c4:04:42:fe:68:8b:84:69:c3:69:74:1a:f7: ea:c0:8d:f9:62:b2:4e:ab:4f:d4:35:0d:e2:cd:0c: 73:cf:17:13:b3:45:b8:f7:12:d3:c4:7f:f6:89:e7: 2c:4c:6b:36:76:28:08:18:9f:8b:fd:22:47:40:d9: 35:14:ab:f4:f9:83:a5:ce:77:4c:8f:86:18:f7:4f: d5:04:32:ac:28:36:97:da:22:1e:9e:03:53:08:cf: 63:af:79:a6:bc:e6:dc:7b:38:ba:1b:95:6e:33:bd: e0:82:6b:e3:f0:e9:4b:69:97:dd:7e:eb:42:10:74: 03:a3:37:66:de:3e:88:dd:fd:e2:80:9a:30:a1:f9: 5d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:76:DC:3E:30:BE:78:86:EE:1C:9B:6A:ED:38:07:11:42:DC:B9:DA X509v3 Authority Key Identifier: keyid:AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:e7:eb:ab:cd:20:e3:e3:88:d8:2c:3f:da:fb:ab:c9:50:ab: d0:24:5f:64:28:a3:37:be:94:f7:3d:6e:ae:42:1c:86:05:c7: 8f:7c:09:64:79:b0:40:49:ae:38:2f:2e:f9:e8:be:df:51:f3: 18:f6:5b:2c:35:a3:a5:6e:15:36:99:b7:70:1e:78:b3:73:c9: e7:22:c9:ec:09:aa:36:84:b0:eb:e5:f3:7e:aa:5a:6f:0a:7f: b1:12:63:9e:ab:fc:1b:02:21:2f:00:6e:45:be:22:15:dd:27: 14:be:44:5b:c1:6c:6b:c1:c2:1a:03:42:89:70:a7:87:c0:72: 4e:61:72:d3:8b:3f:fd:ec:a5:d2:fc:09:79:ca:ea:db:d5:f4: 1c:ae:ad:e0:84:19:a2:ea:a7:cc:25:1e:c1:01:4d:75:dd:1c: 08:f5:3d:75:95:18:dd:f3:6d:61:a9:e8:1c:54:64:17:a5:9f: 2a:62:7e:4d:59:aa:71:7d:70:eb:d4:e9:a0:39:e5:7a:20:23: 4e:70:c1:90:a9:b4:9f:9e:3c:e5:dd:16:d7:56:64:f3:4a:e3: 70:ad:e0:95:53:26:45:23:22:63:a6:9a:f9:84:23:72:ca:11: c9:4e:4a:3b:fd:0a:86:07:3d:9a:c8:90:64:7b:12:03:c3:06: 32:03:bf:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYWzaUOCJUHtU0Xfq3JKR+HYMMTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2 RDMzRTQ0QjAeFw0yNjA1MjkwODUyNDZaFw0yNjA1MzAxMDU3NDZaMDMxMTAvBgNV BAMTKEM0NzZEQzNFMzBCRTc4ODZFRTFDOUI2QUVEMzgwNzExNDJEQ0I5REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS6d9hwkZwSjAaPHd0Q3UkLM1l hsSD3Sx0A46kqaY7PQ60smhSUC7c5aBQ1ybhMaPidm6v0p6WcGIHFz1Aib1vl3K7 ekHiX4Z43zcCwYsYDZxCeJkEFKS5/M81Tg4kJOmn+a/Vg0ltenAZg7MYme/5OJTJ lr1a8224xARC/miLhGnDaXQa9+rAjflisk6rT9Q1DeLNDHPPFxOzRbj3EtPEf/aJ 5yxMazZ2KAgYn4v9IkdA2TUUq/T5g6XOd0yPhhj3T9UEMqwoNpfaIh6eA1MIz2Ov eaa85tx7OLoblW4zveCCa+Pw6Utpl91+60IQdAOjN2bePojd/eKAmjCh+V3HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxHbcPjC+eIbuHJtq7TgHEULcudowHwYDVR0j BBgwFoAUrnXiydhKGtkzrjUqXKqVvW0z5EswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwOTk5NjU5Mzc5MDk3OC8wL0FFNzVFMkM5RDg0QTFBRDkzM0FFMzUyQTVDQUE5 NUJENkQzM0U0NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2RDMzRTQ0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDk5OTY1OTM3OTA5NzgvMC9BRTc1RTJDOUQ4NEEx QUQ5MzNBRTM1MkE1Q0FBOTVCRDZEMzNFNDRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+frq80g4+OI 2Cw/2vuryVCr0CRfZCijN76U9z1urkIchgXHj3wJZHmwQEmuOC8u+ei+31HzGPZb LDWjpW4VNpm3cB54s3PJ5yLJ7AmqNoSw6+Xzfqpabwp/sRJjnqv8GwIhLwBuRb4i Fd0nFL5EW8Fsa8HCGgNCiXCnh8ByTmFy04s//eyl0vwJecrq29X0HK6t4IQZouqn zCUewQFNdd0cCPU9dZUY3fNtYanoHFRkF6WfKmJ+TVmqcX1w69TpoDnleiAjTnDB kKm0n5485d0W11Zk80rjcK3glVMmRSMiY6aa+YQjcsoRyU5KO/0Khgc9msiQZHsS A8MGMgO/mg== -----END CERTIFICATE-----Generated at Fri May 29 22:03:34 2026 by rpki-client