$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft File: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft (raw, json) Hash identifier: /djxGiVhqhVE/yqgpALn4KY2puouy7WOBr/HEIPB6A4= Subject key identifier: C7:0B:62:EA:2D:08:90:25:23:4F:D7:E8:AB:56:04:02:65:C6:D1:0D Authority key identifier: AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B Certificate issuer: /CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Certificate serial: 2C33D420C724B32CF14FD3E70726413105D1073F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft Manifest number: B7 Signing time: Fri 28 Aug 2026 06:47:49 +0000 Manifest this update: Fri 28 Aug 2026 06:42:49 +0000 Manifest next update: Mon 31 Aug 2026 08:07:49 +0000 Files and hashes: 1: 3130332e36392e31362e302f32322d3232203d3e20313531323836.roa (hash: pipFRX3g8zpKBxJfoHYgo/R05QsqXUeAMaREmbsYQc4=) 2: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl (hash: o7ek/v52fXkRAUv2MNA/sy5EiQaNKlJLULpi43HPoxQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:33:d4:20:c7:24:b3:2c:f1:4f:d3:e7:07:26:41:31:05:d1:07:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Validity Not Before: Aug 28 06:42:49 2026 GMT Not After : Aug 31 08:07:49 2026 GMT Subject: CN=C70B62EA2D089025234FD7E8AB56040265C6D10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:9c:08:1a:b5:1d:04:0f:b6:de:b1:22:ab: ad:42:63:83:ae:83:e0:8a:31:ea:7c:9c:8c:ba:da: 15:ef:b7:9f:3c:5b:02:2f:27:18:45:d4:da:d8:df: 1d:e9:77:40:59:71:31:b5:c8:a1:5c:38:8b:40:a4: f9:3d:bd:f1:47:7a:4e:ca:4c:b8:8f:41:42:28:59: 4c:72:0e:98:15:ba:1c:ca:72:a1:6d:cb:2a:a4:42: 82:84:56:48:a1:48:28:b9:7b:f8:1e:c8:91:eb:54: f1:bf:77:43:69:52:0d:6c:bd:62:1f:27:e9:2d:60: 5d:26:ff:34:53:13:7f:25:dd:80:d3:f2:fa:fe:e2: d6:5a:68:4c:f0:1b:82:73:cd:0f:be:7b:0d:8c:0b: ee:8f:ae:8b:e7:36:58:0f:36:68:4c:1a:77:af:64: 6e:b0:20:8e:0c:f3:25:98:f6:4c:7b:06:de:dc:22: 64:36:5e:08:ab:52:f8:a4:8d:ad:06:94:97:3f:90: dd:16:5d:bc:e6:d4:e1:21:ab:98:fe:46:47:f6:72: c5:b4:e1:5a:58:5b:f6:27:3d:2e:9a:28:4c:aa:76: bc:40:dd:f5:40:0b:9d:9c:7f:36:90:01:58:f1:36: c4:69:ec:49:b7:c4:fb:af:ad:3f:c6:39:a0:ff:20: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0B:62:EA:2D:08:90:25:23:4F:D7:E8:AB:56:04:02:65:C6:D1:0D X509v3 Authority Key Identifier: keyid:AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:99:c2:33:ba:d4:d7:aa:92:ac:3d:55:64:d7:e6:67:75:f4: 62:73:5e:cb:5c:69:cc:b0:9a:2b:63:f4:70:4b:04:4e:69:22: 54:48:55:e5:5e:20:d1:47:a6:b7:32:9d:22:9a:9f:c9:d8:df: 71:90:7a:34:20:f6:60:ce:0b:2b:ec:25:a8:f7:31:cf:14:8d: 79:81:d2:76:4f:1e:6a:eb:5b:e2:e2:00:4d:35:4b:2c:7f:1c: 66:e8:d7:3c:cc:c2:63:e5:0b:7f:22:f9:69:b3:73:82:07:3e: 2f:e8:49:4c:32:57:92:f3:fd:f8:1a:d3:4f:45:c2:87:4b:28: 47:2d:40:34:2f:9e:d2:16:8f:93:17:24:42:33:aa:1c:ea:fd: 7a:20:ca:4c:1c:bb:27:9b:35:cc:46:59:13:a0:59:fe:37:98: 5a:68:b5:36:dd:6b:10:30:d9:f1:6d:79:c3:8f:e9:55:f1:61: c8:5a:b6:c1:76:99:e1:47:f7:f3:d3:ac:9a:6b:44:1d:7a:f8: 7d:04:26:dc:a7:40:80:75:83:a2:f8:56:5a:cf:7d:0f:ab:96: 77:0a:da:d7:75:e5:94:fd:bc:fd:9d:3d:8e:10:9e:57:6d:cb: 55:14:4c:7e:e8:34:38:b2:68:d7:69:af:86:de:8e:0f:c7:27: 3a:c0:45:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULDPUIMcksyzxT9PnByZBMQXRBz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2 RDMzRTQ0QjAeFw0yNjA4MjgwNjQyNDlaFw0yNjA4MzEwODA3NDlaMDMxMTAvBgNV BAMTKEM3MEI2MkVBMkQwODkwMjUyMzRGRDdFOEFCNTYwNDAyNjVDNkQxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/O5wIGrUdBA+23rEiq61CY4Ou g+CKMep8nIy62hXvt588WwIvJxhF1NrY3x3pd0BZcTG1yKFcOItApPk9vfFHek7K TLiPQUIoWUxyDpgVuhzKcqFtyyqkQoKEVkihSCi5e/geyJHrVPG/d0NpUg1svWIf J+ktYF0m/zRTE38l3YDT8vr+4tZaaEzwG4JzzQ++ew2MC+6ProvnNlgPNmhMGnev ZG6wII4M8yWY9kx7Bt7cImQ2XgirUvikja0GlJc/kN0WXbzm1OEhq5j+Rkf2csW0 4VpYW/YnPS6aKEyqdrxA3fVAC52cfzaQAVjxNsRp7Em3xPuvrT/GOaD/IOIBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxwti6i0IkCUjT9foq1YEAmXG0Q0wHwYDVR0j BBgwFoAUrnXiydhKGtkzrjUqXKqVvW0z5EswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwOTk5NjU5Mzc5MDk3OC8wL0FFNzVFMkM5RDg0QTFBRDkzM0FFMzUyQTVDQUE5 NUJENkQzM0U0NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2RDMzRTQ0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDk5OTY1OTM3OTA5NzgvMC9BRTc1RTJDOUQ4NEEx QUQ5MzNBRTM1MkE1Q0FBOTVCRDZEMzNFNDRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJnCM7rU16qS rD1VZNfmZ3X0YnNey1xpzLCaK2P0cEsETmkiVEhV5V4g0UemtzKdIpqfydjfcZB6 NCD2YM4LK+wlqPcxzxSNeYHSdk8eautb4uIATTVLLH8cZujXPMzCY+ULfyL5abNz ggc+L+hJTDJXkvP9+BrTT0XCh0soRy1ANC+e0haPkxckQjOqHOr9eiDKTBy7J5s1 zEZZE6BZ/jeYWmi1Nt1rEDDZ8W15w4/pVfFhyFq2wXaZ4Uf389OsmmtEHXr4fQQm 3KdAgHWDovhWWs99D6uWdwra13XllP28/Z09jhCeV23LVRRMfug0OLJo12mvht6O D8cnOsBFkQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:22 2026 by rpki-client