$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft File: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft (raw, json) Hash identifier: uetUNisQvqAGKTkNJdAueZvtR9iZ9EDTsSRvv4JF7vc= Subject key identifier: 41:28:D1:49:83:44:9A:B8:06:ED:8A:3F:DA:09:96:9E:79:F7:50:DA Authority key identifier: AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B Certificate issuer: /CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Certificate serial: 611B93926B18904AE5E91A40C5D5E8607C826C3E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft Manifest number: 7B Signing time: Tue 14 Jul 2026 12:06:13 +0000 Manifest this update: Tue 14 Jul 2026 12:01:13 +0000 Manifest next update: Wed 15 Jul 2026 15:17:13 +0000 Files and hashes: 1: AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl (hash: x0ddDpyTvoVCiG2jlLw0trZGqKT2dJAo4iXBhhZAMaw=) 2: 3130332e36392e31362e302f32322d3232203d3e20313531323836.roa (hash: pipFRX3g8zpKBxJfoHYgo/R05QsqXUeAMaREmbsYQc4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 15:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1b:93:92:6b:18:90:4a:e5:e9:1a:40:c5:d5:e8:60:7c:82:6c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B Validity Not Before: Jul 14 12:01:13 2026 GMT Not After : Jul 15 15:17:13 2026 GMT Subject: CN=4128D14983449AB806ED8A3FDA09969E79F750DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:84:29:98:fa:cd:a9:65:72:70:58:49:a1: 06:8b:df:b6:43:1b:7e:c4:29:32:5d:a3:90:52:d3: 4d:c6:d1:42:db:f0:bc:d6:84:e7:ca:ea:0b:a5:af: 49:71:35:0d:57:35:56:c6:4e:53:0f:ad:aa:3c:45: 8a:37:26:1f:6d:5e:da:53:6c:23:6f:be:31:d4:a4: 0d:10:ed:74:7a:a7:82:79:76:97:a9:b4:a0:46:02: 28:6f:08:32:d3:7b:20:3a:55:bf:e4:9e:e1:2d:6b: 0d:8f:d8:bd:57:ff:b8:dc:e5:33:53:55:ca:e5:b5: 67:d8:88:40:cd:ba:73:b0:0a:58:d4:5a:38:17:6f: d7:f1:7b:f4:c6:87:5b:41:c8:d3:16:4d:00:95:4f: c0:7a:46:b3:2a:2b:17:ad:51:07:9c:43:d2:a7:b2: 9b:ba:d9:ad:61:ba:40:7a:5f:5f:05:ba:88:19:5f: 96:14:c5:4a:8e:2e:b1:a4:1f:89:86:6a:b8:1a:08: 10:a3:80:1c:7a:97:df:20:b8:3f:94:fa:e9:23:52: 3b:cf:b7:bf:d9:69:ff:23:20:b9:b3:07:36:2a:ec: fa:a1:ff:79:1e:da:e4:4a:92:8b:54:62:3f:62:72: 17:61:17:9a:82:ff:12:16:32:01:e1:1a:da:78:85: d1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:28:D1:49:83:44:9A:B8:06:ED:8A:3F:DA:09:96:9E:79:F7:50:DA X509v3 Authority Key Identifier: keyid:AE:75:E2:C9:D8:4A:1A:D9:33:AE:35:2A:5C:AA:95:BD:6D:33:E4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096009996593790978/0/AE75E2C9D84A1AD933AE352A5CAA95BD6D33E44B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:62:5d:93:fa:05:86:f8:5c:d8:62:e8:88:f9:e6:ed:60:91: be:b4:06:a5:22:59:c1:cc:96:c8:22:e4:ea:9e:7c:e0:5a:95: ef:f8:b9:50:c8:a2:e9:96:ee:20:ee:99:d0:92:48:bc:fb:be: ec:ba:2c:8c:d5:c9:33:4e:35:5a:17:41:3f:e1:61:8a:b2:bc: 5f:be:d6:d6:eb:25:3a:ed:50:40:83:99:6b:ec:23:b6:61:8f: 04:98:87:89:62:ee:29:42:de:af:9f:0e:06:3b:b3:63:bc:61: bc:66:c4:74:6d:39:7c:18:cb:f1:84:e3:ae:f5:78:32:e8:61: 3c:bb:16:e2:73:0d:93:82:38:94:53:12:89:d1:b2:6f:c9:cc: 92:ef:2e:22:06:a7:09:64:d5:08:e7:e6:12:47:b7:4b:a1:62: b3:72:d0:ac:b1:d7:33:82:4f:7f:8e:d9:c5:4c:8c:36:0a:cd: 55:38:90:1f:18:fb:1d:3f:3d:50:8d:7c:4b:6e:da:e4:3d:04: 33:3e:ed:15:24:37:04:10:39:24:71:66:ea:89:92:fc:4f:27: 5f:ff:56:4c:34:29:8e:f5:1d:03:91:1d:d4:2a:0d:00:36:ae: 81:dc:c6:26:e3:15:fc:b1:b4:9f:85:7d:b1:b6:b3:39:a5:4e: 32:27:3a:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYRuTkmsYkErl6RpAxdXoYHyCbD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2 RDMzRTQ0QjAeFw0yNjA3MTQxMjAxMTNaFw0yNjA3MTUxNTE3MTNaMDMxMTAvBgNV BAMTKDQxMjhEMTQ5ODM0NDlBQjgwNkVEOEEzRkRBMDk5NjlFNzlGNzUwREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCikYQpmPrNqWVycFhJoQaL37ZD G37EKTJdo5BS003G0ULb8LzWhOfK6gulr0lxNQ1XNVbGTlMPrao8RYo3Jh9tXtpT bCNvvjHUpA0Q7XR6p4J5dpeptKBGAihvCDLTeyA6Vb/knuEtaw2P2L1X/7jc5TNT VcrltWfYiEDNunOwCljUWjgXb9fxe/TGh1tByNMWTQCVT8B6RrMqKxetUQecQ9Kn spu62a1hukB6X18FuogZX5YUxUqOLrGkH4mGargaCBCjgBx6l98guD+U+ukjUjvP t7/Zaf8jILmzBzYq7Pqh/3ke2uRKkotUYj9ichdhF5qC/xIWMgHhGtp4hdGtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQSjRSYNEmrgG7Yo/2gmWnnn3UNowHwYDVR0j BBgwFoAUrnXiydhKGtkzrjUqXKqVvW0z5EswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwOTk5NjU5Mzc5MDk3OC8wL0FFNzVFMkM5RDg0QTFBRDkzM0FFMzUyQTVDQUE5 NUJENkQzM0U0NEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU3NUUyQzlEODRBMUFEOTMzQUUzNTJBNUNBQTk1QkQ2RDMzRTQ0Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDk5OTY1OTM3OTA5NzgvMC9BRTc1RTJDOUQ4NEEx QUQ5MzNBRTM1MkE1Q0FBOTVCRDZEMzNFNDRCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2Jdk/oFhvhc 2GLoiPnm7WCRvrQGpSJZwcyWyCLk6p584FqV7/i5UMii6ZbuIO6Z0JJIvPu+7Los jNXJM041WhdBP+FhirK8X77W1uslOu1QQIOZa+wjtmGPBJiHiWLuKULer58OBjuz Y7xhvGbEdG05fBjL8YTjrvV4MuhhPLsW4nMNk4I4lFMSidGyb8nMku8uIganCWTV COfmEke3S6Fis3LQrLHXM4JPf47ZxUyMNgrNVTiQHxj7HT89UI18S27a5D0EMz7t FSQ3BBA5JHFm6omS/E8nX/9WTDQpjvUdA5Ed1CoNADaugdzGJuMV/LG0n4V9sbaz OaVOMic68A== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:40 2026 by rpki-client