$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft File: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft (raw, json) Hash identifier: 7djHVArdEgHVoqLCFTNBUdswjcD2xx5bZ/Jm9EfG4V8= Subject key identifier: 6B:82:13:60:3F:DD:ED:A9:54:85:1A:D3:65:77:B0:43:25:16:42:2F Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Certificate serial: 078E48A4AF360E8F06AAA77668ACF68D401A0D87 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft Manifest number: 35 Signing time: Fri 22 May 2026 16:52:23 +0000 Manifest this update: Fri 22 May 2026 16:47:23 +0000 Manifest next update: Sat 23 May 2026 18:12:23 +0000 Files and hashes: 1: 34332e3234302e3230312e302f32342d3234203d3e2034383038.roa (hash: 4iUeVkG/jY1t+8WG/BciSvsYpoG5vX8uPqiNIUCf+TU=) 2: 34332e3234302e3230302e302f32342d3234203d3e2034383038.roa (hash: jH4oDmP6oaOM9gvOyE2Nx4TAC2Qkee39rebiB87cwyI=) 3: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl (hash: OBic5NrKzwBosn3QAtgwMDVpUpi44o7737ACY+5ZYLs=) 4: 3130332e33362e3136302e302f32342d3234203d3e2030.roa (hash: Bldld99h3NZM1Qe5b+70bZMRgNDLPcMHp7Kj+aQCBwU=) 5: 3130332e33362e3136312e302f32342d3234203d3e2030.roa (hash: rLUuT7j0BQQKXLH7blKy9zsxcJBl8lFXJTXeZAmoi04=) 6: 3130332e33362e3136322e302f32342d3234203d3e2030.roa (hash: 4zMQp6a1CixszbfIwzHf11h1LQph2hVfQjbrzDw2gew=) 7: 3130332e33362e3136332e302f32342d3234203d3e2030.roa (hash: XjFtjoTaXfVjDs7zv6u6xKOOqFMXKwT22E1RPXpJ/6U=) 8: 34332e3234302e3230322e302f32342d3234203d3e2030.roa (hash: E/gjhJ9Hm91GpWCRMJAiLbm9DE3TG+yaRqQ1xloE1CU=) 9: 34332e3234302e3230332e302f32342d3234203d3e2030.roa (hash: B9336hSEDKsLNxqt5DYV9dkzCNCfuJLc50T2hGH9s08=) 10: 323430313a356338303a3a2f33322d3332203d3e2030.roa (hash: 1LDXyBKSFl2CziO/AAgiipLUXTwKWhQ9V+Y4/cF1F1s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 18:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:8e:48:a4:af:36:0e:8f:06:aa:a7:76:68:ac:f6:8d:40:1a:0d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Validity Not Before: May 22 16:47:23 2026 GMT Not After : May 23 18:12:23 2026 GMT Subject: CN=6B8213603FDDEDA954851AD36577B0432516422F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:a5:1e:9c:ea:b0:c8:d0:24:1c:83:b5:ef: 8e:af:90:03:c7:cc:d6:74:49:e4:4e:01:9d:fc:64: 47:b6:ae:9b:df:40:72:47:b6:54:a6:f0:7a:ef:a3: 1c:48:b9:08:1f:b3:e0:6c:eb:41:a0:26:24:46:ae: 39:b8:9f:43:3a:a5:4b:64:72:d0:25:6e:6d:fe:a5: 48:4a:3f:c8:91:40:37:bb:fc:08:e7:a3:34:76:dc: 2b:c5:7a:72:66:28:81:c7:4a:d8:dc:4c:ac:e3:84: b5:24:54:26:5a:f7:a6:b5:a5:f4:8f:9a:c0:55:20: da:59:37:84:31:8f:bf:17:b0:e0:bc:57:8e:ee:ee: 72:61:1f:9e:77:26:d0:60:3e:6a:5e:6a:56:49:27: 6c:88:d1:e1:d8:c6:68:5c:35:e5:8a:62:e4:36:80: 1a:bb:e9:ee:bb:f3:c2:d8:8d:ea:97:e1:0c:8a:78: 41:b3:89:43:3c:02:73:4c:e3:db:30:d3:e5:42:1c: 68:ff:e0:dc:30:ae:f4:4a:ab:13:b7:0c:e3:5c:d2: a1:26:e9:a1:1b:07:fd:37:59:e7:11:d5:b6:93:18: b0:d0:b9:12:4b:cb:38:74:81:22:08:21:a2:8f:66: db:53:37:fc:96:12:31:ca:d7:5f:25:f9:3c:cd:59: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:82:13:60:3F:DD:ED:A9:54:85:1A:D3:65:77:B0:43:25:16:42:2F X509v3 Authority Key Identifier: keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:47:57:44:29:86:63:9b:a3:1b:3f:f0:0d:c8:06:44:47:67: bd:86:cf:f2:39:53:dd:65:7c:1f:cf:e6:6b:3d:41:b1:38:3d: 7b:45:0f:df:f0:96:eb:5c:54:f3:c4:2b:dc:d1:13:f0:85:04: 2b:61:21:76:44:38:6f:32:f0:8d:06:78:93:87:9c:ed:fc:55: b8:2f:ca:78:15:fc:46:c8:63:8a:83:a7:9f:a1:e6:7c:8d:f8: fc:c5:c8:df:f1:e9:ce:60:38:1f:88:69:7f:a2:fa:71:88:6a: 8b:9f:86:fd:6d:d0:1f:0b:74:9a:bc:22:2a:35:19:6e:64:0f: be:1b:d4:4c:3f:10:df:70:90:54:fb:04:26:16:fd:b6:a9:ad: 08:31:3f:02:de:5a:12:31:4c:93:a1:b2:a9:24:df:85:a6:e5: 34:35:7f:35:79:98:d6:67:a7:60:f9:14:eb:8d:9b:d1:de:11: a9:cc:f8:b8:35:74:94:50:3f:00:85:c4:3b:de:1c:0c:53:9b: 2b:52:52:23:4e:6e:a2:b2:7e:7f:2b:23:a9:27:34:86:06:3a: c9:19:95:d2:11:23:b4:89:ad:ba:ea:2a:54:94:51:98:d8:44: 0a:2e:da:b1:5c:39:2a:4d:01:6b:4b:34:be:5e:f4:48:42:5d: b7:b1:e5:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB45IpK82Do8Gqqd2aKz2jUAaDYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy Q0FBRjcyNzAeFw0yNjA1MjIxNjQ3MjNaFw0yNjA1MjMxODEyMjNaMDMxMTAvBgNV BAMTKDZCODIxMzYwM0ZEREVEQTk1NDg1MUFEMzY1NzdCMDQzMjUxNjQyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kaUenOqwyNAkHIO1746vkAPH zNZ0SeROAZ38ZEe2rpvfQHJHtlSm8HrvoxxIuQgfs+Bs60GgJiRGrjm4n0M6pUtk ctAlbm3+pUhKP8iRQDe7/AjnozR23CvFenJmKIHHStjcTKzjhLUkVCZa96a1pfSP msBVINpZN4Qxj78XsOC8V47u7nJhH553JtBgPmpealZJJ2yI0eHYxmhcNeWKYuQ2 gBq76e6788LYjeqX4QyKeEGziUM8AnNM49sw0+VCHGj/4NwwrvRKqxO3DONc0qEm 6aEbB/03WecR1baTGLDQuRJLyzh0gSIIIaKPZttTN/yWEjHK118l+TzNWWzJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUa4ITYD/d7alUhRrTZXewQyUWQi8wHwYDVR0j BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTA4ODYzODYwODk5ODcvMC9BRTA5REQwNTZCM0I1 RUE0QzQ4NzIyQzY3RjYzRjBBMTJDQUFGNzI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUdXRCmGY5uj Gz/wDcgGREdnvYbP8jlT3WV8H8/maz1BsTg9e0UP3/CW61xU88Qr3NET8IUEK2Eh dkQ4bzLwjQZ4k4ec7fxVuC/KeBX8RshjioOnn6HmfI34/MXI3/HpzmA4H4hpf6L6 cYhqi5+G/W3QHwt0mrwiKjUZbmQPvhvUTD8Q33CQVPsEJhb9tqmtCDE/At5aEjFM k6GyqSTfhablNDV/NXmY1menYPkU642b0d4Rqcz4uDV0lFA/AIXEO94cDFObK1JS I05uorJ+fysjqSc0hgY6yRmV0hEjtImtuuoqVJRRmNhECi7asVw5Kk0Ba0s0vl70 SEJdt7HlHA== -----END CERTIFICATE-----Generated at Sat May 23 03:45:15 2026 by rpki-client