$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft File: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft (raw, json) Hash identifier: /N26Ccz/SpYqAfF9KgSMDhzXSV1k/4gBHN+PyaJpBhk= Subject key identifier: 85:D3:81:B6:77:D6:42:31:2D:2D:02:D2:A7:30:60:16:56:67:59:E3 Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Certificate serial: 2757A5C88DA8FF519AFEA94AC76296233B3F865F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft Manifest number: 71 Signing time: Tue 07 Jul 2026 03:28:20 +0000 Manifest this update: Tue 07 Jul 2026 03:23:20 +0000 Manifest next update: Wed 08 Jul 2026 06:57:20 +0000 Files and hashes: 1: 34332e3234302e3230322e302f32342d3234203d3e2030.roa (hash: E/gjhJ9Hm91GpWCRMJAiLbm9DE3TG+yaRqQ1xloE1CU=) 2: 3130332e33362e3136312e302f32342d3234203d3e2030.roa (hash: rLUuT7j0BQQKXLH7blKy9zsxcJBl8lFXJTXeZAmoi04=) 3: 3130332e33362e3136332e302f32342d3234203d3e2030.roa (hash: XjFtjoTaXfVjDs7zv6u6xKOOqFMXKwT22E1RPXpJ/6U=) 4: 34332e3234302e3230332e302f32342d3234203d3e2030.roa (hash: B9336hSEDKsLNxqt5DYV9dkzCNCfuJLc50T2hGH9s08=) 5: 3130332e33362e3136302e302f32342d3234203d3e2030.roa (hash: Bldld99h3NZM1Qe5b+70bZMRgNDLPcMHp7Kj+aQCBwU=) 6: 323430313a356338303a3a2f33322d3332203d3e2030.roa (hash: 1LDXyBKSFl2CziO/AAgiipLUXTwKWhQ9V+Y4/cF1F1s=) 7: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl (hash: gbqyrT/+Ro1KrscfFwj7nyGWl83FPNS/Wv0Zns96Rw8=) 8: 34332e3234302e3230302e302f32342d3234203d3e2034383038.roa (hash: jH4oDmP6oaOM9gvOyE2Nx4TAC2Qkee39rebiB87cwyI=) 9: 34332e3234302e3230312e302f32342d3234203d3e2034383038.roa (hash: 4iUeVkG/jY1t+8WG/BciSvsYpoG5vX8uPqiNIUCf+TU=) 10: 3130332e33362e3136322e302f32342d3234203d3e2030.roa (hash: 4zMQp6a1CixszbfIwzHf11h1LQph2hVfQjbrzDw2gew=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 06:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:57:a5:c8:8d:a8:ff:51:9a:fe:a9:4a:c7:62:96:23:3b:3f:86:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Validity Not Before: Jul 7 03:23:20 2026 GMT Not After : Jul 8 06:57:20 2026 GMT Subject: CN=85D381B677D642312D2D02D2A7306016566759E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dc:3a:52:5c:28:e6:e3:58:44:af:33:58:b9: 99:c0:32:56:3d:ff:b4:da:bf:68:6d:6d:fd:78:f8: 9d:de:ee:fa:4f:c7:22:02:7d:42:86:64:99:67:41: 42:e6:a8:30:f1:c5:9d:f2:c5:7f:7c:71:54:f1:0b: 97:ca:27:fb:97:18:17:1f:ce:9e:70:1d:4a:35:54: 8c:99:6a:80:06:07:02:1f:86:72:81:6e:4c:0f:43: 7e:be:ef:5f:90:88:35:72:b2:49:ab:1e:24:10:db: 33:57:b3:e4:c9:c5:2c:22:f5:ab:6e:28:25:1b:a0: 8b:52:36:37:88:64:13:34:72:f0:da:d4:1a:00:3f: 65:5b:fe:57:25:26:a4:4d:f2:1b:f6:9f:cf:31:2e: f0:2c:64:f2:5a:28:01:d9:4b:07:1a:eb:ba:f6:89: b4:17:a0:1e:87:72:35:8b:3b:11:9d:91:1d:49:af: bc:1d:14:d0:8d:69:43:3c:23:a9:61:4d:5d:55:81: 9b:77:b8:7e:b1:22:6e:fe:a5:09:8e:19:d7:b8:1e: b0:94:33:ec:ff:ce:aa:72:dd:b4:f0:cc:17:46:06: ae:e1:00:d7:fb:47:56:07:92:05:70:04:fd:c2:04: be:6d:f7:4b:b7:fe:8f:aa:ac:b9:af:6f:b7:a5:12: 46:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D3:81:B6:77:D6:42:31:2D:2D:02:D2:A7:30:60:16:56:67:59:E3 X509v3 Authority Key Identifier: keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c4:1f:eb:1d:6b:7b:14:aa:32:13:01:3f:e5:ed:9b:0b:ae: ca:aa:b7:63:b4:06:7c:31:0d:79:0c:39:32:57:62:2c:5d:3e: c0:06:02:25:13:dd:52:4f:c8:90:df:40:ea:d2:8f:df:b1:d6: 43:8b:5a:43:c5:8b:ad:90:7b:09:7f:da:87:24:7e:a3:a8:9c: eb:5a:33:45:a1:ea:36:ca:57:55:55:c8:93:e0:cb:90:fb:35: b1:57:76:54:a6:cc:28:53:d5:df:2a:2e:54:1b:23:c1:3b:e2: 63:8c:6c:a3:70:6b:f5:74:ba:f9:8c:30:5c:30:b1:5c:5d:5e: 34:2f:ee:ad:ed:ff:8e:99:c8:e7:f1:68:95:b0:20:cb:8b:e5: 23:8c:55:68:72:ac:81:2d:f7:3f:5e:62:15:69:2e:0d:aa:5d: 70:5a:de:44:a6:aa:ef:11:3d:f9:4a:66:6e:71:68:50:1e:1b: 31:8d:ef:25:19:49:6e:b8:c8:b1:6c:cd:e4:2c:58:7f:aa:1f: d1:4b:93:7a:32:6d:c1:47:7a:05:aa:d8:76:e9:46:c5:02:69: 28:6f:8b:52:7e:1e:f4:b1:32:a6:cf:54:60:de:cf:c1:5b:e8: d2:e0:20:f8:b0:52:56:3b:a4:46:78:0c:66:c7:9d:01:84:12: 76:8d:18:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ1elyI2o/1Ga/qlKx2KWIzs/hl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy Q0FBRjcyNzAeFw0yNjA3MDcwMzIzMjBaFw0yNjA3MDgwNjU3MjBaMDMxMTAvBgNV BAMTKDg1RDM4MUI2NzdENjQyMzEyRDJEMDJEMkE3MzA2MDE2NTY2NzU5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY3DpSXCjm41hErzNYuZnAMlY9 /7Tav2htbf14+J3e7vpPxyICfUKGZJlnQULmqDDxxZ3yxX98cVTxC5fKJ/uXGBcf zp5wHUo1VIyZaoAGBwIfhnKBbkwPQ36+71+QiDVyskmrHiQQ2zNXs+TJxSwi9atu KCUboItSNjeIZBM0cvDa1BoAP2Vb/lclJqRN8hv2n88xLvAsZPJaKAHZSwca67r2 ibQXoB6HcjWLOxGdkR1Jr7wdFNCNaUM8I6lhTV1VgZt3uH6xIm7+pQmOGde4HrCU M+z/zqpy3bTwzBdGBq7hANf7R1YHkgVwBP3CBL5t90u3/o+qrLmvb7elEkaZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhdOBtnfWQjEtLQLSpzBgFlZnWeMwHwYDVR0j BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTA4ODYzODYwODk5ODcvMC9BRTA5REQwNTZCM0I1 RUE0QzQ4NzIyQzY3RjYzRjBBMTJDQUFGNzI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMQf6x1rexSq MhMBP+Xtmwuuyqq3Y7QGfDENeQw5MldiLF0+wAYCJRPdUk/IkN9A6tKP37HWQ4ta Q8WLrZB7CX/ahyR+o6ic61ozRaHqNspXVVXIk+DLkPs1sVd2VKbMKFPV3youVBsj wTviY4xso3Br9XS6+YwwXDCxXF1eNC/ure3/jpnI5/FolbAgy4vlI4xVaHKsgS33 P15iFWkuDapdcFreRKaq7xE9+UpmbnFoUB4bMY3vJRlJbrjIsWzN5CxYf6of0UuT ejJtwUd6BarYdulGxQJpKG+LUn4e9LEyps9UYN7PwVvo0uAg+LBSVjukRngMZsed AYQSdo0YQQ== -----END CERTIFICATE-----Generated at Tue Jul 7 10:47:24 2026 by rpki-client