$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft File: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft (raw, json) Hash identifier: qfontQBgEnXWUyVHRfWqt1JqI7GRmdQSB19NtV5x3Ag= Subject key identifier: AD:EA:0E:D5:25:7C:FF:56:B3:45:4F:11:3B:05:90:29:09:2F:A7:6E Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Certificate serial: 28EB526CFEFABE96C27003012DED076A85A79024 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft Manifest number: AE Signing time: Fri 21 Aug 2026 20:00:39 +0000 Manifest this update: Fri 21 Aug 2026 19:55:39 +0000 Manifest next update: Sat 22 Aug 2026 23:25:39 +0000 Files and hashes: 1: 323430313a356338303a3a2f33322d3332203d3e2030.roa (hash: 1LDXyBKSFl2CziO/AAgiipLUXTwKWhQ9V+Y4/cF1F1s=) 2: 34332e3234302e3230312e302f32342d3234203d3e2034383038.roa (hash: 4iUeVkG/jY1t+8WG/BciSvsYpoG5vX8uPqiNIUCf+TU=) 3: 3130332e33362e3136322e302f32342d3234203d3e2030.roa (hash: 4zMQp6a1CixszbfIwzHf11h1LQph2hVfQjbrzDw2gew=) 4: AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl (hash: N6SZRDNRxeNx1jjR1ECwn04H20LR9c0ti9piwdk1ZGg=) 5: 3130332e33362e3136302e302f32342d3234203d3e2030.roa (hash: Bldld99h3NZM1Qe5b+70bZMRgNDLPcMHp7Kj+aQCBwU=) 6: 34332e3234302e3230322e302f32342d3234203d3e2030.roa (hash: E/gjhJ9Hm91GpWCRMJAiLbm9DE3TG+yaRqQ1xloE1CU=) 7: 34332e3234302e3230332e302f32342d3234203d3e2030.roa (hash: B9336hSEDKsLNxqt5DYV9dkzCNCfuJLc50T2hGH9s08=) 8: 3130332e33362e3136332e302f32342d3234203d3e2030.roa (hash: XjFtjoTaXfVjDs7zv6u6xKOOqFMXKwT22E1RPXpJ/6U=) 9: 34332e3234302e3230302e302f32342d3234203d3e2034383038.roa (hash: jH4oDmP6oaOM9gvOyE2Nx4TAC2Qkee39rebiB87cwyI=) 10: 3130332e33362e3136312e302f32342d3234203d3e2030.roa (hash: rLUuT7j0BQQKXLH7blKy9zsxcJBl8lFXJTXeZAmoi04=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 15:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:eb:52:6c:fe:fa:be:96:c2:70:03:01:2d:ed:07:6a:85:a7:90:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Validity Not Before: Aug 21 19:55:39 2026 GMT Not After : Aug 22 23:25:39 2026 GMT Subject: CN=ADEA0ED5257CFF56B3454F113B059029092FA76E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:16:f2:76:d2:66:ea:e0:90:22:7a:ee:2f:07: ca:c2:2f:8b:5a:77:71:65:ce:b0:5f:68:51:4e:5a: f6:fb:fa:d7:8b:3f:18:24:2f:4e:27:dd:4f:5e:d8: 62:4a:b5:8b:58:36:52:ab:ab:05:a2:b8:d1:62:7d: 55:e2:d3:9b:37:8c:4d:59:7b:62:68:f2:a8:66:cd: 13:45:f0:14:ec:4c:2e:89:96:9f:6b:c0:59:39:f6: 56:79:fb:17:a2:64:ae:d5:82:25:73:ea:55:fb:63: c4:cd:47:72:27:48:5c:78:38:84:37:73:e9:4d:9f: b3:6c:31:e3:d0:bf:a5:f9:9f:13:c2:80:03:54:7c: 8a:da:13:f1:d2:9d:df:01:a8:d5:23:9d:33:37:34: de:78:57:9a:62:ff:b4:f3:9b:06:74:20:37:cb:42: 6d:f8:a0:ec:5e:33:cf:fb:fd:1c:2a:6b:08:02:01: 87:44:76:03:1d:4f:0d:91:ab:4a:73:e5:18:5f:8c: e8:b3:92:27:5b:7b:d1:08:92:df:fd:77:b8:96:a0: 33:eb:21:99:a1:94:cd:f6:65:55:fc:d4:81:db:3a: c0:8a:c8:44:14:2a:04:80:f4:e7:e3:d3:45:2f:15: 1c:93:da:6f:06:2d:66:0a:a8:11:e6:f2:c1:a6:08: cc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EA:0E:D5:25:7C:FF:56:B3:45:4F:11:3B:05:90:29:09:2F:A7:6E X509v3 Authority Key Identifier: keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:89:53:e5:8d:59:88:1e:56:cb:ae:56:7e:f6:79:cc:1c:de: 9c:02:9c:89:de:b0:03:80:0b:ad:da:6b:8f:ab:cf:4b:ae:eb: a3:61:ee:a0:1e:ec:be:53:f4:e4:9f:39:cd:03:22:9f:2c:50: 37:61:44:ad:a3:9c:86:98:66:b3:11:0d:1b:55:07:0e:27:06: 92:0b:3c:9d:a2:48:47:79:b6:a6:5e:4d:83:15:a5:43:9b:82: d2:70:d2:dd:67:07:5b:26:22:29:01:51:12:29:98:28:ec:5b: 0c:db:28:6d:d8:bc:31:ea:eb:14:83:f8:d7:89:85:2a:e9:79: 8d:e4:70:90:ed:f2:16:c8:16:b4:07:b7:0a:3b:33:8d:16:61: 12:f3:bf:38:ba:96:02:bc:b7:1f:86:ae:8f:ea:8e:ba:6a:6f: 16:75:b5:d2:34:12:0a:e9:15:45:09:69:e1:ad:65:78:ee:64: e4:09:6d:75:f7:4d:21:83:0e:09:4f:f0:d6:2b:01:67:38:c2: fe:5f:9d:b2:8e:88:76:68:5f:8c:6c:06:5b:40:6f:d7:d6:72: a8:db:c7:f4:94:0f:6e:7c:59:ac:30:11:58:33:48:c1:cd:53: e6:f5:46:e2:89:6d:37:b5:86:e1:20:96:cc:f4:c2:16:21:e0: 44:81:bd:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKOtSbP76vpbCcAMBLe0HaoWnkCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy Q0FBRjcyNzAeFw0yNjA4MjExOTU1MzlaFw0yNjA4MjIyMzI1MzlaMDMxMTAvBgNV BAMTKEFERUEwRUQ1MjU3Q0ZGNTZCMzQ1NEYxMTNCMDU5MDI5MDkyRkE3NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtFvJ20mbq4JAieu4vB8rCL4ta d3FlzrBfaFFOWvb7+teLPxgkL04n3U9e2GJKtYtYNlKrqwWiuNFifVXi05s3jE1Z e2Jo8qhmzRNF8BTsTC6Jlp9rwFk59lZ5+xeiZK7VgiVz6lX7Y8TNR3InSFx4OIQ3 c+lNn7NsMePQv6X5nxPCgANUfIraE/HSnd8BqNUjnTM3NN54V5pi/7TzmwZ0IDfL Qm34oOxeM8/7/RwqawgCAYdEdgMdTw2Rq0pz5RhfjOizkidbe9EIkt/9d7iWoDPr IZmhlM32ZVX81IHbOsCKyEQUKgSA9Ofj00UvFRyT2m8GLWYKqBHm8sGmCMytAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUreoO1SV8/1azRU8ROwWQKQkvp24wHwYDVR0j BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNTA4ODYzODYwODk5ODcvMC9BRTA5REQwNTZCM0I1 RUE0QzQ4NzIyQzY3RjYzRjBBMTJDQUFGNzI3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIlT5Y1ZiB5W y65WfvZ5zBzenAKcid6wA4ALrdprj6vPS67ro2HuoB7svlP05J85zQMinyxQN2FE raOchphmsxENG1UHDicGkgs8naJIR3m2pl5NgxWlQ5uC0nDS3WcHWyYiKQFREimY KOxbDNsobdi8MerrFIP414mFKul5jeRwkO3yFsgWtAe3CjszjRZhEvO/OLqWAry3 H4auj+qOumpvFnW10jQSCukVRQlp4a1leO5k5AltdfdNIYMOCU/w1isBZzjC/l+d so6IdmhfjGwGW0Bv19ZyqNvH9JQPbnxZrDARWDNIwc1T5vVG4oltN7WG4SCWzPTC FiHgRIG9ZQ== -----END CERTIFICATE-----Generated at Fri Aug 21 22:30:57 2026 by rpki-client