$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft File: AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft (raw, json) Hash identifier: 2DF8suUKjReLSdsC0kqM4ydm2MhYvWBHlnxROZYoeqo= Subject key identifier: C1:20:C3:E2:1A:A4:26:83:18:05:62:1E:1F:7A:DE:89:CD:37:CA:52 Authority key identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3 Certificate issuer: /CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3 Certificate serial: 65513D8540F22379F4BA26D0D96647B385E3089B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft Manifest number: 4E Signing time: Tue 14 Jul 2026 07:35:42 +0000 Manifest this update: Tue 14 Jul 2026 07:30:42 +0000 Manifest next update: Wed 15 Jul 2026 10:25:42 +0000 Files and hashes: 1: AS4808.roa (hash: TPs4K1IwuFBCZlPJPwsrxBKlLQX+ki67IEXGfZAOXrc=) 2: AS0.roa (hash: Tnh8WMSLJSGCaAxb/VZeyXb0gUX1GKQVaIvE4qh0adg=) 3: AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl (hash: 5626jx0PrBJj2aHtn6TwdshixKVxrTiZ/itbE3+V35E=) 4: AS4847.roa (hash: x6CsxrXJP/tLvJGx1fHtjAL40INQgOCEUORhIbque/Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 10:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:51:3d:85:40:f2:23:79:f4:ba:26:d0:d9:66:47:b3:85:e3:08:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3 Validity Not Before: Jul 14 07:30:42 2026 GMT Not After : Jul 15 10:25:42 2026 GMT Subject: CN=C120C3E21AA426831805621E1F7ADE89CD37CA52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:d2:02:1c:a7:39:3c:8d:3a:ec:75:d4:2c: d6:a8:64:b7:ce:25:9f:f8:88:06:0c:f8:1b:28:35: 39:9d:f2:47:29:e5:80:00:e5:80:bf:e4:62:84:59: c3:06:b3:35:85:3b:ad:ec:e3:88:0d:67:1f:55:3b: 2e:67:58:9f:29:12:38:d1:2a:ae:c8:36:d0:f1:d9: 89:e5:c9:a0:ab:c4:27:34:16:e9:80:02:2a:2d:c4: e4:97:a5:9d:50:af:ff:26:6b:3f:7c:5e:8a:e5:2e: 68:49:c7:5d:e7:92:15:c5:08:07:6e:9d:8c:db:3b: 40:2a:a6:ab:42:87:02:a7:47:d3:31:db:8f:9f:80: 0f:e6:6a:f3:e1:16:ff:66:6a:b3:df:39:e1:5d:55: 17:c6:6b:32:e8:ac:42:30:cd:27:3a:eb:65:ca:94: 73:64:fe:e7:af:c8:9b:95:54:64:9f:dc:de:aa:09: da:5e:97:3c:51:34:0e:a0:03:61:7e:7a:7f:5c:25: 96:0c:d5:66:2a:a2:75:eb:22:9c:e5:8e:e4:a6:22: 9d:d0:16:c5:23:af:e7:d3:44:fd:e9:83:ee:63:65: 1c:51:0c:ee:81:e4:e8:36:b0:8c:e6:a9:12:3f:0f: ab:02:0a:26:c0:71:4e:9e:58:b0:70:04:3a:0b:68: 3a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:20:C3:E2:1A:A4:26:83:18:05:62:1E:1F:7A:DE:89:CD:37:CA:52 X509v3 Authority Key Identifier: keyid:AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:4d:4e:94:db:c7:ca:fe:d9:16:63:54:3f:61:1a:d0:39:40: 3c:19:f5:75:65:0d:66:22:b9:d9:36:da:e1:be:b9:ca:0b:ee: a9:a0:24:f9:ab:c8:bd:23:64:66:ba:a9:e0:3c:57:46:5e:d0: 6a:78:a8:3b:20:00:69:8c:80:8b:b7:51:ab:bb:5b:44:94:98: 15:da:23:58:ec:b5:69:fd:ac:72:9f:17:d9:d4:b5:2e:a1:f3: a4:6c:ac:18:f1:7c:03:52:3a:67:9a:26:d8:f3:b6:ab:9b:95: 2f:12:18:e6:26:e2:86:dd:a1:dc:ac:ab:83:56:28:0c:7c:82: cf:97:97:5d:cb:94:f2:0a:25:a5:6e:49:38:c4:c8:70:35:9d: 08:ab:87:50:64:10:73:36:0a:e9:3d:31:5e:57:82:d4:ea:10: 7a:a5:2e:94:64:53:ca:f2:ac:5a:6f:f7:a6:99:c3:40:13:5c: 66:66:d1:10:27:5c:86:16:77:b8:07:2a:0a:93:8c:64:d8:1b: 65:98:f5:93:fb:1e:68:85:95:77:4c:a7:e6:ba:54:07:06:83: 56:88:31:b2:af:b9:45:44:d3:7c:5a:24:c5:ff:fe:34:43:85: fa:79:30:7f:11:6f:3f:f0:63:17:cb:04:4b:82:b8:2f:cc:3f: 12:da:36:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZVE9hUDyI3n0uibQ2WZHs4XjCJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwNTNDMjQwMkNCNDdGQ0Y2RTg3NUMzMDc1NkUxNkM5 NzQyQkZFMzAeFw0yNjA3MTQwNzMwNDJaFw0yNjA3MTUxMDI1NDJaMDMxMTAvBgNV BAMTKEMxMjBDM0UyMUFBNDI2ODMxODA1NjIxRTFGN0FERTg5Q0QzN0NBNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsBNICHKc5PI067HXULNaoZLfO JZ/4iAYM+BsoNTmd8kcp5YAA5YC/5GKEWcMGszWFO63s44gNZx9VOy5nWJ8pEjjR Kq7INtDx2YnlyaCrxCc0FumAAiotxOSXpZ1Qr/8maz98XorlLmhJx13nkhXFCAdu nYzbO0AqpqtChwKnR9Mx24+fgA/mavPhFv9marPfOeFdVRfGazLorEIwzSc662XK lHNk/uevyJuVVGSf3N6qCdpelzxRNA6gA2F+en9cJZYM1WYqonXrIpzljuSmIp3Q FsUjr+fTRP3pg+5jZRxRDO6B5Og2sIzmqRI/D6sCCibAcU6eWLBwBDoLaDpZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwSDD4hqkJoMYBWIeH3reic03ylIwHwYDVR0j BBgwFoAUrgU8JALLR/z26HXDB1bhbJdCv+MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDkzNDc2NDIxMjE5MTI1My8wL0FFMDUzQzI0MDJDQjQ3RkNGNkU4NzVDMzA3NTZF MTZDOTc0MkJGRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwNTNDMjQwMkNCNDdGQ0Y2RTg3NUMzMDc1NkUxNkM5NzQyQkZFMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTA5MzQ3NjQyMTIxOTEyNTMvMC9BRTA1M0MyNDAyQ0I0 N0ZDRjZFODc1QzMwNzU2RTE2Qzk3NDJCRkUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq01OlNvHyv7Z FmNUP2Ea0DlAPBn1dWUNZiK52Tba4b65ygvuqaAk+avIvSNkZrqp4DxXRl7Qanio OyAAaYyAi7dRq7tbRJSYFdojWOy1af2scp8X2dS1LqHzpGysGPF8A1I6Z5om2PO2 q5uVLxIY5ibiht2h3Kyrg1YoDHyCz5eXXcuU8golpW5JOMTIcDWdCKuHUGQQczYK 6T0xXleC1OoQeqUulGRTyvKsWm/3ppnDQBNcZmbRECdchhZ3uAcqCpOMZNgbZZj1 k/seaIWVd0yn5rpUBwaDVogxsq+5RUTTfFokxf/+NEOF+nkwfxFvP/BjF8sES4K4 L8w/Eto2eA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:51 2026 by rpki-client