$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft File: AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft (raw, json) Hash identifier: 105S5L4EESkVIi/B6/mJS/OhRIeZvwWV7X5Wr8f7blY= Subject key identifier: 3C:E3:02:C9:4E:C9:81:C1:EC:9F:A7:B2:C9:13:28:14:01:84:77:34 Authority key identifier: AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB Certificate issuer: /CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Certificate serial: 5B5D36245347778C601AE5CE54AA224B4FCD599A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft Manifest number: 5C Signing time: Fri 28 Aug 2026 06:47:57 +0000 Manifest this update: Fri 28 Aug 2026 06:42:57 +0000 Manifest next update: Mon 31 Aug 2026 11:35:57 +0000 Files and hashes: 1: 3130332e3232302e39332e302f32342d3234203d3e203633363037.roa (hash: 2YMQARwQQNx4TKKlA09Deyt0NiaWHSTvIp9ZwvRBmU0=) 2: 3130332e3232302e39322e302f32342d3234203d3e203633363037.roa (hash: +z+ShcaikWqiaUZb2DYg9PBDgXCkLZavKqWFDF1Jkr8=) 3: AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl (hash: We2Cy2rivNVBrJeuxbqSARwTnwI9GLPwnL8k6tnepIM=) 4: 34352e3235312e3132302e302f32322d3232203d3e203633363037.roa (hash: RZ39bL2boZr+mHG3dnSmDiIpsnz2ZL5lis9k+FJyFHk=) 5: 323430353a383238303a3a2f33322d3332203d3e203633363037.roa (hash: cJB8DZCXLquxtRMnpkPAwvXkTBKziNRs8S4iiXYlCJ8=) 6: 3130332e3232302e39342e302f32342d3234203d3e203633363037.roa (hash: dF3MhDLHJCBnFN0dFuW4PMjSjk2cUkM6SlKWWnqD9rE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5d:36:24:53:47:77:8c:60:1a:e5:ce:54:aa:22:4b:4f:cd:59:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Validity Not Before: Aug 28 06:42:57 2026 GMT Not After : Aug 31 11:35:57 2026 GMT Subject: CN=3CE302C94EC981C1EC9FA7B2C913281401847734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:86:51:33:01:69:5e:c0:10:ab:58:73:05: 11:63:bf:04:34:7d:71:87:79:69:66:7f:7e:69:4c: 12:d3:2e:05:3b:d7:41:0b:67:bd:25:7b:b9:14:11: 2d:9a:58:6a:6c:d1:a2:47:35:64:f4:5c:ad:19:41: e5:0f:69:09:41:c8:a3:d0:39:da:03:61:a8:9d:8b: f4:7a:7a:3d:fe:15:1b:62:f1:e0:ef:b8:d3:3a:75: 7f:69:62:ab:68:cc:08:e0:ba:3b:a7:b6:23:a6:3c: 47:e7:45:d3:7b:ca:d7:76:95:a6:fe:17:5e:16:b8: 95:de:8e:00:72:16:18:92:61:c4:9c:f0:ee:9a:4a: de:00:6e:3f:2f:92:a6:91:6e:5c:5a:5b:53:ea:67: 4e:04:f6:9d:bd:37:ed:a1:4e:a4:99:b0:08:f3:cf: 39:41:59:18:6e:b1:8a:7d:d3:b0:6f:41:bc:0e:98: 4e:a5:99:8a:bf:95:97:4b:15:76:80:36:2b:78:1a: a4:e3:c9:d1:8a:40:56:36:5d:c3:ff:b2:c4:ac:16: 01:69:fd:ed:81:7e:ee:97:26:a7:73:31:f2:82:67: 9e:bd:de:4a:3d:20:c0:07:5e:cc:36:5f:0f:9f:c0: 92:d1:63:62:f1:df:9e:d4:f4:3c:3a:46:ff:3f:b4: 31:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E3:02:C9:4E:C9:81:C1:EC:9F:A7:B2:C9:13:28:14:01:84:77:34 X509v3 Authority Key Identifier: keyid:AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ca:56:2f:17:06:ad:67:7f:c3:cd:73:64:b7:87:f1:10:6a: 28:7e:53:c7:ad:4b:f2:85:be:3e:36:50:a7:de:da:a3:4f:a7: 80:f5:65:de:e1:b8:04:fb:88:e0:b0:12:59:06:d8:f0:61:bf: eb:ad:0d:40:a7:9c:70:b9:f4:19:8f:15:4d:5a:b7:f1:af:82: 55:d5:0a:db:e9:d9:e6:11:e7:e1:20:f9:0c:7a:57:88:11:bf: c3:03:e6:4d:1c:64:c2:ef:6b:16:2c:52:3a:71:6d:55:69:48: 43:4c:b1:8e:62:ea:3f:95:2c:18:98:31:6d:d0:b4:cf:ac:8a: 80:5a:54:2d:d9:bb:e0:24:24:2c:9d:14:cb:4c:d4:91:21:30: 2c:eb:93:be:de:23:83:d0:2b:bb:04:f7:ee:b1:2e:f9:c7:2a: be:0e:da:63:95:9f:3d:b6:ee:78:7d:38:20:a6:5e:d8:17:12: 7e:18:89:4a:16:a3:30:88:48:a0:e6:b2:f7:94:1b:b1:ee:6b: a1:66:33:84:6d:02:5d:5f:35:ca:8e:af:85:fa:42:3d:2e:81: 28:60:aa:78:ef:bb:a3:24:a7:93:2c:96:ac:0f:bb:2c:10:63: c3:f7:2e:5d:87:cb:6d:7a:7c:ac:45:28:6b:41:52:e5:7c:9c: f1:f3:52:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW102JFNHd4xgGuXOVKoiS0/NWZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNC NDREQjlBQjAeFw0yNjA4MjgwNjQyNTdaFw0yNjA4MzExMTM1NTdaMDMxMTAvBgNV BAMTKDNDRTMwMkM5NEVDOTgxQzFFQzlGQTdCMkM5MTMyODE0MDE4NDc3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXe4ZRMwFpXsAQq1hzBRFjvwQ0 fXGHeWlmf35pTBLTLgU710ELZ70le7kUES2aWGps0aJHNWT0XK0ZQeUPaQlByKPQ OdoDYaidi/R6ej3+FRti8eDvuNM6dX9pYqtozAjgujuntiOmPEfnRdN7ytd2lab+ F14WuJXejgByFhiSYcSc8O6aSt4Abj8vkqaRblxaW1PqZ04E9p29N+2hTqSZsAjz zzlBWRhusYp907BvQbwOmE6lmYq/lZdLFXaANit4GqTjydGKQFY2XcP/ssSsFgFp /e2Bfu6XJqdzMfKCZ5693ko9IMAHXsw2Xw+fwJLRY2Lx357U9Dw6Rv8/tDHLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPOMCyU7JgcHsn6eyyRMoFAGEdzQwHwYDVR0j BBgwFoAUrjg6tLylo+Ed5Jr/cElNQ7RNuaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjcwOTM1MDkxMDAwMTE5MS8wL0FFMzgzQUI0QkNBNUEzRTExREU0OUFGRjcwNDk0 RDQzQjQ0REI5QUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNCNDREQjlBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI3MDkzNTA5MTAwMDExOTEvMC9BRTM4M0FCNEJDQTVB M0UxMURFNDlBRkY3MDQ5NEQ0M0I0NERCOUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMpWLxcGrWd/ w81zZLeH8RBqKH5Tx61L8oW+PjZQp97ao0+ngPVl3uG4BPuI4LASWQbY8GG/660N QKeccLn0GY8VTVq38a+CVdUK2+nZ5hHn4SD5DHpXiBG/wwPmTRxkwu9rFixSOnFt VWlIQ0yxjmLqP5UsGJgxbdC0z6yKgFpULdm74CQkLJ0Uy0zUkSEwLOuTvt4jg9Ar uwT37rEu+ccqvg7aY5WfPbbueH04IKZe2BcSfhiJShajMIhIoOay95Qbse5roWYz hG0CXV81yo6vhfpCPS6BKGCqeO+7oySnkyyWrA+7LBBjw/cuXYfLbXp8rEUoa0FS 5Xyc8fNS3g== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:40 2026 by rpki-client