$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft File: AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft (raw, json) Hash identifier: t1/AZqF8FXkWgOl/rLowrJJ4CVVXjkVRb6cBs+3Lwd4= Subject key identifier: C4:E6:DC:51:48:19:8F:C1:C7:E2:07:B5:14:7F:C7:C0:69:03:54:79 Authority key identifier: AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB Certificate issuer: /CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Certificate serial: 46E36D0B8F7747DC1EF0CFACDC9F43E2F60093C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft Manifest number: 21 Signing time: Tue 14 Jul 2026 18:51:55 +0000 Manifest this update: Tue 14 Jul 2026 18:46:55 +0000 Manifest next update: Wed 15 Jul 2026 21:20:55 +0000 Files and hashes: 1: AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl (hash: 0TkfFKKBcazszZg+HLP9/wxhvE4+PyVtxj9txlHR5N8=) 2: 323430353a383238303a3a2f33322d3332203d3e203633363037.roa (hash: cJB8DZCXLquxtRMnpkPAwvXkTBKziNRs8S4iiXYlCJ8=) 3: 3130332e3232302e39342e302f32342d3234203d3e203633363037.roa (hash: dF3MhDLHJCBnFN0dFuW4PMjSjk2cUkM6SlKWWnqD9rE=) 4: 34352e3235312e3132302e302f32322d3232203d3e203633363037.roa (hash: RZ39bL2boZr+mHG3dnSmDiIpsnz2ZL5lis9k+FJyFHk=) 5: 3130332e3232302e39332e302f32342d3234203d3e203633363037.roa (hash: 2YMQARwQQNx4TKKlA09Deyt0NiaWHSTvIp9ZwvRBmU0=) 6: 3130332e3232302e39322e302f32342d3234203d3e203633363037.roa (hash: +z+ShcaikWqiaUZb2DYg9PBDgXCkLZavKqWFDF1Jkr8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e3:6d:0b:8f:77:47:dc:1e:f0:cf:ac:dc:9f:43:e2:f6:00:93:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Validity Not Before: Jul 14 18:46:55 2026 GMT Not After : Jul 15 21:20:55 2026 GMT Subject: CN=C4E6DC5148198FC1C7E207B5147FC7C069035479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:7e:ea:ee:3d:0a:84:7f:65:b0:de:d2:63: f7:04:da:77:37:63:79:31:30:a7:97:5f:9e:b1:a8: a6:9d:fa:4d:5a:94:41:fb:5c:78:13:7d:44:33:0d: 78:93:37:96:f7:89:8f:4d:f4:dd:f4:cc:ef:2b:ab: d8:ce:03:95:b9:c9:0a:a1:a8:7f:5f:53:e2:d4:c3: bc:aa:2b:71:9c:40:f4:02:78:95:6a:c3:f8:7f:26: 22:e9:5a:3b:b0:35:e8:00:a6:9f:c7:f4:07:d9:21: af:82:3d:54:1a:58:eb:de:fb:26:9c:e2:30:01:4d: 80:95:c7:1c:c4:1d:4d:ea:00:4f:67:a7:92:11:a6: d5:a6:88:c7:32:98:ae:22:e4:ac:b4:1e:9a:bc:7c: 1a:2f:f5:54:5e:af:41:23:30:37:2b:5b:61:4f:5e: 5d:49:f7:10:1e:e1:3a:21:c3:5c:66:c4:49:17:d1: 64:ae:1e:5b:4a:2a:94:81:01:c2:2f:a0:69:ea:04: 32:1c:56:92:89:a0:a7:b8:ca:f4:2a:c8:b4:82:4d: 08:a1:13:3b:7a:4c:e6:81:9b:2f:88:eb:70:0f:fa: 4e:7f:eb:c0:a9:e5:fa:bf:8c:09:a7:e1:80:c6:13: 28:7f:e2:18:ac:a9:db:bf:3d:65:3d:08:f6:a1:ae: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E6:DC:51:48:19:8F:C1:C7:E2:07:B5:14:7F:C7:C0:69:03:54:79 X509v3 Authority Key Identifier: keyid:AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d6:a8:a6:aa:3b:98:00:a4:16:d5:04:19:ec:6a:80:6e:81: 15:d4:d1:a0:3c:2f:56:2d:d4:92:94:e2:a0:2c:62:a2:68:13: 98:6d:22:f5:c6:3a:86:64:88:f5:48:8c:af:4f:14:b8:ac:3e: 37:a2:5c:0a:25:72:46:97:88:59:65:c1:8f:aa:0a:03:9c:b0: d0:4d:e5:86:eb:db:ed:50:28:b4:ec:ce:4b:97:9e:a9:19:1c: 14:a3:5e:c8:f1:aa:12:26:21:81:00:bd:55:0c:f7:ec:fc:59: 13:7b:37:7c:e8:ab:d2:65:12:07:4b:b9:1d:08:6b:ed:ff:ad: 93:f7:1e:a6:99:55:86:8b:a6:e2:5b:65:8b:bb:8f:da:11:59: 01:2d:b0:68:0f:74:6e:8c:26:f9:e6:3a:e2:6c:7b:97:9e:25: a6:02:39:15:63:ab:41:5e:a4:56:ca:e8:37:57:cc:89:61:d9: eb:7e:4a:66:49:1f:d0:8d:be:0d:4a:2b:44:64:bd:f2:87:c1: fa:61:35:35:74:e5:26:47:f0:2b:fa:38:5b:27:7f:4b:cc:b6: 54:a2:75:df:4c:05:0e:e2:74:4b:ad:e9:8f:6d:20:64:c7:28: f1:0d:c0:cb:34:f5:25:27:f6:19:c9:2e:55:b0:f2:c6:27:94: 96:f7:94:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURuNtC493R9we8M+s3J9D4vYAk8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNC NDREQjlBQjAeFw0yNjA3MTQxODQ2NTVaFw0yNjA3MTUyMTIwNTVaMDMxMTAvBgNV BAMTKEM0RTZEQzUxNDgxOThGQzFDN0UyMDdCNTE0N0ZDN0MwNjkwMzU0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+NX7q7j0KhH9lsN7SY/cE2nc3 Y3kxMKeXX56xqKad+k1alEH7XHgTfUQzDXiTN5b3iY9N9N30zO8rq9jOA5W5yQqh qH9fU+LUw7yqK3GcQPQCeJVqw/h/JiLpWjuwNegApp/H9AfZIa+CPVQaWOve+yac 4jABTYCVxxzEHU3qAE9np5IRptWmiMcymK4i5Ky0Hpq8fBov9VRer0EjMDcrW2FP Xl1J9xAe4Tohw1xmxEkX0WSuHltKKpSBAcIvoGnqBDIcVpKJoKe4yvQqyLSCTQih Ezt6TOaBmy+I63AP+k5/68Cp5fq/jAmn4YDGEyh/4hisqdu/PWU9CPahrk7xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxObcUUgZj8HH4ge1FH/HwGkDVHkwHwYDVR0j BBgwFoAUrjg6tLylo+Ed5Jr/cElNQ7RNuaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjcwOTM1MDkxMDAwMTE5MS8wL0FFMzgzQUI0QkNBNUEzRTExREU0OUFGRjcwNDk0 RDQzQjQ0REI5QUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNCNDREQjlBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI3MDkzNTA5MTAwMDExOTEvMC9BRTM4M0FCNEJDQTVB M0UxMURFNDlBRkY3MDQ5NEQ0M0I0NERCOUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdaopqo7mACk FtUEGexqgG6BFdTRoDwvVi3UkpTioCxiomgTmG0i9cY6hmSI9UiMr08UuKw+N6Jc CiVyRpeIWWXBj6oKA5yw0E3lhuvb7VAotOzOS5eeqRkcFKNeyPGqEiYhgQC9VQz3 7PxZE3s3fOir0mUSB0u5HQhr7f+tk/cepplVhoum4ltli7uP2hFZAS2waA90bowm +eY64mx7l54lpgI5FWOrQV6kVsroN1fMiWHZ635KZkkf0I2+DUorRGS98ofB+mE1 NXTlJkfwK/o4Wyd/S8y2VKJ130wFDuJ0S63pj20gZMco8Q3AyzT1JSf2GckuVbDy xieUlveUKA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:01:57 2026 by rpki-client