$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft File: AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft (raw, json) Hash identifier: AtUaENDvfjZ9DXDvOcxjGXabafMn5FIWFQhGU3NN5es= Subject key identifier: 73:29:A3:30:F2:8B:9F:25:F8:D6:A9:5C:CE:A8:80:39:1C:8E:E1:81 Authority key identifier: AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB Certificate issuer: /CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Certificate serial: 5207A1B9457918E0B4F7F00AFAF7D985A873C27F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft Manifest number: 73 Signing time: Sat 17 Oct 2026 11:43:49 +0000 Manifest this update: Sat 17 Oct 2026 11:38:49 +0000 Manifest next update: Tue 20 Oct 2026 15:13:49 +0000 Files and hashes: 1: AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl (hash: 88xXH3/vbtMq+USMewRzLcE7kICy9JctlsBMnyYqKLo=) 2: 3130332e3232302e39322e302f32342d3234203d3e203633363037.roa (hash: +z+ShcaikWqiaUZb2DYg9PBDgXCkLZavKqWFDF1Jkr8=) 3: 3130332e3232302e39332e302f32342d3234203d3e203633363037.roa (hash: 2YMQARwQQNx4TKKlA09Deyt0NiaWHSTvIp9ZwvRBmU0=) 4: 3130332e3232302e39342e302f32342d3234203d3e203633363037.roa (hash: dF3MhDLHJCBnFN0dFuW4PMjSjk2cUkM6SlKWWnqD9rE=) 5: 323430353a383238303a3a2f33322d3332203d3e203633363037.roa (hash: cJB8DZCXLquxtRMnpkPAwvXkTBKziNRs8S4iiXYlCJ8=) 6: 34352e3235312e3132302e302f32322d3232203d3e203633363037.roa (hash: RZ39bL2boZr+mHG3dnSmDiIpsnz2ZL5lis9k+FJyFHk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:07:a1:b9:45:79:18:e0:b4:f7:f0:0a:fa:f7:d9:85:a8:73:c2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Validity Not Before: Oct 17 11:38:49 2026 GMT Not After : Oct 20 15:13:49 2026 GMT Subject: CN=7329A330F28B9F25F8D6A95CCEA880391C8EE181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:ae:c7:bf:93:2b:9e:f2:48:41:e8:cc:dd: 7c:d6:62:7b:5e:63:c6:62:bb:98:23:8b:55:ba:06: c4:a8:1c:e6:72:70:7d:fd:c2:00:a6:f1:16:b9:1f: d3:4a:7c:7d:d7:ac:b0:e8:54:1c:dc:fe:9f:21:32: 00:d6:2e:e5:b4:ad:3b:0e:b1:f2:a0:ba:3a:a1:84: 31:01:a2:d4:4a:d3:3e:f8:66:07:b0:85:b4:45:40: 58:88:cc:de:21:bc:06:9d:42:b3:e2:67:79:b8:1b: 50:30:34:78:aa:5a:2c:90:e3:b2:35:78:9f:cf:ad: 21:0c:8f:bd:54:35:fb:8a:cf:21:48:42:5c:a3:c8: 4c:f9:cf:cc:22:88:9e:fe:4e:d1:88:c1:c3:21:a0: cf:f3:b1:f3:b1:de:29:19:b6:7a:fc:66:4b:58:4a: 0c:7c:aa:db:c8:01:03:64:3d:01:1c:ec:64:6c:a2: 2c:5c:e3:e4:72:b9:69:2c:d1:3a:17:70:f1:65:e0: 53:10:d9:e1:1c:a0:92:1c:49:b5:54:b9:4c:b4:68: cd:e6:a0:c1:6a:9f:b5:80:95:55:1a:95:f8:fa:fb: e0:a6:53:85:0c:75:b1:56:99:79:b7:1d:e3:2f:eb: 13:1a:dd:7c:53:57:3e:0f:90:c1:3f:ed:d5:98:6a: 1b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:29:A3:30:F2:8B:9F:25:F8:D6:A9:5C:CE:A8:80:39:1C:8E:E1:81 X509v3 Authority Key Identifier: keyid:AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:52:6f:d7:2a:cd:05:97:b8:af:e4:81:d8:c1:31:48:1c:58: d6:a6:b9:a7:05:2b:a9:57:3d:3a:a6:05:59:8a:39:1d:e1:70: e0:c5:17:a6:82:ff:27:56:61:d3:33:40:35:ee:0c:5f:e1:17: 93:0a:69:63:4b:5b:9f:49:51:09:25:c1:62:a0:72:c3:fd:50: b7:a7:a1:d8:54:0d:aa:eb:e6:2b:f0:69:8a:30:e6:48:67:fd: 2b:33:cb:fb:f0:4d:d5:c0:d2:d9:99:cc:ea:45:21:3f:53:60: 04:f0:3b:76:12:09:16:5f:97:98:2a:0b:cb:60:26:ae:f7:45: 24:69:b4:c9:d4:d6:bc:62:c3:1a:70:da:a5:d3:06:0e:5b:51: 32:04:eb:fb:57:27:79:49:71:f6:04:38:0e:c1:cd:64:73:f3: 1d:6a:b3:9c:1f:9e:74:6b:f6:b9:35:81:cf:9e:9d:f9:b4:84: bc:75:05:f3:d9:2e:e4:35:9b:1d:25:28:26:09:0f:d7:93:da: c3:f5:76:52:bc:6d:ea:5a:c9:0f:77:8e:b2:da:82:3b:eb:e2: 20:33:ef:c5:c2:24:66:b5:eb:7a:3d:3b:cd:4f:b9:81:f0:93: 62:0f:5c:6f:aa:80:4e:78:f3:3b:85:33:f5:38:c5:1a:8c:70: d9:59:4e:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUgehuUV5GOC09/AK+vfZhahzwn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNC NDREQjlBQjAeFw0yNjEwMTcxMTM4NDlaFw0yNjEwMjAxNTEzNDlaMDMxMTAvBgNV BAMTKDczMjlBMzMwRjI4QjlGMjVGOEQ2QTk1Q0NFQTg4MDM5MUM4RUUxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqba7Hv5MrnvJIQejM3XzWYnte Y8Ziu5gji1W6BsSoHOZycH39wgCm8Ra5H9NKfH3XrLDoVBzc/p8hMgDWLuW0rTsO sfKgujqhhDEBotRK0z74ZgewhbRFQFiIzN4hvAadQrPiZ3m4G1AwNHiqWiyQ47I1 eJ/PrSEMj71UNfuKzyFIQlyjyEz5z8wiiJ7+TtGIwcMhoM/zsfOx3ikZtnr8ZktY Sgx8qtvIAQNkPQEc7GRsoixc4+RyuWks0ToXcPFl4FMQ2eEcoJIcSbVUuUy0aM3m oMFqn7WAlVUalfj6++CmU4UMdbFWmXm3HeMv6xMa3XxTVz4PkME/7dWYahu3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcymjMPKLnyX41qlczqiAORyO4YEwHwYDVR0j BBgwFoAUrjg6tLylo+Ed5Jr/cElNQ7RNuaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjcwOTM1MDkxMDAwMTE5MS8wL0FFMzgzQUI0QkNBNUEzRTExREU0OUFGRjcwNDk0 RDQzQjQ0REI5QUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNCNDREQjlBQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI3MDkzNTA5MTAwMDExOTEvMC9BRTM4M0FCNEJDQTVB M0UxMURFNDlBRkY3MDQ5NEQ0M0I0NERCOUFCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFJv1yrNBZe4 r+SB2MExSBxY1qa5pwUrqVc9OqYFWYo5HeFw4MUXpoL/J1Zh0zNANe4MX+EXkwpp Y0tbn0lRCSXBYqByw/1Qt6eh2FQNquvmK/BpijDmSGf9KzPL+/BN1cDS2ZnM6kUh P1NgBPA7dhIJFl+XmCoLy2AmrvdFJGm0ydTWvGLDGnDapdMGDltRMgTr+1cneUlx 9gQ4DsHNZHPzHWqznB+edGv2uTWBz56d+bSEvHUF89ku5DWbHSUoJgkP15Paw/V2 Urxt6lrJD3eOstqCO+viIDPvxcIkZrXrej07zU+5gfCTYg9cb6qATnjzO4Uz9TjF Goxw2VlOuQ== -----END CERTIFICATE-----Generated at Sun Oct 18 11:33:14 2026 by rpki-client