
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
File: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft (raw, json)
Hash identifier: PxbT7rG7Vph0btIg+3Ac02i7sGqt2w0r1EidGGiKT8E=
Subject key identifier: 65:01:94:39:20:65:BF:41:FE:77:2D:5F:79:E6:97:AA:1C:45:C8:52
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 5469F99A6EDC17C99E4AC41AFAF99A07E5F5C065
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
Manifest number: 9B
Signing time: Wed 13 May 2026 03:25:55 +0000
Manifest this update: Wed 13 May 2026 03:20:55 +0000
Manifest next update: Thu 14 May 2026 06:10:55 +0000
Files and hashes: 1: 3130332e3232372e37362e302f32322d3232203d3e2034383038.roa (hash: Hf9k2SJcA/xP1ErQqm29WhIrSfaOziA5BA7Ts2+4KIA=)
2: 3130332e3233352e3232342e302f32322d3232203d3e2034383038.roa (hash: JKCuI56UVOY9acAQVCrOY3pHaAZOXOhroASOdVhxWoA=)
3: 3130332e3232372e38302e302f32322d3232203d3e203536323832.roa (hash: 67Oh/ymrInnyN9IsmBRAf4Oqr+sTsFG1G6E3Ho7F13Y=)
4: 3130332e3233352e3232302e302f32322d3232203d3e203233373234.roa (hash: 5+04lzm1kZVQl2jHRAmUi4aImYXffFMCeG2lf7tuUT8=)
5: 3130332e3234392e3235322e302f32322d3232203d3e203536323832.roa (hash: aCY8rSMAxv7seXtdLE3Sx44spVXVDzHEaKsU+pGe2yM=)
6: 3231312e3135352e38382e302f32312d3231203d3e203536323832.roa (hash: G6NzSwnjHuwXvCFCTMM1FDciaAnXWZw1fvYtgzPqHkw=)
7: 3130332e3233312e36382e302f32322d3232203d3e203536323832.roa (hash: wEw1MvonFWnRmkF7XaWDFr8v781+GQM1bCe5yjSrewg=)
8: 3130332e3233312e36382e302f32322d3232203d3e2034383038.roa (hash: 8S3KWRNb0/Iteu4mNRrbOAaKLyXnnWRnw4jAyEQHBOk=)
9: 3231312e3135352e38382e302f32312d3231203d3e203233373234.roa (hash: oiQVtHJ3uNb8QOBB9izDh02SvyMImPV2UxDp/+mGsRc=)
10: 3130332e3232372e38302e302f32322d3232203d3e2034383038.roa (hash: Ub2YiOuWmf66zRiG6c5/Kt3RHinddf8M7kz+iwfuBkI=)
11: 3130332e32362e302e302f32322d3232203d3e2034383038.roa (hash: hES7KnWjszOm1orkc01aAlgaOEAc3n79ifMNYlhogjE=)
12: 3130332e3233312e36382e302f32322d3232203d3e203233373234.roa (hash: aH5qNlQa1gUeKMoyfPRsXJM7qgS/0cpKGUHT4IHU1kY=)
13: 3130332e3233352e3233322e302f32322d3232203d3e2034383038.roa (hash: LvIz0HxxaDpvm/3DSxcGIZnvupUdznL2kgEGSmjy5qk=)
14: 3130332e3233352e3232342e302f32322d3232203d3e203536323832.roa (hash: 4MwjG50X/nBCM4rZdoBVw0vIQd2e2k+alLWmgojSfbA=)
15: 3130332e3234332e3235342e302f32332d3233203d3e2034383131.roa (hash: c3/ap0Nhh1Qwb3J6y2zmgPSih5iANzYGazkz45l/HgY=)
16: 323430363a346430303a3a2f34382d3438203d3e203233373234.roa (hash: rRMv5qvSwQGSPk+JjA1TNxIYPjTFDxwyjZnHizvQI3s=)
17: 3130332e3233312e36342e302f32322d3232203d3e2034383038.roa (hash: nRRFpOXt7+r1r4HHhB0TdnD+tb4rzqeupmIIbMHWcPY=)
18: 3130332e3233352e3233362e302f32322d3232203d3e203536323832.roa (hash: Xs6GZADdNRP1LIbbJAD2x90PgWF5NZ71n13/7Myfb6Q=)
19: 3130332e3233352e3233362e302f32322d3232203d3e2034383038.roa (hash: UrLZO0SNnYdGOHmktaYva1LeY/50x97Gb+svkVkI7qE=)
20: 3130332e3233352e3232302e302f32322d3232203d3e2034383038.roa (hash: K/BUO9D2gJDFUOFnsTn+bu4RijrNmL2WXhJe6lTExSQ=)
21: 3130332e32362e302e302f32322d3232203d3e203233373234.roa (hash: 3byVHWNmJp/2EX7LmRxD4s69SGAdvhL0UmPbmDzOCM8=)
22: 3130332e3234392e3235322e302f32322d3232203d3e2034383038.roa (hash: wYkRiToQcgtywHxF4nlDNt1pJe6kJa/wahpn40b7OLE=)
23: 3130332e3233352e3232302e302f32322d3232203d3e203536323832.roa (hash: X8o34ROwXxUIvMj22mGm3ExvXR7zXrq28moPkyZq7U4=)
24: 3130332e3233312e36342e302f32322d3232203d3e203233373234.roa (hash: LpvK5C59OgH2zOKIAf1omS7fD9yuG55reZjtWDkxCvk=)
25: 3130332e3232372e37362e302f32322d3232203d3e203536323832.roa (hash: koFAnclV0VwMTFVvBzHMWh9CcYC0evzkfvuw3oC/9B0=)
26: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl (hash: bMcAGclFJH/xGHWxOo1lFZwRMKAxze6YF6OLc8AQrOk=)
27: 3130332e3232372e37362e302f32322d3232203d3e203233373234.roa (hash: ob1gq8SWltCSR9T+Y7Acxj74r+9vls30VHLpIxpSgpA=)
28: 3130332e3234392e3235322e302f32322d3232203d3e203233373234.roa (hash: 1WBs6BppIFH0tyxeChtNBzDAXXZi9kK1gmCwk3RWTFo=)
29: 3130332e3233312e36342e302f32322d3232203d3e203536323832.roa (hash: uXsXBVMLc9CSkdwbGdKuhtgJxCWm9r/OJld+/XbAd2Y=)
30: 3136332e34372e342e302f32322d3232203d3e2034383132.roa (hash: zvELJzYBuK5WrSDweO8nyM7DD2RtUW8B/UrBG13cLPA=)
31: 3130332e3233352e3232342e302f32322d3232203d3e203233373234.roa (hash: ED7GjEqXdWxdnve4xU4KVyiyGh/sNDt31pjZBOKMjPc=)
32: 3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa (hash: hOFFxJZSCtTfa2utTwRhvncMcw1tnlhy0thackZF5dk=)
33: 3130332e32362e302e302f32322d3232203d3e203536323832.roa (hash: l4wiNQJR+y8NzxUY0+C+9W6BHJv1urB3s8HDTzyTXSw=)
34: 3231312e3135352e38382e302f32312d3231203d3e2034383038.roa (hash: p4fyfGNxAe76CjzdibjAUATy2TsPOlwMbPqb3NiuGKA=)
35: 3130332e3233352e3233322e302f32322d3232203d3e203536323832.roa (hash: rqA17roVk2OYFjjATeew0QhEs2Dl1lN/XReDe2t/+wY=)
36: 3231312e3135352e39322e302f32322d3232203d3e203536323832.roa (hash: Oud9vLusnBYO5V/oOK0QCRmEsa02XweE3QgWrixGdbY=)
37: 3130332e3232372e38302e302f32322d3232203d3e203233373234.roa (hash: XeSiJljtfNIQ1QNcYk6lRg7M2ASKlzajd2eY/EQYSM4=)
38: 3130332e3233352e3232382e302f32322d3232203d3e2034383038.roa (hash: EaQ3PZUtcd6hEBlEphYTz7qn9eqtcMN6rjWrxuqTEX8=)
39: 3130332e3233352e3232382e302f32322d3232203d3e203536323832.roa (hash: xP7nMAZ+jb5uBbP0Yz6ClJWEoaE3SkfQMNvQkbdgTR0=)
40: 3130332e3233352e3232382e302f32322d3232203d3e203233373234.roa (hash: cSekYoXWo4F97nCKQ9LiLYgABNxkEbnTEZkEIaXWjG4=)
41: 3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa (hash: 6HkpCfuvi7d2b5JTtXvx5y5uDPvD3zn+PFyvB7H8AaI=)
42: 323430363a346430303a3a2f34382d3438203d3e2034383038.roa (hash: 2uNGZKNPkXDb+cBaW04Kj0JovDPXkDMs8xvwIjEzk3g=)
43: 3130332e3234332e3235322e302f32332d3233203d3e2034383131.roa (hash: xT1aGnuPQo88YV6XcRifzYKNgSSzKx4oQnFedNrQzSQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:69:f9:9a:6e:dc:17:c9:9e:4a:c4:1a:fa:f9:9a:07:e5:f5:c0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: May 13 03:20:55 2026 GMT
Not After : May 14 06:10:55 2026 GMT
Subject: CN=650194392065BF41FE772D5F79E697AA1C45C852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:32:38:c2:51:70:5f:52:e8:08:02:5c:00:
0b:8d:0b:b1:99:aa:61:43:ab:7a:50:8b:b4:0c:47:
a6:40:9d:9f:30:8f:89:1f:57:df:d0:b8:40:d3:8b:
cb:47:ca:ee:de:cc:65:c6:24:d6:4a:5b:cc:55:d1:
2f:7d:25:f9:61:bb:89:5e:72:b7:b4:39:54:1d:c8:
65:15:af:ca:f2:c8:9c:1b:e5:eb:fc:b5:c4:4f:ca:
8e:2a:08:24:03:86:58:c9:8f:ab:79:62:a6:12:11:
91:33:ef:1f:4f:20:cc:ea:df:57:ff:b6:ca:a6:1e:
ef:0e:5d:f1:e1:db:5c:36:25:c3:ea:6a:10:db:e7:
14:fe:77:d7:55:58:22:ef:36:6f:48:db:f9:44:7d:
76:59:e4:fa:b4:8a:df:a2:4c:81:88:23:56:fa:1e:
0f:28:e3:94:ab:ec:e0:bb:54:a2:70:04:2d:6b:2f:
a4:2d:76:e4:65:f6:b7:4e:31:fe:7a:68:5f:48:30:
9e:a8:2f:c6:2b:1b:a4:d7:a5:ce:bd:ac:ff:83:ab:
59:85:c3:7e:df:9a:84:fd:65:3a:bf:97:3c:a5:3a:
e3:35:6e:40:cb:53:cb:85:c5:84:1b:21:e9:5e:e1:
68:51:b7:d1:20:66:7c:56:b4:b6:67:ef:e2:01:99:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:01:94:39:20:65:BF:41:FE:77:2D:5F:79:E6:97:AA:1C:45:C8:52
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:77:88:04:8f:46:93:c4:f7:b7:d8:d7:91:70:4d:92:4d:22:
8e:20:bd:f4:00:48:e2:b1:6d:bd:51:c0:cd:e1:a9:68:eb:4d:
ec:1d:ef:28:51:27:35:76:da:90:78:09:ad:72:46:01:48:0f:
f1:bc:22:a0:ff:80:51:ac:9c:c5:a1:90:d1:b2:06:17:ab:8c:
8f:6c:2c:d5:a1:56:0a:9b:9b:79:1d:9f:32:6d:ad:93:86:73:
e1:9b:37:55:92:b5:49:fd:72:24:c9:ca:07:5d:49:58:dd:ae:
3a:e5:72:9f:6d:09:3e:20:2d:72:0d:64:96:ee:3f:47:d3:5b:
35:20:a8:90:50:aa:60:9c:81:2f:fc:e5:8f:6a:b7:66:46:69:
e1:9d:ee:1c:88:13:58:8b:73:59:78:ea:9a:1c:45:e4:71:ad:
9b:12:e9:75:70:bf:c9:28:02:a5:61:2c:1e:ef:68:a8:82:2c:
a9:42:19:9f:3d:bc:08:00:77:2d:f1:da:2f:59:2b:d2:d5:e0:
ae:89:89:9f:f7:5e:2a:5a:64:db:c4:76:90:5e:17:82:a6:8e:
aa:66:b1:a1:c7:a2:1c:95:67:d6:99:de:51:d9:08:98:c7:2b:
2f:45:e4:82:6c:5d:ee:39:2d:a8:63:81:ba:a0:16:90:a8:83:
11:02:20:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:48 2026 by rpki-client