$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft File: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft (raw, json) Hash identifier: 3qfoQn0Y5E2Rqi0xkVQ++iRhpnQT2MfAq6TucFT45YY= Subject key identifier: 96:4B:0F:9B:55:C9:34:3A:D6:99:78:7C:CB:76:5F:FB:88:18:1B:09 Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Certificate serial: 17CEC81EE41853741979FFE9A1F8962732AF82C3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 14:08:28 +0000 Manifest this update: Thu 26 Mar 2026 14:03:28 +0000 Manifest next update: Fri 27 Mar 2026 15:16:28 +0000 Files and hashes: 1: 3130332e3233352e3233322e302f32322d3232203d3e203536323832.roa (hash: rqA17roVk2OYFjjATeew0QhEs2Dl1lN/XReDe2t/+wY=) 2: 3130332e3232372e37362e302f32322d3232203d3e203536323832.roa (hash: koFAnclV0VwMTFVvBzHMWh9CcYC0evzkfvuw3oC/9B0=) 3: 3130332e3233312e36382e302f32322d3232203d3e203233373234.roa (hash: aH5qNlQa1gUeKMoyfPRsXJM7qgS/0cpKGUHT4IHU1kY=) 4: 3231312e3135352e39322e302f32322d3232203d3e203536323832.roa (hash: Oud9vLusnBYO5V/oOK0QCRmEsa02XweE3QgWrixGdbY=) 5: 3130332e3233312e36342e302f32322d3232203d3e2034383038.roa (hash: nRRFpOXt7+r1r4HHhB0TdnD+tb4rzqeupmIIbMHWcPY=) 6: 323430363a346430303a3a2f34382d3438203d3e203233373234.roa (hash: rRMv5qvSwQGSPk+JjA1TNxIYPjTFDxwyjZnHizvQI3s=) 7: 3130332e3233352e3233362e302f32322d3232203d3e203536323832.roa (hash: Xs6GZADdNRP1LIbbJAD2x90PgWF5NZ71n13/7Myfb6Q=) 8: 3231312e3135352e38382e302f32312d3231203d3e203536323832.roa (hash: G6NzSwnjHuwXvCFCTMM1FDciaAnXWZw1fvYtgzPqHkw=) 9: 3130332e3232372e38302e302f32322d3232203d3e2034383038.roa (hash: Ub2YiOuWmf66zRiG6c5/Kt3RHinddf8M7kz+iwfuBkI=) 10: 3130332e3233352e3232342e302f32322d3232203d3e203233373234.roa (hash: ED7GjEqXdWxdnve4xU4KVyiyGh/sNDt31pjZBOKMjPc=) 11: 3130332e3234392e3235322e302f32322d3232203d3e203233373234.roa (hash: 1WBs6BppIFH0tyxeChtNBzDAXXZi9kK1gmCwk3RWTFo=) 12: 3130332e3233352e3232342e302f32322d3232203d3e203536323832.roa (hash: 4MwjG50X/nBCM4rZdoBVw0vIQd2e2k+alLWmgojSfbA=) 13: 3130332e3233352e3232302e302f32322d3232203d3e203233373234.roa (hash: 5+04lzm1kZVQl2jHRAmUi4aImYXffFMCeG2lf7tuUT8=) 14: 3130332e3232372e38302e302f32322d3232203d3e203536323832.roa (hash: 67Oh/ymrInnyN9IsmBRAf4Oqr+sTsFG1G6E3Ho7F13Y=) 15: 3130332e3233352e3232382e302f32322d3232203d3e203233373234.roa (hash: cSekYoXWo4F97nCKQ9LiLYgABNxkEbnTEZkEIaXWjG4=) 16: 3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa (hash: hOFFxJZSCtTfa2utTwRhvncMcw1tnlhy0thackZF5dk=) 17: 3130332e3234392e3235322e302f32322d3232203d3e2034383038.roa (hash: wYkRiToQcgtywHxF4nlDNt1pJe6kJa/wahpn40b7OLE=) 18: 3130332e3233312e36382e302f32322d3232203d3e203536323832.roa (hash: wEw1MvonFWnRmkF7XaWDFr8v781+GQM1bCe5yjSrewg=) 19: 3130332e3233352e3232302e302f32322d3232203d3e2034383038.roa (hash: K/BUO9D2gJDFUOFnsTn+bu4RijrNmL2WXhJe6lTExSQ=) 20: 3130332e32362e302e302f32322d3232203d3e2034383038.roa (hash: hES7KnWjszOm1orkc01aAlgaOEAc3n79ifMNYlhogjE=) 21: 3130332e3233352e3232382e302f32322d3232203d3e2034383038.roa (hash: EaQ3PZUtcd6hEBlEphYTz7qn9eqtcMN6rjWrxuqTEX8=) 22: 3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa (hash: 6HkpCfuvi7d2b5JTtXvx5y5uDPvD3zn+PFyvB7H8AaI=) 23: 3130332e3234392e3235322e302f32322d3232203d3e203536323832.roa (hash: aCY8rSMAxv7seXtdLE3Sx44spVXVDzHEaKsU+pGe2yM=) 24: 3130332e3233352e3233362e302f32322d3232203d3e2034383038.roa (hash: UrLZO0SNnYdGOHmktaYva1LeY/50x97Gb+svkVkI7qE=) 25: 3130332e3233352e3232302e302f32322d3232203d3e203536323832.roa (hash: X8o34ROwXxUIvMj22mGm3ExvXR7zXrq28moPkyZq7U4=) 26: 323430363a346430303a3a2f34382d3438203d3e2034383038.roa (hash: 2uNGZKNPkXDb+cBaW04Kj0JovDPXkDMs8xvwIjEzk3g=) 27: 3130332e3232372e37362e302f32322d3232203d3e203233373234.roa (hash: ob1gq8SWltCSR9T+Y7Acxj74r+9vls30VHLpIxpSgpA=) 28: 3130332e3233312e36342e302f32322d3232203d3e203536323832.roa (hash: uXsXBVMLc9CSkdwbGdKuhtgJxCWm9r/OJld+/XbAd2Y=) 29: 3130332e3233312e36382e302f32322d3232203d3e2034383038.roa (hash: 8S3KWRNb0/Iteu4mNRrbOAaKLyXnnWRnw4jAyEQHBOk=) 30: 3130332e32362e302e302f32322d3232203d3e203536323832.roa (hash: l4wiNQJR+y8NzxUY0+C+9W6BHJv1urB3s8HDTzyTXSw=) 31: 3130332e32362e302e302f32322d3232203d3e203233373234.roa (hash: 3byVHWNmJp/2EX7LmRxD4s69SGAdvhL0UmPbmDzOCM8=) 32: 3130332e3233352e3232342e302f32322d3232203d3e2034383038.roa (hash: JKCuI56UVOY9acAQVCrOY3pHaAZOXOhroASOdVhxWoA=) 33: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl (hash: HS9vr6djC2O//v3wf8ryruqEGa6VQvcSGdwZcqbXfI0=) 34: 3130332e3233312e36342e302f32322d3232203d3e203233373234.roa (hash: LpvK5C59OgH2zOKIAf1omS7fD9yuG55reZjtWDkxCvk=) 35: 3130332e3233352e3233322e302f32322d3232203d3e2034383038.roa (hash: LvIz0HxxaDpvm/3DSxcGIZnvupUdznL2kgEGSmjy5qk=) 36: 3130332e3232372e37362e302f32322d3232203d3e2034383038.roa (hash: Hf9k2SJcA/xP1ErQqm29WhIrSfaOziA5BA7Ts2+4KIA=) 37: 3231312e3135352e38382e302f32312d3231203d3e2034383038.roa (hash: p4fyfGNxAe76CjzdibjAUATy2TsPOlwMbPqb3NiuGKA=) 38: 3231312e3135352e38382e302f32312d3231203d3e203233373234.roa (hash: oiQVtHJ3uNb8QOBB9izDh02SvyMImPV2UxDp/+mGsRc=) 39: 3130332e3232372e38302e302f32322d3232203d3e203233373234.roa (hash: XeSiJljtfNIQ1QNcYk6lRg7M2ASKlzajd2eY/EQYSM4=) 40: 3130332e3233352e3232382e302f32322d3232203d3e203536323832.roa (hash: xP7nMAZ+jb5uBbP0Yz6ClJWEoaE3SkfQMNvQkbdgTR0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ce:c8:1e:e4:18:53:74:19:79:ff:e9:a1:f8:96:27:32:af:82:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8 Validity Not Before: Mar 26 14:03:28 2026 GMT Not After : Mar 27 15:16:28 2026 GMT Subject: CN=964B0F9B55C9343AD699787CCB765FFB88181B09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9c:8c:cb:c9:1b:41:99:ac:e4:f5:49:29:23: 54:41:c7:d0:04:dd:98:89:e4:2d:76:37:93:dd:88: 32:c6:e3:d7:b6:15:0a:63:75:6f:a4:21:af:0e:e4: f5:b8:89:13:bb:25:b0:2c:72:11:f1:83:92:fd:80: 66:0c:d0:1b:ca:88:f0:68:73:e5:9b:ef:0e:89:70: 07:e1:a9:00:4e:eb:28:a9:0c:49:01:34:f5:97:5c: a3:c1:57:7a:ca:65:f7:cf:a7:95:25:36:f0:d1:4c: 61:4b:07:bf:29:8f:4c:fc:c5:82:27:d0:16:f7:2c: 4c:2c:f9:78:05:02:56:96:6d:fc:c3:19:42:41:ea: 7d:f8:18:88:7d:95:96:63:64:ac:41:e9:ee:7a:b7: 19:1b:43:48:37:a4:58:e4:ba:c7:6a:6c:fc:31:8e: c6:b0:70:3e:63:b1:a5:e4:b8:54:d4:df:31:92:70: b6:49:0b:6d:36:e7:75:83:b1:fd:48:3a:32:d0:af: 7e:be:c4:16:88:5d:42:02:a3:7f:34:d9:1d:d5:76: 3f:fc:27:a2:ec:26:8a:7e:6d:cf:8d:b5:d9:a7:12: 53:d6:0b:96:d0:64:87:71:32:f4:ad:55:a3:50:21: f2:d6:dc:9c:c9:90:6b:43:40:23:3b:e8:1d:b3:48: 4a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4B:0F:9B:55:C9:34:3A:D6:99:78:7C:CB:76:5F:FB:88:18:1B:09 X509v3 Authority Key Identifier: keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6e:df:a1:96:de:6b:09:07:ff:76:f1:cc:de:f9:09:76:48: 0d:98:48:46:86:5f:0d:a5:19:f3:ad:01:1f:97:66:cd:82:47: 43:29:9a:7e:e2:7f:43:ea:fe:6e:5f:a3:9d:23:e1:c1:13:61: 82:77:a0:3f:d9:f9:20:1d:30:00:be:ff:70:e0:09:bd:8b:72: 85:1d:78:f8:19:e9:98:9c:cb:a6:21:73:31:4a:05:51:55:0d: 94:af:5b:ef:f9:d2:82:40:8b:9f:bc:1f:a5:49:fd:60:68:2d: 3f:a3:df:34:dd:7b:53:12:9f:ff:62:11:e6:68:9c:14:88:a9: 89:95:c3:c7:3d:38:f9:b1:56:08:c3:2a:f5:13:53:6c:ec:f0: fe:1b:89:eb:28:ab:37:61:4f:de:e8:c3:54:6a:cf:29:ec:ca: bc:10:86:74:70:0c:2f:59:f1:9a:b4:c8:b4:7a:3d:82:e8:91: c7:83:a4:e5:96:da:9b:57:10:8c:7e:b7:56:f6:fa:b9:27:60: fd:1e:f7:7e:d9:54:39:47:32:7a:61:cf:ef:32:c0:a8:87:36: 81:63:49:b8:02:f2:31:22:f3:06:84:3c:e6:c5:e9:96:33:01: f0:d7:d6:db:28:ca:24:87:0d:b7:54:21:ac:95:ce:31:f6:74: 14:fd:c2:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUF87IHuQYU3QZef/pofiWJzKvgsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD QUYyQkRFODAeFw0yNjAzMjYxNDAzMjhaFw0yNjAzMjcxNTE2MjhaMDMxMTAvBgNV BAMTKDk2NEIwRjlCNTVDOTM0M0FENjk5Nzg3Q0NCNzY1RkZCODgxODFCMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCinIzLyRtBmazk9UkpI1RBx9AE 3ZiJ5C12N5PdiDLG49e2FQpjdW+kIa8O5PW4iRO7JbAschHxg5L9gGYM0BvKiPBo c+Wb7w6JcAfhqQBO6yipDEkBNPWXXKPBV3rKZffPp5UlNvDRTGFLB78pj0z8xYIn 0Bb3LEws+XgFAlaWbfzDGUJB6n34GIh9lZZjZKxB6e56txkbQ0g3pFjkusdqbPwx jsawcD5jsaXkuFTU3zGScLZJC20253WDsf1IOjLQr36+xBaIXUICo3802R3Vdj/8 J6LsJop+bc+NtdmnElPWC5bQZIdxMvStVaNQIfLW3JzJkGtDQCM76B2zSErHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlksPm1XJNDrWmXh8y3Zf+4gYGwkwHwYDVR0j BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC9BRjM4MjJCQTdBNTg1 MERBMDY5OTNCRjIyRDk5MEIyQkNBRjJCREU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKW7foZbeawkH /3bxzN75CXZIDZhIRoZfDaUZ860BH5dmzYJHQymafuJ/Q+r+bl+jnSPhwRNhgneg P9n5IB0wAL7/cOAJvYtyhR14+BnpmJzLpiFzMUoFUVUNlK9b7/nSgkCLn7wfpUn9 YGgtP6PfNN17UxKf/2IR5micFIipiZXDxz04+bFWCMMq9RNTbOzw/huJ6yirN2FP 3ujDVGrPKezKvBCGdHAML1nxmrTItHo9guiRx4Ok5Zbam1cQjH63Vvb6uSdg/R73 ftlUOUcyemHP7zLAqIc2gWNJuALyMSLzBoQ85sXpljMB8NfW2yjKJIcNt1QhrJXO MfZ0FP3Cvg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:36:41 2026 by rpki-client