$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json) Hash identifier: nDbuKzrNSJY9Ji2cinmzNB4w7ofu2yOUHbPdLkQoqh8= Subject key identifier: A9:66:84:0A:80:00:52:68:28:22:65:32:88:F3:1B:4C:42:C0:0A:FE Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Certificate issuer: /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Certificate serial: 2E57BEACC2D290EA59ED479518A50F615525D141 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft Manifest number: F8 Signing time: Fri 24 Jul 2026 13:56:21 +0000 Manifest this update: Fri 24 Jul 2026 13:51:21 +0000 Manifest next update: Sat 25 Jul 2026 16:13:21 +0000 Files and hashes: 1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: CZ1Aiw4NWvbNWX/7jWl2bAoq+4yBFtlVWQseaeYUgsg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 16:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:57:be:ac:c2:d2:90:ea:59:ed:47:95:18:a5:0f:61:55:25:d1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Validity Not Before: Jul 24 13:51:21 2026 GMT Not After : Jul 25 16:13:21 2026 GMT Subject: CN=A966840A800052682822653288F31B4C42C00AFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:f2:9c:d7:dc:33:90:fd:61:18:19:05:44: ee:1b:bb:59:de:5f:41:4d:b8:de:71:19:62:e8:20: 4b:08:07:cd:1f:68:9c:fe:16:5f:58:61:77:90:c8: 62:9a:5b:d5:db:38:18:bc:b3:0b:c0:95:1f:47:f1: 92:0d:4f:2f:13:f6:9c:01:ab:54:57:60:f3:a4:76: 8b:e0:49:fb:58:98:b9:71:36:8d:e8:78:8d:4a:0a: eb:eb:c9:e2:f0:de:fa:b4:f1:54:3f:de:ad:02:4f: 3b:02:58:be:d7:d1:b1:9f:98:e1:36:45:e2:b2:28: 11:b1:9d:39:6c:8d:72:9e:b7:f6:d3:62:a5:cc:01: 24:cb:d7:dd:5e:8b:af:22:9d:49:f6:d2:6e:36:ab: 27:79:0f:cc:eb:7c:f4:ee:4a:18:36:3c:64:b1:60: 30:a0:4b:7c:9c:dd:9a:38:f8:14:2f:45:51:36:f7: e4:f6:81:66:8b:7d:36:40:c8:e3:b2:9e:b0:80:a2: 15:2b:67:1f:33:99:23:be:ca:5a:6c:bd:1d:6c:45: 3e:04:dd:03:66:83:0a:b2:73:73:82:67:78:12:80: b7:fb:4d:b9:44:bb:71:2b:6e:7d:77:40:30:31:24: c2:e4:c8:9c:61:ea:28:cf:d0:ff:36:69:72:44:7e: 24:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:66:84:0A:80:00:52:68:28:22:65:32:88:F3:1B:4C:42:C0:0A:FE X509v3 Authority Key Identifier: keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:73:84:4b:a2:1a:95:cc:fe:1b:f1:28:3c:b3:2a:df:c8:0f: be:a8:ac:fe:3f:32:c5:33:8f:ef:49:32:28:a0:9b:37:f9:22: 5e:b6:72:7c:30:71:18:00:b7:e2:b4:de:32:2b:79:84:c8:88: f4:4c:32:dd:8d:f0:a0:76:e1:5f:dd:59:0f:31:5e:6f:cd:79: ae:bb:37:8b:62:b4:a8:5c:2b:e3:aa:fd:09:d9:fc:52:3f:57: b0:38:99:34:5f:a9:91:a8:ec:25:d2:41:fb:5e:f9:fb:12:7e: 89:b0:17:ce:89:96:96:36:ad:e2:ee:03:a1:8b:b1:52:a3:9f: 5b:67:a5:ac:1c:16:93:00:1d:63:c5:40:0b:a1:cc:7c:b6:9e: 89:bf:ff:4a:f8:16:fd:d5:ce:ad:33:d5:3a:af:73:d8:cc:b9: fc:3f:34:83:90:ad:cb:2b:c6:73:bb:b3:d0:51:84:ff:9f:53: 1a:e9:0a:9a:f5:4a:5e:ff:7b:e4:81:91:c5:60:f2:0d:c2:62: 48:78:b6:dd:ec:0a:9f:97:d3:08:0c:4f:d2:14:db:b8:85:68: 76:e3:65:fc:57:fe:c4:fe:f1:9e:aa:2b:e0:53:33:d0:a9:9c: 3f:1b:bc:9b:84:8b:7b:bb:5b:85:b9:09:48:5e:f9:e2:5a:3c: a1:1e:19:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULle+rMLSkOpZ7UeVGKUPYVUl0UEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5 OTVFQjEyNjAeFw0yNjA3MjQxMzUxMjFaFw0yNjA3MjUxNjEzMjFaMDMxMTAvBgNV BAMTKEE5NjY4NDBBODAwMDUyNjgyODIyNjUzMjg4RjMxQjRDNDJDMDBBRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC61vKc19wzkP1hGBkFRO4bu1ne X0FNuN5xGWLoIEsIB80faJz+Fl9YYXeQyGKaW9XbOBi8swvAlR9H8ZINTy8T9pwB q1RXYPOkdovgSftYmLlxNo3oeI1KCuvryeLw3vq08VQ/3q0CTzsCWL7X0bGfmOE2 ReKyKBGxnTlsjXKet/bTYqXMASTL191ei68inUn20m42qyd5D8zrfPTuShg2PGSx YDCgS3yc3Zo4+BQvRVE29+T2gWaLfTZAyOOynrCAohUrZx8zmSO+ylpsvR1sRT4E 3QNmgwqyc3OCZ3gSgLf7TblEu3Erbn13QDAxJMLkyJxh6ijP0P82aXJEfiRzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqWaECoAAUmgoImUyiPMbTELACv4wHwYDVR0j BBgwFoAUr3hDFkag+rvY8IH5/zS8rplesSYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8wL0FGNzg0MzE2NDZBMEZBQkJEOEYwODFGOUZGMzRC Q0FFOTk1RUIxMjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMC9BRjc4NDMxNjQ2QTBG QUJCRDhGMDgxRjlGRjM0QkNBRTk5NUVCMTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtnOES6Ialcz+ G/EoPLMq38gPvqis/j8yxTOP70kyKKCbN/kiXrZyfDBxGAC34rTeMit5hMiI9Ewy 3Y3woHbhX91ZDzFeb815rrs3i2K0qFwr46r9Cdn8Uj9XsDiZNF+pkajsJdJB+175 +xJ+ibAXzomWljat4u4DoYuxUqOfW2elrBwWkwAdY8VAC6HMfLaeib//SvgW/dXO rTPVOq9z2My5/D80g5CtyyvGc7uz0FGE/59TGukKmvVKXv975IGRxWDyDcJiSHi2 3ewKn5fTCAxP0hTbuIVoduNl/Ff+xP7xnqor4FMz0KmcPxu8m4SLe7tbhbkJSF75 4lo8oR4Zlg== -----END CERTIFICATE-----Generated at Sat Jul 25 01:48:51 2026 by rpki-client