$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json) Hash identifier: eRUeuIN08u/WdOT7Fjpgjn6N3ziC/41K6JKqM6xNFAk= Subject key identifier: 88:BE:EC:D9:63:6E:34:E3:74:87:82:93:49:06:01:71:EB:87:71:82 Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Certificate issuer: /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Certificate serial: 5B4F2D5CC4D08117A79BC97783E6F6638E522A65 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 11:18:28 +0000 Manifest this update: Thu 26 Mar 2026 11:13:28 +0000 Manifest next update: Fri 27 Mar 2026 15:08:28 +0000 Files and hashes: 1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: pA6HglTcxHzcAydf/j1B4dKaE3/IDBao2+iZXTdP2JI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:4f:2d:5c:c4:d0:81:17:a7:9b:c9:77:83:e6:f6:63:8e:52:2a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Validity Not Before: Mar 26 11:13:28 2026 GMT Not After : Mar 27 15:08:28 2026 GMT Subject: CN=88BEECD9636E34E37487829349060171EB877182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:10:41:5f:72:d2:69:4b:40:0b:ce:7b:e1:e3: 62:6a:31:15:63:c1:78:af:de:f6:d6:53:1b:1d:85: 74:b4:7a:8e:a2:63:5b:aa:ce:37:42:0b:c6:31:c1: 11:b8:83:7c:cc:4b:3e:1e:87:e9:cd:23:f8:41:93: 1e:bc:26:77:7b:7a:89:92:56:10:43:52:be:c9:b4: fc:0a:92:86:1a:74:54:6c:12:2d:d2:f5:d1:e1:d8: 6f:c9:b1:46:53:c4:31:ba:e8:a3:4f:7e:a3:26:71: 39:d7:a6:c4:b9:89:e9:f7:92:85:d5:86:5d:93:0a: 4b:40:fc:08:3c:44:0a:1c:8d:f6:93:66:4a:6b:88: 74:e5:c4:69:c8:20:b3:b9:ca:f2:91:ee:ed:8e:8a: 20:86:e3:b9:a5:ba:fb:c0:93:9f:3b:94:9d:81:4d: 8e:c1:5b:80:f1:f6:36:0f:7d:91:47:b1:c2:d6:f5: e0:51:68:83:82:bf:aa:20:da:92:c0:9e:e2:91:db: 0e:b0:b3:02:8a:41:2d:d8:91:de:b4:2e:7e:a6:78: 21:b9:09:d7:23:11:db:76:78:67:45:98:0e:77:c4: 86:c4:7d:81:b2:93:c9:79:b5:30:0b:4a:80:da:a2: 99:9c:0e:02:84:3a:72:04:76:47:8b:9d:38:1d:13: e9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BE:EC:D9:63:6E:34:E3:74:87:82:93:49:06:01:71:EB:87:71:82 X509v3 Authority Key Identifier: keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5a:25:b2:c9:24:83:b8:d7:5f:74:32:73:b3:8a:26:a4:cf: 19:52:f3:16:00:27:f4:37:b7:5d:82:86:a0:58:6f:ae:5a:d6: 51:03:92:c2:91:a6:95:48:13:91:08:ed:ff:8e:db:da:6e:9c: 92:4f:7b:e8:60:09:c2:1f:1b:a9:85:6e:b8:b8:76:7b:72:de: 4f:e9:b8:49:c1:8d:86:eb:2c:30:08:9b:99:dc:cf:04:d0:a2: b6:94:40:a5:82:77:a4:53:db:55:a2:ec:52:1f:cb:b2:88:e4: 35:35:4f:e0:c8:74:12:fe:6e:73:f7:fc:32:61:9b:92:33:0c: 3f:ba:dd:e7:a4:ba:e2:7e:90:4c:44:cb:68:cb:c2:fe:d8:33: 72:87:73:72:6b:6d:4e:11:1b:43:37:95:31:c8:3d:3e:a8:78: b8:7e:f9:09:5c:bb:5e:e1:4c:7a:8a:39:65:33:b2:45:fe:27: 80:af:02:81:1b:fc:13:a5:2c:1d:1e:34:8b:3d:bf:71:2b:85: fc:c7:83:a5:90:ec:4e:74:8f:d4:1c:05:30:e9:44:3e:e7:3e: 35:5e:1d:86:fc:2d:41:c7:b5:cf:9b:00:43:a7:0b:d6:d7:bf: 44:cb:55:5f:2f:1c:cb:7f:5a:7a:ac:78:fe:ce:e3:3d:05:71: 11:af:ef:fa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW08tXMTQgRenm8l3g+b2Y45SKmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5 OTVFQjEyNjAeFw0yNjAzMjYxMTEzMjhaFw0yNjAzMjcxNTA4MjhaMDMxMTAvBgNV BAMTKDg4QkVFQ0Q5NjM2RTM0RTM3NDg3ODI5MzQ5MDYwMTcxRUI4NzcxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIEEFfctJpS0ALznvh42JqMRVj wXiv3vbWUxsdhXS0eo6iY1uqzjdCC8YxwRG4g3zMSz4eh+nNI/hBkx68Jnd7eomS VhBDUr7JtPwKkoYadFRsEi3S9dHh2G/JsUZTxDG66KNPfqMmcTnXpsS5ien3koXV hl2TCktA/Ag8RAocjfaTZkpriHTlxGnIILO5yvKR7u2OiiCG47mluvvAk587lJ2B TY7BW4Dx9jYPfZFHscLW9eBRaIOCv6og2pLAnuKR2w6wswKKQS3Ykd60Ln6meCG5 CdcjEdt2eGdFmA53xIbEfYGyk8l5tTALSoDaopmcDgKEOnIEdkeLnTgdE+nNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiL7s2WNuNON0h4KTSQYBceuHcYIwHwYDVR0j BBgwFoAUr3hDFkag+rvY8IH5/zS8rplesSYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8wL0FGNzg0MzE2NDZBMEZBQkJEOEYwODFGOUZGMzRC Q0FFOTk1RUIxMjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMC9BRjc4NDMxNjQ2QTBG QUJCRDhGMDgxRjlGRjM0QkNBRTk5NUVCMTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFolsskkg7jX X3Qyc7OKJqTPGVLzFgAn9De3XYKGoFhvrlrWUQOSwpGmlUgTkQjt/47b2m6ckk97 6GAJwh8bqYVuuLh2e3LeT+m4ScGNhussMAibmdzPBNCitpRApYJ3pFPbVaLsUh/L sojkNTVP4Mh0Ev5uc/f8MmGbkjMMP7rd56S64n6QTETLaMvC/tgzcodzcmttThEb QzeVMcg9Pqh4uH75CVy7XuFMeoo5ZTOyRf4ngK8CgRv8E6UsHR40iz2/cSuF/MeD pZDsTnSP1BwFMOlEPuc+NV4dhvwtQce1z5sAQ6cL1te/RMtVXy8cy39aeqx4/s7j PQVxEa/v+g== -----END CERTIFICATE-----Generated at Fri Mar 27 03:45:11 2026 by rpki-client