$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json) Hash identifier: BNeaw3d3wB2qguAL1BbVU7EW0IGYl4DeBR74RlGKuP0= Subject key identifier: 00:23:E5:6C:45:99:CF:00:8F:F6:E7:15:99:8D:F9:89:7C:AF:35:CB Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Certificate issuer: /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Certificate serial: 5E66BC57580F63E33ED1477127056C699AF21A6E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft Manifest number: 98 Signing time: Wed 13 May 2026 13:06:04 +0000 Manifest this update: Wed 13 May 2026 13:01:04 +0000 Manifest next update: Thu 14 May 2026 16:57:04 +0000 Files and hashes: 1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: EhodABgV1xw+Pvm09InQ8ML+bAqTx53pXg4ad/MNtro=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:66:bc:57:58:0f:63:e3:3e:d1:47:71:27:05:6c:69:9a:f2:1a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Validity Not Before: May 13 13:01:04 2026 GMT Not After : May 14 16:57:04 2026 GMT Subject: CN=0023E56C4599CF008FF6E715998DF9897CAF35CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5c:74:a3:6b:3c:6a:23:7c:77:c4:22:a8:f0: 94:e9:4c:a2:04:3e:1a:f1:33:fb:92:d5:43:79:31: 5e:6c:ab:01:bb:ea:c1:24:b6:5b:9e:85:ed:77:93: a8:5e:d8:a5:0f:d1:3f:5a:ac:93:49:1e:4b:0f:b4: ed:07:d3:b8:aa:01:f2:c5:62:72:14:8d:6f:9e:bd: 55:ef:76:6a:b1:76:df:bd:a5:e1:82:c3:a6:b2:7b: 2f:08:74:e0:ce:31:2f:5d:89:7f:b4:66:97:25:b0: 77:1d:da:66:88:57:54:db:8e:79:55:61:fe:4b:39: bd:f8:40:15:9d:b3:3e:bf:e6:04:53:02:08:0e:0e: 75:74:ed:df:b7:cc:ed:92:69:ef:34:ec:da:cb:90: d6:27:05:00:6d:b3:95:02:e4:72:b4:e2:3c:07:0b: ba:ac:f8:29:6b:5d:98:0a:6a:b4:5e:df:6f:a4:08: 4d:96:58:b8:03:d3:9f:c7:1c:61:c4:a3:00:3a:f3: 28:e3:8a:a8:1c:a0:b6:52:82:a4:24:9f:50:cc:80: d6:ec:69:fb:8d:6c:a5:da:97:91:53:db:a1:72:1c: 34:c5:26:17:7d:94:33:96:a3:e4:6d:50:12:13:91: c7:85:d7:32:b9:f3:f6:a0:31:29:22:d8:70:e7:97: ed:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:23:E5:6C:45:99:CF:00:8F:F6:E7:15:99:8D:F9:89:7C:AF:35:CB X509v3 Authority Key Identifier: keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:3c:79:a4:ff:2e:65:f6:37:6f:af:27:33:18:b8:5b:cc:62: c1:e0:a3:a7:d5:db:c8:ae:00:bb:43:f3:33:50:78:77:3f:87: e6:d5:5d:70:c2:d0:14:9b:53:8f:9f:e1:5c:a6:a5:39:45:64: 90:1f:32:a0:a5:94:9d:4e:b1:47:fe:1e:7a:cc:ac:62:7a:e2: 51:5e:5b:93:ba:2c:27:80:fd:9a:68:51:a7:75:2a:c9:42:50: 6d:70:bd:aa:05:f9:9d:52:62:e8:51:a4:91:34:8f:6c:e6:54: e0:42:7e:ba:dc:9f:62:9e:22:9f:bb:4c:c2:6d:b3:58:2c:0e: b1:a1:70:a4:b2:09:62:ab:90:90:36:04:40:43:08:61:f0:8f: 84:da:67:80:7c:d5:2b:00:fa:b2:09:ba:51:c9:28:24:3e:86: f4:64:8f:6b:3a:01:00:45:72:11:6e:d8:6f:2a:98:58:43:6a: 99:60:0d:73:fb:a4:8f:be:4d:77:48:a8:27:fa:e9:a0:62:72: d0:8f:9b:d3:0c:71:f5:ad:80:43:f2:9c:cb:8c:44:34:94:31: c1:61:de:c1:db:49:30:06:d4:61:45:4c:a8:c1:3c:02:06:6e: 48:96:a8:0d:74:e2:6e:e2:80:b2:99:ad:6e:84:48:d0:04:45: 38:2e:d2:e0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXma8V1gPY+M+0UdxJwVsaZryGm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5 OTVFQjEyNjAeFw0yNjA1MTMxMzAxMDRaFw0yNjA1MTQxNjU3MDRaMDMxMTAvBgNV BAMTKDAwMjNFNTZDNDU5OUNGMDA4RkY2RTcxNTk5OERGOTg5N0NBRjM1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrXHSjazxqI3x3xCKo8JTpTKIE PhrxM/uS1UN5MV5sqwG76sEktluehe13k6he2KUP0T9arJNJHksPtO0H07iqAfLF YnIUjW+evVXvdmqxdt+9peGCw6ayey8IdODOMS9diX+0ZpclsHcd2maIV1TbjnlV Yf5LOb34QBWdsz6/5gRTAggODnV07d+3zO2Sae807NrLkNYnBQBts5UC5HK04jwH C7qs+ClrXZgKarRe32+kCE2WWLgD05/HHGHEowA68yjjiqgcoLZSgqQkn1DMgNbs afuNbKXal5FT26FyHDTFJhd9lDOWo+RtUBITkceF1zK58/agMSki2HDnl+1LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUACPlbEWZzwCP9ucVmY35iXyvNcswHwYDVR0j BBgwFoAUr3hDFkag+rvY8IH5/zS8rplesSYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8wL0FGNzg0MzE2NDZBMEZBQkJEOEYwODFGOUZGMzRC Q0FFOTk1RUIxMjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMC9BRjc4NDMxNjQ2QTBG QUJCRDhGMDgxRjlGRjM0QkNBRTk5NUVCMTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTx5pP8uZfY3 b68nMxi4W8xiweCjp9XbyK4Au0PzM1B4dz+H5tVdcMLQFJtTj5/hXKalOUVkkB8y oKWUnU6xR/4eesysYnriUV5bk7osJ4D9mmhRp3UqyUJQbXC9qgX5nVJi6FGkkTSP bOZU4EJ+utyfYp4in7tMwm2zWCwOsaFwpLIJYquQkDYEQEMIYfCPhNpngHzVKwD6 sgm6UckoJD6G9GSPazoBAEVyEW7YbyqYWENqmWANc/ukj75Nd0ioJ/rpoGJy0I+b 0wxx9a2AQ/Kcy4xENJQxwWHewdtJMAbUYUVMqME8AgZuSJaoDXTibuKAspmtboRI 0ARFOC7S4A== -----END CERTIFICATE-----Generated at Wed May 13 20:21:04 2026 by rpki-client