$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json) Hash identifier: JDKH7KpOnj3yEcnacfnxobBJ6G+dgcBcvHg9QDwgB9Q= Subject key identifier: B0:0B:A1:F9:9F:C2:79:F5:3A:08:B8:61:26:09:8B:D9:F9:AD:20:A0 Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 Certificate issuer: /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Certificate serial: 17F65CFA5A6958E281362B04F9BCCE7428391B4C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft Manifest number: 013C Signing time: Thu 15 Oct 2026 00:51:00 +0000 Manifest this update: Thu 15 Oct 2026 00:46:00 +0000 Manifest next update: Sun 18 Oct 2026 05:08:00 +0000 Files and hashes: 1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: ie+FOGAvPNz8DGJl2yg53n9Ldw45o5oLfaZPjwwAtaY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 05:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:f6:5c:fa:5a:69:58:e2:81:36:2b:04:f9:bc:ce:74:28:39:1b:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126 Validity Not Before: Oct 15 00:46:00 2026 GMT Not After : Oct 18 05:08:00 2026 GMT Subject: CN=B00BA1F99FC279F53A08B86126098BD9F9AD20A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:b6:2b:28:f7:a5:8a:9d:a2:94:20:62:db: 9a:8e:7c:0a:f0:25:85:95:a2:9b:0b:6b:97:64:84: aa:ff:de:3c:54:cc:76:70:05:8d:55:cf:85:7f:98: ce:64:05:14:40:a1:34:82:8f:d4:88:e7:c1:c5:f1: f9:2d:02:96:19:8d:1f:15:6f:9e:cf:41:3b:cc:e0: 1b:e7:fa:50:82:2f:94:63:17:8a:83:6c:54:60:12: 55:93:e5:89:8e:a6:2e:ca:29:c0:f0:02:ab:a2:9d: 6c:f1:42:07:91:1d:23:4e:ea:d1:ca:b4:a7:88:b9: a9:3c:a6:4b:fb:c7:08:cd:6a:b6:40:22:3b:3d:f3: 1f:88:35:1f:77:5c:88:c5:12:2e:90:c6:32:d9:38: 4c:ee:23:47:0e:0a:1e:59:d8:dd:cc:0c:90:9f:f7: 13:f0:38:ba:ee:25:a9:69:56:e9:2f:0f:45:f7:28: 1f:bd:a8:35:f0:b5:01:ed:ec:39:19:45:e5:49:aa: 4d:51:63:83:9f:5d:2d:3f:39:86:9f:b7:f7:e5:5a: 68:65:d6:ff:af:4b:fa:46:6e:d3:47:ce:c9:d5:d7: be:ce:68:2c:34:8e:84:2f:f6:75:c3:67:4c:a0:3b: 3e:0d:71:ac:04:03:9c:34:fb:7a:af:11:09:1c:47: 73:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0B:A1:F9:9F:C2:79:F5:3A:08:B8:61:26:09:8B:D9:F9:AD:20:A0 X509v3 Authority Key Identifier: keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:9f:bc:8b:88:17:6f:68:4a:53:de:63:21:b4:e0:5e:6d:ac: 98:f2:2d:59:2d:86:4d:8f:28:7a:cc:51:de:34:c9:c5:b1:3e: 86:0b:9d:25:6a:59:48:0b:98:d9:35:c4:af:89:ff:d6:9e:4c: 6e:35:a9:9f:da:5e:c2:df:23:73:6a:95:87:f9:40:88:72:eb: 97:65:49:3b:0c:d1:f5:55:72:ff:4f:ec:32:c1:14:d8:4a:aa: ab:22:fd:a3:01:c3:50:10:1b:41:94:db:ea:19:b7:07:f1:0c: 76:af:10:7d:6e:5f:55:2f:0c:e4:52:da:ce:31:e9:cc:3b:17: d6:03:18:96:c8:d8:c2:f7:ab:f3:3e:ca:81:75:d5:68:3a:44: 9c:79:80:fd:9e:21:0c:f5:03:05:60:11:74:56:18:d0:0b:f7: 04:d7:e9:09:3e:93:97:36:2f:a7:92:05:88:a6:ea:fd:3e:5d: 36:e2:a7:20:a5:46:6b:35:6b:8e:e1:fc:34:80:cd:3a:dc:1a: d0:15:85:2b:c2:70:5e:bf:d0:45:64:e7:d7:7a:6a:b7:72:b3: 59:22:17:c2:2a:50:16:57:c6:e9:df:28:3b:28:95:5f:5c:25: de:c4:d6:02:be:fc:b7:e6:19:c8:fe:03:74:a6:ca:59:75:fc: 5f:43:52:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUF/Zc+lppWOKBNisE+bzOdCg5G0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5 OTVFQjEyNjAeFw0yNjEwMTUwMDQ2MDBaFw0yNjEwMTgwNTA4MDBaMDMxMTAvBgNV BAMTKEIwMEJBMUY5OUZDMjc5RjUzQTA4Qjg2MTI2MDk4QkQ5RjlBRDIwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg+LYrKPelip2ilCBi25qOfArw JYWVopsLa5dkhKr/3jxUzHZwBY1Vz4V/mM5kBRRAoTSCj9SI58HF8fktApYZjR8V b57PQTvM4Bvn+lCCL5RjF4qDbFRgElWT5YmOpi7KKcDwAquinWzxQgeRHSNO6tHK tKeIuak8pkv7xwjNarZAIjs98x+INR93XIjFEi6QxjLZOEzuI0cOCh5Z2N3MDJCf 9xPwOLruJalpVukvD0X3KB+9qDXwtQHt7DkZReVJqk1RY4OfXS0/OYaft/flWmhl 1v+vS/pGbtNHzsnV177OaCw0joQv9nXDZ0ygOz4NcawEA5w0+3qvEQkcR3NvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsAuh+Z/CefU6CLhhJgmL2fmtIKAwHwYDVR0j BBgwFoAUr3hDFkag+rvY8IH5/zS8rplesSYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8wL0FGNzg0MzE2NDZBMEZBQkJEOEYwODFGOUZGMzRC Q0FFOTk1RUIxMjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMC9BRjc4NDMxNjQ2QTBG QUJCRDhGMDgxRjlGRjM0QkNBRTk5NUVCMTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZ+8i4gXb2hK U95jIbTgXm2smPItWS2GTY8oesxR3jTJxbE+hgudJWpZSAuY2TXEr4n/1p5MbjWp n9pewt8jc2qVh/lAiHLrl2VJOwzR9VVy/0/sMsEU2EqqqyL9owHDUBAbQZTb6hm3 B/EMdq8QfW5fVS8M5FLazjHpzDsX1gMYlsjYwver8z7KgXXVaDpEnHmA/Z4hDPUD BWARdFYY0Av3BNfpCT6TlzYvp5IFiKbq/T5dNuKnIKVGazVrjuH8NIDNOtwa0BWF K8JwXr/QRWTn13pqt3KzWSIXwipQFlfG6d8oOyiVX1wl3sTWAr78t+YZyP4DdKbK WXX8X0NSoQ== -----END CERTIFICATE-----Generated at Sat Oct 17 01:59:41 2026 by rpki-client