$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft (raw, json) Hash identifier: a9jlTB1etZYnCxKVVcwpg+emg4A6JQ+nx7XsBfNXni4= Subject key identifier: F1:DE:6B:D9:C7:61:4A:CE:63:58:90:BA:79:14:87:89:49:BB:EE:97 Authority key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 Certificate issuer: /CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Certificate serial: 34F7BA946092CC8115267213B6837D6E65B57FC6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 15:33:28 +0000 Manifest this update: Thu 26 Mar 2026 15:28:28 +0000 Manifest next update: Fri 27 Mar 2026 18:04:28 +0000 Files and hashes: 1: 323430313a626461303a3a2f33322d3332203d3e20313531323737.roa (hash: 9fwFD84ztG9UUivDa4dFwK8Y6fw7uNd0odjWh9t4he8=) 2: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl (hash: rhZal88zBOJAg20D1M3Zk1M190uWcTRvP6Zap+bErWs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f7:ba:94:60:92:cc:81:15:26:72:13:b6:83:7d:6e:65:b5:7f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Validity Not Before: Mar 26 15:28:28 2026 GMT Not After : Mar 27 18:04:28 2026 GMT Subject: CN=F1DE6BD9C7614ACE635890BA7914878949BBEE97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4f:fa:8d:b3:11:26:97:a7:4f:eb:43:3e:22: 79:9b:97:4d:83:19:bc:fa:88:91:ea:04:34:72:5d: 25:5f:93:5e:44:72:af:ef:34:e6:34:ed:48:60:43: f8:09:6f:1b:f9:dc:f7:ba:c6:05:8b:9c:b0:1d:58: 01:8e:db:f9:0e:55:8c:5e:44:42:40:ac:81:c7:f6: 79:34:10:cc:ef:3d:f6:88:98:59:07:00:4b:6c:bb: 5a:7d:6f:7c:dd:64:31:b4:f4:19:7f:4d:8f:fb:e8: e8:f3:2c:52:9b:b7:aa:0f:7b:72:04:6d:e1:80:c0: 86:aa:9d:da:7d:bf:9b:a6:b9:b7:f5:04:16:8b:19: 7f:56:a6:8f:c2:36:86:7a:03:4f:69:8d:1c:ee:41: 0e:7b:82:94:86:3a:36:ec:1c:bd:a2:b9:73:a0:80: bd:6a:0e:80:71:9d:d0:93:49:0e:2b:87:7a:be:2e: 03:83:0f:f8:19:2f:40:e0:03:5e:fc:7c:ea:ad:a5: 37:34:ab:51:67:7c:7a:a7:cc:55:24:9f:50:40:e3: 3e:15:f9:61:fc:3d:3e:9f:6f:ce:ec:6e:fc:22:3a: c0:0a:e0:61:21:04:0f:11:17:0b:8f:2f:24:c1:20: 38:89:a6:54:a3:dc:f7:e0:6a:f2:14:f1:67:69:3e: 75:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DE:6B:D9:C7:61:4A:CE:63:58:90:BA:79:14:87:89:49:BB:EE:97 X509v3 Authority Key Identifier: keyid:0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b8:1d:c5:57:53:61:2f:34:95:09:91:83:ba:70:0a:2a:e4: e0:47:04:be:17:38:90:e6:7b:ab:22:75:ee:30:eb:4d:ae:9c: 84:04:99:c1:bc:fa:56:5f:98:11:d5:2e:ea:30:f9:28:f4:64: 8c:99:4d:e2:68:4b:99:62:92:54:57:8e:9f:96:0d:ad:78:a5: a8:ad:2a:ca:e1:94:09:94:cc:5d:05:2c:ea:f4:b6:7b:16:73: 02:d0:58:05:40:dc:c2:97:29:30:e4:4d:a2:ac:86:ff:e3:62: 00:bb:1f:7e:46:b8:1a:d6:6c:31:1a:dd:93:5f:27:02:81:53: b4:b0:f4:e8:82:b2:c4:c1:bb:49:b1:17:75:a5:d8:75:32:4d: 02:bd:07:0d:ee:a3:19:42:25:30:5d:7b:fe:0c:c0:b7:be:44: e6:e0:c7:01:a1:34:a7:2b:1c:4d:5b:c4:96:ed:80:d1:82:94: 53:fb:92:bb:97:e1:9a:c1:d0:34:e7:85:2c:6e:c4:c9:b3:b4: 86:62:83:ed:a8:53:69:2c:af:29:5e:eb:cd:59:c8:a9:f3:f8: 65:b3:bf:f9:dc:b4:38:da:cb:28:fb:ed:da:5c:23:c1:4d:38: 67:95:71:0b:af:8d:2d:89:f7:de:c0:63:4b:c1:aa:ef:5e:3d: bd:03:df:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNPe6lGCSzIEVJnITtoN9bmW1f8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2 RTlEMjVFNjAeFw0yNjAzMjYxNTI4MjhaFw0yNjAzMjcxODA0MjhaMDMxMTAvBgNV BAMTKEYxREU2QkQ5Qzc2MTRBQ0U2MzU4OTBCQTc5MTQ4Nzg5NDlCQkVFOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtT/qNsxEml6dP60M+Inmbl02D Gbz6iJHqBDRyXSVfk15Ecq/vNOY07UhgQ/gJbxv53Pe6xgWLnLAdWAGO2/kOVYxe REJArIHH9nk0EMzvPfaImFkHAEtsu1p9b3zdZDG09Bl/TY/76OjzLFKbt6oPe3IE beGAwIaqndp9v5umubf1BBaLGX9Wpo/CNoZ6A09pjRzuQQ57gpSGOjbsHL2iuXOg gL1qDoBxndCTSQ4rh3q+LgODD/gZL0DgA178fOqtpTc0q1FnfHqnzFUkn1BA4z4V +WH8PT6fb87sbvwiOsAK4GEhBA8RFwuPLyTBIDiJplSj3PfgavIU8WdpPnVbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8d5r2cdhSs5jWJC6eRSHiUm77pcwHwYDVR0j BBgwFoAUCv/rPbWykANTEhA6Filpv26dJeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8wLzBBRkZFQjNEQjVCMjkwMDM1MzEyMTAzQTE2Mjk2 OUJGNkU5RDI1RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2RTlEMjVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMC8wQUZGRUIzREI1QjI5 MDAzNTMxMjEwM0ExNjI5NjlCRjZFOUQyNUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLgdxVdTYS80 lQmRg7pwCirk4EcEvhc4kOZ7qyJ17jDrTa6chASZwbz6Vl+YEdUu6jD5KPRkjJlN 4mhLmWKSVFeOn5YNrXilqK0qyuGUCZTMXQUs6vS2exZzAtBYBUDcwpcpMORNoqyG /+NiALsffka4GtZsMRrdk18nAoFTtLD06IKyxMG7SbEXdaXYdTJNAr0HDe6jGUIl MF17/gzAt75E5uDHAaE0pyscTVvElu2A0YKUU/uSu5fhmsHQNOeFLG7EybO0hmKD 7ahTaSyvKV7rzVnIqfP4ZbO/+dy0ONrLKPvt2lwjwU04Z5VxC6+NLYn33sBjS8Gq 7149vQPflA== -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:11 2026 by rpki-client