$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft (raw, json) Hash identifier: 9n8oy78rW4yMeaTQRpCPqvjwO/wvg56PWZjr7EqCztU= Subject key identifier: FD:0D:94:6F:5E:32:B0:5C:CE:9C:B3:83:9B:62:25:19:FC:08:8A:68 Authority key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 Certificate issuer: /CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Certificate serial: 7AA2FD3D7FAA457288F3B682D948B097784BFE1E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft Manifest number: FA Signing time: Fri 24 Jul 2026 05:55:31 +0000 Manifest this update: Fri 24 Jul 2026 05:50:31 +0000 Manifest next update: Sat 25 Jul 2026 09:39:31 +0000 Files and hashes: 1: 323430313a626461303a3a2f33322d3332203d3e20313531323737.roa (hash: 9fwFD84ztG9UUivDa4dFwK8Y6fw7uNd0odjWh9t4he8=) 2: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl (hash: HuMVr6DSrZ54rjNqYheOyseP8Vll5Ldg/Wqtkq66X3A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:a2:fd:3d:7f:aa:45:72:88:f3:b6:82:d9:48:b0:97:78:4b:fe:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Validity Not Before: Jul 24 05:50:31 2026 GMT Not After : Jul 25 09:39:31 2026 GMT Subject: CN=FD0D946F5E32B05CCE9CB3839B622519FC088A68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:a4:2b:9e:72:26:14:66:58:23:9f:65:32: b6:e9:da:12:75:57:31:bc:e9:e5:09:f6:e6:c0:01: 79:ce:4f:71:d2:0e:e6:f1:8d:34:38:b7:6e:74:35: bf:1f:57:6d:a5:d8:02:7b:0e:76:06:17:fe:b3:c8: d2:05:c2:bd:cc:c4:59:5d:67:da:79:74:09:13:7a: 76:2e:b9:21:0e:b2:e4:6b:8f:d5:92:b3:d4:ee:eb: e0:82:e9:e8:ed:42:7d:2b:47:3f:62:a7:ea:2e:cb: 24:21:6a:f0:6f:4d:2d:39:f3:a4:6d:4f:ef:21:3b: 3d:e9:59:c5:d0:0a:ef:a3:97:89:36:86:bb:62:96: 13:f6:e4:7b:39:79:bd:09:90:26:4c:01:bb:24:9b: c0:89:c6:ed:fb:5f:8d:9e:97:f0:9f:d6:4b:f9:9e: 1a:fa:5d:81:b4:ee:2a:92:e6:b4:0a:a7:30:f8:d6: 03:8e:9c:0f:2d:02:85:16:f5:0a:ad:3f:82:c6:51: 89:6f:51:b4:56:9c:1d:f0:52:5d:b3:6f:28:27:9c: 84:23:81:91:14:8c:24:98:25:b9:3a:79:de:88:35: 67:ff:46:87:42:f6:0b:4f:58:7d:99:75:d8:e8:a7: cc:2e:61:25:a0:b8:8f:f8:2d:2c:c1:40:c4:50:46: fc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0D:94:6F:5E:32:B0:5C:CE:9C:B3:83:9B:62:25:19:FC:08:8A:68 X509v3 Authority Key Identifier: keyid:0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a6:7b:08:6e:dd:2c:4c:84:fa:60:77:74:d3:61:b8:04:d7: 9e:b7:2a:cc:1f:a6:90:20:b8:e8:9e:cc:7b:75:35:62:e0:eb: f0:74:25:6c:37:6f:83:3d:90:17:11:f6:c5:33:9e:fd:83:fd: 75:d0:58:79:5b:91:dd:2d:3a:04:be:4c:39:79:4f:dc:c1:7c: 95:c9:be:65:e9:b0:b8:24:73:f0:be:f4:c4:c3:36:fb:66:13: 24:e5:02:24:da:1d:65:0e:9e:4e:61:3e:70:11:5e:30:05:11: 36:1d:c7:af:fb:21:31:59:6f:85:8d:24:52:d6:05:5a:d9:f3: 9d:e9:09:32:55:73:bf:c4:07:f5:76:b1:0c:92:43:31:f8:38: fa:25:4b:2a:b8:b5:f4:9d:36:37:d5:7b:9e:cc:22:e2:3d:14: bd:78:45:0d:d2:c2:62:e7:98:ed:d8:59:d1:e6:41:fb:cd:63: 90:a2:ef:cb:29:1f:5f:fe:05:5d:b3:db:6b:40:8f:23:73:b3: 9a:72:70:06:fe:51:e1:94:f4:08:ab:1c:3f:8b:b5:b0:ae:c3: e8:c0:9c:c3:70:0f:68:ad:5f:0e:a1:8d:1d:d1:12:f2:00:33: eb:c9:cd:b4:73:95:13:32:f7:4b:14:dd:38:37:48:ac:06:c2: b5:b9:17:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeqL9PX+qRXKI87aC2Uiwl3hL/h4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2 RTlEMjVFNjAeFw0yNjA3MjQwNTUwMzFaFw0yNjA3MjUwOTM5MzFaMDMxMTAvBgNV BAMTKEZEMEQ5NDZGNUUzMkIwNUNDRTlDQjM4MzlCNjIyNTE5RkMwODhBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcqQrnnImFGZYI59lMrbp2hJ1 VzG86eUJ9ubAAXnOT3HSDubxjTQ4t250Nb8fV22l2AJ7DnYGF/6zyNIFwr3MxFld Z9p5dAkTenYuuSEOsuRrj9WSs9Tu6+CC6ejtQn0rRz9ip+ouyyQhavBvTS0586Rt T+8hOz3pWcXQCu+jl4k2hrtilhP25Hs5eb0JkCZMAbskm8CJxu37X42el/Cf1kv5 nhr6XYG07iqS5rQKpzD41gOOnA8tAoUW9QqtP4LGUYlvUbRWnB3wUl2zbygnnIQj gZEUjCSYJbk6ed6INWf/RodC9gtPWH2Zddjop8wuYSWguI/4LSzBQMRQRvzzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/Q2Ub14ysFzOnLODm2IlGfwIimgwHwYDVR0j BBgwFoAUCv/rPbWykANTEhA6Filpv26dJeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8wLzBBRkZFQjNEQjVCMjkwMDM1MzEyMTAzQTE2Mjk2 OUJGNkU5RDI1RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2RTlEMjVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMC8wQUZGRUIzREI1QjI5 MDAzNTMxMjEwM0ExNjI5NjlCRjZFOUQyNUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaZ7CG7dLEyE +mB3dNNhuATXnrcqzB+mkCC46J7Me3U1YuDr8HQlbDdvgz2QFxH2xTOe/YP9ddBY eVuR3S06BL5MOXlP3MF8lcm+ZemwuCRz8L70xMM2+2YTJOUCJNodZQ6eTmE+cBFe MAURNh3Hr/shMVlvhY0kUtYFWtnznekJMlVzv8QH9XaxDJJDMfg4+iVLKri19J02 N9V7nswi4j0UvXhFDdLCYueY7dhZ0eZB+81jkKLvyykfX/4FXbPba0CPI3OzmnJw Bv5R4ZT0CKscP4u1sK7D6MCcw3APaK1fDqGNHdES8gAz68nNtHOVEzL3SxTdODdI rAbCtbkXiQ== -----END CERTIFICATE-----Generated at Fri Jul 24 21:31:23 2026 by rpki-client