$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft (raw, json) Hash identifier: c+L3QdJaM6DHF4qKKW2CWRt/0v2YmuNV1OkTZ5Kz+60= Subject key identifier: 4E:2A:F2:B3:94:8C:3B:53:02:AC:28:4F:30:9A:96:1D:60:D3:FB:67 Authority key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 Certificate issuer: /CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Certificate serial: 5FC0A6B22D8DBB5630E34D37881C1BFFB0A0EF53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft Manifest number: 99 Signing time: Wed 13 May 2026 16:41:05 +0000 Manifest this update: Wed 13 May 2026 16:36:05 +0000 Manifest next update: Thu 14 May 2026 17:01:05 +0000 Files and hashes: 1: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl (hash: dhH3y7jzD+UI2Pu6RrER7DkU0zhGozw8kn5FO5FKcag=) 2: 323430313a626461303a3a2f33322d3332203d3e20313531323737.roa (hash: 9fwFD84ztG9UUivDa4dFwK8Y6fw7uNd0odjWh9t4he8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c0:a6:b2:2d:8d:bb:56:30:e3:4d:37:88:1c:1b:ff:b0:a0:ef:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Validity Not Before: May 13 16:36:05 2026 GMT Not After : May 14 17:01:05 2026 GMT Subject: CN=4E2AF2B3948C3B5302AC284F309A961D60D3FB67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bc:80:16:97:13:99:9e:82:1a:3d:53:62:b2: 48:5d:cd:61:ac:a5:56:4a:58:19:a8:37:d6:c1:dd: 9b:4b:84:f7:50:ad:fc:e2:3e:49:7f:68:31:14:0d: 4a:9c:47:d6:91:d9:6b:90:56:8c:18:de:d2:cd:ce: 68:11:8c:e4:fe:4c:c6:e9:ba:56:ac:dc:c4:0f:fe: 58:5d:0f:4a:7a:47:f4:14:68:bd:18:9d:87:dd:d3: 47:80:78:e7:89:43:d2:22:ff:8b:29:e6:96:3f:59: 50:7f:fc:4a:9d:04:ab:cb:6c:2b:d9:fe:51:9a:b1: c1:df:29:1e:7c:1e:78:86:a5:7d:a2:23:0e:71:ae: 43:71:6a:b5:2e:77:12:51:6e:bb:9f:e5:0e:cb:3d: 3c:32:97:1b:9e:6d:f5:3e:2b:73:73:a4:46:38:cc: 9e:d4:1b:98:a2:b8:d1:50:12:b0:ae:b6:83:00:1e: 37:be:72:17:b7:b2:68:49:94:98:bf:07:f0:d7:37: 60:ef:d4:64:52:e1:59:99:47:8b:0b:6b:a6:01:23: 2e:58:aa:23:9a:25:21:c9:37:61:87:76:02:f2:16: 3b:53:15:f5:47:2d:61:86:d5:f0:62:b6:fe:02:e7: 7e:08:65:aa:de:ba:6b:aa:74:c6:42:68:18:b9:0f: ca:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2A:F2:B3:94:8C:3B:53:02:AC:28:4F:30:9A:96:1D:60:D3:FB:67 X509v3 Authority Key Identifier: keyid:0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:5d:d1:fe:6c:3d:07:ac:6d:fa:47:8a:0a:cb:15:81:49:36: e3:d1:9e:86:13:2b:ed:16:16:80:a2:ee:c5:1b:fa:34:47:36: b4:0d:94:b8:81:d8:a4:ef:e8:b8:a7:e7:82:b5:cd:93:30:fe: 49:ce:40:c4:11:0b:c9:a8:67:77:ab:e8:fc:7a:f1:eb:b4:bf: 44:b5:3a:37:f7:68:89:25:3f:91:fc:9c:8e:0e:c4:58:ed:34: a3:6e:03:e7:6b:9a:66:98:ee:df:48:67:17:1c:f6:eb:60:b2: 96:1f:cd:b4:23:57:08:e3:29:24:2a:09:6f:80:3f:39:d0:47: c7:e6:15:a9:91:52:ce:fd:b6:28:1f:2a:7f:e5:bf:42:f0:3c: 00:e4:11:cc:2f:95:60:3a:02:62:3b:34:3f:eb:5e:5c:0b:ec: 87:69:d9:a1:1f:86:a4:ba:d8:64:60:d8:0b:7d:2b:86:d3:f7: ba:d8:99:18:ff:3a:af:4c:fd:d1:3a:b2:a2:dd:42:2a:b7:1e: 3a:fe:b0:04:c0:8c:83:9e:cb:50:b9:ff:8a:49:f8:5b:46:07: 70:ae:7a:f5:a9:4a:a3:37:8f:6d:08:29:b2:20:45:a3:26:8d: eb:7c:8c:2f:96:3c:d2:27:2b:94:ae:08:ca:c8:17:90:c3:aa: c0:fe:d6:a3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX8Cmsi2Nu1Yw4003iBwb/7Cg71MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2 RTlEMjVFNjAeFw0yNjA1MTMxNjM2MDVaFw0yNjA1MTQxNzAxMDVaMDMxMTAvBgNV BAMTKDRFMkFGMkIzOTQ4QzNCNTMwMkFDMjg0RjMwOUE5NjFENjBEM0ZCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSvIAWlxOZnoIaPVNiskhdzWGs pVZKWBmoN9bB3ZtLhPdQrfziPkl/aDEUDUqcR9aR2WuQVowY3tLNzmgRjOT+TMbp ulas3MQP/lhdD0p6R/QUaL0YnYfd00eAeOeJQ9Ii/4sp5pY/WVB//EqdBKvLbCvZ /lGascHfKR58HniGpX2iIw5xrkNxarUudxJRbruf5Q7LPTwylxuebfU+K3NzpEY4 zJ7UG5iiuNFQErCutoMAHje+che3smhJlJi/B/DXN2Dv1GRS4VmZR4sLa6YBIy5Y qiOaJSHJN2GHdgLyFjtTFfVHLWGG1fBitv4C534IZareumuqdMZCaBi5D8rpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTirys5SMO1MCrChPMJqWHWDT+2cwHwYDVR0j BBgwFoAUCv/rPbWykANTEhA6Filpv26dJeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8wLzBBRkZFQjNEQjVCMjkwMDM1MzEyMTAzQTE2Mjk2 OUJGNkU5RDI1RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2RTlEMjVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMC8wQUZGRUIzREI1QjI5 MDAzNTMxMjEwM0ExNjI5NjlCRjZFOUQyNUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY13R/mw9B6xt +keKCssVgUk249GehhMr7RYWgKLuxRv6NEc2tA2UuIHYpO/ouKfngrXNkzD+Sc5A xBELyahnd6vo/Hrx67S/RLU6N/doiSU/kfycjg7EWO00o24D52uaZpju30hnFxz2 62Cylh/NtCNXCOMpJCoJb4A/OdBHx+YVqZFSzv22KB8qf+W/QvA8AOQRzC+VYDoC Yjs0P+teXAvsh2nZoR+GpLrYZGDYC30rhtP3utiZGP86r0z90Tqyot1CKrceOv6w BMCMg57LULn/ikn4W0YHcK569alKozePbQgpsiBFoyaN63yML5Y80icrlK4IysgX kMOqwP7Wow== -----END CERTIFICATE-----Generated at Wed May 13 20:20:41 2026 by rpki-client