$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft (raw, json) Hash identifier: ySnssfM2zutuT8mGqKiVHRCLFhLE3N9nieTa0ACA7fE= Subject key identifier: C8:69:84:A9:C3:4C:BD:F8:CA:C7:2F:11:F9:62:57:62:8B:89:74:10 Authority key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 Certificate issuer: /CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Certificate serial: 6C5CA120F080FE8F3977BC4D5A71F130526C1579 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft Manifest number: 013E Signing time: Thu 15 Oct 2026 01:01:01 +0000 Manifest this update: Thu 15 Oct 2026 00:56:01 +0000 Manifest next update: Sun 18 Oct 2026 05:42:01 +0000 Files and hashes: 1: 323430313a626461303a3a2f33322d3332203d3e20313531323737.roa (hash: 9fwFD84ztG9UUivDa4dFwK8Y6fw7uNd0odjWh9t4he8=) 2: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl (hash: HmMuCZcSUrOvImyGKo23b1qFTTMwVbPC7f3HxxHX5g4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 05:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5c:a1:20:f0:80:fe:8f:39:77:bc:4d:5a:71:f1:30:52:6c:15:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6 Validity Not Before: Oct 15 00:56:01 2026 GMT Not After : Oct 18 05:42:01 2026 GMT Subject: CN=C86984A9C34CBDF8CAC72F11F96257628B897410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:80:24:4b:79:6c:e6:3b:e4:33:48:2a:d3:81: 1d:b4:5f:d9:93:0d:b4:a8:91:e9:1d:c7:1b:1b:3d: 51:ae:b2:b8:b2:c8:1e:27:c7:dc:d2:f9:a6:8d:24: e6:c8:8e:d1:b3:be:f5:ab:e3:d4:28:50:65:e9:c2: 68:ef:d7:b1:cd:e0:71:a6:f3:73:c6:04:7c:48:a0: 35:a7:c0:9b:5b:c2:71:49:bc:6a:d6:53:81:5d:53: 61:a5:83:c8:07:09:79:ed:3c:2f:8b:bb:ca:48:ba: 80:ea:d2:f4:12:bb:4b:87:af:9d:f6:e5:9c:e5:a5: de:8a:47:13:83:18:5f:70:c7:d8:03:1e:29:d5:3a: 4c:30:c4:78:64:5a:5c:76:47:5f:03:a5:61:32:55: f6:87:14:da:ef:04:7e:9f:39:1a:8e:2e:88:7b:6a: 9f:9d:76:56:06:40:fe:b9:29:b8:22:3e:26:71:52: ba:23:2a:c8:9c:ba:4e:97:a0:2d:cc:c4:c7:4a:b6: 05:c0:f3:e4:d0:5e:18:37:ef:ae:93:1c:f5:61:99: e1:35:bf:be:65:97:02:91:63:ca:a3:71:46:a5:97: 16:da:ca:b4:6e:22:3b:4d:04:57:05:12:84:38:07: 7d:32:c7:5e:ce:b9:70:c2:8e:7f:e6:48:62:4e:36: 45:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:69:84:A9:C3:4C:BD:F8:CA:C7:2F:11:F9:62:57:62:8B:89:74:10 X509v3 Authority Key Identifier: keyid:0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:45:59:b6:2b:36:0b:2b:e1:66:02:5e:10:bb:2d:b4:f1:f5: 4f:26:0b:f6:91:d8:20:79:af:3e:f3:cf:8a:34:5f:a9:81:48: 86:9f:fb:be:b2:0d:1c:99:18:34:81:9f:04:de:ba:bb:66:f2: 86:5d:67:88:d7:0f:de:5a:49:3d:f3:d2:88:82:2a:2a:3e:1a: 9f:a6:88:00:c8:1e:1b:09:df:c4:5c:b3:91:4f:fa:14:5c:a7: 68:0e:12:c2:45:f6:ad:47:78:77:44:1f:ec:05:c6:35:05:14: 5d:dd:5f:4e:99:29:12:2e:05:d4:3f:89:b3:9c:42:de:2b:e5: 03:d4:ec:aa:74:1c:67:f2:77:5d:39:47:dc:5d:5c:b7:96:d3: 20:7e:73:6a:af:ee:d2:5e:17:3e:07:b6:69:2e:38:93:e6:ee: f5:24:3d:8a:30:96:cd:5e:c4:d0:d4:88:50:7f:15:26:b4:21: d7:40:31:2e:a4:f5:08:89:17:9a:46:6a:82:ca:4d:6a:3a:b7: 84:ce:57:66:8d:56:e2:d1:a5:a4:5e:33:de:c0:35:a1:8e:dd: 27:5b:db:76:5a:b6:ac:8b:31:c3:74:bf:d0:1f:26:fd:6f:ae: cc:ad:41:28:da:1d:62:2f:7a:55:7e:8a:93:77:4d:48:02:08: cb:f5:1b:03 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbFyhIPCA/o85d7xNWnHxMFJsFXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2 RTlEMjVFNjAeFw0yNjEwMTUwMDU2MDFaFw0yNjEwMTgwNTQyMDFaMDMxMTAvBgNV BAMTKEM4Njk4NEE5QzM0Q0JERjhDQUM3MkYxMUY5NjI1NzYyOEI4OTc0MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPgCRLeWzmO+QzSCrTgR20X9mT DbSokekdxxsbPVGusriyyB4nx9zS+aaNJObIjtGzvvWr49QoUGXpwmjv17HN4HGm 83PGBHxIoDWnwJtbwnFJvGrWU4FdU2Glg8gHCXntPC+Lu8pIuoDq0vQSu0uHr532 5Zzlpd6KRxODGF9wx9gDHinVOkwwxHhkWlx2R18DpWEyVfaHFNrvBH6fORqOLoh7 ap+ddlYGQP65KbgiPiZxUrojKsicuk6XoC3MxMdKtgXA8+TQXhg3766THPVhmeE1 v75llwKRY8qjcUallxbayrRuIjtNBFcFEoQ4B30yx17OuXDCjn/mSGJONkXhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyGmEqcNMvfjKxy8R+WJXYouJdBAwHwYDVR0j BBgwFoAUCv/rPbWykANTEhA6Filpv26dJeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzM4OTU3MS8wLzBBRkZFQjNEQjVCMjkwMDM1MzEyMTAzQTE2Mjk2 OUJGNkU5RDI1RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEFGRkVCM0RCNUIyOTAwMzUzMTIxMDNBMTYyOTY5QkY2RTlEMjVFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMC8wQUZGRUIzREI1QjI5 MDAzNTMxMjEwM0ExNjI5NjlCRjZFOUQyNUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckVZtis2Cyvh ZgJeELsttPH1TyYL9pHYIHmvPvPPijRfqYFIhp/7vrINHJkYNIGfBN66u2byhl1n iNcP3lpJPfPSiIIqKj4an6aIAMgeGwnfxFyzkU/6FFynaA4SwkX2rUd4d0Qf7AXG NQUUXd1fTpkpEi4F1D+Js5xC3ivlA9TsqnQcZ/J3XTlH3F1ct5bTIH5zaq/u0l4X Pge2aS44k+bu9SQ9ijCWzV7E0NSIUH8VJrQh10AxLqT1CIkXmkZqgspNajq3hM5X Zo1W4tGlpF4z3sA1oY7dJ1vbdlq2rIsxw3S/0B8m/W+uzK1BKNodYi96VX6Kk3dN SAIIy/UbAw== -----END CERTIFICATE-----Generated at Thu Oct 15 15:33:51 2026 by rpki-client