$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft File: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft (raw, json) Hash identifier: QJyqpxxaBlgpXzzDOnjyDU2H9Yzm5mmhoItBbBwS+qQ= Subject key identifier: 30:9F:E4:93:F4:E8:99:60:C6:6D:75:AE:C0:78:79:BC:47:DF:3D:A8 Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 14DF722885AAC616DDD5C3B5D3FB9E59AAD5555E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft Manifest number: A3 Signing time: Sat 03 Oct 2026 19:32:18 +0000 Manifest this update: Sat 03 Oct 2026 19:27:18 +0000 Manifest next update: Wed 07 Oct 2026 04:00:18 +0000 Files and hashes: 1: 323430323a616663303a3a2f33322d3332203d3e2034363131.roa (hash: f3GHixVb1HwjhyVU8K4swaXzIGI0Hioddav5kM0XXUw=) 2: 3230322e3132332e3130372e302f32342d3234203d3e2034363131.roa (hash: 3tbE64n/dii7GNRtLZg5K6aHAbP1egLJB2VvyhZEfFU=) 3: 3230332e3139322e31302e302f32342d3234203d3e2034363131.roa (hash: B5g+2JRh5TgR/UTOSPrdbR+qCyH6GJDVipqqxDIoaCk=) 4: 3230332e3139322e342e302f32342d3234203d3e2034363131.roa (hash: 17kgFGc3cSe7uHyaAKqp7oAC5dXyj9elPuMYbCDiwxE=) 5: 3230332e3139322e392e302f32342d3234203d3e2034363131.roa (hash: Uy+BapU0I48WC0bWQ2ZydXi48JznYrjW62PXNe53HUM=) 6: 3230332e3139322e372e302f32342d3234203d3e2034363131.roa (hash: SDHyN9XXrw0odzkF0QeNY9cKYZ9QdH1ieH7qxu1iHl8=) 7: 3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa (hash: 155iifkZEs6RHAaqhrEQCAQN53twEduDtnNVPAqFrTI=) 8: 3230332e3139322e382e302f32342d3234203d3e2034363131.roa (hash: ExwddNKPU24UIMMf46gIGo0/55R/RolIT8ID+4HvTfo=) 9: 3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa (hash: QdeAkUPnqLpZiSPqBIxzU0fpw+Eqvq8f9jvgOeoo9mg=) 10: 3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa (hash: QQ4ATBeNE3ml6YUNfv/6tpe2Kv/BmFijIHp4Rv9IGTo=) 11: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl (hash: MfQU+sYxAHf4kB4XUe+qVB2cnB82GZEATrcdnlmm47E=) 12: 3130332e3232382e3133382e302f32342d3234203d3e2034363131.roa (hash: yTCamlVpkLTaQtiao0McbVEofmqZPgYyOVfZcUXNIMg=) 13: 3130332e36362e33352e302f32342d3234203d3e2034363131.roa (hash: gY+qMgWgJvHs6SDZmlGFp+AAc3uGBrjBkD6f9uzt130=) 14: 3230332e3139322e322e302f32342d3234203d3e2034363131.roa (hash: 5kRdUKU+ZXXchqJyoqf+wUpdIG1fnufxQH0iQlauhG0=) 15: 3230332e3139322e362e302f32342d3234203d3e2034363131.roa (hash: CRUJkzzmVRsaFDZOKPvn/CRKcvAx+oeYntLvx9WwCyk=) 16: 3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa (hash: gi5/C7Ig+PLVimVU9eNIn1aKpNA5wgBO2EvkhiKLFtQ=) 17: 3130332e36362e33342e302f32342d3234203d3e2034363131.roa (hash: tjZDTuEgQlRXpFbbaG0NArZJgDuaiVOSE05Z7p9qiAI=) 18: 3230332e3139322e312e302f32342d3234203d3e2034363131.roa (hash: 0KdLEVUiybk5V4n+f+0dKRmU6UVh7v523bGbqNGXd8I=) 19: 3130332e36362e33322e302f32342d3234203d3e2034363131.roa (hash: pGPnNL8I17M9sBQn6scU0wF53hsmAZju26aVp9ckSkQ=) 20: 3130332e36362e33332e302f32342d3234203d3e2034363131.roa (hash: n5yRgo6J2D5FtGrXkvOOKqNrGph1QpbzvpT/k6W4Gyg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 04:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:df:72:28:85:aa:c6:16:dd:d5:c3:b5:d3:fb:9e:59:aa:d5:55:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: Oct 3 19:27:18 2026 GMT Not After : Oct 7 04:00:18 2026 GMT Subject: CN=309FE493F4E89960C66D75AEC07879BC47DF3DA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:47:ed:01:23:79:8a:f6:73:f3:84:db:00: 04:22:d3:5a:20:89:b4:7a:89:13:0e:20:78:81:d3: 21:9d:c6:61:e1:c3:f9:b4:5d:f1:97:dd:0c:ab:ab: 2f:5d:6d:fb:d5:50:ad:9a:7c:0a:9c:2b:b0:24:e3: bf:13:16:d9:15:9c:19:47:57:e8:87:78:88:0d:3b: 2e:4e:97:9e:4c:b9:12:e8:dc:71:73:f5:16:8e:c2: 20:67:84:bb:da:21:ec:e6:b1:c1:cb:0f:af:cb:e6: 6d:0a:3a:af:1f:c8:4f:56:2b:61:fb:ff:e3:01:b0: f4:05:96:76:10:1e:22:82:57:a3:59:f8:f7:40:de: 3f:1c:29:79:c4:a7:49:26:e8:a6:15:3c:19:ae:16: 85:41:51:de:d9:e2:dd:24:13:fc:a2:71:f0:6b:0f: 85:09:fc:5f:70:b1:4d:14:08:1f:fb:5d:62:61:59: a5:dd:e3:5f:5f:d9:c7:ee:74:8e:91:bd:4c:32:2b: 2d:9f:cb:1c:ec:84:1b:df:09:e4:5c:c5:68:51:f9: fa:b5:63:bb:fd:3f:aa:d1:62:9d:cc:9c:b2:fa:98: 97:a6:b3:84:0e:a4:76:18:47:26:1e:b7:2b:7e:9a: a0:e8:bb:70:38:98:e9:47:54:4a:95:7a:f2:91:02: 16:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9F:E4:93:F4:E8:99:60:C6:6D:75:AE:C0:78:79:BC:47:DF:3D:A8 X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8d:2e:d1:68:ef:a9:24:05:46:fa:d5:f6:4f:57:1f:54:f0: 7a:50:ad:db:4b:c1:7e:e0:52:3a:53:06:35:2e:33:ee:d0:50: 9d:b7:af:c1:fa:82:c7:c6:9a:73:94:3d:76:1d:80:18:00:e3: 02:fe:55:6d:85:af:6e:6b:39:ac:63:29:e7:e0:a7:c0:ea:b5: df:8d:90:6a:c3:fe:58:ce:51:dd:a4:68:b7:a0:7e:e6:2f:e4: b1:8c:78:01:4c:7a:73:a8:a2:82:cb:b1:c0:be:21:79:a5:15: 2d:3c:3a:8b:a9:d8:19:73:22:b6:10:22:8b:18:39:92:6a:74: 9f:2e:6e:f2:48:a8:40:4b:46:50:f4:e5:b2:91:73:73:19:ff: b3:30:42:2c:e7:0f:ba:70:c8:30:8c:d9:9d:0f:16:ac:32:c9: d8:11:01:d0:96:a4:a7:cb:da:86:98:c8:25:2d:2a:67:75:c4: 4a:80:8e:c5:c9:9d:c3:1b:98:2f:85:38:d5:27:41:4b:18:70: f7:84:3e:cf:7c:c1:f1:82:f0:0b:bc:66:a4:bc:40:c2:a5:b1: 08:58:7a:00:01:a0:07:97:8f:b2:e0:99:03:31:c7:ea:fb:ed: f4:d3:cf:8d:ce:3d:d3:9e:99:05:d9:53:d7:a8:a0:33:3c:11: a0:21:d4:39 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFN9yKIWqxhbd1cO10/ueWarVVV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjEwMDMxOTI3MThaFw0yNjEwMDcwNDAwMThaMDMxMTAvBgNV BAMTKDMwOUZFNDkzRjRFODk5NjBDNjZENzVBRUMwNzg3OUJDNDdERjNEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmi0ftASN5ivZz84TbAAQi01og ibR6iRMOIHiB0yGdxmHhw/m0XfGX3Qyrqy9dbfvVUK2afAqcK7Ak478TFtkVnBlH V+iHeIgNOy5Ol55MuRLo3HFz9RaOwiBnhLvaIezmscHLD6/L5m0KOq8fyE9WK2H7 /+MBsPQFlnYQHiKCV6NZ+PdA3j8cKXnEp0km6KYVPBmuFoVBUd7Z4t0kE/yicfBr D4UJ/F9wsU0UCB/7XWJhWaXd419f2cfudI6RvUwyKy2fyxzshBvfCeRcxWhR+fq1 Y7v9P6rRYp3MnLL6mJems4QOpHYYRyYetyt+mqDou3A4mOlHVEqVevKRAhaBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMJ/kk/TomWDGbXWuwHh5vEffPagwHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYzOTgzODgxODc4MjQxNDcvMC80QUY1REQ5Mzk4RUJD MzNFQTBDQUUwNDFEN0Y1MkVFMkNBREQwQUZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaY0u0WjvqSQF RvrV9k9XH1TwelCt20vBfuBSOlMGNS4z7tBQnbevwfqCx8aac5Q9dh2AGADjAv5V bYWvbms5rGMp5+CnwOq1342QasP+WM5R3aRot6B+5i/ksYx4AUx6c6iigsuxwL4h eaUVLTw6i6nYGXMithAiixg5kmp0ny5u8kioQEtGUPTlspFzcxn/szBCLOcPunDI MIzZnQ8WrDLJ2BEB0Jakp8vahpjIJS0qZ3XESoCOxcmdwxuYL4U41SdBSxhw94Q+ z3zB8YLwC7xmpLxAwqWxCFh6AAGgB5ePsuCZAzHH6vvt9NPPjc49056ZBdlT16ig MzwRoCHUOQ== -----END CERTIFICATE-----Generated at Tue Oct 6 04:02:58 2026 by rpki-client