$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft File: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft (raw, json) Hash identifier: dfb4BcXVbteXlni8wREVx/soM8K6I7BD7oZMYLWdPpA= Subject key identifier: B7:85:5E:46:75:6D:F1:E7:1D:98:9B:2B:AB:CD:5B:22:89:FC:5B:67 Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 3484312D916D566B7C4BC96AAC21CECF9A4E31FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft Manifest number: A2 Signing time: Thu 01 Oct 2026 19:19:55 +0000 Manifest this update: Thu 01 Oct 2026 19:14:55 +0000 Manifest next update: Sun 04 Oct 2026 19:29:55 +0000 Files and hashes: 1: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl (hash: TbC4on4XoT/aa6KI8v79Rdpr0EEpnaVne559u4LqV4U=) 2: 3230332e3139322e392e302f32342d3234203d3e2034363131.roa (hash: Uy+BapU0I48WC0bWQ2ZydXi48JznYrjW62PXNe53HUM=) 3: 3130332e36362e33352e302f32342d3234203d3e2034363131.roa (hash: gY+qMgWgJvHs6SDZmlGFp+AAc3uGBrjBkD6f9uzt130=) 4: 3230332e3139322e312e302f32342d3234203d3e2034363131.roa (hash: 0KdLEVUiybk5V4n+f+0dKRmU6UVh7v523bGbqNGXd8I=) 5: 3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa (hash: 155iifkZEs6RHAaqhrEQCAQN53twEduDtnNVPAqFrTI=) 6: 3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa (hash: QdeAkUPnqLpZiSPqBIxzU0fpw+Eqvq8f9jvgOeoo9mg=) 7: 3130332e36362e33322e302f32342d3234203d3e2034363131.roa (hash: pGPnNL8I17M9sBQn6scU0wF53hsmAZju26aVp9ckSkQ=) 8: 3230332e3139322e382e302f32342d3234203d3e2034363131.roa (hash: ExwddNKPU24UIMMf46gIGo0/55R/RolIT8ID+4HvTfo=) 9: 3230322e3132332e3130372e302f32342d3234203d3e2034363131.roa (hash: 3tbE64n/dii7GNRtLZg5K6aHAbP1egLJB2VvyhZEfFU=) 10: 3230332e3139322e372e302f32342d3234203d3e2034363131.roa (hash: SDHyN9XXrw0odzkF0QeNY9cKYZ9QdH1ieH7qxu1iHl8=) 11: 3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa (hash: QQ4ATBeNE3ml6YUNfv/6tpe2Kv/BmFijIHp4Rv9IGTo=) 12: 3230332e3139322e322e302f32342d3234203d3e2034363131.roa (hash: 5kRdUKU+ZXXchqJyoqf+wUpdIG1fnufxQH0iQlauhG0=) 13: 3230332e3139322e342e302f32342d3234203d3e2034363131.roa (hash: 17kgFGc3cSe7uHyaAKqp7oAC5dXyj9elPuMYbCDiwxE=) 14: 3230332e3139322e31302e302f32342d3234203d3e2034363131.roa (hash: B5g+2JRh5TgR/UTOSPrdbR+qCyH6GJDVipqqxDIoaCk=) 15: 3230332e3139322e362e302f32342d3234203d3e2034363131.roa (hash: CRUJkzzmVRsaFDZOKPvn/CRKcvAx+oeYntLvx9WwCyk=) 16: 3130332e3232382e3133382e302f32342d3234203d3e2034363131.roa (hash: yTCamlVpkLTaQtiao0McbVEofmqZPgYyOVfZcUXNIMg=) 17: 3130332e36362e33342e302f32342d3234203d3e2034363131.roa (hash: tjZDTuEgQlRXpFbbaG0NArZJgDuaiVOSE05Z7p9qiAI=) 18: 3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa (hash: gi5/C7Ig+PLVimVU9eNIn1aKpNA5wgBO2EvkhiKLFtQ=) 19: 3130332e36362e33332e302f32342d3234203d3e2034363131.roa (hash: n5yRgo6J2D5FtGrXkvOOKqNrGph1QpbzvpT/k6W4Gyg=) 20: 323430323a616663303a3a2f33322d3332203d3e2034363131.roa (hash: f3GHixVb1HwjhyVU8K4swaXzIGI0Hioddav5kM0XXUw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 19:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:84:31:2d:91:6d:56:6b:7c:4b:c9:6a:ac:21:ce:cf:9a:4e:31:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: Oct 1 19:14:55 2026 GMT Not After : Oct 4 19:29:55 2026 GMT Subject: CN=B7855E46756DF1E71D989B2BABCD5B2289FC5B67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fd:cb:5f:ee:f8:90:f4:2e:dd:cf:76:44:80: 7e:a9:76:06:01:43:bf:c2:b0:2b:52:9c:ca:fc:73: 25:a1:c3:74:3b:c2:1f:5d:b6:15:72:79:dc:e9:da: 94:88:1f:a4:27:00:53:3c:59:2e:f0:a4:7f:d1:14: 47:5a:a6:fb:46:c4:3a:71:1b:72:5b:8f:83:5c:73: bf:62:38:e2:15:cc:d4:99:68:cc:6d:41:09:08:f3: be:43:a7:76:11:79:c2:d4:f9:d3:24:60:2b:5c:21: 3c:ad:3b:83:4a:dd:94:dd:d8:75:d6:51:65:c7:78: 47:8d:f1:3b:7f:cb:99:67:5a:3d:0c:85:52:72:15: 03:a1:85:a6:f4:2f:70:01:13:79:80:6c:84:6d:40: 16:45:c8:56:30:6b:10:7f:ac:7f:5b:78:4e:e6:25: 74:aa:98:61:ba:d3:fb:c5:6a:ba:71:64:1d:3a:7b: 7e:e4:6c:91:10:2b:d7:a7:36:f5:d7:00:74:c1:82: b1:b2:38:ec:c5:e6:e6:93:68:17:47:54:82:c4:ac: dd:3e:e6:cb:9e:de:9d:82:ad:ca:ac:a6:19:56:e2: 2c:ff:83:30:42:b1:4d:64:dc:7e:c0:c2:72:59:f4: 74:64:4e:f6:5a:f0:4d:21:35:9d:fa:49:0d:2b:75: 61:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:85:5E:46:75:6D:F1:E7:1D:98:9B:2B:AB:CD:5B:22:89:FC:5B:67 X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:34:9f:5c:62:ea:11:b7:81:a4:98:26:4f:74:dc:02:bf:5d: 1e:6f:8e:7f:7f:2c:94:73:f3:33:d9:ad:32:ad:ab:d2:3e:2c: 04:a5:29:4c:ef:ab:52:d9:31:b3:27:7c:2e:48:37:0c:69:20: df:b1:4a:f2:81:c0:72:c1:4d:39:ab:cf:8c:5b:9c:75:f6:f6: 25:7d:88:1e:e3:3a:98:7a:05:bb:45:43:de:aa:75:39:86:0e: ac:ac:cd:a1:0d:b2:19:76:17:dd:63:5a:be:ef:bd:e3:68:a4: dd:da:fb:b6:05:e3:b9:c8:f5:58:67:a6:49:27:e6:58:6a:91: 9e:e8:66:9b:bc:a4:08:b9:93:17:b9:b5:f1:fd:29:a9:5b:06: d8:b9:db:8c:d2:33:18:9e:ca:93:80:11:88:15:b5:93:0d:14: 59:93:f9:98:0a:71:9b:6b:85:7c:74:97:87:e7:44:e9:53:e7: 29:bb:1c:f6:8b:82:8d:a4:55:9a:a1:90:39:19:23:a5:a3:cb: 06:6d:37:1e:61:77:c2:65:27:32:c7:f2:26:00:8b:73:e8:f2: b7:c3:1b:bf:ae:11:fb:79:ae:33:e0:be:1c:55:ec:9f:0c:a7: 90:0a:0b:5c:5e:13:4d:e6:62:32:92:46:f7:e2:03:7a:fc:a2: 46:81:ae:ed -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNIQxLZFtVmt8S8lqrCHOz5pOMfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjEwMDExOTE0NTVaFw0yNjEwMDQxOTI5NTVaMDMxMTAvBgNV BAMTKEI3ODU1RTQ2NzU2REYxRTcxRDk4OUIyQkFCQ0Q1QjIyODlGQzVCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/ctf7viQ9C7dz3ZEgH6pdgYB Q7/CsCtSnMr8cyWhw3Q7wh9dthVyedzp2pSIH6QnAFM8WS7wpH/RFEdapvtGxDpx G3Jbj4Ncc79iOOIVzNSZaMxtQQkI875Dp3YRecLU+dMkYCtcITytO4NK3ZTd2HXW UWXHeEeN8Tt/y5lnWj0MhVJyFQOhhab0L3ABE3mAbIRtQBZFyFYwaxB/rH9beE7m JXSqmGG60/vFarpxZB06e37kbJEQK9enNvXXAHTBgrGyOOzF5uaTaBdHVILErN0+ 5sue3p2CrcqsphlW4iz/gzBCsU1k3H7AwnJZ9HRkTvZa8E0hNZ36SQ0rdWEBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUt4VeRnVt8ecdmJsrq81bIon8W2cwHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYzOTgzODgxODc4MjQxNDcvMC80QUY1REQ5Mzk4RUJD MzNFQTBDQUUwNDFEN0Y1MkVFMkNBREQwQUZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDSfXGLqEbeB pJgmT3TcAr9dHm+Of38slHPzM9mtMq2r0j4sBKUpTO+rUtkxsyd8Lkg3DGkg37FK 8oHAcsFNOavPjFucdfb2JX2IHuM6mHoFu0VD3qp1OYYOrKzNoQ2yGXYX3WNavu+9 42ik3dr7tgXjucj1WGemSSfmWGqRnuhmm7ykCLmTF7m18f0pqVsG2LnbjNIzGJ7K k4ARiBW1kw0UWZP5mApxm2uFfHSXh+dE6VPnKbsc9ouCjaRVmqGQORkjpaPLBm03 HmF3wmUnMsfyJgCLc+jyt8Mbv64R+3muM+C+HFXsnwynkAoLXF4TTeZiMpJG9+ID evyiRoGu7Q== -----END CERTIFICATE-----Generated at Sat Oct 3 17:51:23 2026 by rpki-client