$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft File: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft (raw, json) Hash identifier: kobdh0K+Ha/9QrQX8lnwAInGpoctQOd0fPhGDgmAQHA= Subject key identifier: 2B:53:AC:0D:41:F5:B5:1A:D0:10:F7:A8:65:48:03:6C:CA:CF:10:CE Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 417A795F7212E3E59F9A6A6F49929E3619B1CAE3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 23:04:47 +0000 Manifest this update: Thu 23 Jul 2026 22:59:47 +0000 Manifest next update: Sat 25 Jul 2026 01:04:47 +0000 Files and hashes: 1: 3230332e3139322e322e302f32342d3234203d3e2034363131.roa (hash: 5kRdUKU+ZXXchqJyoqf+wUpdIG1fnufxQH0iQlauhG0=) 2: 3130332e36362e33342e302f32342d3234203d3e2034363131.roa (hash: tjZDTuEgQlRXpFbbaG0NArZJgDuaiVOSE05Z7p9qiAI=) 3: 3230322e3132332e3130372e302f32342d3234203d3e2034363131.roa (hash: 3tbE64n/dii7GNRtLZg5K6aHAbP1egLJB2VvyhZEfFU=) 4: 3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa (hash: 155iifkZEs6RHAaqhrEQCAQN53twEduDtnNVPAqFrTI=) 5: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl (hash: MZ5sEGyPjGu2fZduZPAeYVgk/3uyr6C2aipl1W+KiOs=) 6: 3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa (hash: QdeAkUPnqLpZiSPqBIxzU0fpw+Eqvq8f9jvgOeoo9mg=) 7: 3230332e3139322e382e302f32342d3234203d3e2034363131.roa (hash: ExwddNKPU24UIMMf46gIGo0/55R/RolIT8ID+4HvTfo=) 8: 3130332e36362e33332e302f32342d3234203d3e2034363131.roa (hash: n5yRgo6J2D5FtGrXkvOOKqNrGph1QpbzvpT/k6W4Gyg=) 9: 3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa (hash: gi5/C7Ig+PLVimVU9eNIn1aKpNA5wgBO2EvkhiKLFtQ=) 10: 3230332e3139322e362e302f32342d3234203d3e2034363131.roa (hash: CRUJkzzmVRsaFDZOKPvn/CRKcvAx+oeYntLvx9WwCyk=) 11: 3230332e3139322e31302e302f32342d3234203d3e2034363131.roa (hash: B5g+2JRh5TgR/UTOSPrdbR+qCyH6GJDVipqqxDIoaCk=) 12: 3130332e36362e33322e302f32342d3234203d3e2034363131.roa (hash: pGPnNL8I17M9sBQn6scU0wF53hsmAZju26aVp9ckSkQ=) 13: 3230332e3139322e342e302f32342d3234203d3e2034363131.roa (hash: 17kgFGc3cSe7uHyaAKqp7oAC5dXyj9elPuMYbCDiwxE=) 14: 3130332e36362e33352e302f32342d3234203d3e2034363131.roa (hash: gY+qMgWgJvHs6SDZmlGFp+AAc3uGBrjBkD6f9uzt130=) 15: 3230332e3139322e392e302f32342d3234203d3e2034363131.roa (hash: Uy+BapU0I48WC0bWQ2ZydXi48JznYrjW62PXNe53HUM=) 16: 3230332e3139322e312e302f32342d3234203d3e2034363131.roa (hash: 0KdLEVUiybk5V4n+f+0dKRmU6UVh7v523bGbqNGXd8I=) 17: 3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa (hash: QQ4ATBeNE3ml6YUNfv/6tpe2Kv/BmFijIHp4Rv9IGTo=) 18: 323430323a616663303a3a2f33322d3332203d3e2034363131.roa (hash: f3GHixVb1HwjhyVU8K4swaXzIGI0Hioddav5kM0XXUw=) 19: 3230332e3139322e372e302f32342d3234203d3e2034363131.roa (hash: SDHyN9XXrw0odzkF0QeNY9cKYZ9QdH1ieH7qxu1iHl8=) 20: 3130332e3232382e3133382e302f32342d3234203d3e2034363131.roa (hash: yTCamlVpkLTaQtiao0McbVEofmqZPgYyOVfZcUXNIMg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7a:79:5f:72:12:e3:e5:9f:9a:6a:6f:49:92:9e:36:19:b1:ca:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: Jul 23 22:59:47 2026 GMT Not After : Jul 25 01:04:47 2026 GMT Subject: CN=2B53AC0D41F5B51AD010F7A86548036CCACF10CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:d2:ce:3a:a7:c6:71:99:41:72:f3:80:95: 68:1a:90:44:fa:bf:dd:6d:6d:d7:14:b8:88:7f:3f: ef:48:fd:fe:ad:1d:6b:55:2f:cf:c3:6f:05:d2:5e: cc:13:83:a9:d3:10:44:75:6b:c2:c3:d1:25:9d:f1: de:fc:25:42:b6:e6:f1:98:39:fb:01:e2:8e:20:07: 70:9b:4c:0b:54:53:56:f0:7e:3b:5f:dc:47:8a:dd: bc:8f:3a:a1:72:03:8b:1d:a1:2b:1c:d3:02:f9:02: 4b:8a:92:0d:04:17:88:eb:c4:c5:5d:11:25:23:7a: db:da:60:d7:48:05:86:ba:98:d1:09:ec:8b:07:5d: d9:e6:35:0f:e1:82:bb:01:2c:de:84:19:78:99:03: 4f:54:27:ad:0d:a1:cf:7f:f0:55:ac:b4:f5:d3:f4: 23:02:39:12:84:7b:44:8d:54:5b:e4:e2:e6:e7:61: fd:e4:db:4e:c1:c0:09:2a:93:bc:0b:ce:8c:fe:9d: 14:77:55:d2:89:ea:a4:22:d1:29:50:c8:31:97:a5: b0:96:0b:a0:66:0a:ae:be:c4:48:52:d2:fe:9d:ab: 7a:98:cc:e0:b2:b6:d7:e0:2c:72:32:b3:3d:36:39: 32:55:9c:80:35:e7:f6:c9:16:6a:92:d4:f9:9c:b1: fc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:53:AC:0D:41:F5:B5:1A:D0:10:F7:A8:65:48:03:6C:CA:CF:10:CE X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:56:1b:23:b3:91:d1:9e:fd:98:f0:99:27:72:c5:cc:a5:47: 74:90:c2:39:ff:0e:7b:e1:ee:e9:dd:53:4c:b4:61:1a:a7:22: f7:e1:b4:eb:6f:8b:46:32:91:7d:35:a8:0a:af:dc:f6:9f:95: 90:98:08:2b:86:46:ec:64:18:fa:94:ae:44:aa:14:74:fc:58: da:eb:63:d9:d1:48:f8:6f:8d:62:83:a1:34:f8:e8:1f:e0:67: 6b:50:e2:0b:28:f5:86:22:2b:11:80:81:6a:c7:13:71:d3:9f: 49:cf:a8:53:d7:38:00:5c:e6:e1:61:52:94:a8:7f:16:6d:32: 1e:c1:20:99:26:67:61:f8:f2:68:35:57:da:e7:10:d6:1c:2d: a2:76:60:3a:73:7e:9d:85:4e:5b:7c:c2:bb:b6:63:be:ab:1f: 48:19:bc:6b:12:dc:4d:e3:48:6b:6f:29:b0:f6:75:5d:75:f0: 37:0e:81:e8:5f:ef:85:91:f3:39:b0:aa:e2:32:be:93:3e:eb: 50:72:12:b6:a8:be:49:6c:3d:0f:08:7d:f6:a0:ad:06:4f:b7: 6e:b0:08:bd:32:98:00:ad:d2:b4:3e:e0:e8:15:4b:09:6c:a0: c2:da:51:47:40:00:ca:af:f2:1b:ba:d7:88:b0:82:6a:b2:2c: 83:a5:ba:e6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQXp5X3IS4+WfmmpvSZKeNhmxyuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjA3MjMyMjU5NDdaFw0yNjA3MjUwMTA0NDdaMDMxMTAvBgNV BAMTKDJCNTNBQzBENDFGNUI1MUFEMDEwRjdBODY1NDgwMzZDQ0FDRjEwQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHE9LOOqfGcZlBcvOAlWgakET6 v91tbdcUuIh/P+9I/f6tHWtVL8/DbwXSXswTg6nTEER1a8LD0SWd8d78JUK25vGY OfsB4o4gB3CbTAtUU1bwfjtf3EeK3byPOqFyA4sdoSsc0wL5AkuKkg0EF4jrxMVd ESUjetvaYNdIBYa6mNEJ7IsHXdnmNQ/hgrsBLN6EGXiZA09UJ60Noc9/8FWstPXT 9CMCORKEe0SNVFvk4ubnYf3k207BwAkqk7wLzoz+nRR3VdKJ6qQi0SlQyDGXpbCW C6BmCq6+xEhS0v6dq3qYzOCyttfgLHIysz02OTJVnIA15/bJFmqS1Pmcsfx9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK1OsDUH1tRrQEPeoZUgDbMrPEM4wHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYzOTgzODgxODc4MjQxNDcvMC80QUY1REQ5Mzk4RUJD MzNFQTBDQUUwNDFEN0Y1MkVFMkNBREQwQUZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFYbI7OR0Z79 mPCZJ3LFzKVHdJDCOf8Oe+Hu6d1TTLRhGqci9+G062+LRjKRfTWoCq/c9p+VkJgI K4ZG7GQY+pSuRKoUdPxY2utj2dFI+G+NYoOhNPjoH+Bna1DiCyj1hiIrEYCBascT cdOfSc+oU9c4AFzm4WFSlKh/Fm0yHsEgmSZnYfjyaDVX2ucQ1hwtonZgOnN+nYVO W3zCu7ZjvqsfSBm8axLcTeNIa28psPZ1XXXwNw6B6F/vhZHzObCq4jK+kz7rUHIS tqi+SWw9Dwh99qCtBk+3brAIvTKYAK3StD7g6BVLCWygwtpRR0AAyq/yG7rXiLCC arIsg6W65g== -----END CERTIFICATE-----Generated at Fri Jul 24 10:05:04 2026 by rpki-client