$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft File: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft (raw, json) Hash identifier: f7Fl/2RmXqO89UuuXG2yqF2I5LwKuQExXncmNPo4zWE= Subject key identifier: 87:38:64:67:93:2C:30:6B:5F:CC:02:8E:00:89:7E:1C:E7:5C:B7:34 Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 62D1B8CFDD13C7C6865C8DBBC0A101AEF8F3B417 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft Manifest number: 06 Signing time: Wed 13 May 2026 11:11:03 +0000 Manifest this update: Wed 13 May 2026 11:06:03 +0000 Manifest next update: Thu 14 May 2026 14:31:03 +0000 Files and hashes: 1: 3130332e3232382e3133382e302f32342d3234203d3e2034363131.roa (hash: yTCamlVpkLTaQtiao0McbVEofmqZPgYyOVfZcUXNIMg=) 2: 3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa (hash: QdeAkUPnqLpZiSPqBIxzU0fpw+Eqvq8f9jvgOeoo9mg=) 3: 3130332e36362e33332e302f32342d3234203d3e2034363131.roa (hash: n5yRgo6J2D5FtGrXkvOOKqNrGph1QpbzvpT/k6W4Gyg=) 4: 3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa (hash: gi5/C7Ig+PLVimVU9eNIn1aKpNA5wgBO2EvkhiKLFtQ=) 5: 3130332e3232382e3133372e302f32342d3234203d3e2034363131.roa (hash: QQ4ATBeNE3ml6YUNfv/6tpe2Kv/BmFijIHp4Rv9IGTo=) 6: 3230332e3139322e312e302f32342d3234203d3e2034363131.roa (hash: 0KdLEVUiybk5V4n+f+0dKRmU6UVh7v523bGbqNGXd8I=) 7: 3130332e36362e33342e302f32342d3234203d3e2034363131.roa (hash: tjZDTuEgQlRXpFbbaG0NArZJgDuaiVOSE05Z7p9qiAI=) 8: 3230332e3139322e392e302f32342d3234203d3e2034363131.roa (hash: Uy+BapU0I48WC0bWQ2ZydXi48JznYrjW62PXNe53HUM=) 9: 3230332e3139322e31302e302f32342d3234203d3e2034363131.roa (hash: B5g+2JRh5TgR/UTOSPrdbR+qCyH6GJDVipqqxDIoaCk=) 10: 323430323a616663303a3a2f33322d3332203d3e2034363131.roa (hash: f3GHixVb1HwjhyVU8K4swaXzIGI0Hioddav5kM0XXUw=) 11: 3230332e3139322e382e302f32342d3234203d3e2034363131.roa (hash: ExwddNKPU24UIMMf46gIGo0/55R/RolIT8ID+4HvTfo=) 12: 3230332e3139322e362e302f32342d3234203d3e2034363131.roa (hash: CRUJkzzmVRsaFDZOKPvn/CRKcvAx+oeYntLvx9WwCyk=) 13: 3230332e3139322e322e302f32342d3234203d3e2034363131.roa (hash: 5kRdUKU+ZXXchqJyoqf+wUpdIG1fnufxQH0iQlauhG0=) 14: 3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa (hash: 155iifkZEs6RHAaqhrEQCAQN53twEduDtnNVPAqFrTI=) 15: 3230322e3132332e3130372e302f32342d3234203d3e2034363131.roa (hash: 3tbE64n/dii7GNRtLZg5K6aHAbP1egLJB2VvyhZEfFU=) 16: 3130332e36362e33322e302f32342d3234203d3e2034363131.roa (hash: pGPnNL8I17M9sBQn6scU0wF53hsmAZju26aVp9ckSkQ=) 17: 3230332e3139322e372e302f32342d3234203d3e2034363131.roa (hash: SDHyN9XXrw0odzkF0QeNY9cKYZ9QdH1ieH7qxu1iHl8=) 18: 3230332e3139322e342e302f32342d3234203d3e2034363131.roa (hash: 17kgFGc3cSe7uHyaAKqp7oAC5dXyj9elPuMYbCDiwxE=) 19: 3130332e36362e33352e302f32342d3234203d3e2034363131.roa (hash: gY+qMgWgJvHs6SDZmlGFp+AAc3uGBrjBkD6f9uzt130=) 20: 4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl (hash: nLUfQ5Cd6yBSfYJMxgBHgGOnnuIR8PAZuoZF1Ajegrw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:d1:b8:cf:dd:13:c7:c6:86:5c:8d:bb:c0:a1:01:ae:f8:f3:b4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: May 13 11:06:03 2026 GMT Not After : May 14 14:31:03 2026 GMT Subject: CN=87386467932C306B5FCC028E00897E1CE75CB734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c9:34:73:73:41:2f:23:b2:20:47:0d:c4:0a: 6d:ba:2a:7b:ea:40:3c:6a:8a:7e:70:58:b4:62:b6: 42:1f:9f:c2:e0:29:bc:76:78:af:aa:e8:12:8c:0b: 5f:64:6c:f9:37:88:70:4d:67:70:7e:15:6b:01:f1: e7:68:7c:59:6d:ae:6e:4e:cd:6f:f4:1d:3c:ca:98: b1:af:4e:9e:3a:42:89:a8:ab:70:aa:a0:f9:6f:49: 7e:ff:a6:e7:2e:21:89:2e:98:c3:2b:90:5c:97:b9: c5:74:87:fa:f4:24:f2:ae:ef:32:5e:ec:0b:36:7b: 2e:2b:65:11:8a:4c:cd:4a:d5:ba:02:a8:ec:69:60: f1:8f:dd:9a:73:e5:f6:eb:d1:c1:07:06:e0:d2:2b: 04:00:be:6f:91:31:ba:1e:88:61:4b:6a:a9:c7:45: 38:df:ca:ff:e7:40:de:b6:e1:cf:67:a8:66:11:a4: 3a:fa:2c:28:6b:b0:7e:23:fd:26:2c:cd:5d:36:6c: 75:a9:09:47:da:cd:7a:47:54:41:1f:25:90:e7:ed: 23:b0:9a:ee:a1:41:8a:9d:58:f5:0c:b0:57:11:db: a4:55:fa:d1:57:64:74:5e:00:eb:ca:b6:95:b0:1d: fb:97:6d:1f:ef:bb:3e:5a:2e:31:7d:10:ea:9b:d8: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:38:64:67:93:2C:30:6B:5F:CC:02:8E:00:89:7E:1C:E7:5C:B7:34 X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:85:73:0d:18:2c:8f:0a:99:15:96:88:bf:1a:5c:0d:d7:5e: 43:fe:a3:f2:b3:e8:a1:71:cb:87:04:b1:1e:d2:f3:bd:e9:7c: b2:de:e5:ae:d7:8e:e4:54:42:58:fd:86:6a:e0:d7:47:ca:c5: 53:a0:ce:16:49:53:40:d3:7a:18:85:1e:49:a4:f0:83:d6:93: 5e:30:78:4f:37:14:ed:72:60:1d:38:f1:f2:0b:b0:ce:4b:7b: 1e:9e:40:fe:fd:62:84:1f:76:3a:1c:62:75:70:09:d5:45:32: a4:72:c5:95:ed:28:81:93:92:ba:8e:2b:d4:a3:72:a6:03:11: 5b:ac:4f:47:97:9c:cc:9f:12:39:3d:d1:7e:a8:a1:76:ed:66: 03:86:73:19:ed:a8:d2:eb:8e:04:db:5a:ab:75:f2:c9:ee:65: e8:ab:3a:07:b6:cd:11:62:b3:58:0e:f1:a2:d9:69:2e:f8:91: cd:ab:b0:ba:e4:c8:be:8d:f8:6e:a0:b8:7e:81:89:60:ab:36: 6e:e0:41:bf:e3:1f:64:c4:3f:9d:36:3b:ed:73:5a:02:a0:db: 0b:c6:15:81:bd:63:84:9e:bd:84:78:55:8f:58:24:d0:0d:d1: 4f:94:7e:b6:81:33:94:7c:c3:2e:32:e6:c9:30:55:1c:38:ea: a7:7a:d9:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYtG4z90Tx8aGXI27wKEBrvjztBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjA1MTMxMTA2MDNaFw0yNjA1MTQxNDMxMDNaMDMxMTAvBgNV BAMTKDg3Mzg2NDY3OTMyQzMwNkI1RkNDMDI4RTAwODk3RTFDRTc1Q0I3MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yTRzc0EvI7IgRw3ECm26Knvq QDxqin5wWLRitkIfn8LgKbx2eK+q6BKMC19kbPk3iHBNZ3B+FWsB8edofFltrm5O zW/0HTzKmLGvTp46Qomoq3CqoPlvSX7/pucuIYkumMMrkFyXucV0h/r0JPKu7zJe 7As2ey4rZRGKTM1K1boCqOxpYPGP3Zpz5fbr0cEHBuDSKwQAvm+RMboeiGFLaqnH RTjfyv/nQN624c9nqGYRpDr6LChrsH4j/SYszV02bHWpCUfazXpHVEEfJZDn7SOw mu6hQYqdWPUMsFcR26RV+tFXZHReAOvKtpWwHfuXbR/vuz5aLjF9EOqb2NnzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhzhkZ5MsMGtfzAKOAIl+HOdctzQwHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDYzOTgzODgxODc4MjQxNDcvMC80QUY1REQ5Mzk4RUJD MzNFQTBDQUUwNDFEN0Y1MkVFMkNBREQwQUZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4VzDRgsjwqZ FZaIvxpcDddeQ/6j8rPooXHLhwSxHtLzvel8st7lrteO5FRCWP2GauDXR8rFU6DO FklTQNN6GIUeSaTwg9aTXjB4TzcU7XJgHTjx8guwzkt7Hp5A/v1ihB92OhxidXAJ 1UUypHLFle0ogZOSuo4r1KNypgMRW6xPR5eczJ8SOT3Rfqihdu1mA4ZzGe2o0uuO BNtaq3Xyye5l6Ks6B7bNEWKzWA7xotlpLviRzauwuuTIvo34bqC4foGJYKs2buBB v+MfZMQ/nTY77XNaAqDbC8YVgb1jhJ69hHhVj1gk0A3RT5R+toEzlHzDLjLmyTBV HDjqp3rZeA== -----END CERTIFICATE-----Generated at Wed May 13 20:55:07 2026 by rpki-client