$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft File: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft (raw, json) Hash identifier: CS+Wpdfk3d9yDeEjgaTDDCHZU2rNzCL/yUn41M46hWw= Subject key identifier: B3:58:3D:DC:95:0E:1E:1C:2B:D8:82:F5:81:48:96:1E:DB:84:D4:B8 Authority key identifier: AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 Certificate issuer: /CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Certificate serial: 3B1A4CA1867A9E015EF83AE9DC4F7FEECE1E57C7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft Manifest number: 4F Signing time: Fri 24 Jul 2026 16:21:36 +0000 Manifest this update: Fri 24 Jul 2026 16:16:36 +0000 Manifest next update: Sat 25 Jul 2026 17:56:36 +0000 Files and hashes: 1: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl (hash: +ywVlX2fyGfxIgeG2ipu00WcRewyPbsRM6uyvcmM9kw=) 2: 3136302e3235302e3130332e302f32342d3234203d3e20313331353036.roa (hash: djfgheMuS7PaGyutCVJ+Pb0aylmkS14U5VHRyPqBVek=) 3: 3136302e3235302e3130322e302f32342d3234203d3e20313331353036.roa (hash: BaucKbyHhxRlG0wRzY5RqkX3m09Z3U/uEmGVlo4RfUM=) 4: 3136302e3235302e3130322e302f32332d3233203d3e20313331353036.roa (hash: VjCOc9zb272cIGa+ZGxLEvSAjBr7bSWcmXmwanaAGks=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 17:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1a:4c:a1:86:7a:9e:01:5e:f8:3a:e9:dc:4f:7f:ee:ce:1e:57:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Validity Not Before: Jul 24 16:16:36 2026 GMT Not After : Jul 25 17:56:36 2026 GMT Subject: CN=B3583DDC950E1E1C2BD882F58148961EDB84D4B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a0:50:3d:3f:2c:02:2d:78:0f:5f:69:3f:22: c5:fc:de:48:cd:d2:5c:c4:1b:1b:69:3b:8e:8d:54: 9b:f8:a1:0c:85:96:ad:18:db:cb:1e:9b:e4:ad:62: be:48:80:9b:3b:b8:c3:76:19:86:77:5a:16:2b:0b: 88:81:2d:e7:05:cd:6c:93:98:ad:72:98:9d:d4:cf: ac:64:43:f0:79:68:f3:09:90:ea:41:53:78:95:05: 51:0f:87:20:7f:bb:46:e5:0a:d3:de:f9:7d:50:da: a5:9f:58:af:f7:96:b4:31:4e:43:1a:d5:e6:85:fd: 3a:6e:a7:67:1f:f3:d6:b4:f0:93:ef:63:30:6d:33: 5d:d3:35:f0:94:c3:53:16:f6:50:53:63:cd:86:8c: 8e:1f:b9:da:d2:4f:1e:d2:f9:93:23:91:c6:ed:3c: 92:41:f4:96:a3:54:54:77:cb:e5:e0:c1:f8:60:65: c8:db:8e:38:57:0b:18:90:02:49:73:61:88:0f:60: 70:9d:4c:50:e4:9e:91:a1:01:f5:f1:a8:61:6e:7f: a3:5e:49:6b:a0:09:14:7c:3f:c1:17:3a:3b:a7:55: c8:69:cd:41:4c:36:ab:4e:c5:ab:48:74:30:0d:88: d4:2e:6e:32:26:04:36:26:83:60:c2:04:98:9d:80: 26:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:58:3D:DC:95:0E:1E:1C:2B:D8:82:F5:81:48:96:1E:DB:84:D4:B8 X509v3 Authority Key Identifier: keyid:AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:32:be:fc:84:56:0d:2a:21:2b:23:2a:7f:2b:97:d5:48:a3: 4d:9e:3d:66:a3:41:be:4d:19:4b:46:7b:56:3d:a8:2e:f9:35: 55:dc:49:67:c9:ab:a5:54:74:12:fc:9c:9f:65:1f:4a:91:dc: b4:28:99:73:18:65:ef:63:c6:ed:4c:41:22:e7:37:c7:d4:11: f0:1f:78:05:b4:8b:b9:a5:e6:8f:4b:8a:9e:2b:ea:cb:e9:f4: 94:19:13:05:cf:c5:5d:03:ce:0d:53:4b:ba:2c:37:f9:0b:1c: c4:41:c3:c1:3a:26:0f:2f:7d:7f:05:b3:74:69:f5:d4:d7:02: 28:2e:32:3a:f0:61:35:26:bc:b6:3b:68:aa:cf:92:6b:f7:96: ba:c8:ff:57:d6:c2:59:26:6f:98:ce:b0:2d:11:3a:b2:8e:3d: c3:a9:f6:09:00:55:b5:2e:cb:ed:62:d6:e4:03:42:9e:1b:a7: 24:26:48:58:91:d5:17:95:42:c8:b9:04:b2:da:5b:78:f7:26: 77:a2:bf:f5:3b:f6:45:d3:96:da:7d:74:d0:30:96:26:f6:17: 5d:96:50:27:2e:0d:13:f2:b5:62:a1:c0:7a:33:30:cf:3d:47: d4:11:c5:9d:1b:91:4a:85:d5:b3:42:a2:d1:b4:9d:f2:f6:f7: fb:32:89:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOxpMoYZ6ngFe+Drp3E9/7s4eV8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RB RUEyMzhEMDAeFw0yNjA3MjQxNjE2MzZaFw0yNjA3MjUxNzU2MzZaMDMxMTAvBgNV BAMTKEIzNTgzRERDOTUwRTFFMUMyQkQ4ODJGNTgxNDg5NjFFREI4NEQ0QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEoFA9PywCLXgPX2k/IsX83kjN 0lzEGxtpO46NVJv4oQyFlq0Y28sem+StYr5IgJs7uMN2GYZ3WhYrC4iBLecFzWyT mK1ymJ3Uz6xkQ/B5aPMJkOpBU3iVBVEPhyB/u0blCtPe+X1Q2qWfWK/3lrQxTkMa 1eaF/Tpup2cf89a08JPvYzBtM13TNfCUw1MW9lBTY82GjI4fudrSTx7S+ZMjkcbt PJJB9JajVFR3y+XgwfhgZcjbjjhXCxiQAklzYYgPYHCdTFDknpGhAfXxqGFuf6Ne SWugCRR8P8EXOjunVchpzUFMNqtOxatIdDANiNQubjImBDYmg2DCBJidgCadAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUs1g93JUOHhwr2IL1gUiWHtuE1LgwHwYDVR0j BBgwFoAUr4rpSQeGVTrg6TjTCaKqfa6iONAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU2MzcxMDI1MDk3NTI0OS8wL0FGOEFFOTQ5MDc4NjU1M0FFMEU5MzhEMzA5QTJB QTdEQUVBMjM4RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RBRUEyMzhEMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1NjM3MTAyNTA5NzUyNDkvMC9BRjhBRTk0OTA3ODY1 NTNBRTBFOTM4RDMwOUEyQUE3REFFQTIzOEQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTK+/IRWDSoh KyMqfyuX1UijTZ49ZqNBvk0ZS0Z7Vj2oLvk1VdxJZ8mrpVR0Evycn2UfSpHctCiZ cxhl72PG7UxBIuc3x9QR8B94BbSLuaXmj0uKnivqy+n0lBkTBc/FXQPODVNLuiw3 +QscxEHDwTomDy99fwWzdGn11NcCKC4yOvBhNSa8tjtoqs+Sa/eWusj/V9bCWSZv mM6wLRE6so49w6n2CQBVtS7L7WLW5ANCnhunJCZIWJHVF5VCyLkEstpbePcmd6K/ 9Tv2RdOW2n100DCWJvYXXZZQJy4NE/K1YqHAejMwzz1H1BHFnRuRSoXVs0Ki0bSd 8vb3+zKJKg== -----END CERTIFICATE-----Generated at Sat Jul 25 02:09:28 2026 by rpki-client