$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft File: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft (raw, json) Hash identifier: h6qqvO3AGc2sNzNdVBTVfe/z5g2AEeAD3zt5nhRsugo= Subject key identifier: C6:5A:84:8C:CB:B5:82:EA:AF:E5:E3:50:C1:E6:74:A9:44:37:CE:FD Authority key identifier: AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 Certificate issuer: /CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Certificate serial: 71D006281F7DFB08BCDAAD0C76290599A2420EA3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft Manifest number: 92 Signing time: Tue 13 Oct 2026 03:57:42 +0000 Manifest this update: Tue 13 Oct 2026 03:52:42 +0000 Manifest next update: Fri 16 Oct 2026 09:16:42 +0000 Files and hashes: 1: 3136302e3235302e3130332e302f32342d3234203d3e20313331353036.roa (hash: djfgheMuS7PaGyutCVJ+Pb0aylmkS14U5VHRyPqBVek=) 2: 3136302e3235302e3130322e302f32342d3234203d3e20313331353036.roa (hash: BaucKbyHhxRlG0wRzY5RqkX3m09Z3U/uEmGVlo4RfUM=) 3: 3136302e3235302e3130322e302f32332d3233203d3e20313331353036.roa (hash: VjCOc9zb272cIGa+ZGxLEvSAjBr7bSWcmXmwanaAGks=) 4: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl (hash: P80XnhvV520lmrC7rO4AJRrtxaOUSdochUrsVS+8C4E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d0:06:28:1f:7d:fb:08:bc:da:ad:0c:76:29:05:99:a2:42:0e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Validity Not Before: Oct 13 03:52:42 2026 GMT Not After : Oct 16 09:16:42 2026 GMT Subject: CN=C65A848CCBB582EAAFE5E350C1E674A94437CEFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:c1:06:16:e2:89:94:ac:5a:99:28:48:a5: 96:05:6d:88:8a:93:00:b1:7d:9e:1c:9d:3f:e2:ff: 37:90:d7:b8:3a:3c:5a:33:3d:6e:d4:c4:80:85:24: ab:48:87:ef:30:26:33:a6:10:c7:ea:69:3d:d7:69: 7a:98:fa:0a:08:b1:ba:04:e7:14:c5:4a:8c:14:0e: 8a:e4:f5:9d:19:49:60:a0:9a:86:3d:5e:f4:23:04: 8d:b2:e8:36:26:7d:df:eb:ce:5a:e8:4a:2a:17:2a: 2f:40:7d:21:08:b1:eb:01:0b:5a:04:02:c7:53:e9: 8f:c1:7a:30:01:42:f7:c3:d1:f1:18:0f:d9:58:6b: 5f:9d:cc:35:46:33:df:6b:9d:91:1b:27:7b:db:85: 24:02:30:f7:c4:eb:f8:c6:fb:86:39:0a:88:57:51: ae:05:af:5f:c0:8a:af:de:ad:a2:46:4f:12:72:54: 89:51:a1:55:d3:22:9e:f4:03:f7:15:cf:5d:15:e9: 89:15:4e:d6:9e:a4:bc:2f:df:55:26:30:07:c4:f9: 92:52:78:94:4d:9e:53:78:db:ca:3a:0c:8d:c9:f2: 69:ac:f0:a1:3f:4b:0b:cd:88:f4:a4:10:25:f2:52: a5:71:24:16:cf:17:d1:68:ad:f7:59:57:77:27:a5: 7c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5A:84:8C:CB:B5:82:EA:AF:E5:E3:50:C1:E6:74:A9:44:37:CE:FD X509v3 Authority Key Identifier: keyid:AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:7a:9a:0c:ce:a5:48:26:d6:ef:9b:ea:b5:fd:74:52:7b:bd: 16:2e:5c:43:f9:fc:5b:c7:17:54:2c:a3:30:79:59:de:91:6a: 80:49:b6:8b:2a:10:4f:24:17:49:e1:45:c0:24:8b:0f:50:d6: 8f:bf:5b:fe:b5:7f:32:cd:4e:64:e5:9b:a6:a0:3e:5c:13:00: 63:7e:42:d7:bb:fb:d6:43:ed:73:da:65:14:7a:d5:1c:f0:8b: 0a:3b:2a:15:95:53:85:3a:db:0a:d4:ec:b2:8e:9c:f9:0d:27: 82:c4:cb:e4:45:3e:f7:9a:34:a9:b1:1e:d8:12:0a:9d:f3:1a: d9:e2:a3:c2:c5:1d:69:d8:2c:c6:30:65:7c:55:14:2e:c1:32: c8:9a:71:b3:ca:e2:37:b7:12:90:53:e4:d2:de:e7:8d:49:36: fd:8a:70:ea:e0:8d:e1:c7:ac:2e:53:64:06:3f:7e:c3:77:27: 48:bc:52:e7:5a:40:87:1e:3f:6b:41:69:c7:c5:f3:c5:90:03: c2:8c:96:04:10:8c:81:3e:3a:ad:e3:91:0a:86:f9:a0:f7:24: 3e:2a:78:37:ed:af:15:c7:31:78:55:53:2f:79:6e:19:69:06: e7:ec:1d:22:b7:67:20:24:f7:30:55:58:99:85:eb:49:71:e8: e0:ad:3e:4b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcdAGKB99+wi82q0MdikFmaJCDqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RB RUEyMzhEMDAeFw0yNjEwMTMwMzUyNDJaFw0yNjEwMTYwOTE2NDJaMDMxMTAvBgNV BAMTKEM2NUE4NDhDQ0JCNTgyRUFBRkU1RTM1MEMxRTY3NEE5NDQzN0NFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2osEGFuKJlKxamShIpZYFbYiK kwCxfZ4cnT/i/zeQ17g6PFozPW7UxICFJKtIh+8wJjOmEMfqaT3XaXqY+goIsboE 5xTFSowUDork9Z0ZSWCgmoY9XvQjBI2y6DYmfd/rzlroSioXKi9AfSEIsesBC1oE AsdT6Y/BejABQvfD0fEYD9lYa1+dzDVGM99rnZEbJ3vbhSQCMPfE6/jG+4Y5CohX Ua4Fr1/Aiq/eraJGTxJyVIlRoVXTIp70A/cVz10V6YkVTtaepLwv31UmMAfE+ZJS eJRNnlN428o6DI3J8mms8KE/SwvNiPSkECXyUqVxJBbPF9ForfdZV3cnpXyzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxlqEjMu1guqv5eNQweZ0qUQ3zv0wHwYDVR0j BBgwFoAUr4rpSQeGVTrg6TjTCaKqfa6iONAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU2MzcxMDI1MDk3NTI0OS8wL0FGOEFFOTQ5MDc4NjU1M0FFMEU5MzhEMzA5QTJB QTdEQUVBMjM4RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RBRUEyMzhEMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1NjM3MTAyNTA5NzUyNDkvMC9BRjhBRTk0OTA3ODY1 NTNBRTBFOTM4RDMwOUEyQUE3REFFQTIzOEQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3qaDM6lSCbW 75vqtf10Unu9Fi5cQ/n8W8cXVCyjMHlZ3pFqgEm2iyoQTyQXSeFFwCSLD1DWj79b /rV/Ms1OZOWbpqA+XBMAY35C17v71kPtc9plFHrVHPCLCjsqFZVThTrbCtTsso6c +Q0ngsTL5EU+95o0qbEe2BIKnfMa2eKjwsUdadgsxjBlfFUULsEyyJpxs8riN7cS kFPk0t7njUk2/Ypw6uCN4cesLlNkBj9+w3cnSLxS51pAhx4/a0Fpx8XzxZADwoyW BBCMgT46reORCob5oPckPip4N+2vFccxeFVTL3luGWkG5+wdIrdnICT3MFVYmYXr SXHo4K0+Sw== -----END CERTIFICATE-----Generated at Wed Oct 14 19:24:36 2026 by rpki-client