$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft File: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft (raw, json) Hash identifier: nL6yFEzmlcP0cRtfBOQ4I3MK53Ro72/Kl4jeLIqTw/Q= Subject key identifier: 98:BA:29:38:9F:44:7D:4F:70:A1:8C:D8:98:D6:61:52:A1:1C:FE:7F Authority key identifier: AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 Certificate issuer: /CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Certificate serial: 3E6D99AEFE3262224867BA161262E0C937D6A238 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft Manifest number: 93 Signing time: Thu 15 Oct 2026 09:21:36 +0000 Manifest this update: Thu 15 Oct 2026 09:16:36 +0000 Manifest next update: Sun 18 Oct 2026 17:38:36 +0000 Files and hashes: 1: 3136302e3235302e3130332e302f32342d3234203d3e20313331353036.roa (hash: djfgheMuS7PaGyutCVJ+Pb0aylmkS14U5VHRyPqBVek=) 2: 3136302e3235302e3130322e302f32332d3233203d3e20313331353036.roa (hash: VjCOc9zb272cIGa+ZGxLEvSAjBr7bSWcmXmwanaAGks=) 3: 3136302e3235302e3130322e302f32342d3234203d3e20313331353036.roa (hash: BaucKbyHhxRlG0wRzY5RqkX3m09Z3U/uEmGVlo4RfUM=) 4: AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl (hash: 3IpaAtuqHlw12iWIFHrom+nTY5aIFCEBtyouJ8Z9uUQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 17:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6d:99:ae:fe:32:62:22:48:67:ba:16:12:62:e0:c9:37:d6:a2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Validity Not Before: Oct 15 09:16:36 2026 GMT Not After : Oct 18 17:38:36 2026 GMT Subject: CN=98BA29389F447D4F70A18CD898D66152A11CFE7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:4a:89:3d:44:5b:5b:c2:62:55:14:dd:d2: 43:fb:90:c6:1c:5a:59:22:29:9a:25:a1:24:49:9d: 66:9e:f0:2f:9d:8c:8d:ff:c7:9d:37:f8:ea:db:ed: 04:ff:3a:a0:1d:d6:d8:90:7c:77:90:d1:35:e1:e7: 7b:5e:b3:fc:05:b3:96:0d:56:e7:fe:f2:32:aa:df: 6f:2b:d2:a7:a4:dc:e9:4a:aa:2a:d8:52:0c:68:43: 12:23:fb:97:1a:3b:d5:4c:59:21:b2:e8:b5:f8:bd: 03:b8:f9:1c:58:dc:f5:68:8d:4a:40:67:61:7f:1a: b8:26:b3:66:57:b1:fc:22:3d:57:d2:fd:47:d2:60: 95:0e:2f:a8:e6:09:09:fb:77:a4:ff:ca:8d:82:b9: 2b:6a:90:bf:b6:5f:c6:a0:9a:a2:da:0a:5f:43:53: a8:c4:ee:a0:20:85:08:72:f6:78:b8:29:29:0d:3c: 8b:ac:21:fe:e4:0d:aa:7d:09:59:e0:7c:31:03:56: 6c:4c:df:fd:d0:fb:4a:4e:bb:ac:9c:66:dc:0f:6b: 4d:fc:33:2f:c3:ac:d2:72:55:58:9c:16:a8:c8:2b: 6c:4d:db:0c:95:e4:5e:4a:ec:c1:80:64:2b:60:d5: b5:65:90:4c:25:2d:c5:25:d4:c1:be:c4:c8:0a:f4: 4e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BA:29:38:9F:44:7D:4F:70:A1:8C:D8:98:D6:61:52:A1:1C:FE:7F X509v3 Authority Key Identifier: keyid:AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:74:c2:c7:f7:60:55:ca:8d:ce:79:1f:a4:b1:6f:19:aa:c7: 50:cb:f3:9e:a0:23:6b:73:f9:91:16:3a:ad:91:30:72:78:20: 74:55:d3:74:fc:2b:4a:ba:b3:e8:c1:fb:a9:4e:8c:9f:65:b4: b1:0b:24:58:fc:9f:0a:58:9e:4f:50:ee:5a:7a:5e:95:e9:de: 29:35:a8:dc:53:37:98:11:3a:9a:2c:60:ab:61:d6:5a:ca:26: 94:43:48:fd:8b:06:0b:23:5a:49:d1:a0:22:e6:01:88:94:bb: 37:4e:d2:d9:31:dc:0e:56:11:fd:c3:f9:0d:f1:c1:c3:c8:14: 8e:5f:1a:70:ca:ac:e4:d1:02:28:41:11:1d:4b:38:bc:cf:28: 8b:ee:81:a3:bb:14:bf:af:c5:13:34:39:fa:d6:ea:0d:45:3d: 67:7c:94:17:ee:aa:43:98:51:d6:12:db:70:17:f9:79:ac:8e: bc:27:19:0a:4d:3a:78:eb:7a:f5:b1:b7:77:fc:18:e3:c5:2b: 38:f0:23:2b:b7:08:cd:41:be:72:94:2e:28:29:49:46:6a:03: 93:a1:27:04:69:ce:3e:b8:33:e2:f1:4c:dd:09:3e:d3:83:bb: 25:cc:42:50:0a:24:01:52:25:1a:cd:d1:ae:0d:93:38:60:01: 36:5b:b5:35 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPm2Zrv4yYiJIZ7oWEmLgyTfWojgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RB RUEyMzhEMDAeFw0yNjEwMTUwOTE2MzZaFw0yNjEwMTgxNzM4MzZaMDMxMTAvBgNV BAMTKDk4QkEyOTM4OUY0NDdENEY3MEExOENEODk4RDY2MTUyQTExQ0ZFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6UUqJPURbW8JiVRTd0kP7kMYc WlkiKZoloSRJnWae8C+djI3/x503+Orb7QT/OqAd1tiQfHeQ0TXh53tes/wFs5YN Vuf+8jKq328r0qek3OlKqirYUgxoQxIj+5caO9VMWSGy6LX4vQO4+RxY3PVojUpA Z2F/Grgms2ZXsfwiPVfS/UfSYJUOL6jmCQn7d6T/yo2CuStqkL+2X8agmqLaCl9D U6jE7qAghQhy9ni4KSkNPIusIf7kDap9CVngfDEDVmxM3/3Q+0pOu6ycZtwPa038 My/DrNJyVVicFqjIK2xN2wyV5F5K7MGAZCtg1bVlkEwlLcUl1MG+xMgK9E4ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmLopOJ9EfU9woYzYmNZhUqEc/n8wHwYDVR0j BBgwFoAUr4rpSQeGVTrg6TjTCaKqfa6iONAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU2MzcxMDI1MDk3NTI0OS8wL0FGOEFFOTQ5MDc4NjU1M0FFMEU5MzhEMzA5QTJB QTdEQUVBMjM4RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RBRUEyMzhEMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1NjM3MTAyNTA5NzUyNDkvMC9BRjhBRTk0OTA3ODY1 NTNBRTBFOTM4RDMwOUEyQUE3REFFQTIzOEQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnTCx/dgVcqN znkfpLFvGarHUMvznqAja3P5kRY6rZEwcnggdFXTdPwrSrqz6MH7qU6Mn2W0sQsk WPyfClieT1DuWnpeleneKTWo3FM3mBE6mixgq2HWWsomlENI/YsGCyNaSdGgIuYB iJS7N07S2THcDlYR/cP5DfHBw8gUjl8acMqs5NECKEERHUs4vM8oi+6Bo7sUv6/F EzQ5+tbqDUU9Z3yUF+6qQ5hR1hLbcBf5eayOvCcZCk06eOt69bG3d/wY48UrOPAj K7cIzUG+cpQuKClJRmoDk6EnBGnOPrgz4vFM3Qk+04O7JcxCUAokAVIlGs3Rrg2T OGABNlu1NQ== -----END CERTIFICATE-----Generated at Fri Oct 16 08:04:43 2026 by rpki-client