$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft File: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft (raw, json) Hash identifier: P4WEppd7OLxKRABIoiAzaRCj5dP/X4CVupSKEioNFUU= Subject key identifier: 4E:A8:95:F3:77:DE:8A:6A:92:84:B3:61:7F:85:79:90:EE:0B:B7:04 Authority key identifier: A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 Certificate issuer: /CN=A91209740000/serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Certificate serial: 112A68CF3ACD50D0A261E8FA6DCBC5A512B32EFD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft Manifest number: 02FE Signing time: Sat 14 Nov 2026 07:49:02 +0000 Manifest this update: Sat 14 Nov 2026 07:44:02 +0000 Manifest next update: Tue 17 Nov 2026 09:48:02 +0000 Files and hashes: 1: AS45090.roa (hash: sn70bdO2V7+ZbQfzexLi6sW+lrFjwUJxIN4L0R9gCzE=) 2: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl (hash: EVqAVNcPhnPNnWescNVvv+4hZwQAfh01rzmYxUOCGYo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Nov 2026 09:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2a:68:cf:3a:cd:50:d0:a2:61:e8:fa:6d:cb:c5:a5:12:b3:2e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Validity Not Before: Nov 14 07:44:02 2026 GMT Not After : Nov 17 09:48:02 2026 GMT Subject: CN=4EA895F377DE8A6A9284B3617F857990EE0BB704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:4f:97:1f:0a:27:8d:db:22:84:f9:bb:8d: 24:9f:1d:82:dd:06:53:d6:9d:26:30:e2:b5:1e:74: 4b:27:d0:d1:a8:62:ce:e1:80:f0:35:d7:34:3c:9a: 4a:e4:7e:a4:93:dd:63:de:6a:c7:96:48:c9:cd:34: d9:81:4a:02:82:bf:6c:f7:3f:76:3c:63:6b:6e:8a: fa:6c:b0:b4:f3:74:1d:71:e0:34:36:0e:66:4c:de: e1:92:83:21:21:e7:21:b9:6d:30:81:74:a8:16:24: f1:1a:01:44:72:93:ab:a5:4b:00:c7:8d:76:1f:ec: a8:34:2f:55:d9:26:ac:9f:c4:56:09:4a:94:84:ba: fe:6a:f2:76:b1:ba:b6:7b:ca:fd:55:7b:ee:35:ac: 55:08:1a:e5:60:60:c6:19:8a:57:39:61:a2:1d:c2: 0b:ac:d5:ea:bc:28:c1:c5:d7:6d:b1:78:ee:1b:75: a5:a0:30:82:06:69:0b:0b:17:85:20:d2:92:3d:ed: db:4e:38:cb:4f:30:cc:f1:76:03:82:f1:54:ac:8d: 4d:12:8b:29:89:c5:bf:c1:a3:fc:dc:23:7e:4c:43: de:5d:4b:df:16:7e:20:b1:23:15:14:8a:07:81:92: c4:f6:90:15:17:60:95:0c:ec:25:84:07:2e:7c:49: af:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A8:95:F3:77:DE:8A:6A:92:84:B3:61:7F:85:79:90:EE:0B:B7:04 X509v3 Authority Key Identifier: keyid:A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b6:ca:27:2e:cc:79:a1:33:69:61:fd:5f:47:12:ac:a0:1a: bb:cd:36:9f:ec:67:85:2a:7b:b3:70:09:1c:81:3d:25:93:95: 23:3e:b9:ff:17:19:21:fb:96:4a:30:2e:5c:24:84:12:38:de: 3e:3b:25:40:80:1b:c3:48:dc:24:6b:d5:aa:da:13:e8:3f:cc: b8:de:e1:d1:ec:e0:a6:9c:2f:c7:5d:d4:f9:ef:a4:b2:28:ab: 8f:e3:9e:f0:1a:7f:d3:62:09:04:54:f7:83:d8:92:4f:3c:a0: 34:70:de:f9:6a:d3:22:02:1d:53:e7:c2:b5:bf:61:90:10:ac: 4a:0e:48:a4:5a:9d:61:2c:65:52:4f:03:a0:03:8b:ea:0d:1d: d2:5a:33:dc:e7:46:90:97:4e:5d:31:ac:a7:a9:20:ae:59:98: 28:65:bd:63:37:85:f6:ea:e1:b9:d2:b5:f3:6b:b0:7d:f9:38: c3:2b:a2:09:50:dd:18:3c:e0:3b:97:36:13:92:8c:3a:c0:b9: 8b:0f:19:91:4b:d7:10:31:fe:39:7f:3a:8c:94:c0:5f:2c:2d: d5:b6:4e:45:9a:ce:fd:5a:8e:46:bf:81:2b:57:b6:65:2e:4f: ca:aa:a9:92:39:b4:e7:2e:e6:10:86:18:b7:72:ca:b9:86:d9: 5d:63:1c:65 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUESpozzrNUNCiYej6bcvFpRKzLv0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyhBM0FGNzE3NjJG QTA1RTVBQ0UzQjZBM0MzMzJDQUI3RjI5QUEzMzUzMB4XDTI2MTExNDA3NDQwMloX DTI2MTExNzA5NDgwMlowMzExMC8GA1UEAxMoNEVBODk1RjM3N0RFOEE2QTkyODRC MzYxN0Y4NTc5OTBFRTBCQjcwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKagT5cfCieN2yKE+buNJJ8dgt0GU9adJjDitR50SyfQ0ahizuGA8DXXNDya SuR+pJPdY95qx5ZIyc002YFKAoK/bPc/djxja26K+mywtPN0HXHgNDYOZkze4ZKD ISHnIbltMIF0qBYk8RoBRHKTq6VLAMeNdh/sqDQvVdkmrJ/EVglKlIS6/mrydrG6 tnvK/VV77jWsVQga5WBgxhmKVzlhoh3CC6zV6rwowcXXbbF47ht1paAwggZpCwsX hSDSkj3t2044y08wzPF2A4LxVKyNTRKLKYnFv8Gj/NwjfkxD3l1L3xZ+ILEjFRSK B4GSxPaQFRdglQzsJYQHLnxJrxUCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBROqJXz d96KapKEs2F/hXmQ7gu3BDAfBgNVHSMEGDAWgBSjr3F2L6BeWs47ajwzLKt/Kaoz UzAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzMvQTNBRjcx NzYyRkEwNUU1QUNFM0I2QTNDMzMyQ0FCN0YyOUFBMzM1My5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvbzY5eGRpLWdY bHJPTzJvOE15eXJmeW1xTTFNLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8zL0EzQUY3MTc2MkZBMDVFNUFDRTNCNkEzQzMzMkNBQjdGMjlBQTMz NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCxtsonLsx5oTNpYf1fRxKsoBq7zTaf7GeFKnuzcAkcgT0l k5UjPrn/Fxkh+5ZKMC5cJIQSON4+OyVAgBvDSNwka9Wq2hPoP8y43uHR7OCmnC/H XdT576SyKKuP457wGn/TYgkEVPeD2JJPPKA0cN75atMiAh1T58K1v2GQEKxKDkik Wp1hLGVSTwOgA4vqDR3SWjPc50aQl05dMaynqSCuWZgoZb1jN4X26uG50rXza7B9 +TjDK6IJUN0YPOA7lzYTkow6wLmLDxmRS9cQMf45fzqMlMBfLC3Vtk5Fms79Wo5G v4ErV7ZlLk/KqqmSObTnLuYQhhi3csq5htldYxxl -----END CERTIFICATE-----Generated at Sun Nov 15 11:16:30 2026 by rpki-client