$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft File: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft (raw, json) Hash identifier: WAZY2dzrHGFQv0UH/5fhBX7QV04P7EQweZoG5wtFQ2M= Subject key identifier: 3C:86:6D:38:F2:6D:E5:1C:A7:C1:A4:FD:09:1A:67:84:AF:FC:3F:0D Authority key identifier: A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 Certificate issuer: /CN=A91209740000/serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Certificate serial: 448F3C51E5505902B54BFFA2F8153E93B3100695 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft Manifest number: 02E7 Signing time: Tue 22 Sep 2026 14:53:04 +0000 Manifest this update: Tue 22 Sep 2026 14:48:04 +0000 Manifest next update: Sat 26 Sep 2026 02:13:04 +0000 Files and hashes: 1: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl (hash: 6b8fg63VWmfsbbchIAr3c1Ps23vSBbf/t7V7S7JNWaA=) 2: AS45090.roa (hash: sn70bdO2V7+ZbQfzexLi6sW+lrFjwUJxIN4L0R9gCzE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8f:3c:51:e5:50:59:02:b5:4b:ff:a2:f8:15:3e:93:b3:10:06:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Validity Not Before: Sep 22 14:48:04 2026 GMT Not After : Sep 26 02:13:04 2026 GMT Subject: CN=3C866D38F26DE51CA7C1A4FD091A6784AFFC3F0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d5:d2:08:b2:8d:46:a1:e4:19:24:89:07:e4: d6:6e:b6:2c:f8:5d:b6:10:51:c8:7e:f7:b2:1b:33: 01:dc:91:08:af:63:3c:fa:36:e3:ec:ca:18:af:52: 9c:29:e2:8c:5d:2a:a0:52:c1:8e:07:e7:fd:ff:f6: a8:40:bb:e9:b4:ec:75:74:f8:4d:bc:0e:f1:dd:6d: a9:66:80:44:b8:e2:59:75:0d:7e:30:24:9b:2b:0a: 10:8e:d0:d6:50:81:72:b7:6c:86:2c:4f:26:28:4e: 64:0c:00:96:03:98:19:c2:82:2f:ea:5d:4d:50:5c: 81:0d:8f:f3:82:1e:4b:ce:a7:de:b5:0b:57:67:82: 37:4b:9d:37:fc:b3:a1:90:0e:d3:66:d0:23:4f:49: 20:f5:c8:38:f1:da:41:95:f0:70:99:69:c7:d1:05: 80:02:a4:65:9b:3e:9b:3e:4b:02:6a:1a:8f:7b:7a: 57:da:88:7f:00:c0:a8:a3:52:17:b4:89:ae:bd:33: 2a:6f:31:6f:7b:c0:c9:ef:02:59:e2:98:85:a9:59: b8:58:30:f6:09:05:96:fe:85:ec:44:7a:bd:f2:45: 32:b1:a5:3d:3b:fd:6f:9a:e7:5e:b8:8e:f7:3d:86: 0c:36:25:78:69:69:94:35:f8:7f:c4:f9:90:2d:40: ef:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:86:6D:38:F2:6D:E5:1C:A7:C1:A4:FD:09:1A:67:84:AF:FC:3F:0D X509v3 Authority Key Identifier: keyid:A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ee:09:b3:5f:46:71:2e:4b:48:b5:73:c7:7e:a8:3b:83:76: ed:b2:e6:a9:ce:95:c7:f9:35:ea:8d:4c:9f:05:75:59:14:7e: 76:44:57:ed:7d:c5:8e:58:1e:b3:05:06:7f:b6:d8:26:a9:53: 40:f8:fb:0d:2e:c5:98:e2:70:fa:0f:5b:5a:ec:09:20:c8:37: d3:7a:02:48:6a:82:d5:d1:e9:f6:97:f3:de:3d:f8:c2:61:9b: 63:78:16:40:7f:a4:b7:9d:09:44:a4:31:4b:f2:23:34:6a:c1: 45:42:fb:b3:c8:c8:a2:d6:72:f5:2e:12:d1:18:a7:83:40:e8: be:5f:81:37:95:03:a7:49:58:0e:22:c0:34:14:30:e9:93:81: 72:40:4b:f3:e9:b7:c1:c2:e1:fc:52:3c:15:d1:8d:5b:8d:f7: 8a:db:25:3f:8e:88:58:69:7f:0b:5c:9f:53:e5:6f:0f:8b:16: 1f:8c:87:d7:4a:84:86:20:71:27:14:0f:d4:63:0c:5c:de:a3: 5a:af:34:01:3a:8d:b3:94:e6:28:e5:85:4d:25:2a:f9:91:13: ed:df:b4:7f:49:bb:f6:e2:d8:a4:0a:54:a0:05:d4:d6:7d:16: d0:62:24:08:42:d2:9d:8d:f7:97:52:b6:6b:f3:c8:f8:e0:be: 9a:d1:b9:cc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURI88UeVQWQK1S/+i+BU+k7MQBpUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyhBM0FGNzE3NjJG QTA1RTVBQ0UzQjZBM0MzMzJDQUI3RjI5QUEzMzUzMB4XDTI2MDkyMjE0NDgwNFoX DTI2MDkyNjAyMTMwNFowMzExMC8GA1UEAxMoM0M4NjZEMzhGMjZERTUxQ0E3QzFB NEZEMDkxQTY3ODRBRkZDM0YwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJLV0giyjUah5BkkiQfk1m62LPhdthBRyH73shszAdyRCK9jPPo24+zKGK9S nCnijF0qoFLBjgfn/f/2qEC76bTsdXT4TbwO8d1tqWaARLjiWXUNfjAkmysKEI7Q 1lCBcrdshixPJihOZAwAlgOYGcKCL+pdTVBcgQ2P84IeS86n3rULV2eCN0udN/yz oZAO02bQI09JIPXIOPHaQZXwcJlpx9EFgAKkZZs+mz5LAmoaj3t6V9qIfwDAqKNS F7SJrr0zKm8xb3vAye8CWeKYhalZuFgw9gkFlv6F7ER6vfJFMrGlPTv9b5rnXriO 9z2GDDYleGlplDX4f8T5kC1A7ykCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQ8hm04 8m3lHKfBpP0JGmeEr/w/DTAfBgNVHSMEGDAWgBSjr3F2L6BeWs47ajwzLKt/Kaoz UzAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzMvQTNBRjcx NzYyRkEwNUU1QUNFM0I2QTNDMzMyQ0FCN0YyOUFBMzM1My5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvbzY5eGRpLWdY bHJPTzJvOE15eXJmeW1xTTFNLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8zL0EzQUY3MTc2MkZBMDVFNUFDRTNCNkEzQzMzMkNBQjdGMjlBQTMz NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQA/7gmzX0ZxLktItXPHfqg7g3btsuapzpXH+TXqjUyfBXVZ FH52RFftfcWOWB6zBQZ/ttgmqVNA+PsNLsWY4nD6D1ta7AkgyDfTegJIaoLV0en2 l/PePfjCYZtjeBZAf6S3nQlEpDFL8iM0asFFQvuzyMii1nL1LhLRGKeDQOi+X4E3 lQOnSVgOIsA0FDDpk4FyQEvz6bfBwuH8UjwV0Y1bjfeK2yU/johYaX8LXJ9T5W8P ixYfjIfXSoSGIHEnFA/UYwxc3qNarzQBOo2zlOYo5YVNJSr5kRPt37R/Sbv24tik ClSgBdTWfRbQYiQIQtKdjfeXUrZr88j44L6a0bnM -----END CERTIFICATE-----Generated at Thu Sep 24 21:21:10 2026 by rpki-client