$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft File: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft (raw, json) Hash identifier: rUg9fgh5LEyMT4Dn29uoFiqhfZ27BB41ZM7p4hlrdhI= Subject key identifier: 7E:11:4E:B5:20:72:5F:DD:18:D4:72:EB:02:54:40:0B:B9:B6:48:25 Authority key identifier: A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 Certificate issuer: /CN=A91209740000/serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Certificate serial: 3A079A426C34628B667C7293F5767BE843CE4D36 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft Manifest number: 02AA Signing time: Thu 23 Jul 2026 16:26:27 +0000 Manifest this update: Thu 23 Jul 2026 16:21:27 +0000 Manifest next update: Fri 24 Jul 2026 17:18:27 +0000 Files and hashes: 1: AS45090.roa (hash: sn70bdO2V7+ZbQfzexLi6sW+lrFjwUJxIN4L0R9gCzE=) 2: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl (hash: CCo1bHDzaX1fhwWPCmJHCWl33cUUywTP1faLLSl8K40=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:07:9a:42:6c:34:62:8b:66:7c:72:93:f5:76:7b:e8:43:ce:4d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91209740000, serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353 Validity Not Before: Jul 23 16:21:27 2026 GMT Not After : Jul 24 17:18:27 2026 GMT Subject: CN=7E114EB520725FDD18D472EB0254400BB9B64825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:36:e7:ef:cd:c1:e7:66:09:6d:1d:87:59:d3: 9d:cc:8e:64:9b:7b:56:83:ad:ba:3b:66:04:9d:f0: c6:42:a7:54:c6:c8:9e:d4:1d:70:58:7e:40:e6:f6: 09:c0:8c:20:fc:4e:d8:1c:2f:62:57:ca:80:0b:c5: bf:b0:18:f1:ac:87:e8:6e:46:a0:ec:6d:17:86:d4: 50:3b:98:4e:f3:9e:c3:16:f0:21:9c:d7:08:b6:4e: 1b:0a:f0:78:37:8e:ed:ab:10:6f:08:82:d3:f9:4b: a2:c5:dc:6e:85:51:3b:5d:a1:97:9e:7e:cf:9f:e8: 2c:65:38:59:2f:14:04:2e:27:cf:53:cf:17:a3:78: a4:03:c3:0f:0b:57:02:7f:dd:ff:c5:1f:83:71:d5: 60:13:7c:48:d8:be:1a:88:2e:c0:63:6a:b8:a6:b2: b9:a5:e2:dc:74:84:50:6d:53:b1:fb:d9:f1:fa:4e: 43:c0:ea:b4:8e:ab:10:0b:61:1b:75:81:f1:31:79: a7:de:15:9d:73:c0:d8:57:de:45:be:f5:93:37:08: 17:28:3b:27:6f:fe:91:a7:b8:7a:53:8e:ea:01:53: a2:c5:ef:14:51:a8:28:79:d0:e3:dc:e4:bd:5e:dc: a2:de:f6:5f:2e:9b:a3:fe:45:31:76:4d:86:e7:82: 91:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:11:4E:B5:20:72:5F:DD:18:D4:72:EB:02:54:40:0B:B9:B6:48:25 X509v3 Authority Key Identifier: keyid:A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:7e:bc:2c:2b:1b:39:23:1f:d3:df:a0:52:1f:ac:7f:1e:39: bf:b3:08:73:df:33:01:3a:d0:0e:be:09:78:b3:c1:71:c3:ce: 36:4d:33:ed:1b:12:1a:34:b2:ba:3a:78:ee:b7:aa:f6:74:53: e3:26:8e:33:de:a1:3c:2c:d2:d2:e0:92:ea:a7:5b:d9:f7:79: 0a:16:5f:42:bc:95:4f:1d:74:2d:c1:a1:26:92:df:c0:57:d7: bc:77:22:66:b7:79:3f:69:40:83:7f:98:37:9c:05:97:fa:e3: 07:cf:7e:26:58:47:82:9e:15:cd:fe:fb:45:d4:59:a5:50:64: 2d:f0:d1:1e:24:79:26:ed:50:19:4e:5f:4c:cf:e0:b9:50:6b: 8d:da:fa:1b:8a:fe:c8:02:38:78:f9:2a:a5:c2:ad:f3:16:c9: e9:36:9f:ee:83:e2:78:51:37:1b:ce:6e:a7:7b:6f:39:28:54: c1:63:92:61:a7:9d:dd:64:84:09:20:24:24:c4:05:4b:67:75: 8f:38:65:18:e9:b8:26:cc:e1:7c:5e:36:ce:b9:b2:23:60:b5: b5:86:26:ca:84:6b:9a:86:06:8a:40:50:20:c9:d4:c1:6f:83: 15:c3:45:e2:b4:46:2f:5d:f8:4f:df:8e:29:de:a5:d9:9a:b1: d9:00:39:91 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUOgeaQmw0YotmfHKT9XZ76EPOTTYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyhBM0FGNzE3NjJG QTA1RTVBQ0UzQjZBM0MzMzJDQUI3RjI5QUEzMzUzMB4XDTI2MDcyMzE2MjEyN1oX DTI2MDcyNDE3MTgyN1owMzExMC8GA1UEAxMoN0UxMTRFQjUyMDcyNUZERDE4RDQ3 MkVCMDI1NDQwMEJCOUI2NDgyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIk25+/NwedmCW0dh1nTncyOZJt7VoOtujtmBJ3wxkKnVMbIntQdcFh+QOb2 CcCMIPxO2BwvYlfKgAvFv7AY8ayH6G5GoOxtF4bUUDuYTvOewxbwIZzXCLZOGwrw eDeO7asQbwiC0/lLosXcboVRO12hl55+z5/oLGU4WS8UBC4nz1PPF6N4pAPDDwtX An/d/8Ufg3HVYBN8SNi+GoguwGNquKayuaXi3HSEUG1TsfvZ8fpOQ8DqtI6rEAth G3WB8TF5p94VnXPA2FfeRb71kzcIFyg7J2/+kae4elOO6gFTosXvFFGoKHnQ49zk vV7cot72Xy6bo/5FMXZNhueCkUsCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBR+EU61 IHJf3RjUcusCVEALubZIJTAfBgNVHSMEGDAWgBSjr3F2L6BeWs47ajwzLKt/Kaoz UzAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzMvQTNBRjcx NzYyRkEwNUU1QUNFM0I2QTNDMzMyQ0FCN0YyOUFBMzM1My5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvbzY5eGRpLWdY bHJPTzJvOE15eXJmeW1xTTFNLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw NDA4MDE2NS8zL0EzQUY3MTc2MkZBMDVFNUFDRTNCNkEzQzMzMkNBQjdGMjlBQTMz NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAGfrwsKxs5Ix/T36BSH6x/Hjm/swhz3zMBOtAOvgl4s8Fx w842TTPtGxIaNLK6Onjut6r2dFPjJo4z3qE8LNLS4JLqp1vZ93kKFl9CvJVPHXQt waEmkt/AV9e8dyJmt3k/aUCDf5g3nAWX+uMHz34mWEeCnhXN/vtF1FmlUGQt8NEe JHkm7VAZTl9Mz+C5UGuN2vobiv7IAjh4+Sqlwq3zFsnpNp/ug+J4UTcbzm6ne285 KFTBY5Jhp53dZIQJICQkxAVLZ3WPOGUY6bgmzOF8XjbOubIjYLW1hibKhGuahgaK QFAgydTBb4MVw0XitEYvXfhP344p3qXZmrHZADmR -----END CERTIFICATE-----Generated at Thu Jul 23 21:27:00 2026 by rpki-client